./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f470102c Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 37cb317c3bc7664ed231fa78380e175cc6a4d8af ...................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 37cb317c3bc7664ed231fa78380e175cc6a4d8af .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-12-07 21:19:05,671 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 21:19:05,672 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 21:19:05,681 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 21:19:05,681 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 21:19:05,682 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 21:19:05,683 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 21:19:05,685 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 21:19:05,686 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 21:19:05,687 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 21:19:05,688 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 21:19:05,689 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 21:19:05,690 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 21:19:05,691 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 21:19:05,692 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 21:19:05,693 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 21:19:05,694 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 21:19:05,694 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 21:19:05,696 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 21:19:05,698 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 21:19:05,700 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 21:19:05,701 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 21:19:05,702 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 21:19:05,702 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 21:19:05,705 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 21:19:05,705 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 21:19:05,705 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 21:19:05,706 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 21:19:05,706 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 21:19:05,707 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 21:19:05,707 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 21:19:05,708 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 21:19:05,708 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 21:19:05,709 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 21:19:05,709 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 21:19:05,710 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 21:19:05,710 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 21:19:05,710 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 21:19:05,711 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 21:19:05,711 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 21:19:05,712 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 21:19:05,713 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf [2019-12-07 21:19:05,724 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 21:19:05,725 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 21:19:05,725 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 21:19:05,725 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 21:19:05,726 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 21:19:05,726 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 21:19:05,726 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2019-12-07 21:19:05,726 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 21:19:05,726 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 21:19:05,726 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2019-12-07 21:19:05,726 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2019-12-07 21:19:05,726 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 21:19:05,727 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2019-12-07 21:19:05,727 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2019-12-07 21:19:05,727 INFO L138 SettingsManager]: * Simplification Technique=SIMPLIFY_QUICK [2019-12-07 21:19:05,727 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 21:19:05,728 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 21:19:05,728 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-12-07 21:19:05,728 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 21:19:05,728 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 21:19:05,728 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 21:19:05,728 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 21:19:05,728 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 21:19:05,728 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 21:19:05,728 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 21:19:05,729 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 21:19:05,729 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 21:19:05,729 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 21:19:05,729 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 21:19:05,729 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 21:19:05,729 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 21:19:05,729 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 21:19:05,730 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 21:19:05,730 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 21:19:05,730 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 21:19:05,730 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2019-12-07 21:19:05,730 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-12-07 21:19:05,730 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 21:19:05,730 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 21:19:05,731 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 21:19:05,731 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 37cb317c3bc7664ed231fa78380e175cc6a4d8af [2019-12-07 21:19:05,841 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 21:19:05,849 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 21:19:05,851 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 21:19:05,852 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 21:19:05,853 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 21:19:05,853 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2019-12-07 21:19:05,891 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/data/9943cc049/aa6ea021bfd14ef7ae8a74c017d4ff4f/FLAG2a5b4f87c [2019-12-07 21:19:06,250 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 21:19:06,251 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2019-12-07 21:19:06,259 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/data/9943cc049/aa6ea021bfd14ef7ae8a74c017d4ff4f/FLAG2a5b4f87c [2019-12-07 21:19:06,267 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/data/9943cc049/aa6ea021bfd14ef7ae8a74c017d4ff4f [2019-12-07 21:19:06,269 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 21:19:06,270 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 21:19:06,271 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 21:19:06,271 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 21:19:06,273 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 21:19:06,274 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 09:19:06" (1/1) ... [2019-12-07 21:19:06,275 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@581b80cd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 09:19:06, skipping insertion in model container [2019-12-07 21:19:06,275 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 09:19:06" (1/1) ... [2019-12-07 21:19:06,280 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 21:19:06,306 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 21:19:06,520 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 21:19:06,528 ERROR L326 MainTranslator]: Unsupported Syntax: Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) [2019-12-07 21:19:06,529 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@256cf991 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 09:19:06, skipping insertion in model container [2019-12-07 21:19:06,529 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 21:19:06,529 INFO L184 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2019-12-07 21:19:06,531 INFO L168 Benchmark]: Toolchain (without parser) took 260.30 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 102.2 MB). Free memory was 940.8 MB in the beginning and 1.1 GB in the end (delta: -145.4 MB). Peak memory consumption was 23.4 MB. Max. memory is 11.5 GB. [2019-12-07 21:19:06,531 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 955.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 21:19:06,532 INFO L168 Benchmark]: CACSL2BoogieTranslator took 258.52 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 102.2 MB). Free memory was 935.5 MB in the beginning and 1.1 GB in the end (delta: -150.8 MB). Peak memory consumption was 18.0 MB. Max. memory is 11.5 GB. [2019-12-07 21:19:06,533 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 955.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 258.52 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 102.2 MB). Free memory was 935.5 MB in the beginning and 1.1 GB in the end (delta: -150.8 MB). Peak memory consumption was 18.0 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - UnsupportedSyntaxResult [Line: 178]: Unsupported Syntax Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.25-f470102 [2019-12-07 21:19:07,661 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 21:19:07,662 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 21:19:07,670 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 21:19:07,670 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 21:19:07,671 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 21:19:07,672 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 21:19:07,673 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 21:19:07,674 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 21:19:07,675 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 21:19:07,675 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 21:19:07,676 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 21:19:07,676 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 21:19:07,677 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 21:19:07,678 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 21:19:07,679 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 21:19:07,679 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 21:19:07,680 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 21:19:07,681 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 21:19:07,683 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 21:19:07,684 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 21:19:07,684 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 21:19:07,685 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 21:19:07,686 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 21:19:07,688 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 21:19:07,688 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 21:19:07,688 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 21:19:07,689 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 21:19:07,689 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 21:19:07,690 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 21:19:07,690 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 21:19:07,690 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 21:19:07,691 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 21:19:07,691 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 21:19:07,692 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 21:19:07,692 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 21:19:07,692 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 21:19:07,693 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 21:19:07,693 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 21:19:07,693 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 21:19:07,694 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 21:19:07,694 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf [2019-12-07 21:19:07,704 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 21:19:07,704 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 21:19:07,705 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 21:19:07,705 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 21:19:07,705 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 21:19:07,705 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 21:19:07,705 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 21:19:07,706 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 21:19:07,706 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 21:19:07,706 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 21:19:07,706 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 21:19:07,706 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 21:19:07,707 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 21:19:07,707 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 21:19:07,707 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 21:19:07,707 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 21:19:07,707 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 21:19:07,707 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2019-12-07 21:19:07,707 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2019-12-07 21:19:07,707 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 21:19:07,708 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 21:19:07,708 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 21:19:07,708 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 21:19:07,708 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 21:19:07,708 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-12-07 21:19:07,708 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 21:19:07,708 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 21:19:07,708 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 21:19:07,709 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 21:19:07,709 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 21:19:07,709 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 21:19:07,709 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2019-12-07 21:19:07,709 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --rewrite-divk --print-success --lang smt [2019-12-07 21:19:07,709 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 21:19:07,709 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 21:19:07,709 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 21:19:07,710 INFO L138 SettingsManager]: * Logic for external solver=AUFBV Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 37cb317c3bc7664ed231fa78380e175cc6a4d8af [2019-12-07 21:19:07,871 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 21:19:07,879 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 21:19:07,882 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 21:19:07,883 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 21:19:07,883 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 21:19:07,884 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/../../sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2019-12-07 21:19:07,931 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/data/5dddad796/23e20001639b45c1ad664e5b2b242c0e/FLAGee80d5333 [2019-12-07 21:19:08,288 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 21:19:08,288 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/sv-benchmarks/c/product-lines/minepump_spec5_product45.cil.c [2019-12-07 21:19:08,297 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/data/5dddad796/23e20001639b45c1ad664e5b2b242c0e/FLAGee80d5333 [2019-12-07 21:19:08,306 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/data/5dddad796/23e20001639b45c1ad664e5b2b242c0e [2019-12-07 21:19:08,308 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 21:19:08,309 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 21:19:08,309 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 21:19:08,309 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 21:19:08,312 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 21:19:08,313 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 09:19:08" (1/1) ... [2019-12-07 21:19:08,315 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5b70e7d3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 09:19:08, skipping insertion in model container [2019-12-07 21:19:08,315 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 09:19:08" (1/1) ... [2019-12-07 21:19:08,320 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 21:19:08,352 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 21:19:08,575 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 21:19:08,585 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2019-12-07 21:19:08,590 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 21:19:08,629 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 21:19:08,632 INFO L203 MainTranslator]: Completed pre-run [2019-12-07 21:19:08,671 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 21:19:08,692 INFO L208 MainTranslator]: Completed translation [2019-12-07 21:19:08,692 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 09:19:08 WrapperNode [2019-12-07 21:19:08,693 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 21:19:08,693 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-12-07 21:19:08,693 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-12-07 21:19:08,693 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-12-07 21:19:08,698 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 09:19:08" (1/1) ... [2019-12-07 21:19:08,713 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 09:19:08" (1/1) ... [2019-12-07 21:19:08,741 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-12-07 21:19:08,741 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-12-07 21:19:08,741 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-12-07 21:19:08,741 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-12-07 21:19:08,747 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 09:19:08" (1/1) ... [2019-12-07 21:19:08,748 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 09:19:08" (1/1) ... [2019-12-07 21:19:08,752 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 09:19:08" (1/1) ... [2019-12-07 21:19:08,752 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 09:19:08" (1/1) ... [2019-12-07 21:19:08,763 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 09:19:08" (1/1) ... [2019-12-07 21:19:08,769 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 09:19:08" (1/1) ... [2019-12-07 21:19:08,772 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 09:19:08" (1/1) ... [2019-12-07 21:19:08,775 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-12-07 21:19:08,776 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-12-07 21:19:08,776 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-12-07 21:19:08,776 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-12-07 21:19:08,776 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 09:19:08" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 21:19:08,820 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-12-07 21:19:08,820 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2019-12-07 21:19:08,820 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-12-07 21:19:08,821 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-12-07 21:19:09,370 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-12-07 21:19:09,370 INFO L287 CfgBuilder]: Removed 206 assume(true) statements. [2019-12-07 21:19:09,371 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 09:19:09 BoogieIcfgContainer [2019-12-07 21:19:09,371 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-12-07 21:19:09,372 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-12-07 21:19:09,372 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-12-07 21:19:09,374 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-12-07 21:19:09,374 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 07.12 09:19:08" (1/3) ... [2019-12-07 21:19:09,374 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5484f6f0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 09:19:09, skipping insertion in model container [2019-12-07 21:19:09,375 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 09:19:08" (2/3) ... [2019-12-07 21:19:09,375 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5484f6f0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 09:19:09, skipping insertion in model container [2019-12-07 21:19:09,375 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 09:19:09" (3/3) ... [2019-12-07 21:19:09,376 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product45.cil.c [2019-12-07 21:19:09,383 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-12-07 21:19:09,388 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2019-12-07 21:19:09,396 INFO L249 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2019-12-07 21:19:09,413 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-12-07 21:19:09,413 INFO L374 AbstractCegarLoop]: Hoare is true [2019-12-07 21:19:09,413 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-12-07 21:19:09,413 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-12-07 21:19:09,414 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-12-07 21:19:09,414 INFO L378 AbstractCegarLoop]: Difference is false [2019-12-07 21:19:09,414 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-12-07 21:19:09,414 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-12-07 21:19:09,426 INFO L276 IsEmpty]: Start isEmpty. Operand 138 states. [2019-12-07 21:19:09,430 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2019-12-07 21:19:09,430 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:09,431 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:09,431 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:09,435 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:09,435 INFO L82 PathProgramCache]: Analyzing trace with hash -2038923744, now seen corresponding path program 1 times [2019-12-07 21:19:09,444 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:09,444 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1985550455] [2019-12-07 21:19:09,444 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 2 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:09,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:09,572 INFO L264 TraceCheckSpWp]: Trace formula consists of 181 conjuncts, 1 conjunts are in the unsatisfiable core [2019-12-07 21:19:09,576 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:09,587 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:09,587 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:09,591 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:09,592 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1985550455] [2019-12-07 21:19:09,592 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 21:19:09,592 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 2 [2019-12-07 21:19:09,593 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1467682165] [2019-12-07 21:19:09,596 INFO L442 AbstractCegarLoop]: Interpolant automaton has 2 states [2019-12-07 21:19:09,596 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:09,605 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2019-12-07 21:19:09,605 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 21:19:09,607 INFO L87 Difference]: Start difference. First operand 138 states. Second operand 2 states. [2019-12-07 21:19:09,631 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:09,631 INFO L93 Difference]: Finished difference Result 269 states and 400 transitions. [2019-12-07 21:19:09,631 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-12-07 21:19:09,632 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 19 [2019-12-07 21:19:09,633 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:09,641 INFO L225 Difference]: With dead ends: 269 [2019-12-07 21:19:09,641 INFO L226 Difference]: Without dead ends: 134 [2019-12-07 21:19:09,644 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 21:19:09,657 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 134 states. [2019-12-07 21:19:09,674 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 134 to 134. [2019-12-07 21:19:09,675 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 134 states. [2019-12-07 21:19:09,676 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 134 states to 134 states and 192 transitions. [2019-12-07 21:19:09,677 INFO L78 Accepts]: Start accepts. Automaton has 134 states and 192 transitions. Word has length 19 [2019-12-07 21:19:09,678 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:09,678 INFO L462 AbstractCegarLoop]: Abstraction has 134 states and 192 transitions. [2019-12-07 21:19:09,678 INFO L463 AbstractCegarLoop]: Interpolant automaton has 2 states. [2019-12-07 21:19:09,678 INFO L276 IsEmpty]: Start isEmpty. Operand 134 states and 192 transitions. [2019-12-07 21:19:09,679 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2019-12-07 21:19:09,679 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:09,679 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:09,880 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 mathsat -unsat_core_generation=3 [2019-12-07 21:19:09,880 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:09,880 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:09,880 INFO L82 PathProgramCache]: Analyzing trace with hash -1183223248, now seen corresponding path program 1 times [2019-12-07 21:19:09,881 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:09,881 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1205165554] [2019-12-07 21:19:09,881 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 3 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:09,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:09,993 INFO L264 TraceCheckSpWp]: Trace formula consists of 182 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 21:19:09,995 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:10,008 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:10,008 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:10,017 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:10,017 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1205165554] [2019-12-07 21:19:10,017 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 21:19:10,017 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 21:19:10,018 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1245003179] [2019-12-07 21:19:10,019 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 21:19:10,019 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:10,019 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 21:19:10,019 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 21:19:10,019 INFO L87 Difference]: Start difference. First operand 134 states and 192 transitions. Second operand 4 states. [2019-12-07 21:19:10,032 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:10,032 INFO L93 Difference]: Finished difference Result 134 states and 192 transitions. [2019-12-07 21:19:10,033 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 21:19:10,033 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 20 [2019-12-07 21:19:10,033 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:10,034 INFO L225 Difference]: With dead ends: 134 [2019-12-07 21:19:10,034 INFO L226 Difference]: Without dead ends: 55 [2019-12-07 21:19:10,035 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 21:19:10,035 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2019-12-07 21:19:10,038 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2019-12-07 21:19:10,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55 states. [2019-12-07 21:19:10,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 78 transitions. [2019-12-07 21:19:10,040 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 78 transitions. Word has length 20 [2019-12-07 21:19:10,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:10,040 INFO L462 AbstractCegarLoop]: Abstraction has 55 states and 78 transitions. [2019-12-07 21:19:10,040 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 21:19:10,040 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 78 transitions. [2019-12-07 21:19:10,041 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2019-12-07 21:19:10,041 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:10,041 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:10,242 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 mathsat -unsat_core_generation=3 [2019-12-07 21:19:10,242 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:10,243 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:10,243 INFO L82 PathProgramCache]: Analyzing trace with hash 401446808, now seen corresponding path program 1 times [2019-12-07 21:19:10,244 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:10,245 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [279500665] [2019-12-07 21:19:10,245 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 4 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:10,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:10,423 INFO L264 TraceCheckSpWp]: Trace formula consists of 188 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 21:19:10,424 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:10,433 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:10,433 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:10,440 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:10,440 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [279500665] [2019-12-07 21:19:10,440 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 21:19:10,440 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 3 [2019-12-07 21:19:10,441 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1174485882] [2019-12-07 21:19:10,441 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 21:19:10,441 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:10,441 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 21:19:10,441 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 21:19:10,442 INFO L87 Difference]: Start difference. First operand 55 states and 78 transitions. Second operand 4 states. [2019-12-07 21:19:10,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:10,449 INFO L93 Difference]: Finished difference Result 103 states and 149 transitions. [2019-12-07 21:19:10,450 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 21:19:10,450 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 26 [2019-12-07 21:19:10,450 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:10,451 INFO L225 Difference]: With dead ends: 103 [2019-12-07 21:19:10,451 INFO L226 Difference]: Without dead ends: 55 [2019-12-07 21:19:10,451 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 21:19:10,452 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2019-12-07 21:19:10,456 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2019-12-07 21:19:10,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55 states. [2019-12-07 21:19:10,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 77 transitions. [2019-12-07 21:19:10,457 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 77 transitions. Word has length 26 [2019-12-07 21:19:10,457 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:10,457 INFO L462 AbstractCegarLoop]: Abstraction has 55 states and 77 transitions. [2019-12-07 21:19:10,457 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 21:19:10,457 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 77 transitions. [2019-12-07 21:19:10,458 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2019-12-07 21:19:10,458 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:10,458 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:10,659 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 mathsat -unsat_core_generation=3 [2019-12-07 21:19:10,660 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:10,661 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:10,661 INFO L82 PathProgramCache]: Analyzing trace with hash -1016692102, now seen corresponding path program 1 times [2019-12-07 21:19:10,663 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:10,663 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [471365591] [2019-12-07 21:19:10,664 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 5 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:10,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:10,888 INFO L264 TraceCheckSpWp]: Trace formula consists of 190 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 21:19:10,889 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:10,895 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:10,896 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:10,898 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:10,899 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [471365591] [2019-12-07 21:19:10,899 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 21:19:10,899 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 21:19:10,899 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [182287851] [2019-12-07 21:19:10,899 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 21:19:10,900 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:10,900 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 21:19:10,900 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 21:19:10,900 INFO L87 Difference]: Start difference. First operand 55 states and 77 transitions. Second operand 3 states. [2019-12-07 21:19:10,955 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:10,955 INFO L93 Difference]: Finished difference Result 127 states and 181 transitions. [2019-12-07 21:19:10,956 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 21:19:10,956 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2019-12-07 21:19:10,956 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:10,957 INFO L225 Difference]: With dead ends: 127 [2019-12-07 21:19:10,957 INFO L226 Difference]: Without dead ends: 79 [2019-12-07 21:19:10,957 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 53 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 21:19:10,958 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2019-12-07 21:19:10,964 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 77. [2019-12-07 21:19:10,964 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 77 states. [2019-12-07 21:19:10,964 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 107 transitions. [2019-12-07 21:19:10,964 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 107 transitions. Word has length 28 [2019-12-07 21:19:10,965 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:10,965 INFO L462 AbstractCegarLoop]: Abstraction has 77 states and 107 transitions. [2019-12-07 21:19:10,965 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 21:19:10,965 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 107 transitions. [2019-12-07 21:19:10,965 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 21:19:10,966 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:10,966 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:11,166 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 mathsat -unsat_core_generation=3 [2019-12-07 21:19:11,167 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:11,167 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:11,168 INFO L82 PathProgramCache]: Analyzing trace with hash -836140634, now seen corresponding path program 1 times [2019-12-07 21:19:11,169 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:11,170 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1771504826] [2019-12-07 21:19:11,170 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 6 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:11,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:11,380 INFO L264 TraceCheckSpWp]: Trace formula consists of 200 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 21:19:11,382 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:11,397 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:11,398 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:11,405 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:11,405 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1771504826] [2019-12-07 21:19:11,406 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 21:19:11,406 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 21:19:11,406 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [554598215] [2019-12-07 21:19:11,406 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 21:19:11,406 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:11,407 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 21:19:11,407 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 21:19:11,407 INFO L87 Difference]: Start difference. First operand 77 states and 107 transitions. Second operand 5 states. [2019-12-07 21:19:11,542 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:11,542 INFO L93 Difference]: Finished difference Result 260 states and 366 transitions. [2019-12-07 21:19:11,543 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 21:19:11,543 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2019-12-07 21:19:11,543 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:11,544 INFO L225 Difference]: With dead ends: 260 [2019-12-07 21:19:11,545 INFO L226 Difference]: Without dead ends: 190 [2019-12-07 21:19:11,545 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2019-12-07 21:19:11,546 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 190 states. [2019-12-07 21:19:11,556 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 190 to 76. [2019-12-07 21:19:11,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 76 states. [2019-12-07 21:19:11,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 104 transitions. [2019-12-07 21:19:11,557 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 104 transitions. Word has length 34 [2019-12-07 21:19:11,557 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:11,558 INFO L462 AbstractCegarLoop]: Abstraction has 76 states and 104 transitions. [2019-12-07 21:19:11,558 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 21:19:11,558 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 104 transitions. [2019-12-07 21:19:11,559 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2019-12-07 21:19:11,559 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:11,559 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:11,760 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 mathsat -unsat_core_generation=3 [2019-12-07 21:19:11,761 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:11,762 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:11,762 INFO L82 PathProgramCache]: Analyzing trace with hash 2819926, now seen corresponding path program 1 times [2019-12-07 21:19:11,764 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:11,764 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1088021451] [2019-12-07 21:19:11,765 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 7 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:11,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:11,945 INFO L264 TraceCheckSpWp]: Trace formula consists of 207 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 21:19:11,947 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:11,959 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:11,959 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:11,962 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:11,962 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1088021451] [2019-12-07 21:19:11,962 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 21:19:11,962 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 21:19:11,962 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [527873087] [2019-12-07 21:19:11,962 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 21:19:11,963 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:11,963 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 21:19:11,963 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 21:19:11,963 INFO L87 Difference]: Start difference. First operand 76 states and 104 transitions. Second operand 5 states. [2019-12-07 21:19:12,010 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:12,010 INFO L93 Difference]: Finished difference Result 194 states and 266 transitions. [2019-12-07 21:19:12,010 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-12-07 21:19:12,010 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 37 [2019-12-07 21:19:12,010 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:12,011 INFO L225 Difference]: With dead ends: 194 [2019-12-07 21:19:12,011 INFO L226 Difference]: Without dead ends: 125 [2019-12-07 21:19:12,012 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 71 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-12-07 21:19:12,012 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125 states. [2019-12-07 21:19:12,017 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125 to 82. [2019-12-07 21:19:12,018 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 82 states. [2019-12-07 21:19:12,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 110 transitions. [2019-12-07 21:19:12,018 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 110 transitions. Word has length 37 [2019-12-07 21:19:12,018 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:12,018 INFO L462 AbstractCegarLoop]: Abstraction has 82 states and 110 transitions. [2019-12-07 21:19:12,018 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 21:19:12,018 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 110 transitions. [2019-12-07 21:19:12,019 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2019-12-07 21:19:12,019 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:12,019 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:12,220 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 mathsat -unsat_core_generation=3 [2019-12-07 21:19:12,221 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:12,222 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:12,222 INFO L82 PathProgramCache]: Analyzing trace with hash -1008297324, now seen corresponding path program 1 times [2019-12-07 21:19:12,223 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:12,223 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1503594430] [2019-12-07 21:19:12,224 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 8 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:12,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:12,355 INFO L264 TraceCheckSpWp]: Trace formula consists of 207 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 21:19:12,356 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:12,364 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:12,364 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:12,374 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:12,374 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1503594430] [2019-12-07 21:19:12,374 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 21:19:12,374 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 6 [2019-12-07 21:19:12,374 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1522966036] [2019-12-07 21:19:12,375 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 21:19:12,375 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:12,375 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 21:19:12,375 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2019-12-07 21:19:12,375 INFO L87 Difference]: Start difference. First operand 82 states and 110 transitions. Second operand 6 states. [2019-12-07 21:19:12,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:12,418 INFO L93 Difference]: Finished difference Result 211 states and 283 transitions. [2019-12-07 21:19:12,418 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-12-07 21:19:12,418 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 37 [2019-12-07 21:19:12,418 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:12,419 INFO L225 Difference]: With dead ends: 211 [2019-12-07 21:19:12,419 INFO L226 Difference]: Without dead ends: 136 [2019-12-07 21:19:12,420 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 69 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-12-07 21:19:12,420 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 136 states. [2019-12-07 21:19:12,429 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 136 to 86. [2019-12-07 21:19:12,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 86 states. [2019-12-07 21:19:12,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 114 transitions. [2019-12-07 21:19:12,430 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 114 transitions. Word has length 37 [2019-12-07 21:19:12,430 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:12,430 INFO L462 AbstractCegarLoop]: Abstraction has 86 states and 114 transitions. [2019-12-07 21:19:12,430 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 21:19:12,430 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 114 transitions. [2019-12-07 21:19:12,431 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2019-12-07 21:19:12,431 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:12,431 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:12,632 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 mathsat -unsat_core_generation=3 [2019-12-07 21:19:12,633 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:12,633 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:12,634 INFO L82 PathProgramCache]: Analyzing trace with hash -2029365678, now seen corresponding path program 1 times [2019-12-07 21:19:12,635 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:12,635 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1932158416] [2019-12-07 21:19:12,636 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 9 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:12,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:12,785 INFO L264 TraceCheckSpWp]: Trace formula consists of 207 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 21:19:12,787 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:12,792 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:12,792 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:12,799 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:12,799 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1932158416] [2019-12-07 21:19:12,799 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 21:19:12,799 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 3 [2019-12-07 21:19:12,799 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1708618033] [2019-12-07 21:19:12,800 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 21:19:12,800 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:12,800 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 21:19:12,800 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 21:19:12,800 INFO L87 Difference]: Start difference. First operand 86 states and 114 transitions. Second operand 4 states. [2019-12-07 21:19:12,840 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:12,840 INFO L93 Difference]: Finished difference Result 252 states and 338 transitions. [2019-12-07 21:19:12,841 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 21:19:12,841 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 37 [2019-12-07 21:19:12,841 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:12,842 INFO L225 Difference]: With dead ends: 252 [2019-12-07 21:19:12,842 INFO L226 Difference]: Without dead ends: 173 [2019-12-07 21:19:12,842 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 72 GetRequests, 70 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 21:19:12,843 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2019-12-07 21:19:12,850 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 143. [2019-12-07 21:19:12,850 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 143 states. [2019-12-07 21:19:12,851 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 143 states to 143 states and 190 transitions. [2019-12-07 21:19:12,851 INFO L78 Accepts]: Start accepts. Automaton has 143 states and 190 transitions. Word has length 37 [2019-12-07 21:19:12,851 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:12,851 INFO L462 AbstractCegarLoop]: Abstraction has 143 states and 190 transitions. [2019-12-07 21:19:12,851 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 21:19:12,851 INFO L276 IsEmpty]: Start isEmpty. Operand 143 states and 190 transitions. [2019-12-07 21:19:12,852 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2019-12-07 21:19:12,852 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:12,852 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:13,052 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 mathsat -unsat_core_generation=3 [2019-12-07 21:19:13,053 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:13,054 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:13,054 INFO L82 PathProgramCache]: Analyzing trace with hash -493567726, now seen corresponding path program 1 times [2019-12-07 21:19:13,055 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:13,056 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1562855922] [2019-12-07 21:19:13,056 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 10 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:13,192 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:13,200 INFO L264 TraceCheckSpWp]: Trace formula consists of 209 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 21:19:13,201 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:13,219 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:13,219 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:13,223 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:13,223 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1562855922] [2019-12-07 21:19:13,223 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 21:19:13,223 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 21:19:13,223 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1152629629] [2019-12-07 21:19:13,224 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 21:19:13,224 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:13,224 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 21:19:13,224 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 21:19:13,224 INFO L87 Difference]: Start difference. First operand 143 states and 190 transitions. Second operand 6 states. [2019-12-07 21:19:13,529 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:13,529 INFO L93 Difference]: Finished difference Result 696 states and 935 transitions. [2019-12-07 21:19:13,530 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 21:19:13,530 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 38 [2019-12-07 21:19:13,530 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:13,533 INFO L225 Difference]: With dead ends: 696 [2019-12-07 21:19:13,533 INFO L226 Difference]: Without dead ends: 560 [2019-12-07 21:19:13,534 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 70 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2019-12-07 21:19:13,535 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 560 states. [2019-12-07 21:19:13,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 560 to 254. [2019-12-07 21:19:13,559 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 254 states. [2019-12-07 21:19:13,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 254 states to 254 states and 333 transitions. [2019-12-07 21:19:13,560 INFO L78 Accepts]: Start accepts. Automaton has 254 states and 333 transitions. Word has length 38 [2019-12-07 21:19:13,560 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:13,560 INFO L462 AbstractCegarLoop]: Abstraction has 254 states and 333 transitions. [2019-12-07 21:19:13,560 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 21:19:13,561 INFO L276 IsEmpty]: Start isEmpty. Operand 254 states and 333 transitions. [2019-12-07 21:19:13,562 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2019-12-07 21:19:13,562 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:13,562 INFO L410 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:13,762 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 mathsat -unsat_core_generation=3 [2019-12-07 21:19:13,763 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:13,763 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:13,763 INFO L82 PathProgramCache]: Analyzing trace with hash -1880270052, now seen corresponding path program 1 times [2019-12-07 21:19:13,764 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:13,764 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [65534356] [2019-12-07 21:19:13,764 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 11 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:13,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:13,860 INFO L264 TraceCheckSpWp]: Trace formula consists of 236 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 21:19:13,862 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:13,876 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:13,876 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:13,898 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:13,898 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [65534356] [2019-12-07 21:19:13,899 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [651110183] [2019-12-07 21:19:13,899 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/cvc4 Starting monitored process 12 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 21:19:13,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:14,000 INFO L264 TraceCheckSpWp]: Trace formula consists of 236 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 21:19:14,001 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:14,005 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:14,005 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:14,010 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:14,010 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1703959661] [2019-12-07 21:19:14,010 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/z3 Starting monitored process 13 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 21:19:14,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:14,097 INFO L264 TraceCheckSpWp]: Trace formula consists of 236 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 21:19:14,098 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:14,101 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:14,101 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:14,106 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 21:19:14,106 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 21:19:14,106 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5, 5, 5, 5] total 8 [2019-12-07 21:19:14,106 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1806506907] [2019-12-07 21:19:14,107 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-12-07 21:19:14,107 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:14,107 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 21:19:14,107 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2019-12-07 21:19:14,107 INFO L87 Difference]: Start difference. First operand 254 states and 333 transitions. Second operand 8 states. [2019-12-07 21:19:14,403 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:14,404 INFO L93 Difference]: Finished difference Result 634 states and 856 transitions. [2019-12-07 21:19:14,404 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2019-12-07 21:19:14,404 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 59 [2019-12-07 21:19:14,404 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:14,406 INFO L225 Difference]: With dead ends: 634 [2019-12-07 21:19:14,406 INFO L226 Difference]: Without dead ends: 387 [2019-12-07 21:19:14,407 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 356 GetRequests, 346 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=47, Invalid=85, Unknown=0, NotChecked=0, Total=132 [2019-12-07 21:19:14,407 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 387 states. [2019-12-07 21:19:14,422 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 387 to 236. [2019-12-07 21:19:14,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 236 states. [2019-12-07 21:19:14,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 236 states to 236 states and 301 transitions. [2019-12-07 21:19:14,423 INFO L78 Accepts]: Start accepts. Automaton has 236 states and 301 transitions. Word has length 59 [2019-12-07 21:19:14,424 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:14,424 INFO L462 AbstractCegarLoop]: Abstraction has 236 states and 301 transitions. [2019-12-07 21:19:14,424 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-12-07 21:19:14,424 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 301 transitions. [2019-12-07 21:19:14,425 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2019-12-07 21:19:14,425 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:14,425 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:15,026 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 cvc4 --incremental --print-success --lang smt --rewrite-divk,13 z3 -smt2 -in SMTLIB2_COMPLIANT=true,11 mathsat -unsat_core_generation=3 [2019-12-07 21:19:15,028 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:15,028 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:15,029 INFO L82 PathProgramCache]: Analyzing trace with hash 800990776, now seen corresponding path program 1 times [2019-12-07 21:19:15,030 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:15,031 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1496653101] [2019-12-07 21:19:15,031 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 14 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:15,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:15,203 INFO L264 TraceCheckSpWp]: Trace formula consists of 299 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 21:19:15,206 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:15,244 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 78 proven. 9 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2019-12-07 21:19:15,244 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:15,280 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 78 proven. 9 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2019-12-07 21:19:15,280 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1496653101] [2019-12-07 21:19:15,280 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1042524521] [2019-12-07 21:19:15,280 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/cvc4 Starting monitored process 15 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 21:19:15,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:15,384 INFO L264 TraceCheckSpWp]: Trace formula consists of 299 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 21:19:15,385 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:15,428 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 21:19:15,428 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:15,438 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 21:19:15,438 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1485271367] [2019-12-07 21:19:15,438 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/z3 Starting monitored process 16 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 21:19:15,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:15,522 INFO L264 TraceCheckSpWp]: Trace formula consists of 299 conjuncts, 9 conjunts are in the unsatisfiable core [2019-12-07 21:19:15,523 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:15,556 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 92 proven. 2 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2019-12-07 21:19:15,557 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:15,600 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 94 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2019-12-07 21:19:15,600 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 5 imperfect interpolant sequences. [2019-12-07 21:19:15,600 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [5, 5, 5, 5, 8] total 18 [2019-12-07 21:19:15,600 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [47650648] [2019-12-07 21:19:15,601 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-12-07 21:19:15,601 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:15,601 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 21:19:15,601 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=256, Unknown=0, NotChecked=0, Total=306 [2019-12-07 21:19:15,601 INFO L87 Difference]: Start difference. First operand 236 states and 301 transitions. Second operand 8 states. [2019-12-07 21:19:15,952 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:15,952 INFO L93 Difference]: Finished difference Result 964 states and 1238 transitions. [2019-12-07 21:19:15,952 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2019-12-07 21:19:15,952 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 105 [2019-12-07 21:19:15,953 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:15,955 INFO L225 Difference]: With dead ends: 964 [2019-12-07 21:19:15,956 INFO L226 Difference]: Without dead ends: 735 [2019-12-07 21:19:15,957 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 645 GetRequests, 617 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 92 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=161, Invalid=709, Unknown=0, NotChecked=0, Total=870 [2019-12-07 21:19:15,957 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 735 states. [2019-12-07 21:19:15,980 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 735 to 375. [2019-12-07 21:19:15,980 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 375 states. [2019-12-07 21:19:15,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 375 states to 375 states and 479 transitions. [2019-12-07 21:19:15,981 INFO L78 Accepts]: Start accepts. Automaton has 375 states and 479 transitions. Word has length 105 [2019-12-07 21:19:15,982 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:15,982 INFO L462 AbstractCegarLoop]: Abstraction has 375 states and 479 transitions. [2019-12-07 21:19:15,982 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-12-07 21:19:15,982 INFO L276 IsEmpty]: Start isEmpty. Operand 375 states and 479 transitions. [2019-12-07 21:19:15,983 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2019-12-07 21:19:15,983 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:15,983 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:16,584 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 z3 -smt2 -in SMTLIB2_COMPLIANT=true,14 mathsat -unsat_core_generation=3,15 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 21:19:16,584 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:16,585 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:16,585 INFO L82 PathProgramCache]: Analyzing trace with hash -856262317, now seen corresponding path program 1 times [2019-12-07 21:19:16,586 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:16,586 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [160125327] [2019-12-07 21:19:16,587 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 17 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:16,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:16,709 INFO L264 TraceCheckSpWp]: Trace formula consists of 303 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 21:19:16,711 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:16,727 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 93 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2019-12-07 21:19:16,727 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:16,749 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 93 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2019-12-07 21:19:16,749 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [160125327] [2019-12-07 21:19:16,749 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 21:19:16,749 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 8 [2019-12-07 21:19:16,749 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [709364228] [2019-12-07 21:19:16,750 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-12-07 21:19:16,750 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:16,750 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 21:19:16,750 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2019-12-07 21:19:16,750 INFO L87 Difference]: Start difference. First operand 375 states and 479 transitions. Second operand 8 states. [2019-12-07 21:19:17,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:17,009 INFO L93 Difference]: Finished difference Result 862 states and 1109 transitions. [2019-12-07 21:19:17,010 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-12-07 21:19:17,010 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 107 [2019-12-07 21:19:17,010 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:17,013 INFO L225 Difference]: With dead ends: 862 [2019-12-07 21:19:17,013 INFO L226 Difference]: Without dead ends: 494 [2019-12-07 21:19:17,014 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 217 GetRequests, 208 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=38, Invalid=72, Unknown=0, NotChecked=0, Total=110 [2019-12-07 21:19:17,014 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 494 states. [2019-12-07 21:19:17,047 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 494 to 375. [2019-12-07 21:19:17,047 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 375 states. [2019-12-07 21:19:17,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 375 states to 375 states and 473 transitions. [2019-12-07 21:19:17,049 INFO L78 Accepts]: Start accepts. Automaton has 375 states and 473 transitions. Word has length 107 [2019-12-07 21:19:17,049 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:17,049 INFO L462 AbstractCegarLoop]: Abstraction has 375 states and 473 transitions. [2019-12-07 21:19:17,049 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-12-07 21:19:17,050 INFO L276 IsEmpty]: Start isEmpty. Operand 375 states and 473 transitions. [2019-12-07 21:19:17,051 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2019-12-07 21:19:17,051 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:17,051 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:17,252 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 mathsat -unsat_core_generation=3 [2019-12-07 21:19:17,253 INFO L410 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:17,253 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:17,254 INFO L82 PathProgramCache]: Analyzing trace with hash -881616212, now seen corresponding path program 1 times [2019-12-07 21:19:17,255 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:17,255 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1675404716] [2019-12-07 21:19:17,256 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 18 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:17,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:17,418 INFO L264 TraceCheckSpWp]: Trace formula consists of 304 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 21:19:17,420 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:17,450 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 64 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 21:19:17,450 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:17,468 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 64 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 21:19:17,468 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1675404716] [2019-12-07 21:19:17,468 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1148836057] [2019-12-07 21:19:17,468 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/cvc4 Starting monitored process 19 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 21:19:17,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:17,579 INFO L264 TraceCheckSpWp]: Trace formula consists of 304 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 21:19:17,581 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:17,590 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 64 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 21:19:17,590 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:17,601 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 64 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 21:19:17,601 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [41741903] [2019-12-07 21:19:17,601 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/z3 Starting monitored process 20 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 21:19:17,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:17,685 INFO L264 TraceCheckSpWp]: Trace formula consists of 304 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 21:19:17,686 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:17,696 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 64 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 21:19:17,696 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:17,706 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 64 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 21:19:17,706 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 21:19:17,706 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5, 5, 5, 5] total 5 [2019-12-07 21:19:17,707 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1911988354] [2019-12-07 21:19:17,707 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 21:19:17,707 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:17,707 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 21:19:17,707 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 21:19:17,708 INFO L87 Difference]: Start difference. First operand 375 states and 473 transitions. Second operand 6 states. [2019-12-07 21:19:17,842 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:17,842 INFO L93 Difference]: Finished difference Result 1654 states and 2113 transitions. [2019-12-07 21:19:17,843 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 21:19:17,843 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 108 [2019-12-07 21:19:17,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:17,848 INFO L225 Difference]: With dead ends: 1654 [2019-12-07 21:19:17,848 INFO L226 Difference]: Without dead ends: 1286 [2019-12-07 21:19:17,849 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 648 GetRequests, 638 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2019-12-07 21:19:17,850 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1286 states. [2019-12-07 21:19:17,896 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1286 to 738. [2019-12-07 21:19:17,896 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 738 states. [2019-12-07 21:19:17,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 738 states to 738 states and 916 transitions. [2019-12-07 21:19:17,897 INFO L78 Accepts]: Start accepts. Automaton has 738 states and 916 transitions. Word has length 108 [2019-12-07 21:19:17,898 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:17,898 INFO L462 AbstractCegarLoop]: Abstraction has 738 states and 916 transitions. [2019-12-07 21:19:17,898 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 21:19:17,898 INFO L276 IsEmpty]: Start isEmpty. Operand 738 states and 916 transitions. [2019-12-07 21:19:17,899 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2019-12-07 21:19:17,899 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:17,899 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:18,500 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 mathsat -unsat_core_generation=3,20 z3 -smt2 -in SMTLIB2_COMPLIANT=true,19 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 21:19:18,501 INFO L410 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:18,501 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:18,502 INFO L82 PathProgramCache]: Analyzing trace with hash -1234879580, now seen corresponding path program 1 times [2019-12-07 21:19:18,503 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:18,503 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [927482139] [2019-12-07 21:19:18,503 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 21 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:18,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:18,780 INFO L264 TraceCheckSpWp]: Trace formula consists of 306 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 21:19:18,781 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:18,802 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2019-12-07 21:19:18,803 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:18,833 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2019-12-07 21:19:18,833 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [927482139] [2019-12-07 21:19:18,834 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 21:19:18,834 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 10 [2019-12-07 21:19:18,834 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [468128663] [2019-12-07 21:19:18,834 INFO L442 AbstractCegarLoop]: Interpolant automaton has 10 states [2019-12-07 21:19:18,834 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:18,834 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2019-12-07 21:19:18,834 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2019-12-07 21:19:18,834 INFO L87 Difference]: Start difference. First operand 738 states and 916 transitions. Second operand 10 states. [2019-12-07 21:19:19,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:19,165 INFO L93 Difference]: Finished difference Result 2268 states and 2827 transitions. [2019-12-07 21:19:19,166 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 21:19:19,166 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 109 [2019-12-07 21:19:19,166 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:19,171 INFO L225 Difference]: With dead ends: 2268 [2019-12-07 21:19:19,171 INFO L226 Difference]: Without dead ends: 1537 [2019-12-07 21:19:19,172 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 227 GetRequests, 213 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=72, Invalid=168, Unknown=0, NotChecked=0, Total=240 [2019-12-07 21:19:19,173 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1537 states. [2019-12-07 21:19:19,239 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1537 to 715. [2019-12-07 21:19:19,239 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 715 states. [2019-12-07 21:19:19,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 715 states to 715 states and 872 transitions. [2019-12-07 21:19:19,240 INFO L78 Accepts]: Start accepts. Automaton has 715 states and 872 transitions. Word has length 109 [2019-12-07 21:19:19,240 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:19,240 INFO L462 AbstractCegarLoop]: Abstraction has 715 states and 872 transitions. [2019-12-07 21:19:19,240 INFO L463 AbstractCegarLoop]: Interpolant automaton has 10 states. [2019-12-07 21:19:19,240 INFO L276 IsEmpty]: Start isEmpty. Operand 715 states and 872 transitions. [2019-12-07 21:19:19,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2019-12-07 21:19:19,241 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:19,241 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:19,442 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 mathsat -unsat_core_generation=3 [2019-12-07 21:19:19,442 INFO L410 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:19,442 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:19,442 INFO L82 PathProgramCache]: Analyzing trace with hash 114745770, now seen corresponding path program 1 times [2019-12-07 21:19:19,443 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:19,443 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1628849922] [2019-12-07 21:19:19,443 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 22 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:19,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 21:19:19,560 INFO L264 TraceCheckSpWp]: Trace formula consists of 308 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 21:19:19,561 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:19,582 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 83 proven. 0 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2019-12-07 21:19:19,582 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:19,614 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 83 proven. 0 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2019-12-07 21:19:19,614 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1628849922] [2019-12-07 21:19:19,614 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 21:19:19,614 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 10 [2019-12-07 21:19:19,615 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1686156559] [2019-12-07 21:19:19,615 INFO L442 AbstractCegarLoop]: Interpolant automaton has 10 states [2019-12-07 21:19:19,615 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:19,615 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2019-12-07 21:19:19,615 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2019-12-07 21:19:19,615 INFO L87 Difference]: Start difference. First operand 715 states and 872 transitions. Second operand 10 states. [2019-12-07 21:19:19,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:19,895 INFO L93 Difference]: Finished difference Result 1848 states and 2266 transitions. [2019-12-07 21:19:19,895 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2019-12-07 21:19:19,895 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 110 [2019-12-07 21:19:19,895 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:19,899 INFO L225 Difference]: With dead ends: 1848 [2019-12-07 21:19:19,899 INFO L226 Difference]: Without dead ends: 1140 [2019-12-07 21:19:19,900 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 228 GetRequests, 215 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=66, Invalid=144, Unknown=0, NotChecked=0, Total=210 [2019-12-07 21:19:19,901 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1140 states. [2019-12-07 21:19:19,948 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1140 to 632. [2019-12-07 21:19:19,948 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 632 states. [2019-12-07 21:19:19,949 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 632 states to 632 states and 768 transitions. [2019-12-07 21:19:19,949 INFO L78 Accepts]: Start accepts. Automaton has 632 states and 768 transitions. Word has length 110 [2019-12-07 21:19:19,950 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:19,950 INFO L462 AbstractCegarLoop]: Abstraction has 632 states and 768 transitions. [2019-12-07 21:19:19,950 INFO L463 AbstractCegarLoop]: Interpolant automaton has 10 states. [2019-12-07 21:19:19,950 INFO L276 IsEmpty]: Start isEmpty. Operand 632 states and 768 transitions. [2019-12-07 21:19:19,951 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2019-12-07 21:19:19,951 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 21:19:19,951 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 21:19:20,151 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 mathsat -unsat_core_generation=3 [2019-12-07 21:19:20,152 INFO L410 AbstractCegarLoop]: === Iteration 16 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 21:19:20,153 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 21:19:20,153 INFO L82 PathProgramCache]: Analyzing trace with hash 1264666726, now seen corresponding path program 2 times [2019-12-07 21:19:20,154 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 21:19:20,154 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [389446694] [2019-12-07 21:19:20,155 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/mathsat Starting monitored process 23 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with mathsat -unsat_core_generation=3 [2019-12-07 21:19:20,805 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 21:19:20,805 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 21:19:20,832 INFO L264 TraceCheckSpWp]: Trace formula consists of 308 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 21:19:20,833 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:20,860 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 20 proven. 81 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2019-12-07 21:19:20,860 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:20,916 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 20 proven. 81 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2019-12-07 21:19:20,916 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [389446694] [2019-12-07 21:19:20,916 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [324053035] [2019-12-07 21:19:20,917 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/cvc4 Starting monitored process 24 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 21:19:22,393 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 21:19:22,393 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 21:19:22,443 INFO L264 TraceCheckSpWp]: Trace formula consists of 308 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 21:19:22,445 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:22,497 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 64 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 21:19:22,497 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:22,539 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 64 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 21:19:22,539 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1812162071] [2019-12-07 21:19:22,539 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/z3 Starting monitored process 25 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 21:19:22,651 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 21:19:22,651 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 21:19:22,657 INFO L264 TraceCheckSpWp]: Trace formula consists of 308 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 21:19:22,658 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 21:19:22,669 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 64 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 21:19:22,669 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 21:19:22,687 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 64 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 21:19:22,687 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 21:19:22,688 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 7, 7, 7, 7] total 14 [2019-12-07 21:19:22,688 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1590198673] [2019-12-07 21:19:22,688 INFO L442 AbstractCegarLoop]: Interpolant automaton has 14 states [2019-12-07 21:19:22,688 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 21:19:22,689 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2019-12-07 21:19:22,689 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=145, Unknown=0, NotChecked=0, Total=182 [2019-12-07 21:19:22,689 INFO L87 Difference]: Start difference. First operand 632 states and 768 transitions. Second operand 14 states. [2019-12-07 21:19:23,130 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 21:19:23,130 INFO L93 Difference]: Finished difference Result 1320 states and 1613 transitions. [2019-12-07 21:19:23,130 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2019-12-07 21:19:23,130 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 110 [2019-12-07 21:19:23,130 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 21:19:23,131 INFO L225 Difference]: With dead ends: 1320 [2019-12-07 21:19:23,131 INFO L226 Difference]: Without dead ends: 0 [2019-12-07 21:19:23,132 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 667 GetRequests, 645 SyntacticMatches, 1 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=122, Invalid=384, Unknown=0, NotChecked=0, Total=506 [2019-12-07 21:19:23,132 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2019-12-07 21:19:23,132 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2019-12-07 21:19:23,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2019-12-07 21:19:23,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2019-12-07 21:19:23,132 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2019-12-07 21:19:23,132 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 21:19:23,132 INFO L462 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 21:19:23,132 INFO L463 AbstractCegarLoop]: Interpolant automaton has 14 states. [2019-12-07 21:19:23,132 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2019-12-07 21:19:23,133 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2019-12-07 21:19:23,733 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 mathsat -unsat_core_generation=3,24 cvc4 --incremental --print-success --lang smt --rewrite-divk,25 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 21:19:23,737 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2019-12-07 21:19:23,961 WARN L192 SmtUtils]: Spent 194.00 ms on a formula simplification. DAG size of input: 175 DAG size of output: 159 [2019-12-07 21:19:24,354 WARN L192 SmtUtils]: Spent 390.00 ms on a formula simplification. DAG size of input: 379 DAG size of output: 329 [2019-12-07 21:19:24,529 WARN L192 SmtUtils]: Spent 172.00 ms on a formula simplification. DAG size of input: 277 DAG size of output: 237 [2019-12-07 21:19:24,690 WARN L192 SmtUtils]: Spent 124.00 ms on a formula simplification. DAG size of input: 217 DAG size of output: 191 [2019-12-07 21:19:25,096 WARN L192 SmtUtils]: Spent 402.00 ms on a formula simplification. DAG size of input: 408 DAG size of output: 362 [2019-12-07 21:19:25,493 WARN L192 SmtUtils]: Spent 394.00 ms on a formula simplification. DAG size of input: 396 DAG size of output: 357 [2019-12-07 21:19:25,826 WARN L192 SmtUtils]: Spent 330.00 ms on a formula simplification. DAG size of input: 382 DAG size of output: 322 [2019-12-07 21:19:26,192 WARN L192 SmtUtils]: Spent 285.00 ms on a formula simplification. DAG size of input: 320 DAG size of output: 281 [2019-12-07 21:19:26,427 WARN L192 SmtUtils]: Spent 232.00 ms on a formula simplification. DAG size of input: 315 DAG size of output: 278 [2019-12-07 21:19:26,590 WARN L192 SmtUtils]: Spent 152.00 ms on a formula simplification. DAG size of input: 245 DAG size of output: 227 [2019-12-07 21:19:27,519 WARN L192 SmtUtils]: Spent 924.00 ms on a formula simplification. DAG size of input: 156 DAG size of output: 54 [2019-12-07 21:19:31,170 WARN L192 SmtUtils]: Spent 3.65 s on a formula simplification. DAG size of input: 320 DAG size of output: 93 [2019-12-07 21:19:33,125 WARN L192 SmtUtils]: Spent 1.95 s on a formula simplification. DAG size of input: 235 DAG size of output: 92 [2019-12-07 21:19:33,448 WARN L192 SmtUtils]: Spent 204.00 ms on a formula simplification. DAG size of input: 65 DAG size of output: 42 [2019-12-07 21:19:34,971 WARN L192 SmtUtils]: Spent 1.52 s on a formula simplification. DAG size of input: 188 DAG size of output: 71 [2019-12-07 21:19:38,768 WARN L192 SmtUtils]: Spent 3.79 s on a formula simplification. DAG size of input: 360 DAG size of output: 98 [2019-12-07 21:19:43,279 WARN L192 SmtUtils]: Spent 4.51 s on a formula simplification. DAG size of input: 351 DAG size of output: 95 [2019-12-07 21:19:46,366 WARN L192 SmtUtils]: Spent 3.08 s on a formula simplification. DAG size of input: 309 DAG size of output: 76 [2019-12-07 21:19:46,576 WARN L192 SmtUtils]: Spent 208.00 ms on a formula simplification. DAG size of input: 64 DAG size of output: 38 [2019-12-07 21:19:47,951 WARN L192 SmtUtils]: Spent 1.37 s on a formula simplification. DAG size of input: 136 DAG size of output: 66 [2019-12-07 21:19:50,774 WARN L192 SmtUtils]: Spent 2.80 s on a formula simplification. DAG size of input: 276 DAG size of output: 80 [2019-12-07 21:19:53,546 WARN L192 SmtUtils]: Spent 2.77 s on a formula simplification. DAG size of input: 278 DAG size of output: 97 [2019-12-07 21:19:55,464 WARN L192 SmtUtils]: Spent 1.85 s on a formula simplification. DAG size of input: 224 DAG size of output: 59 [2019-12-07 21:19:55,468 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 145) no Hoare annotation was computed. [2019-12-07 21:19:55,468 INFO L242 CegarLoopResult]: At program point L135(lines 126 139) the Hoare annotation is: false [2019-12-07 21:19:55,468 INFO L242 CegarLoopResult]: At program point L135-1(lines 126 139) the Hoare annotation is: (let ((.cse2 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse11 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse7 (= ~waterLevel~0 (_ bv2 32))) (.cse8 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3)) (.cse9 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse10 (= ~waterLevel~0 (_ bv0 32))) (.cse14 (not (= ULTIMATE.start_activatePump_~tmp~6 (_ bv0 32)))) (.cse0 (= (_ bv1 32) |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse1 (= (_ bv0 32) ~pumpRunning~0)) (.cse3 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse4 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse12 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse5 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse13 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse6 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse3 .cse7 .cse4 .cse5) (and .cse8 .cse9 .cse10 .cse11 (or (and .cse0 .cse1 .cse3 .cse12 .cse5 .cse13 .cse6) (and .cse0 .cse1 .cse3 .cse14 .cse5 .cse6))) (and .cse0 .cse1 .cse11 .cse2 .cse3 .cse5 .cse6) (and .cse1 .cse3 .cse11 .cse7 .cse5) (and .cse8 .cse9 .cse10 (or (and .cse0 .cse1 .cse3 .cse14 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse3 .cse4 .cse12 .cse5 .cse13 .cse6))))) [2019-12-07 21:19:55,469 INFO L242 CegarLoopResult]: At program point L135-2(lines 126 139) the Hoare annotation is: false [2019-12-07 21:19:55,469 INFO L242 CegarLoopResult]: At program point L135-3(lines 126 139) the Hoare annotation is: false [2019-12-07 21:19:55,469 INFO L242 CegarLoopResult]: At program point L135-4(lines 126 139) the Hoare annotation is: false [2019-12-07 21:19:55,469 INFO L242 CegarLoopResult]: At program point L135-5(lines 126 139) the Hoare annotation is: false [2019-12-07 21:19:55,469 INFO L242 CegarLoopResult]: At program point L763(lines 748 766) the Hoare annotation is: false [2019-12-07 21:19:55,469 INFO L242 CegarLoopResult]: At program point L763-1(lines 748 766) the Hoare annotation is: (let ((.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3)) (.cse11 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse12 (= ~waterLevel~0 (_ bv0 32))) (.cse9 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse10 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse3 (not (= ULTIMATE.start_activatePump_~tmp~6 (_ bv0 32)))) (.cse13 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse15 (= ~waterLevel~0 (_ bv2 32))) (.cse1 (= (_ bv0 32) ~pumpRunning~0)) (.cse2 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse16 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse4 (= |ULTIMATE.start_isHighWaterLevel_#res| (_ bv0 32))) (.cse5 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 (_ bv0 32))) (.cse14 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse6 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse7 (not (= ULTIMATE.start_isHighWaterLevel_~tmp~7 (_ bv0 32)))) (.cse8 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 (or (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse1 .cse2 .cse4 .cse5 .cse9 .cse6 .cse10 .cse7 .cse8)) .cse11 .cse12 .cse13) (and .cse0 .cse11 .cse12 (or (and .cse1 .cse2 .cse4 .cse5 .cse9 .cse14 .cse6 .cse10 .cse7 .cse8) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse14 .cse6 .cse7 .cse8))) (and .cse1 .cse2 .cse15 .cse14 .cse6) (and .cse1 .cse13 .cse2 .cse16 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse1 .cse2 .cse13 .cse15 .cse6) (and .cse1 .cse2 .cse16 .cse4 .cse5 .cse14 .cse6 .cse7 .cse8))) [2019-12-07 21:19:55,469 INFO L242 CegarLoopResult]: At program point L763-2(lines 748 766) the Hoare annotation is: false [2019-12-07 21:19:55,469 INFO L242 CegarLoopResult]: At program point L763-3(lines 748 766) the Hoare annotation is: false [2019-12-07 21:19:55,469 INFO L242 CegarLoopResult]: At program point L763-4(lines 748 766) the Hoare annotation is: false [2019-12-07 21:19:55,469 INFO L242 CegarLoopResult]: At program point L763-5(lines 748 766) the Hoare annotation is: false [2019-12-07 21:19:55,469 INFO L242 CegarLoopResult]: At program point L533(lines 580 586) the Hoare annotation is: (let ((.cse20 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse6 (not (= ~waterLevel~0 (_ bv3 32))))) (let ((.cse5 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))) (.cse12 (not (= ULTIMATE.start_activatePump_~tmp~6 (_ bv0 32)))) (.cse13 (or .cse20 .cse6)) (.cse15 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse16 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse19 (= ~waterLevel~0 (_ bv2 32))) (.cse22 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse11 (= (_ bv0 32) ~pumpRunning~0)) (.cse23 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse14 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse10 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3))) (.cse21 (= ~waterLevel~0 (_ bv1 32))) (.cse4 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse8 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3)) (.cse24 (= ULTIMATE.start_processEnvironment_~tmp~5 (_ bv0 32))) (.cse9 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse0 (= (_ bv1 32) ~pumpRunning~0)) (.cse1 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse17 (= ~waterLevel~0 (_ bv0 32))) (.cse18 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse2 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse3 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse25 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse9 (or (and .cse10 .cse11 .cse3 .cse12 .cse13 .cse14 .cse7) (and .cse10 .cse11 .cse3 .cse13 .cse15 .cse14 .cse7 .cse16)) .cse17 .cse18) (and .cse0 .cse1 .cse18 .cse2 .cse3 .cse5 .cse6 .cse7) (and .cse8 .cse9 .cse17 (or (and .cse10 .cse11 .cse3 .cse12 .cse13 .cse14 .cse4 .cse7) (and .cse10 .cse11 .cse3 .cse13 .cse14 .cse4 .cse15 .cse7 .cse16))) (and .cse11 .cse3 .cse19 .cse14 .cse4 .cse7) (and .cse0 .cse1 .cse10 .cse2 .cse3 .cse20 .cse4 .cse21 .cse6 .cse7) (and .cse8 .cse9 .cse0 .cse1 .cse17 .cse18 .cse2 .cse3 .cse22 .cse7) (and .cse11 .cse3 .cse18 .cse19 .cse14 .cse7) (and .cse8 .cse9 .cse0 .cse1 .cse17 .cse2 .cse3 .cse22 .cse4 .cse7) (and .cse11 .cse23 .cse3 .cse14 .cse4 .cse7) (and .cse11 .cse23 .cse3 .cse18 .cse14 .cse7) (and .cse0 .cse1 .cse10 .cse18 .cse2 .cse3 .cse20 .cse21 .cse6 .cse7) (and .cse8 .cse24 .cse9 .cse0 .cse1 .cse17 .cse2 .cse3 .cse4 .cse7 .cse25) (and .cse8 .cse24 .cse9 .cse0 .cse1 .cse17 .cse18 .cse2 .cse3 .cse7 .cse25)))) [2019-12-07 21:19:55,470 INFO L242 CegarLoopResult]: At program point L533-1(lines 580 586) the Hoare annotation is: false [2019-12-07 21:19:55,470 INFO L242 CegarLoopResult]: At program point L533-2(lines 580 586) the Hoare annotation is: false [2019-12-07 21:19:55,470 INFO L242 CegarLoopResult]: At program point L699(lines 692 702) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse8 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse10 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse11 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~pumpRunning~0)) (.cse2 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse3 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3))) (.cse4 (= ~waterLevel~0 (_ bv0 32))) (.cse12 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse6 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse7 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse13 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse9 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse14 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32))))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse11 .cse5 .cse6 .cse8 .cse9 .cse10) (and .cse1 .cse2 .cse12 .cse11 .cse5 .cse6 .cse13 .cse9 .cse14) (and .cse1 .cse2 .cse3 .cse4 .cse12 .cse5 .cse6 .cse7 .cse13 .cse9 .cse14))) [2019-12-07 21:19:55,470 INFO L242 CegarLoopResult]: At program point L699-1(lines 692 702) the Hoare annotation is: false [2019-12-07 21:19:55,470 INFO L242 CegarLoopResult]: At program point L699-2(lines 692 702) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) ~pumpRunning~0)) (.cse1 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse2 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))) (.cse3 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse4 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32))) .cse1 .cse2 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32)) .cse3 .cse4 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (and (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32)) .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 (_ bv0 32)) .cse3 .cse4 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))))) [2019-12-07 21:19:55,470 INFO L242 CegarLoopResult]: At program point L699-3(lines 692 702) the Hoare annotation is: false [2019-12-07 21:19:55,470 INFO L242 CegarLoopResult]: At program point L699-4(lines 692 702) the Hoare annotation is: false [2019-12-07 21:19:55,470 INFO L242 CegarLoopResult]: At program point L699-5(lines 692 702) the Hoare annotation is: false [2019-12-07 21:19:55,470 INFO L242 CegarLoopResult]: At program point L699-6(lines 692 702) the Hoare annotation is: false [2019-12-07 21:19:55,470 INFO L242 CegarLoopResult]: At program point L699-7(lines 692 702) the Hoare annotation is: false [2019-12-07 21:19:55,470 INFO L242 CegarLoopResult]: At program point L699-8(lines 692 702) the Hoare annotation is: false [2019-12-07 21:19:55,470 INFO L249 CegarLoopResult]: At program point L964(lines 945 967) the Hoare annotation is: true [2019-12-07 21:19:55,470 INFO L242 CegarLoopResult]: At program point L931(lines 927 933) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32))) [2019-12-07 21:19:55,470 INFO L246 CegarLoopResult]: For program point L799(lines 799 805) no Hoare annotation was computed. [2019-12-07 21:19:55,471 INFO L242 CegarLoopResult]: At program point L799-1(lines 799 805) the Hoare annotation is: (let ((.cse21 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse23 (not (= ~waterLevel~0 (_ bv3 32))))) (let ((.cse5 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse1 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse15 (not (= ULTIMATE.start_activatePump_~tmp~6 (_ bv0 32)))) (.cse0 (= (_ bv0 32) ~pumpRunning~0)) (.cse16 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse17 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse19 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse20 (or .cse21 .cse23)) (.cse8 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3)) (.cse9 (= ULTIMATE.start_processEnvironment_~tmp~5 (_ bv0 32))) (.cse10 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse12 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse13 (= ~waterLevel~0 (_ bv0 32))) (.cse14 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse7 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse18 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3))) (.cse22 (= ~waterLevel~0 (_ bv1 32))) (.cse11 (= (_ bv1 32) ~pumpRunning~0)) (.cse2 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse3 (= ~waterLevel~0 (_ bv2 32))) (.cse6 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse4 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse2 .cse6 .cse4 .cse7) (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse2 .cse1 .cse4 .cse7) (and .cse8 .cse10 .cse13 .cse1 (or (and .cse0 .cse2 .cse15 .cse4 .cse7) (and .cse0 .cse2 .cse16 .cse4 .cse17 .cse7))) (and .cse11 .cse2 .cse1 .cse3 .cse4) (and .cse8 .cse10 .cse11 .cse13 .cse18 .cse1 .cse14 .cse2 .cse19 .cse20 .cse4) (and .cse0 .cse2 .cse3 .cse6 .cse4) (and .cse11 .cse18 .cse1 .cse2 .cse21 .cse22 .cse23 .cse4) (and .cse0 .cse5 .cse2 .cse1 .cse4 .cse7) (and .cse8 .cse10 .cse13 (let ((.cse24 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))))) (or (and .cse18 .cse0 .cse2 .cse15 .cse21 .cse6 .cse4 .cse24) (and .cse18 .cse0 .cse2 .cse21 .cse16 .cse6 .cse4 .cse24 .cse17)))) (and .cse8 .cse10 .cse11 .cse13 .cse18 .cse14 .cse2 .cse19 .cse20 .cse6 .cse4) (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14 .cse2 .cse6 .cse4 .cse7) (and .cse11 .cse18 .cse2 .cse21 .cse22 .cse6 .cse23 .cse4) (and .cse11 .cse2 .cse3 .cse6 .cse4)))) [2019-12-07 21:19:55,471 INFO L242 CegarLoopResult]: At program point L867(lines 862 870) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32))) [2019-12-07 21:19:55,471 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 145) no Hoare annotation was computed. [2019-12-07 21:19:55,471 INFO L246 CegarLoopResult]: For program point L638(lines 638 655) no Hoare annotation was computed. [2019-12-07 21:19:55,471 INFO L246 CegarLoopResult]: For program point L638-1(lines 638 655) no Hoare annotation was computed. [2019-12-07 21:19:55,471 INFO L246 CegarLoopResult]: For program point L638-2(lines 638 655) no Hoare annotation was computed. [2019-12-07 21:19:55,471 INFO L246 CegarLoopResult]: For program point L77(lines 77 81) no Hoare annotation was computed. [2019-12-07 21:19:55,471 INFO L246 CegarLoopResult]: For program point L145(line 145) no Hoare annotation was computed. [2019-12-07 21:19:55,471 INFO L246 CegarLoopResult]: For program point L145-1(line 145) no Hoare annotation was computed. [2019-12-07 21:19:55,471 INFO L246 CegarLoopResult]: For program point L145-2(line 145) no Hoare annotation was computed. [2019-12-07 21:19:55,471 INFO L246 CegarLoopResult]: For program point L674(lines 674 680) no Hoare annotation was computed. [2019-12-07 21:19:55,471 INFO L246 CegarLoopResult]: For program point L674-2(lines 674 680) no Hoare annotation was computed. [2019-12-07 21:19:55,471 INFO L246 CegarLoopResult]: For program point L674-4(lines 674 680) no Hoare annotation was computed. [2019-12-07 21:19:55,472 INFO L246 CegarLoopResult]: For program point L674-6(lines 674 680) no Hoare annotation was computed. [2019-12-07 21:19:55,472 INFO L246 CegarLoopResult]: For program point L674-8(lines 674 680) no Hoare annotation was computed. [2019-12-07 21:19:55,472 INFO L246 CegarLoopResult]: For program point L674-10(lines 674 680) no Hoare annotation was computed. [2019-12-07 21:19:55,472 INFO L242 CegarLoopResult]: At program point L708(lines 703 711) the Hoare annotation is: (let ((.cse12 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse4 (not (= ~waterLevel~0 (_ bv3 32))))) (let ((.cse6 (= ~waterLevel~0 (_ bv2 32))) (.cse13 (= ~waterLevel~0 (_ bv1 32))) (.cse17 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse18 (or .cse12 .cse4)) (.cse23 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse24 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse11 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3))) (.cse22 (not (= ULTIMATE.start_activatePump_~tmp~6 (_ bv0 32)))) (.cse8 (= (_ bv0 32) ~pumpRunning~0)) (.cse10 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse7 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse9 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse14 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3)) (.cse19 (= ULTIMATE.start_processEnvironment_~tmp~5 (_ bv0 32))) (.cse15 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse0 (= (_ bv1 32) ~pumpRunning~0)) (.cse20 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse16 (= ~waterLevel~0 (_ bv0 32))) (.cse1 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse2 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse3 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse5 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse21 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))) .cse4 .cse5) (and .cse0 .cse2 .cse3 .cse6 .cse7 .cse5) (and .cse8 .cse3 .cse6 .cse7 .cse9 .cse5) (and .cse8 .cse1 .cse10 .cse3 .cse9 .cse5) (and .cse8 .cse1 .cse3 .cse6 .cse9 .cse5) (and .cse0 .cse11 .cse1 .cse2 .cse3 .cse12 .cse13 .cse4 .cse5) (and .cse0 .cse11 .cse2 .cse3 .cse12 .cse7 .cse13 .cse4 .cse5) (and .cse14 .cse15 .cse0 .cse16 .cse11 .cse1 .cse2 .cse3 .cse17 .cse18 .cse5) (and .cse14 .cse15 .cse0 .cse16 .cse11 .cse2 .cse3 .cse17 .cse18 .cse7 .cse5) (and .cse14 .cse19 .cse15 .cse0 .cse20 .cse16 .cse2 .cse3 .cse7 .cse5 .cse21) (and .cse14 .cse15 .cse16 (or (and .cse8 .cse3 .cse22 .cse7 .cse9 .cse5 .cse21) (and .cse8 .cse3 .cse23 .cse7 .cse9 .cse5 .cse24 .cse21))) (and .cse14 .cse15 .cse16 (or (and .cse11 .cse8 .cse3 .cse1 .cse9 .cse23 .cse5 .cse24) (and .cse11 .cse8 .cse3 .cse1 .cse22 .cse9 .cse5))) (and .cse8 .cse10 .cse3 .cse7 .cse9 .cse5) (and .cse14 .cse19 .cse15 .cse0 .cse20 .cse16 .cse1 .cse2 .cse3 .cse5 .cse21)))) [2019-12-07 21:19:55,472 INFO L242 CegarLoopResult]: At program point L708-1(lines 703 711) the Hoare annotation is: (let ((.cse17 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse18 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse14 (not (= ULTIMATE.start_activatePump_~tmp~6 (_ bv0 32)))) (.cse6 (= ~waterLevel~0 (_ bv0 32))) (.cse19 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse12 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3))) (.cse13 (= (_ bv0 32) ~pumpRunning~0)) (.cse21 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse15 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse16 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3)) (.cse1 (= ULTIMATE.start_processEnvironment_~tmp~5 (_ bv0 32))) (.cse2 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse3 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse4 (= (_ bv1 32) ~pumpRunning~0)) (.cse5 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse7 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse20 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse8 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse9 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse11 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse2 (or (and .cse12 .cse13 .cse7 .cse14 .cse15 .cse9 .cse10 .cse16) (and .cse12 .cse13 .cse7 .cse15 .cse9 .cse17 .cse10 .cse18 .cse16)) .cse6) (and .cse0 (or (and .cse12 .cse13 .cse19 .cse7 .cse17 .cse15 .cse10 .cse18 .cse16) (and .cse12 .cse13 .cse19 .cse7 .cse14 .cse15 .cse10 .cse16)) .cse2 .cse6) (and .cse0 .cse2 .cse12 .cse13 .cse19 .cse20 .cse7 .cse21 .cse15 .cse10 .cse16) (and .cse0 .cse2 .cse12 .cse13 .cse20 .cse7 .cse21 .cse15 .cse9 .cse10 .cse16) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse7 .cse20 .cse8 .cse9 .cse10 .cse11))) [2019-12-07 21:19:55,472 INFO L246 CegarLoopResult]: For program point L642(lines 642 650) no Hoare annotation was computed. [2019-12-07 21:19:55,472 INFO L242 CegarLoopResult]: At program point L708-2(lines 703 711) the Hoare annotation is: false [2019-12-07 21:19:55,472 INFO L246 CegarLoopResult]: For program point L642-1(lines 642 650) no Hoare annotation was computed. [2019-12-07 21:19:55,472 INFO L242 CegarLoopResult]: At program point L708-3(lines 703 711) the Hoare annotation is: false [2019-12-07 21:19:55,472 INFO L242 CegarLoopResult]: At program point L708-4(lines 703 711) the Hoare annotation is: false [2019-12-07 21:19:55,472 INFO L246 CegarLoopResult]: For program point L642-2(lines 642 650) no Hoare annotation was computed. [2019-12-07 21:19:55,472 INFO L242 CegarLoopResult]: At program point L708-5(lines 703 711) the Hoare annotation is: false [2019-12-07 21:19:55,473 INFO L246 CegarLoopResult]: For program point L544(lines 544 561) no Hoare annotation was computed. [2019-12-07 21:19:55,473 INFO L242 CegarLoopResult]: At program point L544-1(lines 1 967) the Hoare annotation is: (let ((.cse16 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (let ((.cse26 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse17 (= (_ bv0 32) ~pumpRunning~0)) (.cse6 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse8 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse14 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3)) (.cse23 (not .cse16)) (.cse19 (not (= ~waterLevel~0 (_ bv3 32))))) (let ((.cse3 (= (_ bv1 32) ~pumpRunning~0)) (.cse11 (or .cse23 .cse19)) (.cse9 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse2 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse13 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse18 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse12 (not .cse14)) (.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3)) (.cse1 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse4 (= ~waterLevel~0 (_ bv0 32))) (.cse22 (not (= ULTIMATE.start_activatePump_~tmp~6 (_ bv0 32)))) (.cse24 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse25 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse15 (= ~waterLevel~0 (_ bv2 32))) (.cse10 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse7 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse20 (or (and .cse17 .cse6 .cse8 .cse26) (and .cse17 .cse6 .cse14 .cse8))) (.cse21 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))))) (or (and .cse0 (= ULTIMATE.start_processEnvironment_~tmp~5 (_ bv0 32)) .cse1 .cse2 .cse3 (= (_ bv1 32) ~switchedOnBeforeTS~0) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 .cse3 .cse10 .cse6 .cse11 .cse7 .cse9 .cse1 .cse2 .cse12 .cse5 .cse13 .cse8) (and .cse2 .cse3 .cse6 .cse14 .cse15 .cse7 .cse8 .cse9 .cse16) (and .cse17 .cse18 .cse6 .cse14 .cse15 .cse8 .cse16) (and .cse0 .cse3 .cse4 .cse6 .cse11 .cse7 .cse9 .cse1 .cse2 .cse12 .cse5 .cse13 .cse8) (and .cse0 .cse1 .cse10 .cse18 .cse19 .cse20 .cse21) (and .cse0 .cse1 .cse4 .cse18 (or (and .cse12 .cse17 .cse6 .cse22 .cse23 .cse8 .cse21) (and .cse12 .cse17 .cse6 .cse23 .cse24 .cse8 .cse21 .cse25))) (and .cse0 .cse1 .cse4 (or (and .cse17 .cse6 .cse22 .cse7 .cse8 .cse26) (and .cse17 .cse6 .cse7 .cse24 .cse8 .cse25 .cse26))) (and .cse17 .cse6 .cse14 .cse15 .cse7 .cse8 .cse16) (and .cse10 .cse7 .cse19 .cse20 .cse21))))) [2019-12-07 21:19:55,473 INFO L246 CegarLoopResult]: For program point L544-2(lines 544 561) no Hoare annotation was computed. [2019-12-07 21:19:55,473 INFO L242 CegarLoopResult]: At program point L544-3(lines 1 967) the Hoare annotation is: false [2019-12-07 21:19:55,473 INFO L246 CegarLoopResult]: For program point L544-4(lines 544 561) no Hoare annotation was computed. [2019-12-07 21:19:55,473 INFO L242 CegarLoopResult]: At program point L544-5(lines 1 967) the Hoare annotation is: false [2019-12-07 21:19:55,473 INFO L246 CegarLoopResult]: For program point L809(lines 809 820) no Hoare annotation was computed. [2019-12-07 21:19:55,473 INFO L246 CegarLoopResult]: For program point L612(lines 612 629) no Hoare annotation was computed. [2019-12-07 21:19:55,473 INFO L246 CegarLoopResult]: For program point L612-1(lines 612 629) no Hoare annotation was computed. [2019-12-07 21:19:55,473 INFO L246 CegarLoopResult]: For program point L612-2(lines 612 629) no Hoare annotation was computed. [2019-12-07 21:19:55,473 INFO L246 CegarLoopResult]: For program point L612-3(lines 612 629) no Hoare annotation was computed. [2019-12-07 21:19:55,473 INFO L246 CegarLoopResult]: For program point L612-4(lines 612 629) no Hoare annotation was computed. [2019-12-07 21:19:55,473 INFO L246 CegarLoopResult]: For program point L612-5(lines 612 629) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L242 CegarLoopResult]: At program point L580(lines 576 598) the Hoare annotation is: (let ((.cse7 (= (_ bv1 32) ~pumpRunning~0)) (.cse8 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse9 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse10 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse14 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3)) (.cse15 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse12 (= ~waterLevel~0 (_ bv0 32))) (.cse16 (not (= ULTIMATE.start_activatePump_~tmp~6 (_ bv0 32)))) (.cse11 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3))) (.cse17 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse18 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse13 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse1 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse6 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse0 (= (_ bv0 32) ~pumpRunning~0)) (.cse2 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse5 (= ~waterLevel~0 (_ bv2 32))) (.cse4 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse5 .cse6 .cse4) (and .cse7 .cse8 .cse9 .cse2 .cse1 .cse6 .cse4 .cse10) (and .cse7 .cse8 .cse11 .cse12 .cse9 .cse2 .cse13 .cse6 .cse4 .cse10) (and .cse7 .cse8 .cse3 .cse2 .cse1 .cse9 .cse4) (and .cse7 .cse8 .cse11 .cse12 .cse3 .cse9 .cse2 .cse13 .cse4 .cse10) (and .cse14 .cse15 .cse12 .cse3 (or (and .cse11 .cse0 .cse2 .cse16 .cse13 .cse4 .cse10) (and .cse11 .cse0 .cse2 .cse13 .cse17 .cse4 .cse10 .cse18))) (and .cse14 .cse15 .cse12 (let ((.cse19 (or .cse13 (not (= ~waterLevel~0 (_ bv3 32)))))) (or (and .cse11 .cse0 .cse2 .cse16 .cse19 .cse6 .cse4) (and .cse11 .cse0 .cse2 .cse19 .cse6 .cse17 .cse4 .cse18)))) (and .cse0 .cse1 .cse2 .cse6 .cse4) (and .cse0 .cse2 .cse3 .cse5 .cse4))) [2019-12-07 21:19:55,474 INFO L242 CegarLoopResult]: At program point L580-1(lines 576 598) the Hoare annotation is: false [2019-12-07 21:19:55,474 INFO L242 CegarLoopResult]: At program point L580-2(lines 576 598) the Hoare annotation is: false [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L548(lines 548 558) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L548-2(lines 548 558) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L548-4(lines 548 558) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L53(lines 53 57) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L53-3(lines 53 57) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L53-6(lines 53 57) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L780(lines 779 824) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L549(lines 549 555) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L549-2(lines 549 555) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L549-4(lines 549 555) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L781(lines 781 785) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L616(lines 616 624) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L616-1(lines 616 624) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L616-2(lines 616 624) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L616-3(lines 616 624) no Hoare annotation was computed. [2019-12-07 21:19:55,474 INFO L246 CegarLoopResult]: For program point L616-4(lines 616 624) no Hoare annotation was computed. [2019-12-07 21:19:55,475 INFO L246 CegarLoopResult]: For program point L616-5(lines 616 624) no Hoare annotation was computed. [2019-12-07 21:19:55,475 INFO L246 CegarLoopResult]: For program point L815(lines 815 819) no Hoare annotation was computed. [2019-12-07 21:19:55,475 INFO L246 CegarLoopResult]: For program point L815-2(lines 809 820) no Hoare annotation was computed. [2019-12-07 21:19:55,475 INFO L242 CegarLoopResult]: At program point L122(lines 117 125) the Hoare annotation is: (let ((.cse6 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (let ((.cse13 (= ULTIMATE.start_processEnvironment_~tmp~5 (_ bv0 32))) (.cse0 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse1 (= (_ bv1 32) ~pumpRunning~0)) (.cse14 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse15 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse4 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse7 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse3 (= ~waterLevel~0 (_ bv2 32))) (.cse10 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse8 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse16 (= ~waterLevel~0 (_ bv0 32))) (.cse20 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse17 (not (= ULTIMATE.start_activatePump_~tmp~6 (_ bv0 32)))) (.cse9 (= (_ bv0 32) ~pumpRunning~0)) (.cse2 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse11 (not .cse6)) (.cse18 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse5 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse19 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse12 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse9 .cse10 .cse2 .cse11 .cse4 .cse5 .cse12) (and .cse9 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse13 .cse8 .cse0 .cse1 .cse14 .cse10 .cse2 .cse15 .cse4 .cse5 .cse7) (and .cse8 .cse16 (or (and .cse9 .cse2 .cse17 .cse11 .cse4 .cse5 .cse12) (and .cse9 .cse2 .cse11 .cse4 .cse18 .cse5 .cse19 .cse12))) (and .cse13 .cse8 .cse0 .cse1 .cse14 .cse16 .cse15 .cse2 .cse4 .cse5 .cse7) (and .cse9 .cse20 .cse2 .cse3 .cse5 .cse6) (and .cse8 .cse9 .cse20 .cse10 .cse2 .cse11 .cse5 .cse12) (and .cse8 .cse16 .cse20 (or (and .cse9 .cse2 .cse17 .cse11 .cse5 .cse12) (and .cse9 .cse2 .cse11 .cse18 .cse5 .cse19 .cse12)))))) [2019-12-07 21:19:55,475 INFO L242 CegarLoopResult]: At program point L122-1(lines 117 125) the Hoare annotation is: false [2019-12-07 21:19:55,475 INFO L242 CegarLoopResult]: At program point L122-2(lines 117 125) the Hoare annotation is: false [2019-12-07 21:19:55,475 INFO L242 CegarLoopResult]: At program point L90(lines 85 93) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse8 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3))) (.cse9 (= ~waterLevel~0 (_ bv0 32))) (.cse11 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse6 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse1 (= (_ bv1 32) ~pumpRunning~0)) (.cse2 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse10 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse3 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse5 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse12 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse1 .cse2 .cse8 .cse9 .cse10 .cse4 .cse5 .cse11 .cse12 .cse7) (and .cse0 .cse1 .cse2 .cse8 .cse9 .cse4 .cse5 .cse11 .cse6 .cse7) (and .cse1 .cse2 .cse10 .cse3 .cse4 .cse5 .cse12 .cse7))) [2019-12-07 21:19:55,475 INFO L242 CegarLoopResult]: At program point L90-1(lines 85 93) the Hoare annotation is: false [2019-12-07 21:19:55,475 INFO L242 CegarLoopResult]: At program point L90-2(lines 85 93) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) ~pumpRunning~0)) (.cse1 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse2 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))) (.cse3 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse4 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32))) .cse1 .cse2 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32)) .cse3 .cse4) (and (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32)) .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 (_ bv0 32)) .cse3 .cse4))) [2019-12-07 21:19:55,475 INFO L242 CegarLoopResult]: At program point L90-3(lines 85 93) the Hoare annotation is: false [2019-12-07 21:19:55,475 INFO L242 CegarLoopResult]: At program point L90-4(lines 85 93) the Hoare annotation is: false [2019-12-07 21:19:55,475 INFO L242 CegarLoopResult]: At program point L90-5(lines 85 93) the Hoare annotation is: false [2019-12-07 21:19:55,475 INFO L242 CegarLoopResult]: At program point L90-6(lines 85 93) the Hoare annotation is: false [2019-12-07 21:19:55,475 INFO L242 CegarLoopResult]: At program point L90-7(lines 85 93) the Hoare annotation is: false [2019-12-07 21:19:55,476 INFO L242 CegarLoopResult]: At program point L90-8(lines 85 93) the Hoare annotation is: false [2019-12-07 21:19:55,476 INFO L242 CegarLoopResult]: At program point L883-2(lines 883 897) the Hoare annotation is: false [2019-12-07 21:19:55,476 INFO L246 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2019-12-07 21:19:55,476 INFO L246 CegarLoopResult]: For program point L884(line 884) no Hoare annotation was computed. [2019-12-07 21:19:55,476 INFO L242 CegarLoopResult]: At program point L587(lines 587 593) the Hoare annotation is: (let ((.cse5 (= ULTIMATE.start_processEnvironment_~tmp~5 (_ bv0 32))) (.cse6 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse8 (= (_ bv1 32) ~pumpRunning~0)) (.cse7 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse12 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3))) (.cse10 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse19 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse11 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse2 (= ~waterLevel~0 (_ bv2 32))) (.cse13 (= ~waterLevel~0 (_ bv0 32))) (.cse17 (not (= ULTIMATE.start_activatePump_~tmp~6 (_ bv0 32)))) (.cse14 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse3 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse16 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse0 (= (_ bv0 32) ~pumpRunning~0)) (.cse18 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse9 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse1 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse4 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse7 .cse8 .cse1 .cse9 .cse10 .cse3 .cse4 .cse11) (and .cse6 .cse8 .cse1 .cse2 .cse3 .cse4 .cse11) (and .cse0 .cse9 .cse1 .cse3 .cse4) (and .cse12 .cse13 (let ((.cse15 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))))) (or (and .cse0 .cse1 .cse14 .cse15 .cse4 .cse16) (and .cse0 .cse1 .cse17 .cse15 .cse4))) .cse18 .cse19) (and .cse5 .cse6 .cse8 .cse7 .cse12 .cse13 .cse10 .cse1 .cse19 .cse3 .cse4 .cse11) (and .cse0 .cse1 .cse18 .cse2 .cse4) (and (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3) (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|) .cse13 (let ((.cse20 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse17 .cse3 .cse4 .cse20) (and .cse0 .cse1 .cse14 .cse3 .cse4 .cse16 .cse20)))) (and .cse0 .cse18 .cse9 .cse1 .cse4))) [2019-12-07 21:19:55,476 INFO L242 CegarLoopResult]: At program point L587-1(lines 587 593) the Hoare annotation is: false [2019-12-07 21:19:55,476 INFO L242 CegarLoopResult]: At program point L587-2(lines 587 593) the Hoare annotation is: false [2019-12-07 21:19:55,476 INFO L242 CegarLoopResult]: At program point L523(lines 518 525) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32))) [2019-12-07 21:19:55,476 INFO L246 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2019-12-07 21:19:55,476 INFO L246 CegarLoopResult]: For program point L887(lines 887 891) no Hoare annotation was computed. [2019-12-07 21:19:55,476 INFO L246 CegarLoopResult]: For program point L887-1(lines 887 891) no Hoare annotation was computed. [2019-12-07 21:19:55,476 INFO L246 CegarLoopResult]: For program point L789(lines 789 795) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L242 CegarLoopResult]: At program point L789-1(lines 789 795) the Hoare annotation is: (let ((.cse18 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse10 (= (_ bv0 32) ~pumpRunning~0)) (.cse6 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse24 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3)) (.cse8 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (let ((.cse11 (= ~waterLevel~0 (_ bv2 32))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse13 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse15 (or (and .cse10 .cse6 .cse8 .cse18) (and .cse10 .cse6 .cse24 .cse8))) (.cse16 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse14 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse2 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse3 (= (_ bv1 32) ~pumpRunning~0)) (.cse21 (not .cse24)) (.cse22 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse23 (= ~waterLevel~0 (_ bv1 32))) (.cse7 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse9 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~3)) (.cse1 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse4 (= ~waterLevel~0 (_ bv0 32))) (.cse12 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse17 (not (= ULTIMATE.start_activatePump_~tmp~6 (_ bv0 32)))) (.cse19 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse20 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32))))) (or (and .cse0 (= ULTIMATE.start_processEnvironment_~tmp~5 (_ bv0 32)) .cse1 .cse2 .cse3 (= (_ bv1 32) ~switchedOnBeforeTS~0) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse10 .cse6 .cse11 .cse7 .cse8) (and .cse10 .cse12 .cse6 .cse11 .cse8) (and .cse2 .cse3 .cse6 .cse11 .cse7 .cse8 .cse9) (and .cse0 .cse1 .cse13 .cse12 .cse14 .cse15 .cse16) (and .cse0 .cse1 .cse4 (or (and .cse10 .cse6 .cse17 .cse7 .cse8 .cse18) (and .cse10 .cse6 .cse7 .cse19 .cse8 .cse20 .cse18))) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32))) .cse7 .cse8 .cse9) (and .cse13 .cse7 .cse14 .cse15 .cse16) (and .cse21 .cse22 .cse23 (or (and .cse10 .cse12 .cse6 .cse17 .cse14 .cse8) (and .cse10 .cse12 .cse6 .cse19 .cse14 .cse8 .cse20))) (and .cse2 .cse3 .cse21 .cse6 .cse22 .cse23 .cse7 .cse8 .cse9) (and .cse0 .cse1 .cse4 .cse12 (or (and .cse10 .cse6 .cse17 .cse8 .cse18) (and .cse10 .cse6 .cse19 .cse8 .cse20 .cse18)))))) [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L955(lines 955 962) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L249 CegarLoopResult]: At program point L955-1(lines 955 962) the Hoare annotation is: true [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L757(lines 757 761) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L757-2(lines 757 761) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L757-3(lines 757 761) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L757-5(lines 757 761) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L757-6(lines 757 761) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L757-8(lines 757 761) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L757-9(lines 757 761) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L757-11(lines 757 761) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L757-12(lines 757 761) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L757-14(lines 757 761) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L757-15(lines 757 761) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L757-17(lines 757 761) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L130(lines 130 136) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L130-1(lines 130 136) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L130-2(lines 130 136) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L130-3(lines 130 136) no Hoare annotation was computed. [2019-12-07 21:19:55,477 INFO L246 CegarLoopResult]: For program point L130-4(lines 130 136) no Hoare annotation was computed. [2019-12-07 21:19:55,478 INFO L246 CegarLoopResult]: For program point L130-5(lines 130 136) no Hoare annotation was computed. [2019-12-07 21:19:55,478 INFO L246 CegarLoopResult]: For program point L65(lines 65 69) no Hoare annotation was computed. [2019-12-07 21:19:55,478 INFO L246 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2019-12-07 21:19:55,478 INFO L242 CegarLoopResult]: At program point L825(lines 778 826) the Hoare annotation is: false [2019-12-07 21:19:55,478 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 145) no Hoare annotation was computed. [2019-12-07 21:19:55,478 INFO L242 CegarLoopResult]: At program point L859(lines 1 967) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32))) [2019-12-07 21:19:55,536 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 07.12 09:19:55 BoogieIcfgContainer [2019-12-07 21:19:55,536 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-12-07 21:19:55,536 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-12-07 21:19:55,536 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-12-07 21:19:55,537 INFO L275 PluginConnector]: Witness Printer initialized [2019-12-07 21:19:55,537 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 09:19:09" (3/4) ... [2019-12-07 21:19:55,539 INFO L137 WitnessPrinter]: Generating witness for correct program [2019-12-07 21:19:55,552 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2019-12-07 21:19:55,553 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2019-12-07 21:19:55,554 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2019-12-07 21:19:55,555 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2019-12-07 21:19:55,556 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2019-12-07 21:19:55,557 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 21:19:55,557 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 21:19:55,577 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 2bv32 == tmp) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) && 2bv32 == \result)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 2bv32 == tmp) && waterLevel == 2bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(waterLevel == 3bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 2bv32 == tmp) && splverifierCounter == 0bv32))) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) || (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32))))) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 2bv32 == tmp) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 2bv32 == tmp) && splverifierCounter == 0bv32))) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) [2019-12-07 21:19:55,577 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(waterLevel == 3bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 2bv32 == tmp) && splverifierCounter == 0bv32))) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((((((((waterLevel == tmp && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 2bv32 == tmp) && splverifierCounter == 0bv32))) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((!(2bv32 == tmp) && !(2bv32 == \result)) && waterLevel == 1bv32) && ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))))) || ((((((((\result == 0bv32 && 1bv32 == pumpRunning) && !(2bv32 == tmp)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) [2019-12-07 21:19:55,577 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && !(2bv32 == tmp)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && !(2bv32 == tmp)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) || ((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32))))) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((1bv32 == pumpRunning && !(2bv32 == tmp)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) [2019-12-07 21:19:55,578 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) || (((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((1bv32 == pumpRunning && !(2bv32 == tmp)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((1bv32 == pumpRunning && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && !(2bv32 == tmp)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || ((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(tmp == 0bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) [2019-12-07 21:19:55,578 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) || ((((waterLevel == tmp && waterLevel == \result) && (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == \result) && splverifierCounter == 0bv32) || (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)))) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32))) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) || ((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) [2019-12-07 21:19:55,578 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) || (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32))))) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) || (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) [2019-12-07 21:19:55,578 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) || (((((((((tmp == 0bv32 && \result == 0bv32) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((!(2bv32 == tmp) && waterLevel == 0bv32) && ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result))) || (((((((((((tmp == 0bv32 && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) [2019-12-07 21:19:55,579 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 2bv32 == \result) && \result == 0bv32) || (((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((((tmp == 0bv32 && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((waterLevel == \result && waterLevel == 0bv32) && (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((((((((tmp == 0bv32 && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) [2019-12-07 21:19:55,579 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32)) || (((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) [2019-12-07 21:19:55,580 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || ((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || ((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) [2019-12-07 21:19:55,580 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || (((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))))) || ((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && (((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) [2019-12-07 21:19:55,580 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || (((waterLevel == tmp && waterLevel == \result) && ((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) && waterLevel == 0bv32)) || (((waterLevel == tmp && (((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)))) && waterLevel == \result) && waterLevel == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && !(2bv32 == tmp)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && waterLevel == \result) && !(2bv32 == tmp)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) [2019-12-07 21:19:55,581 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((waterLevel == tmp && ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)))) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) [2019-12-07 21:19:55,582 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) || ((((((\result == 0bv32 && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) [2019-12-07 21:19:55,582 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || (((((((\result == 0bv32 && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && \result == 0bv32) [2019-12-07 21:19:55,622 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/run_dir_0f8591b8-356c-4e44-a074-bc4b1f155f60/bin/utaipan/witness.graphml [2019-12-07 21:19:55,622 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-12-07 21:19:55,623 INFO L168 Benchmark]: Toolchain (without parser) took 47314.14 ms. Allocated memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: 501.2 MB). Free memory was 953.7 MB in the beginning and 1.0 GB in the end (delta: -78.9 MB). Peak memory consumption was 422.3 MB. Max. memory is 11.5 GB. [2019-12-07 21:19:55,623 INFO L168 Benchmark]: CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 21:19:55,623 INFO L168 Benchmark]: CACSL2BoogieTranslator took 383.49 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 133.2 MB). Free memory was 948.4 MB in the beginning and 1.1 GB in the end (delta: -160.4 MB). Peak memory consumption was 22.2 MB. Max. memory is 11.5 GB. [2019-12-07 21:19:55,623 INFO L168 Benchmark]: Boogie Procedure Inliner took 47.84 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. [2019-12-07 21:19:55,623 INFO L168 Benchmark]: Boogie Preprocessor took 34.57 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. [2019-12-07 21:19:55,624 INFO L168 Benchmark]: RCFGBuilder took 595.36 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 86.1 MB). Peak memory consumption was 86.1 MB. Max. memory is 11.5 GB. [2019-12-07 21:19:55,624 INFO L168 Benchmark]: TraceAbstraction took 46164.37 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 368.1 MB). Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: -37.6 MB). Peak memory consumption was 621.2 MB. Max. memory is 11.5 GB. [2019-12-07 21:19:55,624 INFO L168 Benchmark]: Witness Printer took 85.46 ms. Allocated memory is still 1.5 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 14.0 MB). Peak memory consumption was 14.0 MB. Max. memory is 11.5 GB. [2019-12-07 21:19:55,626 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 383.49 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 133.2 MB). Free memory was 948.4 MB in the beginning and 1.1 GB in the end (delta: -160.4 MB). Peak memory consumption was 22.2 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 47.84 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 34.57 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. * RCFGBuilder took 595.36 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 86.1 MB). Peak memory consumption was 86.1 MB. Max. memory is 11.5 GB. * TraceAbstraction took 46164.37 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 368.1 MB). Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: -37.6 MB). Peak memory consumption was 621.2 MB. Max. memory is 11.5 GB. * Witness Printer took 85.46 ms. Allocated memory is still 1.5 GB. Free memory was 1.0 GB in the beginning and 1.0 GB in the end (delta: 14.0 MB). Peak memory consumption was 14.0 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 145]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 145]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 145]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: ((((((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || (((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))))) || ((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && (((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 580]: Loop Invariant Derived loop invariant: (((((((((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) || ((((waterLevel == tmp && waterLevel == \result) && (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == \result) && splverifierCounter == 0bv32) || (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)))) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32))) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) || ((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 2bv32 == tmp) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) && 2bv32 == \result)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 2bv32 == tmp) && waterLevel == 2bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && splverifierCounter == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(waterLevel == 3bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 2bv32 == tmp) && splverifierCounter == 0bv32))) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) || (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32))))) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 2bv32 == tmp) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 2bv32 == tmp) && splverifierCounter == 0bv32))) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || (((((((\result == 0bv32 && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && \result == 0bv32) - InvariantResult [Line: 862]: Loop Invariant Derived loop invariant: ((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32 - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 518]: Loop Invariant Derived loop invariant: ((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32 - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: ((((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || ((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || ((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) - InvariantResult [Line: 955]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 692]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: ((((((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 2bv32 == \result) && \result == 0bv32) || (((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || ((((((((((tmp == 0bv32 && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((waterLevel == \result && waterLevel == 0bv32) && (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((((((((tmp == 0bv32 && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((waterLevel == \result && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 587]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 799]: Loop Invariant Derived loop invariant: ((((((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && !(2bv32 == tmp)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && !(2bv32 == tmp)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) || ((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32))))) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((1bv32 == pumpRunning && !(2bv32 == tmp)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) - InvariantResult [Line: 883]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 117]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 945]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 703]: Loop Invariant Derived loop invariant: ((((((((((((((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) || (((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((1bv32 == pumpRunning && !(2bv32 == tmp)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((1bv32 == pumpRunning && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && !(2bv32 == tmp)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && !(2bv32 == tmp)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == \result) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || ((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(tmp == 0bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32)))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: ((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && splverifierCounter == 0bv32) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && !(2bv32 == \result)) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) || (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32))))) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) || (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32) - InvariantResult [Line: 778]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: (((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32)) || (((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) - InvariantResult [Line: 748]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 927]: Loop Invariant Derived loop invariant: ((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32 - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 703]: Loop Invariant Derived loop invariant: (((((((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || (((waterLevel == tmp && waterLevel == \result) && ((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) && waterLevel == 0bv32)) || (((waterLevel == tmp && (((((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || (((((((!(2bv32 == tmp) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)))) && waterLevel == \result) && waterLevel == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && !(2bv32 == tmp)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((((waterLevel == tmp && waterLevel == \result) && !(2bv32 == tmp)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) - InvariantResult [Line: 748]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 703]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 576]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 748]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 703]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 748]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 587]: Loop Invariant Derived loop invariant: (((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) || (((((((((tmp == 0bv32 && \result == 0bv32) && 1bv32 == switchedOnBeforeTS) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((!(2bv32 == tmp) && waterLevel == 0bv32) && ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result))) || (((((((((((tmp == 0bv32 && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && !(2bv32 == tmp)) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) - InvariantResult [Line: 703]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 587]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 703]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 580]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 789]: Loop Invariant Derived loop invariant: ((((((((((((((((((((waterLevel == tmp && tmp == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(waterLevel == 3bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 2bv32 == tmp) && splverifierCounter == 0bv32))) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((((((((waterLevel == tmp && waterLevel == \result) && \result == 0bv32) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 2bv32 == tmp) && splverifierCounter == 0bv32))) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((!(2bv32 == tmp) && !(2bv32 == \result)) && waterLevel == 1bv32) && ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))))) || ((((((((\result == 0bv32 && 1bv32 == pumpRunning) && !(2bv32 == tmp)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 580]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) || ((((((\result == 0bv32 && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32) - InvariantResult [Line: 748]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 748]: Loop Invariant Derived loop invariant: ((((((((waterLevel == tmp && ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)))) && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && splverifierCounter == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32))) || ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && splverifierCounter == 0bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && splverifierCounter == 0bv32) && !(tmp == 0bv32)) && ~bvslt32(waterLevel, 2bv32)) - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 138 locations, 3 error locations. Result: SAFE, OverallTime: 14.3s, OverallIterations: 16, TraceHistogramMax: 4, AutomataDifference: 2.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 31.7s, HoareTripleCheckerStatistics: 1978 SDtfs, 3793 SDslu, 5687 SDs, 0 SdLazy, 782 SolverSat, 161 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.4s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 3540 GetRequests, 3401 SyntacticMatches, 1 SemanticMatches, 138 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 211 ImplicationChecksByTransitivity, 0.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=738occurred in iteration=13, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 16 MinimizatonAttempts, 3053 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 61 LocationsWithAnnotation, 61 PreInvPairs, 429 NumberOfFragments, 4874 HoareAnnotationTreeSize, 61 FomulaSimplifications, 28887379 FormulaSimplificationTreeSizeReduction, 2.8s HoareSimplificationTime, 61 FomulaSimplificationsInter, 6133246 FormulaSimplificationTreeSizeReductionInter, 28.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.5s SsaConstructionTime, 3.5s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 1748 NumberOfCodeBlocks, 1748 NumberOfCodeBlocksAsserted, 27 NumberOfCheckSat, 3448 ConstructedInterpolants, 0 QuantifiedInterpolants, 694353 SizeOfPredicates, 91 NumberOfNonLiveVariables, 6129 ConjunctsInSsa, 129 ConjunctsInUnsatCore, 48 InterpolantComputations, 25 PerfectInterpolantSequences, 2564/2796 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...