./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version f470102c Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 484c358b13fd8def6bfbf41b26d96fd32414391c ...................................................................................................................................... Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/config/TaipanReach.xml -i ../../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Taipan --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 484c358b13fd8def6bfbf41b26d96fd32414391c ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-12-07 11:37:47,634 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 11:37:47,635 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 11:37:47,643 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 11:37:47,643 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 11:37:47,644 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 11:37:47,645 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 11:37:47,646 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 11:37:47,647 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 11:37:47,648 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 11:37:47,648 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 11:37:47,649 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 11:37:47,649 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 11:37:47,650 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 11:37:47,651 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 11:37:47,651 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 11:37:47,652 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 11:37:47,653 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 11:37:47,654 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 11:37:47,656 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 11:37:47,657 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 11:37:47,658 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 11:37:47,658 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 11:37:47,659 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 11:37:47,661 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 11:37:47,661 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 11:37:47,661 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 11:37:47,661 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 11:37:47,662 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 11:37:47,662 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 11:37:47,662 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 11:37:47,663 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 11:37:47,664 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 11:37:47,664 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 11:37:47,665 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 11:37:47,665 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 11:37:47,666 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 11:37:47,666 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 11:37:47,666 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 11:37:47,667 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 11:37:47,667 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 11:37:47,668 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Default.epf [2019-12-07 11:37:47,682 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 11:37:47,682 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 11:37:47,682 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 11:37:47,683 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 11:37:47,683 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 11:37:47,683 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 11:37:47,683 INFO L138 SettingsManager]: * Abstract domain for RCFG-of-the-future=PoormanAbstractDomain [2019-12-07 11:37:47,683 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 11:37:47,684 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 11:37:47,684 INFO L138 SettingsManager]: * Check feasibility of abstract posts with an SMT solver=true [2019-12-07 11:37:47,684 INFO L138 SettingsManager]: * Use the RCFG-of-the-future interface=true [2019-12-07 11:37:47,684 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 11:37:47,684 INFO L136 SettingsManager]: Preferences of Sifa differ from their defaults: [2019-12-07 11:37:47,685 INFO L138 SettingsManager]: * Call Summarizer=TopInputCallSummarizer [2019-12-07 11:37:47,685 INFO L138 SettingsManager]: * Simplification Technique=SIMPLIFY_QUICK [2019-12-07 11:37:47,685 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 11:37:47,686 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 11:37:47,686 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-12-07 11:37:47,686 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 11:37:47,686 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 11:37:47,686 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 11:37:47,686 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 11:37:47,687 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 11:37:47,687 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 11:37:47,687 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 11:37:47,687 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 11:37:47,687 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 11:37:47,687 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 11:37:47,688 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 11:37:47,688 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 11:37:47,688 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 11:37:47,688 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 11:37:47,689 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 11:37:47,689 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 11:37:47,689 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 11:37:47,689 INFO L138 SettingsManager]: * Trace refinement strategy=SIFA_TAIPAN [2019-12-07 11:37:47,689 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2019-12-07 11:37:47,689 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 11:37:47,690 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 11:37:47,690 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 11:37:47,690 INFO L138 SettingsManager]: * Abstract interpretation Mode=USE_PREDICATES Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 484c358b13fd8def6bfbf41b26d96fd32414391c [2019-12-07 11:37:47,805 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 11:37:47,816 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 11:37:47,819 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 11:37:47,820 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 11:37:47,820 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 11:37:47,821 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/../../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2019-12-07 11:37:47,864 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/data/da72493e7/b7444509188743b0b88a6a8aba6c0eaf/FLAGc174a7691 [2019-12-07 11:37:48,228 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 11:37:48,229 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2019-12-07 11:37:48,237 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/data/da72493e7/b7444509188743b0b88a6a8aba6c0eaf/FLAGc174a7691 [2019-12-07 11:37:48,246 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/data/da72493e7/b7444509188743b0b88a6a8aba6c0eaf [2019-12-07 11:37:48,248 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 11:37:48,249 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 11:37:48,249 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 11:37:48,250 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 11:37:48,252 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 11:37:48,252 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 11:37:48" (1/1) ... [2019-12-07 11:37:48,255 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@581b80cd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 11:37:48, skipping insertion in model container [2019-12-07 11:37:48,255 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 11:37:48" (1/1) ... [2019-12-07 11:37:48,260 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 11:37:48,297 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 11:37:48,532 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 11:37:48,540 ERROR L326 MainTranslator]: Unsupported Syntax: Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) [2019-12-07 11:37:48,541 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.CACSL2BoogieTranslatorObserver@40688ef6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 11:37:48, skipping insertion in model container [2019-12-07 11:37:48,541 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 11:37:48,541 INFO L184 ToolchainWalker]: Toolchain execution was canceled (user or tool) before executing de.uni_freiburg.informatik.ultimate.boogie.procedureinliner [2019-12-07 11:37:48,543 INFO L168 Benchmark]: Toolchain (without parser) took 293.22 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 98.0 MB). Free memory was 939.9 MB in the beginning and 1.1 GB in the end (delta: -147.5 MB). Peak memory consumption was 24.4 MB. Max. memory is 11.5 GB. [2019-12-07 11:37:48,543 INFO L168 Benchmark]: CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 955.0 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 11:37:48,544 INFO L168 Benchmark]: CACSL2BoogieTranslator took 291.37 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 98.0 MB). Free memory was 934.6 MB in the beginning and 1.1 GB in the end (delta: -152.9 MB). Peak memory consumption was 19.0 MB. Max. memory is 11.5 GB. [2019-12-07 11:37:48,545 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 955.0 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 291.37 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 98.0 MB). Free memory was 934.6 MB in the beginning and 1.1 GB in the end (delta: -152.9 MB). Peak memory consumption was 19.0 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - UnsupportedSyntaxResult [Line: 225]: Unsupported Syntax Found a cast between two array/pointer types where the value type is smaller than the cast-to type while using memory model HoenickeLindenmann_Original (while Not using bitvector translation) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request... ### Bit-precise run ### This is Ultimate 0.1.25-f470102 [2019-12-07 11:37:49,689 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 11:37:49,690 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 11:37:49,698 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 11:37:49,698 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 11:37:49,699 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 11:37:49,700 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 11:37:49,701 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 11:37:49,703 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 11:37:49,703 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 11:37:49,704 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 11:37:49,705 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 11:37:49,705 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 11:37:49,705 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 11:37:49,706 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 11:37:49,707 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 11:37:49,707 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 11:37:49,708 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 11:37:49,710 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 11:37:49,711 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 11:37:49,712 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 11:37:49,713 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 11:37:49,714 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 11:37:49,714 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 11:37:49,716 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 11:37:49,716 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 11:37:49,716 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 11:37:49,717 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 11:37:49,717 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 11:37:49,718 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 11:37:49,718 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 11:37:49,719 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 11:37:49,719 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 11:37:49,720 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 11:37:49,720 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 11:37:49,720 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 11:37:49,721 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 11:37:49,721 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 11:37:49,721 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 11:37:49,722 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 11:37:49,722 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 11:37:49,723 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/config/svcomp-Reach-32bit-Taipan_Bitvector.epf [2019-12-07 11:37:49,733 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 11:37:49,733 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 11:37:49,734 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2019-12-07 11:37:49,734 INFO L138 SettingsManager]: * User list type=DISABLED [2019-12-07 11:37:49,734 INFO L136 SettingsManager]: Preferences of Abstract Interpretation differ from their defaults: [2019-12-07 11:37:49,734 INFO L138 SettingsManager]: * Explicit value domain=true [2019-12-07 11:37:49,735 INFO L138 SettingsManager]: * Octagon Domain=false [2019-12-07 11:37:49,735 INFO L138 SettingsManager]: * Abstract domain=CompoundDomain [2019-12-07 11:37:49,735 INFO L138 SettingsManager]: * Interval Domain=false [2019-12-07 11:37:49,735 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 11:37:49,735 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 11:37:49,735 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 11:37:49,736 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 11:37:49,736 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2019-12-07 11:37:49,736 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2019-12-07 11:37:49,736 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2019-12-07 11:37:49,736 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2019-12-07 11:37:49,736 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2019-12-07 11:37:49,736 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2019-12-07 11:37:49,737 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 11:37:49,737 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 11:37:49,737 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 11:37:49,737 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2019-12-07 11:37:49,737 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 11:37:49,737 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-12-07 11:37:49,737 INFO L138 SettingsManager]: * To the following directory=./dump/ [2019-12-07 11:37:49,737 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2019-12-07 11:37:49,738 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 11:37:49,738 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 11:37:49,738 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2019-12-07 11:37:49,738 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2019-12-07 11:37:49,738 INFO L138 SettingsManager]: * Trace refinement strategy=WALRUS [2019-12-07 11:37:49,738 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --rewrite-divk --print-success --lang smt [2019-12-07 11:37:49,738 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2019-12-07 11:37:49,738 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 11:37:49,739 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2019-12-07 11:37:49,739 INFO L138 SettingsManager]: * Logic for external solver=AUFBV Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Taipan Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 484c358b13fd8def6bfbf41b26d96fd32414391c [2019-12-07 11:37:49,913 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 11:37:49,921 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 11:37:49,923 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 11:37:49,924 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 11:37:49,924 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 11:37:49,925 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/../../sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2019-12-07 11:37:49,963 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/data/05b1d71e8/78186046b1c34d8482bd62b0e91f4615/FLAG2f1859b52 [2019-12-07 11:37:50,399 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 11:37:50,399 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/sv-benchmarks/c/product-lines/minepump_spec5_product46.cil.c [2019-12-07 11:37:50,407 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/data/05b1d71e8/78186046b1c34d8482bd62b0e91f4615/FLAG2f1859b52 [2019-12-07 11:37:50,740 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/data/05b1d71e8/78186046b1c34d8482bd62b0e91f4615 [2019-12-07 11:37:50,742 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 11:37:50,742 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 11:37:50,743 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 11:37:50,743 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 11:37:50,745 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 11:37:50,745 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 11:37:50" (1/1) ... [2019-12-07 11:37:50,747 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@9aca9b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 11:37:50, skipping insertion in model container [2019-12-07 11:37:50,747 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 11:37:50" (1/1) ... [2019-12-07 11:37:50,752 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 11:37:50,778 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 11:37:50,954 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 11:37:50,996 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2019-12-07 11:37:51,001 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 11:37:51,043 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 11:37:51,047 INFO L203 MainTranslator]: Completed pre-run [2019-12-07 11:37:51,090 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 11:37:51,116 INFO L208 MainTranslator]: Completed translation [2019-12-07 11:37:51,117 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 11:37:51 WrapperNode [2019-12-07 11:37:51,117 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 11:37:51,117 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-12-07 11:37:51,117 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-12-07 11:37:51,117 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-12-07 11:37:51,123 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 11:37:51" (1/1) ... [2019-12-07 11:37:51,137 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 11:37:51" (1/1) ... [2019-12-07 11:37:51,166 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-12-07 11:37:51,166 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-12-07 11:37:51,166 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-12-07 11:37:51,166 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-12-07 11:37:51,173 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 11:37:51" (1/1) ... [2019-12-07 11:37:51,173 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 11:37:51" (1/1) ... [2019-12-07 11:37:51,177 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 11:37:51" (1/1) ... [2019-12-07 11:37:51,177 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 11:37:51" (1/1) ... [2019-12-07 11:37:51,190 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 11:37:51" (1/1) ... [2019-12-07 11:37:51,200 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 11:37:51" (1/1) ... [2019-12-07 11:37:51,202 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 11:37:51" (1/1) ... [2019-12-07 11:37:51,207 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-12-07 11:37:51,207 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-12-07 11:37:51,207 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-12-07 11:37:51,207 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-12-07 11:37:51,208 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 11:37:51" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2019-12-07 11:37:51,253 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-12-07 11:37:51,253 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2019-12-07 11:37:51,253 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-12-07 11:37:51,253 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-12-07 11:37:51,804 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-12-07 11:37:51,805 INFO L287 CfgBuilder]: Removed 208 assume(true) statements. [2019-12-07 11:37:51,805 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 11:37:51 BoogieIcfgContainer [2019-12-07 11:37:51,806 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-12-07 11:37:51,806 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2019-12-07 11:37:51,807 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2019-12-07 11:37:51,808 INFO L275 PluginConnector]: TraceAbstraction initialized [2019-12-07 11:37:51,809 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 07.12 11:37:50" (1/3) ... [2019-12-07 11:37:51,809 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1ab78684 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 11:37:51, skipping insertion in model container [2019-12-07 11:37:51,809 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 11:37:51" (2/3) ... [2019-12-07 11:37:51,810 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1ab78684 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.12 11:37:51, skipping insertion in model container [2019-12-07 11:37:51,810 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 11:37:51" (3/3) ... [2019-12-07 11:37:51,811 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec5_product46.cil.c [2019-12-07 11:37:51,818 INFO L156 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2019-12-07 11:37:51,823 INFO L168 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2019-12-07 11:37:51,831 INFO L249 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2019-12-07 11:37:51,848 INFO L373 AbstractCegarLoop]: Interprodecural is true [2019-12-07 11:37:51,848 INFO L374 AbstractCegarLoop]: Hoare is true [2019-12-07 11:37:51,848 INFO L375 AbstractCegarLoop]: Compute interpolants for FPandBP [2019-12-07 11:37:51,848 INFO L376 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2019-12-07 11:37:51,848 INFO L377 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-12-07 11:37:51,848 INFO L378 AbstractCegarLoop]: Difference is false [2019-12-07 11:37:51,848 INFO L379 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-12-07 11:37:51,849 INFO L383 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2019-12-07 11:37:51,861 INFO L276 IsEmpty]: Start isEmpty. Operand 138 states. [2019-12-07 11:37:51,865 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2019-12-07 11:37:51,865 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:37:51,866 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:37:51,867 INFO L410 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:37:51,870 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:37:51,871 INFO L82 PathProgramCache]: Analyzing trace with hash 1244104416, now seen corresponding path program 1 times [2019-12-07 11:37:51,879 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:37:51,879 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [749521214] [2019-12-07 11:37:51,880 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 2 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with mathsat -unsat_core_generation=3 [2019-12-07 11:37:52,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:52,012 INFO L264 TraceCheckSpWp]: Trace formula consists of 181 conjuncts, 1 conjunts are in the unsatisfiable core [2019-12-07 11:37:52,015 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:52,026 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:52,026 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:52,030 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:52,031 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [749521214] [2019-12-07 11:37:52,031 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 11:37:52,031 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 2 [2019-12-07 11:37:52,032 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1067049955] [2019-12-07 11:37:52,035 INFO L442 AbstractCegarLoop]: Interpolant automaton has 2 states [2019-12-07 11:37:52,035 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:37:52,043 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2019-12-07 11:37:52,044 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 11:37:52,045 INFO L87 Difference]: Start difference. First operand 138 states. Second operand 2 states. [2019-12-07 11:37:52,069 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:37:52,069 INFO L93 Difference]: Finished difference Result 269 states and 400 transitions. [2019-12-07 11:37:52,069 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-12-07 11:37:52,070 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 19 [2019-12-07 11:37:52,071 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:37:52,079 INFO L225 Difference]: With dead ends: 269 [2019-12-07 11:37:52,079 INFO L226 Difference]: Without dead ends: 134 [2019-12-07 11:37:52,082 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2019-12-07 11:37:52,094 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 134 states. [2019-12-07 11:37:52,111 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 134 to 134. [2019-12-07 11:37:52,112 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 134 states. [2019-12-07 11:37:52,114 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 134 states to 134 states and 192 transitions. [2019-12-07 11:37:52,115 INFO L78 Accepts]: Start accepts. Automaton has 134 states and 192 transitions. Word has length 19 [2019-12-07 11:37:52,115 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:37:52,115 INFO L462 AbstractCegarLoop]: Abstraction has 134 states and 192 transitions. [2019-12-07 11:37:52,115 INFO L463 AbstractCegarLoop]: Interpolant automaton has 2 states. [2019-12-07 11:37:52,116 INFO L276 IsEmpty]: Start isEmpty. Operand 134 states and 192 transitions. [2019-12-07 11:37:52,116 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2019-12-07 11:37:52,116 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:37:52,117 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:37:52,317 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 mathsat -unsat_core_generation=3 [2019-12-07 11:37:52,317 INFO L410 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:37:52,318 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:37:52,318 INFO L82 PathProgramCache]: Analyzing trace with hash 1970722193, now seen corresponding path program 1 times [2019-12-07 11:37:52,318 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:37:52,319 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1442051796] [2019-12-07 11:37:52,319 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 3 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with mathsat -unsat_core_generation=3 [2019-12-07 11:37:52,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:52,433 INFO L264 TraceCheckSpWp]: Trace formula consists of 182 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 11:37:52,435 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:52,449 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:52,450 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:52,460 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:52,460 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1442051796] [2019-12-07 11:37:52,461 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 11:37:52,461 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 11:37:52,461 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [243532384] [2019-12-07 11:37:52,463 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 11:37:52,463 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:37:52,463 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 11:37:52,464 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 11:37:52,464 INFO L87 Difference]: Start difference. First operand 134 states and 192 transitions. Second operand 4 states. [2019-12-07 11:37:52,482 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:37:52,482 INFO L93 Difference]: Finished difference Result 134 states and 192 transitions. [2019-12-07 11:37:52,483 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 11:37:52,483 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 20 [2019-12-07 11:37:52,484 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:37:52,484 INFO L225 Difference]: With dead ends: 134 [2019-12-07 11:37:52,485 INFO L226 Difference]: Without dead ends: 55 [2019-12-07 11:37:52,486 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 36 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 11:37:52,486 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2019-12-07 11:37:52,491 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2019-12-07 11:37:52,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55 states. [2019-12-07 11:37:52,492 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 78 transitions. [2019-12-07 11:37:52,493 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 78 transitions. Word has length 20 [2019-12-07 11:37:52,493 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:37:52,493 INFO L462 AbstractCegarLoop]: Abstraction has 55 states and 78 transitions. [2019-12-07 11:37:52,493 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 11:37:52,493 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 78 transitions. [2019-12-07 11:37:52,494 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2019-12-07 11:37:52,494 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:37:52,494 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:37:52,695 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 mathsat -unsat_core_generation=3 [2019-12-07 11:37:52,697 INFO L410 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:37:52,698 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:37:52,698 INFO L82 PathProgramCache]: Analyzing trace with hash -739575047, now seen corresponding path program 1 times [2019-12-07 11:37:52,699 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:37:52,700 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2132844875] [2019-12-07 11:37:52,701 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 4 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with mathsat -unsat_core_generation=3 [2019-12-07 11:37:52,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:52,931 INFO L264 TraceCheckSpWp]: Trace formula consists of 189 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 11:37:52,932 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:52,940 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:52,940 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:52,946 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:52,946 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2132844875] [2019-12-07 11:37:52,947 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 11:37:52,947 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2019-12-07 11:37:52,947 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [471365591] [2019-12-07 11:37:52,947 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 11:37:52,947 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:37:52,948 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 11:37:52,948 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 11:37:52,948 INFO L87 Difference]: Start difference. First operand 55 states and 78 transitions. Second operand 4 states. [2019-12-07 11:37:52,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:37:52,983 INFO L93 Difference]: Finished difference Result 103 states and 149 transitions. [2019-12-07 11:37:52,984 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 11:37:52,984 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 26 [2019-12-07 11:37:52,984 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:37:52,985 INFO L225 Difference]: With dead ends: 103 [2019-12-07 11:37:52,985 INFO L226 Difference]: Without dead ends: 55 [2019-12-07 11:37:52,985 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 11:37:52,985 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2019-12-07 11:37:52,990 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2019-12-07 11:37:52,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55 states. [2019-12-07 11:37:52,990 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 77 transitions. [2019-12-07 11:37:52,991 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 77 transitions. Word has length 26 [2019-12-07 11:37:52,991 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:37:52,991 INFO L462 AbstractCegarLoop]: Abstraction has 55 states and 77 transitions. [2019-12-07 11:37:52,991 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 11:37:52,991 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 77 transitions. [2019-12-07 11:37:52,992 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2019-12-07 11:37:52,992 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:37:52,992 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:37:53,193 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 mathsat -unsat_core_generation=3 [2019-12-07 11:37:53,194 INFO L410 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:37:53,194 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:37:53,194 INFO L82 PathProgramCache]: Analyzing trace with hash 1972933051, now seen corresponding path program 1 times [2019-12-07 11:37:53,195 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:37:53,195 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1166360556] [2019-12-07 11:37:53,196 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 5 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with mathsat -unsat_core_generation=3 [2019-12-07 11:37:53,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:53,452 INFO L264 TraceCheckSpWp]: Trace formula consists of 191 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 11:37:53,454 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:53,459 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:53,459 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:53,462 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:53,462 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1166360556] [2019-12-07 11:37:53,462 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 11:37:53,462 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2019-12-07 11:37:53,462 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1505813027] [2019-12-07 11:37:53,463 INFO L442 AbstractCegarLoop]: Interpolant automaton has 3 states [2019-12-07 11:37:53,463 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:37:53,463 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 11:37:53,463 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 11:37:53,463 INFO L87 Difference]: Start difference. First operand 55 states and 77 transitions. Second operand 3 states. [2019-12-07 11:37:53,518 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:37:53,518 INFO L93 Difference]: Finished difference Result 127 states and 181 transitions. [2019-12-07 11:37:53,518 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 11:37:53,518 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 28 [2019-12-07 11:37:53,519 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:37:53,519 INFO L225 Difference]: With dead ends: 127 [2019-12-07 11:37:53,519 INFO L226 Difference]: Without dead ends: 79 [2019-12-07 11:37:53,520 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 54 GetRequests, 53 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 11:37:53,520 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79 states. [2019-12-07 11:37:53,526 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79 to 77. [2019-12-07 11:37:53,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 77 states. [2019-12-07 11:37:53,527 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 77 states to 77 states and 107 transitions. [2019-12-07 11:37:53,527 INFO L78 Accepts]: Start accepts. Automaton has 77 states and 107 transitions. Word has length 28 [2019-12-07 11:37:53,527 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:37:53,527 INFO L462 AbstractCegarLoop]: Abstraction has 77 states and 107 transitions. [2019-12-07 11:37:53,527 INFO L463 AbstractCegarLoop]: Interpolant automaton has 3 states. [2019-12-07 11:37:53,528 INFO L276 IsEmpty]: Start isEmpty. Operand 77 states and 107 transitions. [2019-12-07 11:37:53,528 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2019-12-07 11:37:53,528 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:37:53,528 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:37:53,729 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 mathsat -unsat_core_generation=3 [2019-12-07 11:37:53,730 INFO L410 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:37:53,730 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:37:53,731 INFO L82 PathProgramCache]: Analyzing trace with hash -2138258297, now seen corresponding path program 1 times [2019-12-07 11:37:53,732 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:37:53,733 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1248926409] [2019-12-07 11:37:53,733 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 6 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with mathsat -unsat_core_generation=3 [2019-12-07 11:37:53,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:53,982 INFO L264 TraceCheckSpWp]: Trace formula consists of 201 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 11:37:53,983 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:53,998 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:53,998 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:54,006 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:54,006 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1248926409] [2019-12-07 11:37:54,006 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 11:37:54,006 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 11:37:54,007 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1707278459] [2019-12-07 11:37:54,007 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 11:37:54,007 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:37:54,007 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 11:37:54,008 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 11:37:54,008 INFO L87 Difference]: Start difference. First operand 77 states and 107 transitions. Second operand 5 states. [2019-12-07 11:37:54,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:37:54,128 INFO L93 Difference]: Finished difference Result 260 states and 366 transitions. [2019-12-07 11:37:54,129 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 11:37:54,129 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2019-12-07 11:37:54,129 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:37:54,130 INFO L225 Difference]: With dead ends: 260 [2019-12-07 11:37:54,131 INFO L226 Difference]: Without dead ends: 190 [2019-12-07 11:37:54,131 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 66 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2019-12-07 11:37:54,132 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 190 states. [2019-12-07 11:37:54,144 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 190 to 76. [2019-12-07 11:37:54,144 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 76 states. [2019-12-07 11:37:54,144 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 104 transitions. [2019-12-07 11:37:54,145 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 104 transitions. Word has length 34 [2019-12-07 11:37:54,145 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:37:54,145 INFO L462 AbstractCegarLoop]: Abstraction has 76 states and 104 transitions. [2019-12-07 11:37:54,145 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 11:37:54,145 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 104 transitions. [2019-12-07 11:37:54,146 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2019-12-07 11:37:54,146 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:37:54,147 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:37:54,347 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 mathsat -unsat_core_generation=3 [2019-12-07 11:37:54,348 INFO L410 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:37:54,349 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:37:54,349 INFO L82 PathProgramCache]: Analyzing trace with hash 760139958, now seen corresponding path program 1 times [2019-12-07 11:37:54,351 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:37:54,352 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2119640922] [2019-12-07 11:37:54,352 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 7 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with mathsat -unsat_core_generation=3 [2019-12-07 11:37:54,488 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:54,495 INFO L264 TraceCheckSpWp]: Trace formula consists of 208 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 11:37:54,497 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:54,510 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:54,510 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:54,513 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:54,513 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2119640922] [2019-12-07 11:37:54,513 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 11:37:54,513 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 11:37:54,513 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1980766942] [2019-12-07 11:37:54,514 INFO L442 AbstractCegarLoop]: Interpolant automaton has 5 states [2019-12-07 11:37:54,514 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:37:54,514 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 11:37:54,514 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 11:37:54,514 INFO L87 Difference]: Start difference. First operand 76 states and 104 transitions. Second operand 5 states. [2019-12-07 11:37:54,568 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:37:54,568 INFO L93 Difference]: Finished difference Result 194 states and 266 transitions. [2019-12-07 11:37:54,569 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-12-07 11:37:54,569 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 37 [2019-12-07 11:37:54,569 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:37:54,570 INFO L225 Difference]: With dead ends: 194 [2019-12-07 11:37:54,570 INFO L226 Difference]: Without dead ends: 125 [2019-12-07 11:37:54,571 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 71 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-12-07 11:37:54,571 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125 states. [2019-12-07 11:37:54,579 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125 to 82. [2019-12-07 11:37:54,579 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 82 states. [2019-12-07 11:37:54,580 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 110 transitions. [2019-12-07 11:37:54,580 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 110 transitions. Word has length 37 [2019-12-07 11:37:54,580 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:37:54,580 INFO L462 AbstractCegarLoop]: Abstraction has 82 states and 110 transitions. [2019-12-07 11:37:54,580 INFO L463 AbstractCegarLoop]: Interpolant automaton has 5 states. [2019-12-07 11:37:54,580 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 110 transitions. [2019-12-07 11:37:54,581 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2019-12-07 11:37:54,581 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:37:54,582 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:37:54,782 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 mathsat -unsat_core_generation=3 [2019-12-07 11:37:54,783 INFO L410 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:37:54,784 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:37:54,784 INFO L82 PathProgramCache]: Analyzing trace with hash -250977292, now seen corresponding path program 1 times [2019-12-07 11:37:54,785 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:37:54,786 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1499278824] [2019-12-07 11:37:54,786 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 8 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with mathsat -unsat_core_generation=3 [2019-12-07 11:37:54,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:54,936 INFO L264 TraceCheckSpWp]: Trace formula consists of 208 conjuncts, 4 conjunts are in the unsatisfiable core [2019-12-07 11:37:54,937 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:54,946 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:54,946 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:54,957 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:54,958 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1499278824] [2019-12-07 11:37:54,958 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 11:37:54,958 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 6 [2019-12-07 11:37:54,958 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1383981258] [2019-12-07 11:37:54,959 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 11:37:54,959 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:37:54,959 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 11:37:54,959 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2019-12-07 11:37:54,959 INFO L87 Difference]: Start difference. First operand 82 states and 110 transitions. Second operand 6 states. [2019-12-07 11:37:55,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:37:55,002 INFO L93 Difference]: Finished difference Result 211 states and 283 transitions. [2019-12-07 11:37:55,003 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-12-07 11:37:55,003 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 37 [2019-12-07 11:37:55,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:37:55,004 INFO L225 Difference]: With dead ends: 211 [2019-12-07 11:37:55,004 INFO L226 Difference]: Without dead ends: 136 [2019-12-07 11:37:55,005 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 74 GetRequests, 69 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2019-12-07 11:37:55,005 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 136 states. [2019-12-07 11:37:55,013 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 136 to 86. [2019-12-07 11:37:55,013 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 86 states. [2019-12-07 11:37:55,014 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 86 states to 86 states and 114 transitions. [2019-12-07 11:37:55,014 INFO L78 Accepts]: Start accepts. Automaton has 86 states and 114 transitions. Word has length 37 [2019-12-07 11:37:55,014 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:37:55,014 INFO L462 AbstractCegarLoop]: Abstraction has 86 states and 114 transitions. [2019-12-07 11:37:55,014 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 11:37:55,015 INFO L276 IsEmpty]: Start isEmpty. Operand 86 states and 114 transitions. [2019-12-07 11:37:55,015 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2019-12-07 11:37:55,015 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:37:55,016 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:37:55,216 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 mathsat -unsat_core_generation=3 [2019-12-07 11:37:55,217 INFO L410 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:37:55,217 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:37:55,218 INFO L82 PathProgramCache]: Analyzing trace with hash -1272045646, now seen corresponding path program 1 times [2019-12-07 11:37:55,219 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:37:55,219 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1566075206] [2019-12-07 11:37:55,220 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 9 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with mathsat -unsat_core_generation=3 [2019-12-07 11:37:55,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:55,383 INFO L264 TraceCheckSpWp]: Trace formula consists of 208 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 11:37:55,384 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:55,390 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:55,390 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:55,400 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:55,400 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1566075206] [2019-12-07 11:37:55,400 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 11:37:55,400 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 3 [2019-12-07 11:37:55,400 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [317827437] [2019-12-07 11:37:55,401 INFO L442 AbstractCegarLoop]: Interpolant automaton has 4 states [2019-12-07 11:37:55,401 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:37:55,401 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 11:37:55,401 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 11:37:55,401 INFO L87 Difference]: Start difference. First operand 86 states and 114 transitions. Second operand 4 states. [2019-12-07 11:37:55,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:37:55,441 INFO L93 Difference]: Finished difference Result 252 states and 338 transitions. [2019-12-07 11:37:55,442 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-12-07 11:37:55,442 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 37 [2019-12-07 11:37:55,442 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:37:55,443 INFO L225 Difference]: With dead ends: 252 [2019-12-07 11:37:55,443 INFO L226 Difference]: Without dead ends: 173 [2019-12-07 11:37:55,443 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 72 GetRequests, 70 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2019-12-07 11:37:55,444 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173 states. [2019-12-07 11:37:55,452 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173 to 143. [2019-12-07 11:37:55,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 143 states. [2019-12-07 11:37:55,453 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 143 states to 143 states and 190 transitions. [2019-12-07 11:37:55,453 INFO L78 Accepts]: Start accepts. Automaton has 143 states and 190 transitions. Word has length 37 [2019-12-07 11:37:55,453 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:37:55,453 INFO L462 AbstractCegarLoop]: Abstraction has 143 states and 190 transitions. [2019-12-07 11:37:55,453 INFO L463 AbstractCegarLoop]: Interpolant automaton has 4 states. [2019-12-07 11:37:55,453 INFO L276 IsEmpty]: Start isEmpty. Operand 143 states and 190 transitions. [2019-12-07 11:37:55,454 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2019-12-07 11:37:55,454 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:37:55,454 INFO L410 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:37:55,654 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 mathsat -unsat_core_generation=3 [2019-12-07 11:37:55,655 INFO L410 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:37:55,655 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:37:55,655 INFO L82 PathProgramCache]: Analyzing trace with hash 263752306, now seen corresponding path program 1 times [2019-12-07 11:37:55,655 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:37:55,656 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1373782923] [2019-12-07 11:37:55,656 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 10 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with mathsat -unsat_core_generation=3 [2019-12-07 11:37:55,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:55,748 INFO L264 TraceCheckSpWp]: Trace formula consists of 210 conjuncts, 6 conjunts are in the unsatisfiable core [2019-12-07 11:37:55,750 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:55,768 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:55,768 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:55,772 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:55,772 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1373782923] [2019-12-07 11:37:55,772 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 11:37:55,772 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2019-12-07 11:37:55,772 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1736503264] [2019-12-07 11:37:55,773 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 11:37:55,773 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:37:55,773 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 11:37:55,773 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 11:37:55,773 INFO L87 Difference]: Start difference. First operand 143 states and 190 transitions. Second operand 6 states. [2019-12-07 11:37:56,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:37:56,086 INFO L93 Difference]: Finished difference Result 696 states and 935 transitions. [2019-12-07 11:37:56,086 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 11:37:56,086 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 38 [2019-12-07 11:37:56,087 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:37:56,089 INFO L225 Difference]: With dead ends: 696 [2019-12-07 11:37:56,089 INFO L226 Difference]: Without dead ends: 560 [2019-12-07 11:37:56,090 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 70 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=76, Unknown=0, NotChecked=0, Total=110 [2019-12-07 11:37:56,090 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 560 states. [2019-12-07 11:37:56,107 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 560 to 254. [2019-12-07 11:37:56,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 254 states. [2019-12-07 11:37:56,108 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 254 states to 254 states and 333 transitions. [2019-12-07 11:37:56,108 INFO L78 Accepts]: Start accepts. Automaton has 254 states and 333 transitions. Word has length 38 [2019-12-07 11:37:56,108 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:37:56,109 INFO L462 AbstractCegarLoop]: Abstraction has 254 states and 333 transitions. [2019-12-07 11:37:56,109 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 11:37:56,109 INFO L276 IsEmpty]: Start isEmpty. Operand 254 states and 333 transitions. [2019-12-07 11:37:56,109 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2019-12-07 11:37:56,109 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:37:56,109 INFO L410 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:37:56,310 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 mathsat -unsat_core_generation=3 [2019-12-07 11:37:56,310 INFO L410 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:37:56,310 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:37:56,310 INFO L82 PathProgramCache]: Analyzing trace with hash 1200946429, now seen corresponding path program 1 times [2019-12-07 11:37:56,311 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:37:56,311 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [39244442] [2019-12-07 11:37:56,311 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 11 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with mathsat -unsat_core_generation=3 [2019-12-07 11:37:56,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:56,414 INFO L264 TraceCheckSpWp]: Trace formula consists of 238 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 11:37:56,416 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:56,430 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:56,430 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:56,447 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:56,447 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [39244442] [2019-12-07 11:37:56,447 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [101320550] [2019-12-07 11:37:56,447 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/cvc4 Starting monitored process 12 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 11:37:56,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:56,545 INFO L264 TraceCheckSpWp]: Trace formula consists of 238 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 11:37:56,546 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:56,559 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:56,559 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:56,564 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:56,564 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1075542204] [2019-12-07 11:37:56,564 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/z3 Starting monitored process 13 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 11:37:56,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:56,662 INFO L264 TraceCheckSpWp]: Trace formula consists of 238 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 11:37:56,663 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:56,668 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:56,669 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:56,674 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 13 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 11:37:56,674 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 11:37:56,674 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 6, 5, 5, 5] total 9 [2019-12-07 11:37:56,674 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1836376116] [2019-12-07 11:37:56,675 INFO L442 AbstractCegarLoop]: Interpolant automaton has 9 states [2019-12-07 11:37:56,675 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:37:56,675 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2019-12-07 11:37:56,675 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2019-12-07 11:37:56,675 INFO L87 Difference]: Start difference. First operand 254 states and 333 transitions. Second operand 9 states. [2019-12-07 11:37:56,972 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:37:56,972 INFO L93 Difference]: Finished difference Result 634 states and 856 transitions. [2019-12-07 11:37:56,972 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 11:37:56,973 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 59 [2019-12-07 11:37:56,973 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:37:56,975 INFO L225 Difference]: With dead ends: 634 [2019-12-07 11:37:56,975 INFO L226 Difference]: Without dead ends: 387 [2019-12-07 11:37:56,975 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 360 GetRequests, 347 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=68, Invalid=142, Unknown=0, NotChecked=0, Total=210 [2019-12-07 11:37:56,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 387 states. [2019-12-07 11:37:56,993 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 387 to 236. [2019-12-07 11:37:56,994 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 236 states. [2019-12-07 11:37:56,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 236 states to 236 states and 301 transitions. [2019-12-07 11:37:56,995 INFO L78 Accepts]: Start accepts. Automaton has 236 states and 301 transitions. Word has length 59 [2019-12-07 11:37:56,995 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:37:56,995 INFO L462 AbstractCegarLoop]: Abstraction has 236 states and 301 transitions. [2019-12-07 11:37:56,995 INFO L463 AbstractCegarLoop]: Interpolant automaton has 9 states. [2019-12-07 11:37:56,995 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 301 transitions. [2019-12-07 11:37:56,996 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 106 [2019-12-07 11:37:56,996 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:37:56,996 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:37:57,597 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 cvc4 --incremental --print-success --lang smt --rewrite-divk,13 z3 -smt2 -in SMTLIB2_COMPLIANT=true,11 mathsat -unsat_core_generation=3 [2019-12-07 11:37:57,600 INFO L410 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:37:57,601 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:37:57,601 INFO L82 PathProgramCache]: Analyzing trace with hash -1769824199, now seen corresponding path program 1 times [2019-12-07 11:37:57,602 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:37:57,603 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1313588417] [2019-12-07 11:37:57,603 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 14 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with mathsat -unsat_core_generation=3 [2019-12-07 11:37:57,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:57,741 INFO L264 TraceCheckSpWp]: Trace formula consists of 303 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 11:37:57,742 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:57,768 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 78 proven. 9 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2019-12-07 11:37:57,769 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:57,804 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 78 proven. 9 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2019-12-07 11:37:57,804 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1313588417] [2019-12-07 11:37:57,804 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [2008964553] [2019-12-07 11:37:57,804 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/cvc4 Starting monitored process 15 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 11:37:57,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:57,905 INFO L264 TraceCheckSpWp]: Trace formula consists of 303 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 11:37:57,907 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:57,950 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 11:37:57,950 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:57,962 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 61 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 11:37:57,962 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [171195698] [2019-12-07 11:37:57,962 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/z3 Starting monitored process 16 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 11:37:58,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:58,049 INFO L264 TraceCheckSpWp]: Trace formula consists of 303 conjuncts, 9 conjunts are in the unsatisfiable core [2019-12-07 11:37:58,050 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:58,085 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 92 proven. 2 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2019-12-07 11:37:58,085 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:58,137 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 94 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2019-12-07 11:37:58,137 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 5 imperfect interpolant sequences. [2019-12-07 11:37:58,137 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [5, 5, 5, 5, 8] total 18 [2019-12-07 11:37:58,137 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1917374980] [2019-12-07 11:37:58,138 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-12-07 11:37:58,138 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:37:58,138 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 11:37:58,138 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=50, Invalid=256, Unknown=0, NotChecked=0, Total=306 [2019-12-07 11:37:58,138 INFO L87 Difference]: Start difference. First operand 236 states and 301 transitions. Second operand 8 states. [2019-12-07 11:37:58,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:37:58,525 INFO L93 Difference]: Finished difference Result 964 states and 1238 transitions. [2019-12-07 11:37:58,526 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2019-12-07 11:37:58,526 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 105 [2019-12-07 11:37:58,526 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:37:58,529 INFO L225 Difference]: With dead ends: 964 [2019-12-07 11:37:58,529 INFO L226 Difference]: Without dead ends: 735 [2019-12-07 11:37:58,530 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 645 GetRequests, 617 SyntacticMatches, 0 SemanticMatches, 28 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 92 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=161, Invalid=709, Unknown=0, NotChecked=0, Total=870 [2019-12-07 11:37:58,531 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 735 states. [2019-12-07 11:37:58,556 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 735 to 375. [2019-12-07 11:37:58,556 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 375 states. [2019-12-07 11:37:58,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 375 states to 375 states and 479 transitions. [2019-12-07 11:37:58,557 INFO L78 Accepts]: Start accepts. Automaton has 375 states and 479 transitions. Word has length 105 [2019-12-07 11:37:58,557 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:37:58,557 INFO L462 AbstractCegarLoop]: Abstraction has 375 states and 479 transitions. [2019-12-07 11:37:58,557 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-12-07 11:37:58,557 INFO L276 IsEmpty]: Start isEmpty. Operand 375 states and 479 transitions. [2019-12-07 11:37:58,558 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 108 [2019-12-07 11:37:58,558 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:37:58,558 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:37:59,159 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 z3 -smt2 -in SMTLIB2_COMPLIANT=true,14 mathsat -unsat_core_generation=3,15 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 11:37:59,160 INFO L410 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:37:59,160 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:37:59,161 INFO L82 PathProgramCache]: Analyzing trace with hash -1264568524, now seen corresponding path program 1 times [2019-12-07 11:37:59,162 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:37:59,162 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1456608043] [2019-12-07 11:37:59,162 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 17 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with mathsat -unsat_core_generation=3 [2019-12-07 11:37:59,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:59,285 INFO L264 TraceCheckSpWp]: Trace formula consists of 307 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 11:37:59,287 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:59,303 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 93 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2019-12-07 11:37:59,303 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:59,326 INFO L134 CoverageAnalysis]: Checked inductivity of 112 backedges. 93 proven. 0 refuted. 0 times theorem prover too weak. 19 trivial. 0 not checked. [2019-12-07 11:37:59,326 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1456608043] [2019-12-07 11:37:59,327 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 11:37:59,327 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 8 [2019-12-07 11:37:59,327 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2069858438] [2019-12-07 11:37:59,327 INFO L442 AbstractCegarLoop]: Interpolant automaton has 8 states [2019-12-07 11:37:59,327 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:37:59,327 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 11:37:59,328 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2019-12-07 11:37:59,328 INFO L87 Difference]: Start difference. First operand 375 states and 479 transitions. Second operand 8 states. [2019-12-07 11:37:59,570 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:37:59,570 INFO L93 Difference]: Finished difference Result 862 states and 1109 transitions. [2019-12-07 11:37:59,571 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-12-07 11:37:59,571 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 107 [2019-12-07 11:37:59,571 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:37:59,573 INFO L225 Difference]: With dead ends: 862 [2019-12-07 11:37:59,573 INFO L226 Difference]: Without dead ends: 494 [2019-12-07 11:37:59,574 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 217 GetRequests, 208 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=38, Invalid=72, Unknown=0, NotChecked=0, Total=110 [2019-12-07 11:37:59,575 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 494 states. [2019-12-07 11:37:59,609 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 494 to 375. [2019-12-07 11:37:59,609 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 375 states. [2019-12-07 11:37:59,610 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 375 states to 375 states and 473 transitions. [2019-12-07 11:37:59,610 INFO L78 Accepts]: Start accepts. Automaton has 375 states and 473 transitions. Word has length 107 [2019-12-07 11:37:59,610 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:37:59,610 INFO L462 AbstractCegarLoop]: Abstraction has 375 states and 473 transitions. [2019-12-07 11:37:59,610 INFO L463 AbstractCegarLoop]: Interpolant automaton has 8 states. [2019-12-07 11:37:59,610 INFO L276 IsEmpty]: Start isEmpty. Operand 375 states and 473 transitions. [2019-12-07 11:37:59,611 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 109 [2019-12-07 11:37:59,611 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:37:59,611 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:37:59,812 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 mathsat -unsat_core_generation=3 [2019-12-07 11:37:59,813 INFO L410 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:37:59,813 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:37:59,814 INFO L82 PathProgramCache]: Analyzing trace with hash 33715948, now seen corresponding path program 1 times [2019-12-07 11:37:59,815 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:37:59,815 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [586198848] [2019-12-07 11:37:59,816 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 18 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with mathsat -unsat_core_generation=3 [2019-12-07 11:37:59,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:37:59,959 INFO L264 TraceCheckSpWp]: Trace formula consists of 308 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 11:37:59,961 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:37:59,984 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 64 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 11:37:59,984 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:37:59,995 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 64 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 11:37:59,995 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [586198848] [2019-12-07 11:37:59,995 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1518123746] [2019-12-07 11:37:59,996 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/cvc4 Starting monitored process 19 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 11:38:00,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:38:00,113 INFO L264 TraceCheckSpWp]: Trace formula consists of 308 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 11:38:00,114 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:38:00,124 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 64 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 11:38:00,124 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:38:00,134 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 64 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 11:38:00,134 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1361077288] [2019-12-07 11:38:00,135 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/z3 Starting monitored process 20 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 11:38:00,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:38:00,214 INFO L264 TraceCheckSpWp]: Trace formula consists of 308 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 11:38:00,215 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:38:00,225 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 64 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 11:38:00,225 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:38:00,238 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 64 proven. 3 refuted. 0 times theorem prover too weak. 46 trivial. 0 not checked. [2019-12-07 11:38:00,239 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 11:38:00,239 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5, 5, 5, 5, 5] total 5 [2019-12-07 11:38:00,239 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [85809451] [2019-12-07 11:38:00,240 INFO L442 AbstractCegarLoop]: Interpolant automaton has 6 states [2019-12-07 11:38:00,240 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:38:00,240 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 11:38:00,240 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 11:38:00,240 INFO L87 Difference]: Start difference. First operand 375 states and 473 transitions. Second operand 6 states. [2019-12-07 11:38:00,389 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:38:00,390 INFO L93 Difference]: Finished difference Result 1654 states and 2113 transitions. [2019-12-07 11:38:00,390 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 11:38:00,390 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 108 [2019-12-07 11:38:00,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:38:00,395 INFO L225 Difference]: With dead ends: 1654 [2019-12-07 11:38:00,395 INFO L226 Difference]: Without dead ends: 1286 [2019-12-07 11:38:00,396 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 648 GetRequests, 638 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2019-12-07 11:38:00,397 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1286 states. [2019-12-07 11:38:00,449 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1286 to 738. [2019-12-07 11:38:00,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 738 states. [2019-12-07 11:38:00,450 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 738 states to 738 states and 916 transitions. [2019-12-07 11:38:00,450 INFO L78 Accepts]: Start accepts. Automaton has 738 states and 916 transitions. Word has length 108 [2019-12-07 11:38:00,450 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:38:00,450 INFO L462 AbstractCegarLoop]: Abstraction has 738 states and 916 transitions. [2019-12-07 11:38:00,450 INFO L463 AbstractCegarLoop]: Interpolant automaton has 6 states. [2019-12-07 11:38:00,450 INFO L276 IsEmpty]: Start isEmpty. Operand 738 states and 916 transitions. [2019-12-07 11:38:00,451 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 110 [2019-12-07 11:38:00,451 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:38:00,452 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:38:01,053 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 mathsat -unsat_core_generation=3,20 z3 -smt2 -in SMTLIB2_COMPLIANT=true,19 cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 11:38:01,054 INFO L410 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:38:01,054 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:38:01,055 INFO L82 PathProgramCache]: Analyzing trace with hash -319547420, now seen corresponding path program 1 times [2019-12-07 11:38:01,056 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:38:01,056 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [477499684] [2019-12-07 11:38:01,057 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 21 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with mathsat -unsat_core_generation=3 [2019-12-07 11:38:01,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:38:01,310 INFO L264 TraceCheckSpWp]: Trace formula consists of 310 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 11:38:01,312 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:38:01,335 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2019-12-07 11:38:01,336 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:38:01,367 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 49 proven. 0 refuted. 0 times theorem prover too weak. 64 trivial. 0 not checked. [2019-12-07 11:38:01,367 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [477499684] [2019-12-07 11:38:01,367 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 11:38:01,368 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 10 [2019-12-07 11:38:01,368 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1670160482] [2019-12-07 11:38:01,368 INFO L442 AbstractCegarLoop]: Interpolant automaton has 10 states [2019-12-07 11:38:01,368 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:38:01,368 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2019-12-07 11:38:01,368 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2019-12-07 11:38:01,368 INFO L87 Difference]: Start difference. First operand 738 states and 916 transitions. Second operand 10 states. [2019-12-07 11:38:01,729 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:38:01,729 INFO L93 Difference]: Finished difference Result 2268 states and 2827 transitions. [2019-12-07 11:38:01,729 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 11:38:01,730 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 109 [2019-12-07 11:38:01,730 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:38:01,735 INFO L225 Difference]: With dead ends: 2268 [2019-12-07 11:38:01,735 INFO L226 Difference]: Without dead ends: 1537 [2019-12-07 11:38:01,736 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 227 GetRequests, 213 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=72, Invalid=168, Unknown=0, NotChecked=0, Total=240 [2019-12-07 11:38:01,737 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1537 states. [2019-12-07 11:38:01,795 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1537 to 715. [2019-12-07 11:38:01,795 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 715 states. [2019-12-07 11:38:01,796 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 715 states to 715 states and 872 transitions. [2019-12-07 11:38:01,796 INFO L78 Accepts]: Start accepts. Automaton has 715 states and 872 transitions. Word has length 109 [2019-12-07 11:38:01,796 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:38:01,796 INFO L462 AbstractCegarLoop]: Abstraction has 715 states and 872 transitions. [2019-12-07 11:38:01,796 INFO L463 AbstractCegarLoop]: Interpolant automaton has 10 states. [2019-12-07 11:38:01,797 INFO L276 IsEmpty]: Start isEmpty. Operand 715 states and 872 transitions. [2019-12-07 11:38:01,797 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2019-12-07 11:38:01,798 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:38:01,798 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:38:01,998 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 mathsat -unsat_core_generation=3 [2019-12-07 11:38:01,999 INFO L410 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:38:01,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:38:01,999 INFO L82 PathProgramCache]: Analyzing trace with hash -442828182, now seen corresponding path program 1 times [2019-12-07 11:38:02,000 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:38:02,000 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1283177873] [2019-12-07 11:38:02,000 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 22 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with mathsat -unsat_core_generation=3 [2019-12-07 11:38:02,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 11:38:02,159 INFO L264 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 7 conjunts are in the unsatisfiable core [2019-12-07 11:38:02,160 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:38:02,180 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 83 proven. 0 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2019-12-07 11:38:02,180 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:38:02,210 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 83 proven. 0 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2019-12-07 11:38:02,210 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1283177873] [2019-12-07 11:38:02,211 INFO L220 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2019-12-07 11:38:02,211 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6, 6] imperfect sequences [] total 10 [2019-12-07 11:38:02,211 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1790963156] [2019-12-07 11:38:02,211 INFO L442 AbstractCegarLoop]: Interpolant automaton has 10 states [2019-12-07 11:38:02,211 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:38:02,211 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2019-12-07 11:38:02,211 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2019-12-07 11:38:02,212 INFO L87 Difference]: Start difference. First operand 715 states and 872 transitions. Second operand 10 states. [2019-12-07 11:38:02,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:38:02,532 INFO L93 Difference]: Finished difference Result 1848 states and 2266 transitions. [2019-12-07 11:38:02,533 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2019-12-07 11:38:02,533 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 110 [2019-12-07 11:38:02,533 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:38:02,537 INFO L225 Difference]: With dead ends: 1848 [2019-12-07 11:38:02,537 INFO L226 Difference]: Without dead ends: 1140 [2019-12-07 11:38:02,538 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 228 GetRequests, 215 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=66, Invalid=144, Unknown=0, NotChecked=0, Total=210 [2019-12-07 11:38:02,539 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1140 states. [2019-12-07 11:38:02,592 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1140 to 632. [2019-12-07 11:38:02,592 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 632 states. [2019-12-07 11:38:02,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 632 states to 632 states and 768 transitions. [2019-12-07 11:38:02,593 INFO L78 Accepts]: Start accepts. Automaton has 632 states and 768 transitions. Word has length 110 [2019-12-07 11:38:02,593 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:38:02,593 INFO L462 AbstractCegarLoop]: Abstraction has 632 states and 768 transitions. [2019-12-07 11:38:02,594 INFO L463 AbstractCegarLoop]: Interpolant automaton has 10 states. [2019-12-07 11:38:02,594 INFO L276 IsEmpty]: Start isEmpty. Operand 632 states and 768 transitions. [2019-12-07 11:38:02,594 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 111 [2019-12-07 11:38:02,594 INFO L402 BasicCegarLoop]: Found error trace [2019-12-07 11:38:02,595 INFO L410 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 11:38:02,795 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 mathsat -unsat_core_generation=3 [2019-12-07 11:38:02,795 INFO L410 AbstractCegarLoop]: === Iteration 16 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2019-12-07 11:38:02,795 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 11:38:02,795 INFO L82 PathProgramCache]: Analyzing trace with hash -1732590810, now seen corresponding path program 2 times [2019-12-07 11:38:02,796 INFO L163 FreeRefinementEngine]: Executing refinement strategy WALRUS [2019-12-07 11:38:02,796 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1260368804] [2019-12-07 11:38:02,796 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/mathsat Starting monitored process 23 with mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with mathsat -unsat_core_generation=3 [2019-12-07 11:38:03,519 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 11:38:03,519 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 11:38:03,549 INFO L264 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 11:38:03,550 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:38:03,587 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 20 proven. 81 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2019-12-07 11:38:03,587 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:38:03,653 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 20 proven. 81 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2019-12-07 11:38:03,653 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1260368804] [2019-12-07 11:38:03,653 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleCvc4 [1616864321] [2019-12-07 11:38:03,653 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/cvc4 Starting monitored process 24 with cvc4 --incremental --print-success --lang smt --rewrite-divk (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with cvc4 --incremental --print-success --lang smt --rewrite-divk [2019-12-07 11:38:05,162 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 11:38:05,162 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 11:38:05,213 INFO L264 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 11:38:05,215 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:38:05,268 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 64 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 11:38:05,269 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:38:05,313 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 64 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 11:38:05,313 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [757475265] [2019-12-07 11:38:05,313 INFO L92 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/z3 Starting monitored process 25 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 11:38:05,435 INFO L249 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2019-12-07 11:38:05,435 INFO L250 tOrderPrioritization]: Conjunction of SSA is unsat [2019-12-07 11:38:05,441 INFO L264 TraceCheckSpWp]: Trace formula consists of 312 conjuncts, 8 conjunts are in the unsatisfiable core [2019-12-07 11:38:05,442 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 11:38:05,452 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 64 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 11:38:05,452 INFO L329 TraceCheckSpWp]: Computing backward predicates... [2019-12-07 11:38:05,463 INFO L134 CoverageAnalysis]: Checked inductivity of 114 backedges. 64 proven. 2 refuted. 0 times theorem prover too weak. 48 trivial. 0 not checked. [2019-12-07 11:38:05,463 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 6 imperfect interpolant sequences. [2019-12-07 11:38:05,463 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4, 7, 7, 7, 7] total 14 [2019-12-07 11:38:05,463 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [744314487] [2019-12-07 11:38:05,464 INFO L442 AbstractCegarLoop]: Interpolant automaton has 14 states [2019-12-07 11:38:05,464 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WALRUS [2019-12-07 11:38:05,464 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2019-12-07 11:38:05,464 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=37, Invalid=145, Unknown=0, NotChecked=0, Total=182 [2019-12-07 11:38:05,464 INFO L87 Difference]: Start difference. First operand 632 states and 768 transitions. Second operand 14 states. [2019-12-07 11:38:05,958 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 11:38:05,958 INFO L93 Difference]: Finished difference Result 1320 states and 1613 transitions. [2019-12-07 11:38:05,959 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2019-12-07 11:38:05,959 INFO L78 Accepts]: Start accepts. Automaton has 14 states. Word has length 110 [2019-12-07 11:38:05,959 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2019-12-07 11:38:05,959 INFO L225 Difference]: With dead ends: 1320 [2019-12-07 11:38:05,959 INFO L226 Difference]: Without dead ends: 0 [2019-12-07 11:38:05,960 INFO L630 BasicCegarLoop]: 0 DeclaredPredicates, 667 GetRequests, 644 SyntacticMatches, 2 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 56 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=122, Invalid=384, Unknown=0, NotChecked=0, Total=506 [2019-12-07 11:38:05,960 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2019-12-07 11:38:05,960 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2019-12-07 11:38:05,961 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2019-12-07 11:38:05,961 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2019-12-07 11:38:05,961 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 110 [2019-12-07 11:38:05,961 INFO L84 Accepts]: Finished accepts. word is rejected. [2019-12-07 11:38:05,961 INFO L462 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 11:38:05,961 INFO L463 AbstractCegarLoop]: Interpolant automaton has 14 states. [2019-12-07 11:38:05,961 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2019-12-07 11:38:05,961 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2019-12-07 11:38:06,563 WARN L499 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 23 mathsat -unsat_core_generation=3,24 cvc4 --incremental --print-success --lang smt --rewrite-divk,25 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2019-12-07 11:38:06,568 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2019-12-07 11:38:06,933 WARN L192 SmtUtils]: Spent 105.00 ms on a formula simplification. DAG size of input: 177 DAG size of output: 161 [2019-12-07 11:38:07,123 WARN L192 SmtUtils]: Spent 188.00 ms on a formula simplification. DAG size of input: 282 DAG size of output: 255 [2019-12-07 11:38:07,498 WARN L192 SmtUtils]: Spent 373.00 ms on a formula simplification. DAG size of input: 381 DAG size of output: 340 [2019-12-07 11:38:07,908 WARN L192 SmtUtils]: Spent 407.00 ms on a formula simplification. DAG size of input: 414 DAG size of output: 368 [2019-12-07 11:38:08,342 WARN L192 SmtUtils]: Spent 429.00 ms on a formula simplification. DAG size of input: 414 DAG size of output: 368 [2019-12-07 11:38:08,509 WARN L192 SmtUtils]: Spent 164.00 ms on a formula simplification. DAG size of input: 247 DAG size of output: 230 [2019-12-07 11:38:08,848 WARN L192 SmtUtils]: Spent 337.00 ms on a formula simplification. DAG size of input: 402 DAG size of output: 347 [2019-12-07 11:38:09,178 WARN L192 SmtUtils]: Spent 328.00 ms on a formula simplification. DAG size of input: 384 DAG size of output: 344 [2019-12-07 11:38:09,500 WARN L192 SmtUtils]: Spent 258.00 ms on a formula simplification. DAG size of input: 325 DAG size of output: 284 [2019-12-07 11:38:09,732 WARN L192 SmtUtils]: Spent 231.00 ms on a formula simplification. DAG size of input: 321 DAG size of output: 291 [2019-12-07 11:38:09,854 WARN L192 SmtUtils]: Spent 120.00 ms on a formula simplification. DAG size of input: 222 DAG size of output: 211 [2019-12-07 11:38:10,199 WARN L192 SmtUtils]: Spent 240.00 ms on a formula simplification. DAG size of input: 81 DAG size of output: 46 [2019-12-07 11:38:10,600 WARN L192 SmtUtils]: Spent 285.00 ms on a formula simplification. DAG size of input: 87 DAG size of output: 50 [2019-12-07 11:38:11,678 WARN L192 SmtUtils]: Spent 1.08 s on a formula simplification. DAG size of input: 161 DAG size of output: 59 [2019-12-07 11:38:13,985 WARN L192 SmtUtils]: Spent 2.31 s on a formula simplification. DAG size of input: 255 DAG size of output: 95 [2019-12-07 11:38:18,002 WARN L192 SmtUtils]: Spent 4.01 s on a formula simplification. DAG size of input: 332 DAG size of output: 98 [2019-12-07 11:38:22,217 WARN L192 SmtUtils]: Spent 4.21 s on a formula simplification. DAG size of input: 365 DAG size of output: 102 [2019-12-07 11:38:26,620 WARN L192 SmtUtils]: Spent 4.40 s on a formula simplification. DAG size of input: 365 DAG size of output: 102 [2019-12-07 11:38:28,401 WARN L192 SmtUtils]: Spent 1.78 s on a formula simplification. DAG size of input: 230 DAG size of output: 65 [2019-12-07 11:38:32,061 WARN L192 SmtUtils]: Spent 3.66 s on a formula simplification. DAG size of input: 337 DAG size of output: 101 [2019-12-07 11:38:36,140 WARN L192 SmtUtils]: Spent 4.08 s on a formula simplification. DAG size of input: 338 DAG size of output: 86 [2019-12-07 11:38:37,031 WARN L192 SmtUtils]: Spent 875.00 ms on a formula simplification. DAG size of input: 149 DAG size of output: 71 [2019-12-07 11:38:40,015 WARN L192 SmtUtils]: Spent 2.96 s on a formula simplification. DAG size of input: 277 DAG size of output: 86 [2019-12-07 11:38:42,932 WARN L192 SmtUtils]: Spent 2.92 s on a formula simplification. DAG size of input: 290 DAG size of output: 102 [2019-12-07 11:38:44,735 WARN L192 SmtUtils]: Spent 1.80 s on a formula simplification. DAG size of input: 210 DAG size of output: 80 [2019-12-07 11:38:44,743 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 700) no Hoare annotation was computed. [2019-12-07 11:38:44,743 INFO L246 CegarLoopResult]: For program point L597(lines 597 601) no Hoare annotation was computed. [2019-12-07 11:38:44,743 INFO L246 CegarLoopResult]: For program point L895(lines 895 899) no Hoare annotation was computed. [2019-12-07 11:38:44,743 INFO L246 CegarLoopResult]: For program point L895-2(lines 895 899) no Hoare annotation was computed. [2019-12-07 11:38:44,743 INFO L246 CegarLoopResult]: For program point L895-3(lines 895 899) no Hoare annotation was computed. [2019-12-07 11:38:44,743 INFO L246 CegarLoopResult]: For program point L895-5(lines 895 899) no Hoare annotation was computed. [2019-12-07 11:38:44,743 INFO L246 CegarLoopResult]: For program point L895-6(lines 895 899) no Hoare annotation was computed. [2019-12-07 11:38:44,743 INFO L246 CegarLoopResult]: For program point L895-8(lines 895 899) no Hoare annotation was computed. [2019-12-07 11:38:44,743 INFO L246 CegarLoopResult]: For program point L895-9(lines 895 899) no Hoare annotation was computed. [2019-12-07 11:38:44,743 INFO L246 CegarLoopResult]: For program point L895-11(lines 895 899) no Hoare annotation was computed. [2019-12-07 11:38:44,744 INFO L246 CegarLoopResult]: For program point L895-12(lines 895 899) no Hoare annotation was computed. [2019-12-07 11:38:44,744 INFO L246 CegarLoopResult]: For program point L895-14(lines 895 899) no Hoare annotation was computed. [2019-12-07 11:38:44,744 INFO L246 CegarLoopResult]: For program point L895-15(lines 895 899) no Hoare annotation was computed. [2019-12-07 11:38:44,744 INFO L246 CegarLoopResult]: For program point L895-17(lines 895 899) no Hoare annotation was computed. [2019-12-07 11:38:44,744 INFO L246 CegarLoopResult]: For program point L70(lines 70 87) no Hoare annotation was computed. [2019-12-07 11:38:44,744 INFO L242 CegarLoopResult]: At program point L70-1(lines 1 979) the Hoare annotation is: (let ((.cse14 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse25 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse11 (= (_ bv0 32) ~pumpRunning~0)) (.cse3 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (let ((.cse15 (not (= ULTIMATE.start_activatePump_~tmp~7 (_ bv0 32)))) (.cse12 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse13 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse20 (or (and .cse11 .cse3 .cse10 .cse14) (and .cse25 .cse11 .cse3 .cse10))) (.cse21 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse22 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse19 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse17 (not .cse25)) (.cse7 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse9 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse18 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse8 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse1 (= (_ bv1 32) ~pumpRunning~0)) (.cse6 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse16 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse23 (= ~waterLevel~0 (_ bv2 32))) (.cse4 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse24 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (or (and .cse0 .cse1 (= (_ bv1 32) ~switchedOnBeforeTS~0) .cse2 .cse3 .cse4 .cse5 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32)) .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse7 .cse2 (or (and .cse11 .cse3 .cse4 .cse12 .cse5 .cse10 .cse13 .cse14) (and .cse15 .cse11 .cse3 .cse4 .cse5 .cse10 .cse14))) (and .cse0 .cse7 .cse2 (or (and .cse15 .cse11 .cse3 .cse5 .cse10 .cse14) (and .cse11 .cse3 .cse12 .cse5 .cse10 .cse13 .cse14)) .cse16) (and .cse0 .cse1 .cse2 .cse3 .cse17 .cse4 .cse5 .cse6 .cse8 .cse7 .cse9 .cse18 .cse10) (and .cse19 .cse20 .cse4 .cse5 .cse21 .cse22) (and .cse0 .cse7 .cse19 .cse16 .cse20 .cse5 .cse21 .cse22) (and .cse0 .cse1 .cse3 .cse19 .cse17 .cse4 .cse5 .cse6 .cse8 .cse7 .cse9 .cse18 .cse10) (and .cse0 .cse8 .cse1 .cse3 .cse23 .cse4 .cse5 .cse10 .cse6 .cse24) (and .cse25 .cse11 .cse16 .cse3 .cse23 .cse5 .cse10 .cse24) (and .cse25 .cse11 .cse3 .cse23 .cse4 .cse5 .cse10 .cse24)))) [2019-12-07 11:38:44,744 INFO L246 CegarLoopResult]: For program point L70-2(lines 70 87) no Hoare annotation was computed. [2019-12-07 11:38:44,744 INFO L242 CegarLoopResult]: At program point L70-3(lines 1 979) the Hoare annotation is: false [2019-12-07 11:38:44,744 INFO L246 CegarLoopResult]: For program point L962(lines 962 966) no Hoare annotation was computed. [2019-12-07 11:38:44,744 INFO L246 CegarLoopResult]: For program point L70-4(lines 70 87) no Hoare annotation was computed. [2019-12-07 11:38:44,744 INFO L242 CegarLoopResult]: At program point L70-5(lines 1 979) the Hoare annotation is: false [2019-12-07 11:38:44,745 INFO L242 CegarLoopResult]: At program point L962-2(lines 962 966) the Hoare annotation is: (let ((.cse3 (not (= ULTIMATE.start_activatePump_~tmp~7 (_ bv0 32)))) (.cse9 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse10 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse21 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))) (.cse13 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse15 (= ~waterLevel~0 (_ bv1 32))) (.cse16 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse18 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse14 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0))) (.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse1 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse12 (= (_ bv1 32) ~pumpRunning~0)) (.cse23 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse17 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse24 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32))) (.cse8 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse11 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse22 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) ~pumpRunning~0)) (.cse5 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse25 (= ~waterLevel~0 (_ bv2 32))) (.cse19 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse6 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 (or (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse4 .cse5 .cse9 .cse6 .cse7 .cse10 .cse8)) .cse11) (and .cse12 .cse11 .cse5 .cse13 .cse14 .cse15 .cse16 .cse6 .cse7) (and .cse0 .cse1 .cse12 .cse2 .cse17 .cse5 .cse18 .cse14 .cse19 .cse6 .cse7) (and .cse0 .cse1 (let ((.cse20 (not .cse21))) (or (and .cse3 .cse4 .cse5 .cse13 .cse14 .cse19 .cse6 .cse7 .cse20) (and .cse4 .cse5 .cse13 .cse9 .cse14 .cse19 .cse6 .cse7 .cse20 .cse10))) .cse2) (and .cse4 .cse5 .cse22 .cse19 .cse6 .cse7) (and .cse12 .cse5 .cse21 .cse19 .cse16 .cse6 .cse7) (and .cse0 .cse1 .cse12 .cse23 .cse2 .cse17 .cse5 .cse19 .cse6 .cse7 .cse24 .cse8) (and .cse4 .cse5 .cse11 .cse25 .cse6 .cse7) (and .cse12 .cse5 .cse13 .cse14 .cse15 .cse19 .cse16 .cse6 .cse7) (and .cse0 .cse1 .cse12 .cse2 .cse17 .cse5 .cse11 .cse18 .cse14 .cse6 .cse7) (and .cse12 .cse11 .cse5 .cse25 .cse6 .cse7) (and .cse0 .cse1 .cse12 .cse23 .cse2 .cse11 .cse17 .cse5 .cse6 .cse7 .cse24 .cse8) (and .cse4 .cse11 .cse5 .cse22 .cse6 .cse7) (and .cse4 .cse5 .cse25 .cse19 .cse6 .cse7))) [2019-12-07 11:38:44,745 INFO L242 CegarLoopResult]: At program point L104-2(lines 104 118) the Hoare annotation is: false [2019-12-07 11:38:44,745 INFO L246 CegarLoopResult]: For program point L105(line 105) no Hoare annotation was computed. [2019-12-07 11:38:44,745 INFO L246 CegarLoopResult]: For program point L700(line 700) no Hoare annotation was computed. [2019-12-07 11:38:44,745 INFO L246 CegarLoopResult]: For program point L700-1(line 700) no Hoare annotation was computed. [2019-12-07 11:38:44,745 INFO L246 CegarLoopResult]: For program point L700-2(line 700) no Hoare annotation was computed. [2019-12-07 11:38:44,745 INFO L246 CegarLoopResult]: For program point L74(lines 74 84) no Hoare annotation was computed. [2019-12-07 11:38:44,745 INFO L246 CegarLoopResult]: For program point L74-2(lines 74 84) no Hoare annotation was computed. [2019-12-07 11:38:44,745 INFO L246 CegarLoopResult]: For program point L74-4(lines 74 84) no Hoare annotation was computed. [2019-12-07 11:38:44,745 INFO L246 CegarLoopResult]: For program point L108(lines 108 112) no Hoare annotation was computed. [2019-12-07 11:38:44,745 INFO L246 CegarLoopResult]: For program point L75(lines 75 81) no Hoare annotation was computed. [2019-12-07 11:38:44,745 INFO L246 CegarLoopResult]: For program point L108-1(lines 108 112) no Hoare annotation was computed. [2019-12-07 11:38:44,745 INFO L246 CegarLoopResult]: For program point L75-2(lines 75 81) no Hoare annotation was computed. [2019-12-07 11:38:44,745 INFO L246 CegarLoopResult]: For program point L75-4(lines 75 81) no Hoare annotation was computed. [2019-12-07 11:38:44,745 INFO L246 CegarLoopResult]: For program point L934(lines 934 940) no Hoare annotation was computed. [2019-12-07 11:38:44,746 INFO L242 CegarLoopResult]: At program point L934-1(lines 934 940) the Hoare annotation is: (let ((.cse18 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))) (.cse16 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse26 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse11 (= (_ bv0 32) ~pumpRunning~0)) (.cse3 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (let ((.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse9 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse8 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse1 (= (_ bv1 32) ~pumpRunning~0)) (.cse6 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse7 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse20 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse21 (or (and .cse11 .cse3 .cse10 .cse16) (and .cse26 .cse11 .cse3 .cse10))) (.cse19 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse22 (not .cse18)) (.cse13 (= ~waterLevel~0 (_ bv2 32))) (.cse4 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse12 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse14 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse15 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse17 (not (= ULTIMATE.start_activatePump_~tmp~7 (_ bv0 32)))) (.cse5 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse23 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse24 (not .cse26)) (.cse25 (= ~waterLevel~0 (_ bv1 32)))) (or (and .cse0 .cse1 (= (_ bv1 32) ~switchedOnBeforeTS~0) .cse2 .cse3 .cse4 .cse5 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32)) .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse11 .cse3 .cse12 .cse13 .cse5 .cse10) (and .cse0 .cse7 .cse2 (or (and .cse11 .cse3 .cse4 .cse14 .cse5 .cse10 .cse15 .cse16) (and .cse17 .cse11 .cse3 .cse4 .cse5 .cse10 .cse16))) (and .cse0 .cse7 .cse2 (or (and .cse17 .cse11 .cse3 .cse5 .cse10 .cse16) (and .cse11 .cse3 .cse14 .cse5 .cse10 .cse15 .cse16)) .cse12) (and .cse0 .cse8 .cse7 .cse1 .cse2 .cse9 .cse3 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32))) .cse4 .cse5 .cse10 .cse6) (and .cse8 .cse1 .cse3 .cse18 .cse4 .cse19 .cse5 .cse10 .cse6) (and .cse20 .cse21 .cse4 .cse5 .cse19 .cse22) (and .cse8 .cse1 .cse3 .cse23 .cse24 .cse25 .cse4 .cse19 .cse5 .cse10 .cse6) (and .cse0 .cse7 .cse20 .cse12 .cse21 .cse5 .cse19 .cse22) (and .cse11 .cse3 .cse13 .cse4 .cse5 .cse10) (and .cse12 (or (and .cse11 .cse3 .cse14 .cse5 .cse10 .cse15) (and .cse17 .cse11 .cse3 .cse5 .cse10)) .cse23 .cse24 .cse25)))) [2019-12-07 11:38:44,746 INFO L242 CegarLoopResult]: At program point L901(lines 886 904) the Hoare annotation is: false [2019-12-07 11:38:44,746 INFO L242 CegarLoopResult]: At program point L901-1(lines 886 904) the Hoare annotation is: (let ((.cse2 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse10 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse11 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse12 (= ~waterLevel~0 (_ bv0 32))) (.cse13 (not (= ULTIMATE.start_activatePump_~tmp~7 (_ bv0 32)))) (.cse4 (not (= ULTIMATE.start_isHighWaterLevel_~tmp~8 (_ bv0 32)))) (.cse5 (= |ULTIMATE.start_isHighWaterLevel_#res| (_ bv0 32))) (.cse6 (= ULTIMATE.start_isHighWaterLevel_~tmp___0~1 (_ bv0 32))) (.cse15 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse16 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse9 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse14 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse0 (= (_ bv0 32) ~pumpRunning~0)) (.cse3 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse1 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse17 (= ~waterLevel~0 (_ bv2 32))) (.cse7 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse8 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse10 .cse11 .cse12 (or (and .cse13 .cse0 .cse1 .cse4 .cse5 .cse6 .cse14 .cse7 .cse8 .cse9) (and .cse0 .cse1 .cse4 .cse5 .cse6 .cse15 .cse14 .cse7 .cse8 .cse16 .cse9))) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse14 .cse7 .cse8 .cse9) (and .cse10 .cse11 .cse12 .cse3 (or (and .cse13 .cse0 .cse1 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 .cse1 .cse4 .cse5 .cse6 .cse15 .cse7 .cse8 .cse16 .cse9))) (and .cse0 .cse1 .cse17 .cse14 .cse7 .cse8) (and .cse0 .cse3 .cse1 .cse17 .cse7 .cse8))) [2019-12-07 11:38:44,746 INFO L242 CegarLoopResult]: At program point L901-2(lines 886 904) the Hoare annotation is: false [2019-12-07 11:38:44,746 INFO L242 CegarLoopResult]: At program point L901-3(lines 886 904) the Hoare annotation is: false [2019-12-07 11:38:44,746 INFO L242 CegarLoopResult]: At program point L901-4(lines 886 904) the Hoare annotation is: false [2019-12-07 11:38:44,746 INFO L242 CegarLoopResult]: At program point L901-5(lines 886 904) the Hoare annotation is: false [2019-12-07 11:38:44,746 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 700) no Hoare annotation was computed. [2019-12-07 11:38:44,746 INFO L242 CegarLoopResult]: At program point L837(lines 830 840) the Hoare annotation is: (let ((.cse9 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse14 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse5 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse8 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse0 (= (_ bv1 32) ~pumpRunning~0)) (.cse1 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse3 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse4 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0))) (.cse15 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse6 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse7 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse16 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse13 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse10 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse11 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse12 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse0 .cse1 .cse13 .cse14 .cse10 .cse3 .cse15 .cse6 .cse7 .cse12 .cse16) (and .cse9 .cse0 .cse1 .cse14 .cse10 .cse3 .cse5 .cse6 .cse7 .cse12 .cse8) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse15 .cse6 .cse7 .cse16 .cse13 .cse10 .cse11 .cse12))) [2019-12-07 11:38:44,746 INFO L242 CegarLoopResult]: At program point L837-1(lines 830 840) the Hoare annotation is: false [2019-12-07 11:38:44,747 INFO L242 CegarLoopResult]: At program point L837-2(lines 830 840) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) ~pumpRunning~0)) (.cse1 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse2 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))) (.cse3 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse4 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32))) .cse1 .cse2 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32)) .cse3 .cse4 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (and (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32)) .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 (_ bv0 32)) .cse3 .cse4 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))))) [2019-12-07 11:38:44,747 INFO L242 CegarLoopResult]: At program point L837-3(lines 830 840) the Hoare annotation is: false [2019-12-07 11:38:44,747 INFO L242 CegarLoopResult]: At program point L837-4(lines 830 840) the Hoare annotation is: false [2019-12-07 11:38:44,747 INFO L242 CegarLoopResult]: At program point L837-5(lines 830 840) the Hoare annotation is: false [2019-12-07 11:38:44,747 INFO L242 CegarLoopResult]: At program point L837-6(lines 830 840) the Hoare annotation is: false [2019-12-07 11:38:44,747 INFO L242 CegarLoopResult]: At program point L837-7(lines 830 840) the Hoare annotation is: false [2019-12-07 11:38:44,747 INFO L246 CegarLoopResult]: For program point L573(lines 573 577) no Hoare annotation was computed. [2019-12-07 11:38:44,747 INFO L242 CegarLoopResult]: At program point L837-8(lines 830 840) the Hoare annotation is: false [2019-12-07 11:38:44,747 INFO L246 CegarLoopResult]: For program point L573-3(lines 573 577) no Hoare annotation was computed. [2019-12-07 11:38:44,747 INFO L246 CegarLoopResult]: For program point L573-6(lines 573 577) no Hoare annotation was computed. [2019-12-07 11:38:44,747 INFO L242 CegarLoopResult]: At program point L972(lines 923 973) the Hoare annotation is: false [2019-12-07 11:38:44,747 INFO L242 CegarLoopResult]: At program point L642(lines 637 645) the Hoare annotation is: (let ((.cse20 (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (let ((.cse3 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse6 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse9 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32))) (.cse5 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse16 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse1 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse2 (= (_ bv1 32) ~pumpRunning~0)) (.cse7 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse11 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse0 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse17 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse18 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse13 (not (= ULTIMATE.start_activatePump_~tmp~7 (_ bv0 32)))) (.cse15 (not .cse20)) (.cse12 (= ~waterLevel~0 (_ bv0 32))) (.cse14 (= (_ bv0 32) ~pumpRunning~0)) (.cse21 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse19 (= ~waterLevel~0 (_ bv2 32))) (.cse8 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse12 (or (and .cse13 .cse14 .cse4 .cse15 .cse7 .cse8 .cse10 .cse16) (and .cse14 .cse4 .cse15 .cse7 .cse17 .cse8 .cse10 .cse18 .cse16))) (and .cse0 .cse14 .cse5 .cse4 .cse15 .cse7 .cse8 .cse10 .cse16) (and .cse14 .cse4 .cse19 .cse7 .cse8 .cse10 .cse20) (and .cse0 .cse1 .cse2 .cse3 .cse12 .cse4 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse14 .cse5 .cse4 .cse21 .cse15 .cse8 .cse10 .cse16) (and .cse1 .cse2 .cse4 .cse19 .cse7 .cse8 .cse10 .cse20 .cse11) (and .cse0 (let ((.cse22 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))))) (or (and .cse14 .cse21 .cse4 .cse15 .cse17 .cse8 .cse10 .cse22 .cse18) (and .cse13 .cse14 .cse21 .cse4 .cse15 .cse8 .cse10 .cse22))) .cse12) (and .cse14 .cse21 .cse4 .cse19 .cse8 .cse10 .cse20)))) [2019-12-07 11:38:44,747 INFO L242 CegarLoopResult]: At program point L642-1(lines 637 645) the Hoare annotation is: false [2019-12-07 11:38:44,747 INFO L242 CegarLoopResult]: At program point L642-2(lines 637 645) the Hoare annotation is: false [2019-12-07 11:38:44,748 INFO L242 CegarLoopResult]: At program point L610(lines 605 613) the Hoare annotation is: (let ((.cse0 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse8 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse12 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse1 (= (_ bv1 32) ~pumpRunning~0)) (.cse2 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse3 (= ~waterLevel~0 (_ bv0 32))) (.cse13 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse5 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse6 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse7 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0))) (.cse14 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse9 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse10 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse11 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse2 .cse12 .cse4 .cse5 .cse8 .cse9 .cse10 .cse11) (and .cse1 .cse2 .cse13 .cse12 .cse4 .cse5 .cse14 .cse9 .cse10 .cse11) (and .cse1 .cse2 .cse3 .cse13 .cse4 .cse5 .cse6 .cse7 .cse14 .cse9 .cse10 .cse11))) [2019-12-07 11:38:44,748 INFO L242 CegarLoopResult]: At program point L610-1(lines 605 613) the Hoare annotation is: false [2019-12-07 11:38:44,748 INFO L242 CegarLoopResult]: At program point L610-2(lines 605 613) the Hoare annotation is: (let ((.cse0 (= (_ bv0 32) ~pumpRunning~0)) (.cse1 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse2 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))) (.cse3 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse4 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32))) .cse1 .cse2 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32)) .cse3 .cse4) (and (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32)) .cse0 .cse1 .cse2 (= ~methaneLevelCritical~0 (_ bv0 32)) .cse3 .cse4))) [2019-12-07 11:38:44,748 INFO L242 CegarLoopResult]: At program point L610-3(lines 605 613) the Hoare annotation is: false [2019-12-07 11:38:44,748 INFO L242 CegarLoopResult]: At program point L610-4(lines 605 613) the Hoare annotation is: false [2019-12-07 11:38:44,748 INFO L242 CegarLoopResult]: At program point L610-5(lines 605 613) the Hoare annotation is: false [2019-12-07 11:38:44,748 INFO L242 CegarLoopResult]: At program point L610-6(lines 605 613) the Hoare annotation is: false [2019-12-07 11:38:44,748 INFO L242 CegarLoopResult]: At program point L610-7(lines 605 613) the Hoare annotation is: false [2019-12-07 11:38:44,748 INFO L242 CegarLoopResult]: At program point L610-8(lines 605 613) the Hoare annotation is: false [2019-12-07 11:38:44,748 INFO L242 CegarLoopResult]: At program point L49(lines 44 51) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 11:38:44,748 INFO L246 CegarLoopResult]: For program point L776(lines 776 793) no Hoare annotation was computed. [2019-12-07 11:38:44,748 INFO L246 CegarLoopResult]: For program point L776-1(lines 776 793) no Hoare annotation was computed. [2019-12-07 11:38:44,748 INFO L246 CegarLoopResult]: For program point L776-2(lines 776 793) no Hoare annotation was computed. [2019-12-07 11:38:44,748 INFO L246 CegarLoopResult]: For program point L183(lines 183 190) no Hoare annotation was computed. [2019-12-07 11:38:44,748 INFO L249 CegarLoopResult]: At program point L183-1(lines 183 190) the Hoare annotation is: true [2019-12-07 11:38:44,748 INFO L246 CegarLoopResult]: For program point L944(lines 944 950) no Hoare annotation was computed. [2019-12-07 11:38:44,749 INFO L242 CegarLoopResult]: At program point L944-1(lines 944 950) the Hoare annotation is: (let ((.cse3 (not (= ULTIMATE.start_activatePump_~tmp~7 (_ bv0 32)))) (.cse9 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse10 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse21 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))) (.cse13 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse15 (= ~waterLevel~0 (_ bv1 32))) (.cse16 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse18 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse14 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0))) (.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse1 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse12 (= (_ bv1 32) ~pumpRunning~0)) (.cse23 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse17 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse24 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32))) (.cse8 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse11 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse22 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv0 32) ~pumpRunning~0)) (.cse5 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse25 (= ~waterLevel~0 (_ bv2 32))) (.cse19 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse6 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse7 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 (or (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse4 .cse5 .cse9 .cse6 .cse7 .cse10 .cse8)) .cse11) (and .cse12 .cse11 .cse5 .cse13 .cse14 .cse15 .cse16 .cse6 .cse7) (and .cse0 .cse1 .cse12 .cse2 .cse17 .cse5 .cse18 .cse14 .cse19 .cse6 .cse7) (and .cse0 .cse1 (let ((.cse20 (not .cse21))) (or (and .cse3 .cse4 .cse5 .cse13 .cse14 .cse19 .cse6 .cse7 .cse20) (and .cse4 .cse5 .cse13 .cse9 .cse14 .cse19 .cse6 .cse7 .cse20 .cse10))) .cse2) (and .cse4 .cse5 .cse22 .cse19 .cse6 .cse7) (and .cse12 .cse5 .cse21 .cse19 .cse16 .cse6 .cse7) (and .cse0 .cse1 .cse12 .cse23 .cse2 .cse17 .cse5 .cse19 .cse6 .cse7 .cse24 .cse8) (and .cse4 .cse5 .cse11 .cse25 .cse6 .cse7) (and .cse12 .cse5 .cse13 .cse14 .cse15 .cse19 .cse16 .cse6 .cse7) (and .cse0 .cse1 .cse12 .cse2 .cse17 .cse5 .cse11 .cse18 .cse14 .cse6 .cse7) (and .cse12 .cse11 .cse5 .cse25 .cse6 .cse7) (and .cse0 .cse1 .cse12 .cse23 .cse2 .cse11 .cse17 .cse5 .cse6 .cse7 .cse24 .cse8) (and .cse4 .cse11 .cse5 .cse22 .cse6 .cse7) (and .cse4 .cse5 .cse25 .cse19 .cse6 .cse7))) [2019-12-07 11:38:44,749 INFO L246 CegarLoopResult]: For program point L812(lines 812 818) no Hoare annotation was computed. [2019-12-07 11:38:44,749 INFO L246 CegarLoopResult]: For program point L812-2(lines 812 818) no Hoare annotation was computed. [2019-12-07 11:38:44,749 INFO L246 CegarLoopResult]: For program point L812-4(lines 812 818) no Hoare annotation was computed. [2019-12-07 11:38:44,749 INFO L246 CegarLoopResult]: For program point L812-6(lines 812 818) no Hoare annotation was computed. [2019-12-07 11:38:44,749 INFO L246 CegarLoopResult]: For program point L812-8(lines 812 818) no Hoare annotation was computed. [2019-12-07 11:38:44,749 INFO L246 CegarLoopResult]: For program point L812-10(lines 812 818) no Hoare annotation was computed. [2019-12-07 11:38:44,749 INFO L246 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2019-12-07 11:38:44,749 INFO L242 CegarLoopResult]: At program point L846(lines 841 849) the Hoare annotation is: (let ((.cse21 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))) (.cse11 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse13 (= (_ bv0 32) ~pumpRunning~0)) (.cse7 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse15 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse28 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0))) (let ((.cse14 (= ~waterLevel~0 (_ bv2 32))) (.cse3 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse9 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32))) (.cse12 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse22 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse23 (not .cse28)) (.cse24 (= ~waterLevel~0 (_ bv1 32))) (.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse1 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse4 (= ~waterLevel~0 (_ bv0 32))) (.cse25 (not (= ULTIMATE.start_activatePump_~tmp~7 (_ bv0 32)))) (.cse26 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse27 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse2 (= (_ bv1 32) ~pumpRunning~0)) (.cse6 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse16 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse17 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse5 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse18 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse8 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse19 (or (and .cse13 .cse7 .cse15 .cse10 .cse11) (and .cse28 .cse13 .cse7 .cse15 .cse10))) (.cse20 (not .cse21))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse2 .cse4 .cse6 .cse5 .cse7 .cse12 .cse8 .cse10) (and .cse13 .cse7 .cse5 .cse14 .cse15 .cse8 .cse10) (and .cse13 .cse7 .cse14 .cse15 .cse16 .cse8 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse6 .cse7 .cse16 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse2 .cse4 .cse6 .cse7 .cse12 .cse16 .cse8 .cse10) (and .cse17 .cse16 .cse18 .cse8 .cse19 .cse20) (and .cse2 .cse6 .cse7 .cse5 .cse21 .cse8 .cse18 .cse10) (and .cse2 .cse6 .cse7 .cse22 .cse16 .cse23 .cse24 .cse8 .cse18 .cse10) (and .cse0 .cse1 .cse4 (or (and .cse25 .cse13 .cse7 .cse16 .cse15 .cse8 .cse10 .cse11) (and .cse13 .cse7 .cse26 .cse16 .cse15 .cse8 .cse10 .cse27 .cse11))) (and .cse2 .cse6 .cse7 .cse5 .cse22 .cse23 .cse24 .cse8 .cse18 .cse10) (and .cse0 .cse1 .cse4 .cse5 (or (and .cse25 .cse13 .cse7 .cse15 .cse8 .cse10 .cse11) (and .cse13 .cse7 .cse15 .cse26 .cse8 .cse10 .cse27 .cse11))) (and .cse2 .cse6 .cse7 .cse16 .cse21 .cse8 .cse18 .cse10) (and .cse17 .cse5 .cse18 .cse8 .cse19 .cse20)))) [2019-12-07 11:38:44,750 INFO L242 CegarLoopResult]: At program point L846-1(lines 841 849) the Hoare annotation is: (let ((.cse1 (= (_ bv1 32) ~pumpRunning~0)) (.cse2 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse7 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32))) (.cse8 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse10 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse11 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse13 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse21 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse22 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse9 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse3 (= ~waterLevel~0 (_ bv0 32))) (.cse17 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse18 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse20 (not (= ULTIMATE.start_activatePump_~tmp~7 (_ bv0 32)))) (.cse14 (= (_ bv0 32) ~pumpRunning~0)) (.cse4 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse5 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse15 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse16 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0))) (.cse6 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse12 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse19 (bvslt ~waterLevel~0 (_ bv2 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse0 .cse1 .cse2 .cse13 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse0 .cse9 (or (and .cse14 .cse4 .cse15 .cse16 .cse17 .cse6 .cse12 .cse18 .cse19) (and .cse20 .cse14 .cse4 .cse15 .cse16 .cse6 .cse12 .cse19)) .cse3 .cse21) (and .cse0 .cse9 .cse14 .cse4 .cse13 .cse22 .cse5 .cse15 .cse16 .cse6 .cse12) (and .cse0 .cse9 .cse14 .cse4 .cse13 .cse21 .cse22 .cse15 .cse16 .cse6 .cse12) (and .cse0 .cse9 .cse3 (or (and .cse14 .cse4 .cse17 .cse5 .cse15 .cse16 .cse6 .cse12 .cse18 .cse19) (and .cse20 .cse14 .cse4 .cse5 .cse15 .cse16 .cse6 .cse12 .cse19))))) [2019-12-07 11:38:44,750 INFO L246 CegarLoopResult]: For program point L780(lines 780 788) no Hoare annotation was computed. [2019-12-07 11:38:44,750 INFO L242 CegarLoopResult]: At program point L846-2(lines 841 849) the Hoare annotation is: false [2019-12-07 11:38:44,750 INFO L246 CegarLoopResult]: For program point L780-1(lines 780 788) no Hoare annotation was computed. [2019-12-07 11:38:44,750 INFO L242 CegarLoopResult]: At program point L846-3(lines 841 849) the Hoare annotation is: false [2019-12-07 11:38:44,750 INFO L242 CegarLoopResult]: At program point L846-4(lines 841 849) the Hoare annotation is: false [2019-12-07 11:38:44,750 INFO L246 CegarLoopResult]: For program point L780-2(lines 780 788) no Hoare annotation was computed. [2019-12-07 11:38:44,750 INFO L242 CegarLoopResult]: At program point L846-5(lines 841 849) the Hoare annotation is: false [2019-12-07 11:38:44,750 INFO L242 CegarLoopResult]: At program point L683(lines 1 979) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32))) [2019-12-07 11:38:44,750 INFO L246 CegarLoopResult]: For program point L650(lines 650 656) no Hoare annotation was computed. [2019-12-07 11:38:44,750 INFO L246 CegarLoopResult]: For program point L650-1(lines 650 656) no Hoare annotation was computed. [2019-12-07 11:38:44,750 INFO L246 CegarLoopResult]: For program point L650-2(lines 650 656) no Hoare annotation was computed. [2019-12-07 11:38:44,750 INFO L246 CegarLoopResult]: For program point L650-3(lines 650 656) no Hoare annotation was computed. [2019-12-07 11:38:44,750 INFO L246 CegarLoopResult]: For program point L650-4(lines 650 656) no Hoare annotation was computed. [2019-12-07 11:38:44,750 INFO L246 CegarLoopResult]: For program point L650-5(lines 650 656) no Hoare annotation was computed. [2019-12-07 11:38:44,750 INFO L242 CegarLoopResult]: At program point L155(lines 151 157) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 11:38:44,750 INFO L246 CegarLoopResult]: For program point L750(lines 750 767) no Hoare annotation was computed. [2019-12-07 11:38:44,750 INFO L246 CegarLoopResult]: For program point L750-1(lines 750 767) no Hoare annotation was computed. [2019-12-07 11:38:44,751 INFO L246 CegarLoopResult]: For program point L750-2(lines 750 767) no Hoare annotation was computed. [2019-12-07 11:38:44,751 INFO L246 CegarLoopResult]: For program point L750-3(lines 750 767) no Hoare annotation was computed. [2019-12-07 11:38:44,751 INFO L246 CegarLoopResult]: For program point L750-4(lines 750 767) no Hoare annotation was computed. [2019-12-07 11:38:44,751 INFO L246 CegarLoopResult]: For program point L585(lines 585 589) no Hoare annotation was computed. [2019-12-07 11:38:44,751 INFO L246 CegarLoopResult]: For program point L750-5(lines 750 767) no Hoare annotation was computed. [2019-12-07 11:38:44,751 INFO L242 CegarLoopResult]: At program point L718(lines 714 736) the Hoare annotation is: (let ((.cse15 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse24 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse14 (= (_ bv0 32) ~pumpRunning~0)) (.cse5 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (let ((.cse19 (or (and .cse14 .cse5 .cse10 .cse15) (and .cse24 .cse14 .cse5 .cse10))) (.cse11 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse12 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse16 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse17 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse13 (not (= ULTIMATE.start_activatePump_~tmp~7 (_ bv0 32)))) (.cse21 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse6 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse7 (not .cse24)) (.cse9 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))))) (.cse1 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse0 (= (_ bv1 32) ~pumpRunning~0)) (.cse18 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse4 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse20 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse3 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse23 (= ~waterLevel~0 (_ bv2 32))) (.cse8 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse11 .cse12 .cse2 (or (and .cse13 .cse14 .cse5 .cse8 .cse10 .cse15) (and .cse14 .cse5 .cse16 .cse8 .cse10 .cse17 .cse15)) .cse3) (and .cse0 .cse1 .cse3 .cse18 .cse4 .cse5 .cse8 .cse9 .cse10) (and .cse18 .cse19 .cse20 .cse8 .cse21 .cse9) (and .cse19 .cse3 .cse18 .cse8 .cse21 .cse9) (and .cse11 .cse12 .cse2 (let ((.cse22 (or .cse6 .cse21))) (or (and .cse14 .cse5 .cse22 .cse16 .cse7 .cse20 .cse8 .cse10 .cse17) (and .cse13 .cse14 .cse5 .cse22 .cse7 .cse20 .cse8 .cse10)))) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse6 .cse20 .cse7 .cse8 .cse9 .cse10) (and .cse1 .cse0 .cse5 .cse18 .cse4 .cse20 .cse8 .cse10) (and .cse14 .cse5 .cse23 .cse20 .cse8 .cse10) (and .cse14 .cse3 .cse5 .cse23 .cse8 .cse10)))) [2019-12-07 11:38:44,751 INFO L242 CegarLoopResult]: At program point L718-1(lines 714 736) the Hoare annotation is: false [2019-12-07 11:38:44,751 INFO L242 CegarLoopResult]: At program point L718-2(lines 714 736) the Hoare annotation is: false [2019-12-07 11:38:44,751 INFO L246 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2019-12-07 11:38:44,751 INFO L242 CegarLoopResult]: At program point L59(lines 718 724) the Hoare annotation is: (let ((.cse9 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32))) (.cse12 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse13 (not (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0))) (.cse14 (= ~waterLevel~0 (_ bv1 32))) (.cse16 (not (= ~waterLevel~0 (_ bv3 32)))) (.cse21 (not (= ULTIMATE.start_activatePump_~tmp~7 (_ bv0 32)))) (.cse22 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse23 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse11 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse1 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse4 (= ~waterLevel~0 (_ bv0 32))) (.cse20 (= (_ bv0 32) (bvadd ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp___0~0 (_ bv4294967295 32)))) (.cse5 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse2 (= (_ bv1 32) ~pumpRunning~0)) (.cse3 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse6 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse18 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse17 (= (_ bv0 32) ~pumpRunning~0)) (.cse7 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse24 (= ~waterLevel~0 (_ bv2 32))) (.cse15 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse19 (= (_ bv0 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse8 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse10 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse2 .cse3 .cse6 .cse7 .cse12 .cse13 .cse14 .cse15 .cse8 .cse16 .cse10) (and .cse17 .cse5 .cse18 .cse7 .cse19 .cse8 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse6 .cse7 .cse20 .cse15 .cse8 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse6 .cse7 .cse15 .cse8 .cse9 .cse10 .cse11) (and .cse2 .cse3 .cse6 .cse7 .cse5 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32))) .cse8 .cse16 .cse10) (and .cse0 .cse1 .cse4 (or (and .cse21 .cse17 .cse5 .cse7 .cse19 .cse13 .cse8 .cse10) (and .cse17 .cse5 .cse7 .cse22 .cse19 .cse13 .cse8 .cse10 .cse23))) (and .cse2 .cse3 .cse6 .cse7 .cse5 .cse12 .cse13 .cse14 .cse8 .cse16 .cse10) (and .cse0 .cse1 .cse4 (or (and .cse21 .cse17 .cse7 .cse15 .cse19 .cse8 .cse10 .cse11) (and .cse17 .cse7 .cse22 .cse15 .cse19 .cse8 .cse10 .cse23 .cse11))) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse20 .cse8 .cse10) (and .cse17 .cse5 .cse7 .cse24 .cse19 .cse8 .cse10) (and .cse2 .cse3 .cse7 .cse6 .cse24 .cse15 .cse8 .cse10) (and .cse17 .cse18 .cse7 .cse15 .cse19 .cse8 .cse10) (and .cse17 .cse7 .cse24 .cse15 .cse19 .cse8 .cse10))) [2019-12-07 11:38:44,751 INFO L242 CegarLoopResult]: At program point L59-1(lines 718 724) the Hoare annotation is: false [2019-12-07 11:38:44,752 INFO L242 CegarLoopResult]: At program point L59-2(lines 718 724) the Hoare annotation is: false [2019-12-07 11:38:44,752 INFO L249 CegarLoopResult]: At program point L192(lines 173 195) the Hoare annotation is: true [2019-12-07 11:38:44,752 INFO L246 CegarLoopResult]: For program point L754(lines 754 762) no Hoare annotation was computed. [2019-12-07 11:38:44,752 INFO L246 CegarLoopResult]: For program point L754-1(lines 754 762) no Hoare annotation was computed. [2019-12-07 11:38:44,752 INFO L246 CegarLoopResult]: For program point L754-2(lines 754 762) no Hoare annotation was computed. [2019-12-07 11:38:44,752 INFO L242 CegarLoopResult]: At program point L655(lines 646 659) the Hoare annotation is: false [2019-12-07 11:38:44,752 INFO L246 CegarLoopResult]: For program point L754-3(lines 754 762) no Hoare annotation was computed. [2019-12-07 11:38:44,752 INFO L242 CegarLoopResult]: At program point L655-1(lines 646 659) the Hoare annotation is: (let ((.cse0 (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0)) (.cse1 (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|)) (.cse7 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse10 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse12 (not (= ULTIMATE.start_activatePump_~tmp~7 (_ bv0 32)))) (.cse2 (= ~waterLevel~0 (_ bv0 32))) (.cse3 (= (_ bv1 32) |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse14 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse11 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse6 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse4 (= (_ bv0 32) ~pumpRunning~0)) (.cse13 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse5 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse15 (= ~waterLevel~0 (_ bv2 32))) (.cse8 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) (.cse9 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32)))) (or (and .cse0 .cse1 .cse2 (or (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse3 .cse12 .cse4 .cse5 .cse6 .cse8 .cse9 .cse11))) (and .cse0 .cse1 (or (and .cse3 .cse4 .cse5 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse3 .cse12 .cse4 .cse5 .cse8 .cse9 .cse11)) .cse2 .cse13) (and .cse3 .cse4 .cse14 .cse5 .cse6 .cse8 .cse9 .cse11) (and .cse3 .cse4 .cse14 .cse5 .cse13 .cse8 .cse9 .cse11) (and .cse4 .cse5 .cse15 .cse6 .cse8 .cse9) (and .cse4 .cse13 .cse5 .cse15 .cse8 .cse9))) [2019-12-07 11:38:44,752 INFO L246 CegarLoopResult]: For program point L754-4(lines 754 762) no Hoare annotation was computed. [2019-12-07 11:38:44,752 INFO L242 CegarLoopResult]: At program point L655-2(lines 646 659) the Hoare annotation is: false [2019-12-07 11:38:44,752 INFO L246 CegarLoopResult]: For program point L754-5(lines 754 762) no Hoare annotation was computed. [2019-12-07 11:38:44,752 INFO L242 CegarLoopResult]: At program point L655-3(lines 646 659) the Hoare annotation is: false [2019-12-07 11:38:44,752 INFO L242 CegarLoopResult]: At program point L655-4(lines 646 659) the Hoare annotation is: false [2019-12-07 11:38:44,752 INFO L242 CegarLoopResult]: At program point L655-5(lines 646 659) the Hoare annotation is: false [2019-12-07 11:38:44,752 INFO L246 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2019-12-07 11:38:44,752 INFO L246 CegarLoopResult]: For program point L954(lines 954 967) no Hoare annotation was computed. [2019-12-07 11:38:44,752 INFO L242 CegarLoopResult]: At program point L691(lines 686 694) the Hoare annotation is: (and (= (_ bv0 32) ~pumpRunning~0) (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32))) (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32))) (= ~methaneLevelCritical~0 (_ bv0 32)) (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|)) [2019-12-07 11:38:44,753 INFO L242 CegarLoopResult]: At program point L725(lines 725 731) the Hoare annotation is: (let ((.cse11 (bvslt ~waterLevel~0 (_ bv2 32))) (.cse5 (= (_ bv0 32) ~pumpRunning~0)) (.cse6 (= (_ bv0 32) (bvadd ~systemActive~0 (_ bv4294967295 32)))) (.cse9 (= ULTIMATE.start_test_~splverifierCounter~0 (_ bv0 32))) (.cse23 (= (_ bv2 32) ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0))) (let ((.cse12 (not (= ULTIMATE.start_activatePump_~tmp~7 (_ bv0 32)))) (.cse8 (= (bvadd |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv4294967295 32)) (_ bv0 32))) (.cse10 (= (_ bv0 32) (bvadd |ULTIMATE.start_isMethaneAlarm_#res| (_ bv4294967295 32)))) (.cse4 (= ~waterLevel~0 (_ bv0 32))) (.cse20 (not (= (_ bv2 32) |ULTIMATE.start_getWaterLevel_#res|))) (.cse15 (not .cse23)) (.cse18 (= |ULTIMATE.start_isMethaneLevelCritical_#res| (_ bv0 32))) (.cse13 (= (_ bv1 32) ~pumpRunning~0)) (.cse14 (= (_ bv1 32) ~switchedOnBeforeTS~0)) (.cse19 (= (_ bv1 32) |ULTIMATE.start_isPumpRunning_#res|)) (.cse16 (= ULTIMATE.start_processEnvironment_~tmp~6 (_ bv0 32))) (.cse17 (= |ULTIMATE.start_isMethaneAlarm_#res| (_ bv0 32))) (.cse2 (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967295 32)))) (.cse0 (or (and .cse5 .cse6 .cse9 .cse11) (and .cse23 .cse5 .cse6 .cse9))) (.cse7 (= ~methaneLevelCritical~0 (_ bv0 32))) (.cse1 (= (_ bv0 32) (bvadd ~methaneLevelCritical~0 (_ bv4294967295 32)))) (.cse22 (= ~waterLevel~0 (_ bv2 32))) (.cse3 (= (_ bv1 32) |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 .cse3) (and (= ~waterLevel~0 ULTIMATE.start___utac_acc__Specification5_spec__3_~tmp~0) (= ~waterLevel~0 |ULTIMATE.start_getWaterLevel_#res|) .cse4 (or (and .cse5 .cse6 .cse7 .cse8 .cse3 .cse9 .cse10 .cse11) (and .cse12 .cse5 .cse6 .cse7 .cse3 .cse9 .cse11))) (and .cse13 .cse14 .cse4 .cse6 .cse15 .cse7 .cse3 .cse16 .cse17 .cse18 .cse19 .cse20 .cse9) (and (let ((.cse21 (not (= (_ bv0 32) (bvadd ~waterLevel~0 (_ bv4294967294 32)))))) (or (and .cse12 .cse5 .cse1 .cse6 .cse3 .cse9 .cse21) (and .cse5 .cse1 .cse6 .cse8 .cse3 .cse9 .cse21 .cse10))) .cse4 .cse20 .cse15) (and .cse18 .cse13 .cse6 .cse22 .cse7 .cse3 .cse9 .cse17) (and .cse5 .cse6 .cse22 .cse7 .cse3 .cse9) (and .cse18 .cse13 .cse14 .cse2 .cse19 .cse6 .cse7 .cse3 .cse9 .cse16 .cse17) (and .cse2 .cse0 .cse7 .cse3) (and .cse5 .cse1 .cse6 .cse22 .cse3 .cse9)))) [2019-12-07 11:38:44,753 INFO L242 CegarLoopResult]: At program point L725-1(lines 725 731) the Hoare annotation is: false [2019-12-07 11:38:44,753 INFO L242 CegarLoopResult]: At program point L725-2(lines 725 731) the Hoare annotation is: false [2019-12-07 11:38:44,753 INFO L246 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2019-12-07 11:38:44,753 INFO L246 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 700) no Hoare annotation was computed. [2019-12-07 11:38:44,753 INFO L246 CegarLoopResult]: For program point L925(lines 924 971) no Hoare annotation was computed. [2019-12-07 11:38:44,753 INFO L246 CegarLoopResult]: For program point L926(lines 926 930) no Hoare annotation was computed. [2019-12-07 11:38:44,818 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 07.12 11:38:44 BoogieIcfgContainer [2019-12-07 11:38:44,818 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2019-12-07 11:38:44,818 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-12-07 11:38:44,818 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-12-07 11:38:44,818 INFO L275 PluginConnector]: Witness Printer initialized [2019-12-07 11:38:44,818 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 11:37:51" (3/4) ... [2019-12-07 11:38:44,821 INFO L137 WitnessPrinter]: Generating witness for correct program [2019-12-07 11:38:44,834 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2019-12-07 11:38:44,835 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2019-12-07 11:38:44,836 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2019-12-07 11:38:44,837 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2019-12-07 11:38:44,837 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2019-12-07 11:38:44,838 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 11:38:44,839 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2019-12-07 11:38:44,859 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result [2019-12-07 11:38:44,859 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result [2019-12-07 11:38:44,859 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result [2019-12-07 11:38:44,859 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))))) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32))) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && \result == 0bv32) && \result == 0bv32) && waterLevel == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && \result == 0bv32) && \result == 0bv32) && waterLevel == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && \result == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && \result == 0bv32) && 2bv32 == \result)) || (((((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result) [2019-12-07 11:38:44,859 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))))) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32))) || (((((((((((waterLevel == tmp && \result == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32) && ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || ((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32))) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) [2019-12-07 11:38:44,859 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) || ((((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && (((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) || (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32)))) && waterLevel == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && tmp == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && tmp == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 11:38:44,860 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) || ((((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && (((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) || (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32)))) && waterLevel == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && tmp == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && tmp == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 11:38:44,860 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32))) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || (((((((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || (((((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(waterLevel == 3bv32)) && 1bv32 == \result) && (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32))) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) [2019-12-07 11:38:44,860 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))))) || ((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 11:38:44,860 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32))) || ((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || (((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)))) || ((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((1bv32 == switchedOnBeforeTS && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 11:38:44,860 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))))) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && \result == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && splverifierCounter == 0bv32)) || ((((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) && waterLevel == 0bv32) && !(2bv32 == \result)) && !(2bv32 == tmp))) || (((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && tmp == 0bv32) && \result == 0bv32)) || (((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && methaneLevelCritical == 0bv32) && 1bv32 == \result)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 11:38:44,861 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((waterLevel == \result && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || ((waterLevel == \result && waterLevel == 0bv32) && ((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((((((waterLevel == \result && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result) && \result == 0bv32)) || ((waterLevel == \result && (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || (((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))))) && waterLevel == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result) [2019-12-07 11:38:44,861 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) || (((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) [2019-12-07 11:38:44,862 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && \result == 0bv32) && \result == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && splverifierCounter == 0bv32) || ((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || ((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == tmp)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && !(2bv32 == \result)) && splverifierCounter == 0bv32) [2019-12-07 11:38:44,862 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && (((((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || (((((((1bv32 == \result && !(tmp == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)))) || ((((waterLevel == tmp && waterLevel == \result) && ((((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((1bv32 == \result && !(tmp == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)))) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32))) || (((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 11:38:44,862 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((waterLevel == tmp && waterLevel == \result) && (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && !(2bv32 == tmp)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || (((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)))) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32))) || ((((((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)))) [2019-12-07 11:38:44,863 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 11:38:44,864 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) || ((((((\result == 0bv32 && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) [2019-12-07 11:38:44,864 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || (((((((\result == 0bv32 && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && \result == 0bv32) [2019-12-07 11:38:44,904 INFO L141 WitnessManager]: Wrote witness to /tmp/vcloud-vcloud-master/worker/run_dir_d85fa073-2055-4e13-8e3b-fd583c931e34/bin/utaipan/witness.graphml [2019-12-07 11:38:44,904 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-12-07 11:38:44,905 INFO L168 Benchmark]: Toolchain (without parser) took 54162.36 ms. Allocated memory was 1.0 GB in the beginning and 1.6 GB in the end (delta: 525.3 MB). Free memory was 947.0 MB in the beginning and 1.3 GB in the end (delta: -341.2 MB). Peak memory consumption was 184.2 MB. Max. memory is 11.5 GB. [2019-12-07 11:38:44,905 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 11:38:44,905 INFO L168 Benchmark]: CACSL2BoogieTranslator took 374.13 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 129.5 MB). Free memory was 947.0 MB in the beginning and 1.1 GB in the end (delta: -156.8 MB). Peak memory consumption was 21.2 MB. Max. memory is 11.5 GB. [2019-12-07 11:38:44,905 INFO L168 Benchmark]: Boogie Procedure Inliner took 48.62 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2019-12-07 11:38:44,905 INFO L168 Benchmark]: Boogie Preprocessor took 40.62 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 11:38:44,906 INFO L168 Benchmark]: RCFGBuilder took 598.77 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 84.1 MB). Peak memory consumption was 84.1 MB. Max. memory is 11.5 GB. [2019-12-07 11:38:44,906 INFO L168 Benchmark]: TraceAbstraction took 53011.26 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 395.8 MB). Free memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: -289.7 MB). Peak memory consumption was 682.5 MB. Max. memory is 11.5 GB. [2019-12-07 11:38:44,906 INFO L168 Benchmark]: Witness Printer took 85.84 ms. Allocated memory is still 1.6 GB. Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: 14.5 MB). Peak memory consumption was 14.5 MB. Max. memory is 11.5 GB. [2019-12-07 11:38:44,907 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 981.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 374.13 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 129.5 MB). Free memory was 947.0 MB in the beginning and 1.1 GB in the end (delta: -156.8 MB). Peak memory consumption was 21.2 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 48.62 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 40.62 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 598.77 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 84.1 MB). Peak memory consumption was 84.1 MB. Max. memory is 11.5 GB. * TraceAbstraction took 53011.26 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 395.8 MB). Free memory was 1.0 GB in the beginning and 1.3 GB in the end (delta: -289.7 MB). Peak memory consumption was 682.5 MB. Max. memory is 11.5 GB. * Witness Printer took 85.84 ms. Allocated memory is still 1.6 GB. Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: 14.5 MB). Peak memory consumption was 14.5 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 700]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 700]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 700]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || (((((((\result == 0bv32 && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && \result == 0bv32) - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: (((((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) || (((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) - InvariantResult [Line: 923]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32 - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) || ((((((\result == 0bv32 && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 686]: Loop Invariant Derived loop invariant: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: ((((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && \result == 0bv32) && \result == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && splverifierCounter == 0bv32) || ((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) || ((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == tmp)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && !(2bv32 == \result)) && splverifierCounter == 0bv32) - InvariantResult [Line: 718]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 646]: Loop Invariant Derived loop invariant: (((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && (((((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || (((((((1bv32 == \result && !(tmp == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)))) || ((((waterLevel == tmp && waterLevel == \result) && ((((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((1bv32 == \result && !(tmp == 0bv32)) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)))) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32))) || (((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((1bv32 == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))))) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32))) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && \result == 0bv32) && \result == 0bv32) && waterLevel == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && \result == 0bv32) && \result == 0bv32) && waterLevel == \result) && 1bv32 == \result) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && splverifierCounter == 0bv32)) || (((((((((waterLevel == tmp && \result == 0bv32) && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && \result == 0bv32) && 2bv32 == \result)) || (((((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result) - InvariantResult [Line: 718]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 0bv32 == \result) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32))))) || ((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 646]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 646]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 646]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 962]: Loop Invariant Derived loop invariant: ((((((((((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) || ((((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && (((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) || (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32)))) && waterLevel == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && tmp == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && tmp == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 646]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 841]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 183]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 718]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: ((((((((((((((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) || ((((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && (((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) || (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32)))) && waterLevel == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && tmp == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((1bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && tmp == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 646]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: (((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(tmp == 0bv32)) && \result == 0bv32) && tmp___0 == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 841]: Loop Invariant Derived loop invariant: (((((((((((((((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 0bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || (((((((((waterLevel == tmp && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32))) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || (((((((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && (((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || (((((((1bv32 == pumpRunning && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && 1bv32 == \result) && !(waterLevel == 3bv32)) && splverifierCounter == 0bv32)) || (((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(waterLevel == 3bv32)) && 1bv32 == \result) && (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && splverifierCounter == 0bv32))) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) - InvariantResult [Line: 714]: Loop Invariant Derived loop invariant: ((((((((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32))) || ((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || (((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && (!(2bv32 == \result) || !(waterLevel == 3bv32))) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)))) || ((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && !(2bv32 == tmp)) && 1bv32 == \result) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && splverifierCounter == 0bv32)) || (((((((1bv32 == switchedOnBeforeTS && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 151]: Loop Invariant Derived loop invariant: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result - InvariantResult [Line: 714]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 841]: Loop Invariant Derived loop invariant: ((((((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) || ((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((waterLevel == tmp && waterLevel == \result) && (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && !(2bv32 == tmp)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || (((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == \result) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)))) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32))) || ((((((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 0bv32 == \result) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 0bv32 == \result) && !(2bv32 == tmp)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)))) - InvariantResult [Line: 104]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 44]: Loop Invariant Derived loop invariant: (((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 841]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 714]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 841]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 725]: Loop Invariant Derived loop invariant: ((((((((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))))) || ((((((((((((1bv32 == pumpRunning && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == tmp)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && \result == 0bv32) && 1bv32 == \result) && !(2bv32 == \result)) && splverifierCounter == 0bv32)) || ((((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) || (((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32))) && waterLevel == 0bv32) && !(2bv32 == \result)) && !(2bv32 == tmp))) || (((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && tmp == 0bv32) && \result == 0bv32)) || (((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && methaneLevelCritical == 0bv32) && 1bv32 == \result)) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) - InvariantResult [Line: 841]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 934]: Loop Invariant Derived loop invariant: (((((((((((((((((((((waterLevel == tmp && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && \result == 0bv32) && waterLevel == \result) && \result == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || (((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)) || ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))))) || ((((waterLevel == tmp && waterLevel == \result) && waterLevel == 0bv32) && ((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32)))) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32))) || (((((((((((waterLevel == tmp && \result == 0bv32) && waterLevel == \result) && 1bv32 == pumpRunning) && waterLevel == 0bv32) && 1bv32 == \result) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(tmp___0, 4294967295bv32)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967294bv32)) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((0bv32 == ~bvadd64(waterLevel, 4294967295bv32) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || ((((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) && methaneLevelCritical == 0bv32) && !(waterLevel == 3bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32) && \result == 0bv32)) || (((((((waterLevel == tmp && waterLevel == \result) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && ((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || (((2bv32 == tmp && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && splverifierCounter == 0bv32))) && 1bv32 == \result) && !(waterLevel == 3bv32)) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32)))) || (((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32)) || ((((0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32) && ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || ((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && splverifierCounter == 0bv32))) && !(2bv32 == \result)) && !(2bv32 == tmp)) && waterLevel == 1bv32) - InvariantResult [Line: 886]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 637]: Loop Invariant Derived loop invariant: ((((((((((((((((((waterLevel == \result && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32) || ((waterLevel == \result && waterLevel == 0bv32) && ((((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32)) || ((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) && ~bvslt32(waterLevel, 2bv32))))) || ((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result)) || (((((((((((waterLevel == \result && \result == 0bv32) && 1bv32 == pumpRunning) && 1bv32 == switchedOnBeforeTS) && waterLevel == 0bv32) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 1bv32 == \result) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && tmp == 0bv32) && splverifierCounter == 0bv32) && \result == 0bv32)) || ((((((((waterLevel == \result && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(waterLevel, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && !(2bv32 == \result)) && 1bv32 == \result) && splverifierCounter == 0bv32) && ~bvslt32(waterLevel, 2bv32))) || ((((((((\result == 0bv32 && 1bv32 == pumpRunning) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && methaneLevelCritical == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result) && \result == 0bv32)) || ((waterLevel == \result && (((((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && ~bvadd64(\result, 4294967295bv32) == 0bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))) && 0bv32 == ~bvadd64(\result, 4294967295bv32)) || (((((((!(tmp == 0bv32) && 0bv32 == pumpRunning) && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && !(2bv32 == \result)) && 1bv32 == \result) && splverifierCounter == 0bv32) && !(0bv32 == ~bvadd64(waterLevel, 4294967294bv32))))) && waterLevel == 0bv32)) || ((((((0bv32 == pumpRunning && 0bv32 == ~bvadd64(methaneLevelCritical, 4294967295bv32)) && 0bv32 == ~bvadd64(systemActive, 4294967295bv32)) && waterLevel == 2bv32) && 1bv32 == \result) && splverifierCounter == 0bv32) && 2bv32 == \result) - InvariantResult [Line: 637]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 637]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 173]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 830]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 605]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 138 locations, 3 error locations. Result: SAFE, OverallTime: 14.7s, OverallIterations: 16, TraceHistogramMax: 4, AutomataDifference: 3.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 38.1s, HoareTripleCheckerStatistics: 1987 SDtfs, 4105 SDslu, 5528 SDs, 0 SdLazy, 769 SolverSat, 165 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.5s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 3544 GetRequests, 3401 SyntacticMatches, 2 SemanticMatches, 141 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 225 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=738occurred in iteration=13, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 16 MinimizatonAttempts, 3053 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 62 LocationsWithAnnotation, 62 PreInvPairs, 472 NumberOfFragments, 5895 HoareAnnotationTreeSize, 62 FomulaSimplifications, 33357884 FormulaSimplificationTreeSizeReduction, 3.2s HoareSimplificationTime, 62 FomulaSimplificationsInter, 8913488 FormulaSimplificationTreeSizeReductionInter, 34.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.5s SsaConstructionTime, 3.8s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 1748 NumberOfCodeBlocks, 1748 NumberOfCodeBlocksAsserted, 27 NumberOfCheckSat, 3448 ConstructedInterpolants, 0 QuantifiedInterpolants, 692019 SizeOfPredicates, 93 NumberOfNonLiveVariables, 6190 ConjunctsInSsa, 131 ConjunctsInUnsatCore, 48 InterpolantComputations, 25 PerfectInterpolantSequences, 2564/2796 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...