./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ef0694c6828fdd41a19c9b426d075f4f4dde925f ....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 18:58:21,623 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 18:58:21,626 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 18:58:21,639 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 18:58:21,639 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 18:58:21,641 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 18:58:21,642 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 18:58:21,645 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 18:58:21,647 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 18:58:21,649 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 18:58:21,651 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 18:58:21,658 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 18:58:21,659 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 18:58:21,662 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 18:58:21,663 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 18:58:21,665 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 18:58:21,666 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 18:58:21,669 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 18:58:21,673 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 18:58:21,678 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 18:58:21,683 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 18:58:21,684 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 18:58:21,687 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 18:58:21,691 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 18:58:21,694 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 18:58:21,694 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 18:58:21,694 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 18:58:21,696 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 18:58:21,696 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 18:58:21,697 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 18:58:21,698 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 18:58:21,698 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 18:58:21,699 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 18:58:21,700 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 18:58:21,701 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 18:58:21,702 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 18:58:21,702 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 18:58:21,703 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 18:58:21,703 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 18:58:21,704 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 18:58:21,705 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 18:58:21,706 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 18:58:21,721 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 18:58:21,722 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 18:58:21,723 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 18:58:21,723 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 18:58:21,724 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 18:58:21,724 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 18:58:21,724 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 18:58:21,725 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 18:58:21,725 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 18:58:21,725 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 18:58:21,726 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 18:58:21,726 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 18:58:21,726 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 18:58:21,726 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 18:58:21,727 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 18:58:21,727 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 18:58:21,727 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 18:58:21,728 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 18:58:21,728 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 18:58:21,728 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 18:58:21,728 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 18:58:21,729 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 18:58:21,729 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 18:58:21,729 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 18:58:21,730 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 18:58:21,730 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 18:58:21,730 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 18:58:21,731 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 18:58:21,731 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 18:58:21,731 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ef0694c6828fdd41a19c9b426d075f4f4dde925f [2020-07-28 18:58:22,029 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 18:58:22,051 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 18:58:22,056 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 18:58:22,058 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 18:58:22,061 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 18:58:22,062 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c [2020-07-28 18:58:22,144 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d4dfa45e4/70cf0cbdfbcc4e8291f8ae0e1d8c9c76/FLAG6c7b6c7ee [2020-07-28 18:58:22,692 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 18:58:22,693 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec1_product47.cil.c [2020-07-28 18:58:22,710 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d4dfa45e4/70cf0cbdfbcc4e8291f8ae0e1d8c9c76/FLAG6c7b6c7ee [2020-07-28 18:58:22,959 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d4dfa45e4/70cf0cbdfbcc4e8291f8ae0e1d8c9c76 [2020-07-28 18:58:22,962 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 18:58:22,965 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 18:58:22,967 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 18:58:22,967 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 18:58:22,971 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 18:58:22,973 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 06:58:22" (1/1) ... [2020-07-28 18:58:22,977 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@62774497 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:58:22, skipping insertion in model container [2020-07-28 18:58:22,977 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 06:58:22" (1/1) ... [2020-07-28 18:58:22,984 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 18:58:23,031 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 18:58:23,437 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 18:58:23,535 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 18:58:23,640 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 18:58:23,680 INFO L208 MainTranslator]: Completed translation [2020-07-28 18:58:23,680 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:58:23 WrapperNode [2020-07-28 18:58:23,680 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 18:58:23,681 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 18:58:23,682 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 18:58:23,682 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 18:58:23,691 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:58:23" (1/1) ... [2020-07-28 18:58:23,719 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:58:23" (1/1) ... [2020-07-28 18:58:23,792 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 18:58:23,792 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 18:58:23,793 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 18:58:23,793 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 18:58:23,804 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:58:23" (1/1) ... [2020-07-28 18:58:23,805 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:58:23" (1/1) ... [2020-07-28 18:58:23,810 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:58:23" (1/1) ... [2020-07-28 18:58:23,810 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:58:23" (1/1) ... [2020-07-28 18:58:23,829 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:58:23" (1/1) ... [2020-07-28 18:58:23,840 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:58:23" (1/1) ... [2020-07-28 18:58:23,844 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:58:23" (1/1) ... [2020-07-28 18:58:23,851 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 18:58:23,852 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 18:58:23,852 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 18:58:23,852 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 18:58:23,854 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:58:23" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 18:58:23,918 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 18:58:23,919 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 18:58:23,919 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 18:58:23,919 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 18:58:25,521 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 18:58:25,521 INFO L295 CfgBuilder]: Removed 196 assume(true) statements. [2020-07-28 18:58:25,527 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 06:58:25 BoogieIcfgContainer [2020-07-28 18:58:25,527 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 18:58:25,529 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 18:58:25,529 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 18:58:25,533 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 18:58:25,534 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 06:58:22" (1/3) ... [2020-07-28 18:58:25,535 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@20a735da and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 06:58:25, skipping insertion in model container [2020-07-28 18:58:25,535 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:58:23" (2/3) ... [2020-07-28 18:58:25,535 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@20a735da and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 06:58:25, skipping insertion in model container [2020-07-28 18:58:25,536 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 06:58:25" (3/3) ... [2020-07-28 18:58:25,538 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec1_product47.cil.c [2020-07-28 18:58:25,550 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 18:58:25,559 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 18:58:25,575 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 18:58:25,603 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 18:58:25,603 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 18:58:25,604 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 18:58:25,604 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 18:58:25,605 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 18:58:25,605 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 18:58:25,605 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 18:58:25,605 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 18:58:25,628 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states. [2020-07-28 18:58:25,636 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2020-07-28 18:58:25,636 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:58:25,637 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:58:25,638 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:58:25,645 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:58:25,646 INFO L82 PathProgramCache]: Analyzing trace with hash -330245923, now seen corresponding path program 1 times [2020-07-28 18:58:25,658 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:58:25,659 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [260730269] [2020-07-28 18:58:25,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:58:25,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:58:26,081 INFO L280 TraceCheckUtils]: 0: Hoare triple {134#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {134#true} is VALID [2020-07-28 18:58:26,082 INFO L280 TraceCheckUtils]: 1: Hoare triple {134#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {134#true} is VALID [2020-07-28 18:58:26,082 INFO L280 TraceCheckUtils]: 2: Hoare triple {134#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {134#true} is VALID [2020-07-28 18:58:26,083 INFO L280 TraceCheckUtils]: 3: Hoare triple {134#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {134#true} is VALID [2020-07-28 18:58:26,083 INFO L280 TraceCheckUtils]: 4: Hoare triple {134#true} assume 0 != main_~tmp~9; {134#true} is VALID [2020-07-28 18:58:26,085 INFO L280 TraceCheckUtils]: 5: Hoare triple {134#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {134#true} is VALID [2020-07-28 18:58:26,086 INFO L280 TraceCheckUtils]: 6: Hoare triple {134#true} assume !true; {135#false} is VALID [2020-07-28 18:58:26,087 INFO L280 TraceCheckUtils]: 7: Hoare triple {135#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {135#false} is VALID [2020-07-28 18:58:26,087 INFO L280 TraceCheckUtils]: 8: Hoare triple {135#false} assume !(0 != ~pumpRunning~0); {135#false} is VALID [2020-07-28 18:58:26,087 INFO L280 TraceCheckUtils]: 9: Hoare triple {135#false} assume !(0 != ~systemActive~0); {135#false} is VALID [2020-07-28 18:58:26,088 INFO L280 TraceCheckUtils]: 10: Hoare triple {135#false} havoc __utac_acc__Specification1_spec__1_#t~ret0, __utac_acc__Specification1_spec__1_#t~ret1, __utac_acc__Specification1_spec__1_~tmp~0, __utac_acc__Specification1_spec__1_~tmp___0~0;havoc __utac_acc__Specification1_spec__1_~tmp~0;havoc __utac_acc__Specification1_spec__1_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {135#false} is VALID [2020-07-28 18:58:26,088 INFO L280 TraceCheckUtils]: 11: Hoare triple {135#false} __utac_acc__Specification1_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret0 && __utac_acc__Specification1_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0 := __utac_acc__Specification1_spec__1_#t~ret0;havoc __utac_acc__Specification1_spec__1_#t~ret0; {135#false} is VALID [2020-07-28 18:58:26,089 INFO L280 TraceCheckUtils]: 12: Hoare triple {135#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {135#false} is VALID [2020-07-28 18:58:26,089 INFO L280 TraceCheckUtils]: 13: Hoare triple {135#false} __utac_acc__Specification1_spec__1_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret1 && __utac_acc__Specification1_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0 := __utac_acc__Specification1_spec__1_#t~ret1;havoc __utac_acc__Specification1_spec__1_#t~ret1; {135#false} is VALID [2020-07-28 18:58:26,090 INFO L280 TraceCheckUtils]: 14: Hoare triple {135#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0; {135#false} is VALID [2020-07-28 18:58:26,090 INFO L280 TraceCheckUtils]: 15: Hoare triple {135#false} assume !false; {135#false} is VALID [2020-07-28 18:58:26,094 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:58:26,095 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [260730269] [2020-07-28 18:58:26,096 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:58:26,097 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 18:58:26,098 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1484896983] [2020-07-28 18:58:26,105 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 16 [2020-07-28 18:58:26,107 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:58:26,111 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 18:58:26,149 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 16 edges. 16 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:26,149 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 18:58:26,150 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:58:26,159 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 18:58:26,160 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 18:58:26,163 INFO L87 Difference]: Start difference. First operand 131 states. Second operand 2 states. [2020-07-28 18:58:26,470 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:26,470 INFO L93 Difference]: Finished difference Result 256 states and 383 transitions. [2020-07-28 18:58:26,471 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 18:58:26,471 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 16 [2020-07-28 18:58:26,471 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:58:26,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 18:58:26,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 383 transitions. [2020-07-28 18:58:26,490 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 18:58:26,497 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 383 transitions. [2020-07-28 18:58:26,498 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 383 transitions. [2020-07-28 18:58:26,989 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 383 edges. 383 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:27,009 INFO L225 Difference]: With dead ends: 256 [2020-07-28 18:58:27,009 INFO L226 Difference]: Without dead ends: 127 [2020-07-28 18:58:27,014 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 18:58:27,041 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 127 states. [2020-07-28 18:58:27,097 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 127 to 127. [2020-07-28 18:58:27,097 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:58:27,098 INFO L82 GeneralOperation]: Start isEquivalent. First operand 127 states. Second operand 127 states. [2020-07-28 18:58:27,098 INFO L74 IsIncluded]: Start isIncluded. First operand 127 states. Second operand 127 states. [2020-07-28 18:58:27,098 INFO L87 Difference]: Start difference. First operand 127 states. Second operand 127 states. [2020-07-28 18:58:27,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:27,107 INFO L93 Difference]: Finished difference Result 127 states and 183 transitions. [2020-07-28 18:58:27,108 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 183 transitions. [2020-07-28 18:58:27,109 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:27,109 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:27,109 INFO L74 IsIncluded]: Start isIncluded. First operand 127 states. Second operand 127 states. [2020-07-28 18:58:27,110 INFO L87 Difference]: Start difference. First operand 127 states. Second operand 127 states. [2020-07-28 18:58:27,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:27,117 INFO L93 Difference]: Finished difference Result 127 states and 183 transitions. [2020-07-28 18:58:27,117 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 183 transitions. [2020-07-28 18:58:27,119 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:27,119 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:27,119 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:58:27,119 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:58:27,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 127 states. [2020-07-28 18:58:27,126 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 127 states to 127 states and 183 transitions. [2020-07-28 18:58:27,128 INFO L78 Accepts]: Start accepts. Automaton has 127 states and 183 transitions. Word has length 16 [2020-07-28 18:58:27,128 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:58:27,128 INFO L479 AbstractCegarLoop]: Abstraction has 127 states and 183 transitions. [2020-07-28 18:58:27,128 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 18:58:27,128 INFO L276 IsEmpty]: Start isEmpty. Operand 127 states and 183 transitions. [2020-07-28 18:58:27,129 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2020-07-28 18:58:27,130 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:58:27,130 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:58:27,130 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 18:58:27,131 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:58:27,131 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:58:27,131 INFO L82 PathProgramCache]: Analyzing trace with hash 450073546, now seen corresponding path program 1 times [2020-07-28 18:58:27,131 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:58:27,132 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [891834919] [2020-07-28 18:58:27,132 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:58:27,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:58:27,310 INFO L280 TraceCheckUtils]: 0: Hoare triple {938#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {938#true} is VALID [2020-07-28 18:58:27,310 INFO L280 TraceCheckUtils]: 1: Hoare triple {938#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {938#true} is VALID [2020-07-28 18:58:27,311 INFO L280 TraceCheckUtils]: 2: Hoare triple {938#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {938#true} is VALID [2020-07-28 18:58:27,311 INFO L280 TraceCheckUtils]: 3: Hoare triple {938#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {938#true} is VALID [2020-07-28 18:58:27,311 INFO L280 TraceCheckUtils]: 4: Hoare triple {938#true} assume 0 != main_~tmp~9; {938#true} is VALID [2020-07-28 18:58:27,314 INFO L280 TraceCheckUtils]: 5: Hoare triple {938#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {940#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 18:58:27,314 INFO L280 TraceCheckUtils]: 6: Hoare triple {940#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {940#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 18:58:27,315 INFO L280 TraceCheckUtils]: 7: Hoare triple {940#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {939#false} is VALID [2020-07-28 18:58:27,316 INFO L280 TraceCheckUtils]: 8: Hoare triple {939#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {939#false} is VALID [2020-07-28 18:58:27,316 INFO L280 TraceCheckUtils]: 9: Hoare triple {939#false} assume !(0 != ~pumpRunning~0); {939#false} is VALID [2020-07-28 18:58:27,316 INFO L280 TraceCheckUtils]: 10: Hoare triple {939#false} assume !(0 != ~systemActive~0); {939#false} is VALID [2020-07-28 18:58:27,316 INFO L280 TraceCheckUtils]: 11: Hoare triple {939#false} havoc __utac_acc__Specification1_spec__1_#t~ret0, __utac_acc__Specification1_spec__1_#t~ret1, __utac_acc__Specification1_spec__1_~tmp~0, __utac_acc__Specification1_spec__1_~tmp___0~0;havoc __utac_acc__Specification1_spec__1_~tmp~0;havoc __utac_acc__Specification1_spec__1_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {939#false} is VALID [2020-07-28 18:58:27,317 INFO L280 TraceCheckUtils]: 12: Hoare triple {939#false} __utac_acc__Specification1_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret0 && __utac_acc__Specification1_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0 := __utac_acc__Specification1_spec__1_#t~ret0;havoc __utac_acc__Specification1_spec__1_#t~ret0; {939#false} is VALID [2020-07-28 18:58:27,317 INFO L280 TraceCheckUtils]: 13: Hoare triple {939#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {939#false} is VALID [2020-07-28 18:58:27,318 INFO L280 TraceCheckUtils]: 14: Hoare triple {939#false} __utac_acc__Specification1_spec__1_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret1 && __utac_acc__Specification1_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0 := __utac_acc__Specification1_spec__1_#t~ret1;havoc __utac_acc__Specification1_spec__1_#t~ret1; {939#false} is VALID [2020-07-28 18:58:27,319 INFO L280 TraceCheckUtils]: 15: Hoare triple {939#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0; {939#false} is VALID [2020-07-28 18:58:27,319 INFO L280 TraceCheckUtils]: 16: Hoare triple {939#false} assume !false; {939#false} is VALID [2020-07-28 18:58:27,323 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:58:27,323 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [891834919] [2020-07-28 18:58:27,323 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:58:27,324 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 18:58:27,324 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [287758225] [2020-07-28 18:58:27,326 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 17 [2020-07-28 18:58:27,327 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:58:27,327 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 18:58:27,354 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 17 edges. 17 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:27,354 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 18:58:27,355 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:58:27,355 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 18:58:27,355 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:58:27,356 INFO L87 Difference]: Start difference. First operand 127 states and 183 transitions. Second operand 3 states. [2020-07-28 18:58:27,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:27,615 INFO L93 Difference]: Finished difference Result 127 states and 183 transitions. [2020-07-28 18:58:27,615 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 18:58:27,615 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 17 [2020-07-28 18:58:27,615 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:58:27,615 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:58:27,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 183 transitions. [2020-07-28 18:58:27,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:58:27,621 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 183 transitions. [2020-07-28 18:58:27,621 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 183 transitions. [2020-07-28 18:58:27,829 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 183 edges. 183 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:27,833 INFO L225 Difference]: With dead ends: 127 [2020-07-28 18:58:27,833 INFO L226 Difference]: Without dead ends: 53 [2020-07-28 18:58:27,834 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:58:27,835 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2020-07-28 18:58:27,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2020-07-28 18:58:27,854 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:58:27,854 INFO L82 GeneralOperation]: Start isEquivalent. First operand 53 states. Second operand 53 states. [2020-07-28 18:58:27,854 INFO L74 IsIncluded]: Start isIncluded. First operand 53 states. Second operand 53 states. [2020-07-28 18:58:27,854 INFO L87 Difference]: Start difference. First operand 53 states. Second operand 53 states. [2020-07-28 18:58:27,858 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:27,859 INFO L93 Difference]: Finished difference Result 53 states and 76 transitions. [2020-07-28 18:58:27,859 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 76 transitions. [2020-07-28 18:58:27,865 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:27,865 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:27,865 INFO L74 IsIncluded]: Start isIncluded. First operand 53 states. Second operand 53 states. [2020-07-28 18:58:27,866 INFO L87 Difference]: Start difference. First operand 53 states. Second operand 53 states. [2020-07-28 18:58:27,869 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:27,870 INFO L93 Difference]: Finished difference Result 53 states and 76 transitions. [2020-07-28 18:58:27,870 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 76 transitions. [2020-07-28 18:58:27,870 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:27,871 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:27,871 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:58:27,871 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:58:27,871 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 53 states. [2020-07-28 18:58:27,873 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 76 transitions. [2020-07-28 18:58:27,875 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 76 transitions. Word has length 17 [2020-07-28 18:58:27,876 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:58:27,876 INFO L479 AbstractCegarLoop]: Abstraction has 53 states and 76 transitions. [2020-07-28 18:58:27,876 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 18:58:27,876 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 76 transitions. [2020-07-28 18:58:27,880 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2020-07-28 18:58:27,880 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:58:27,880 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:58:27,881 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 18:58:27,881 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:58:27,881 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:58:27,882 INFO L82 PathProgramCache]: Analyzing trace with hash 445162074, now seen corresponding path program 1 times [2020-07-28 18:58:27,882 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:58:27,883 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [153907753] [2020-07-28 18:58:27,884 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:58:27,941 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:58:28,011 INFO L280 TraceCheckUtils]: 0: Hoare triple {1305#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {1307#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:58:28,012 INFO L280 TraceCheckUtils]: 1: Hoare triple {1307#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {1307#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:58:28,013 INFO L280 TraceCheckUtils]: 2: Hoare triple {1307#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {1307#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:58:28,013 INFO L280 TraceCheckUtils]: 3: Hoare triple {1307#(= 1 ~systemActive~0)} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {1307#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:58:28,014 INFO L280 TraceCheckUtils]: 4: Hoare triple {1307#(= 1 ~systemActive~0)} assume 0 != main_~tmp~9; {1307#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:58:28,015 INFO L280 TraceCheckUtils]: 5: Hoare triple {1307#(= 1 ~systemActive~0)} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1307#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:58:28,015 INFO L280 TraceCheckUtils]: 6: Hoare triple {1307#(= 1 ~systemActive~0)} assume !false; {1307#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:58:28,016 INFO L280 TraceCheckUtils]: 7: Hoare triple {1307#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0 < 4; {1307#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:58:28,017 INFO L280 TraceCheckUtils]: 8: Hoare triple {1307#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {1307#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:58:28,017 INFO L280 TraceCheckUtils]: 9: Hoare triple {1307#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~5); {1307#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:58:28,018 INFO L280 TraceCheckUtils]: 10: Hoare triple {1307#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {1307#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:58:28,019 INFO L280 TraceCheckUtils]: 11: Hoare triple {1307#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2); {1307#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:58:28,022 INFO L280 TraceCheckUtils]: 12: Hoare triple {1307#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {1307#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:58:28,023 INFO L280 TraceCheckUtils]: 13: Hoare triple {1307#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0; {1307#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:58:28,024 INFO L280 TraceCheckUtils]: 14: Hoare triple {1307#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {1307#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:58:28,025 INFO L280 TraceCheckUtils]: 15: Hoare triple {1307#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {1306#false} is VALID [2020-07-28 18:58:28,025 INFO L280 TraceCheckUtils]: 16: Hoare triple {1306#false} havoc __utac_acc__Specification1_spec__1_#t~ret0, __utac_acc__Specification1_spec__1_#t~ret1, __utac_acc__Specification1_spec__1_~tmp~0, __utac_acc__Specification1_spec__1_~tmp___0~0;havoc __utac_acc__Specification1_spec__1_~tmp~0;havoc __utac_acc__Specification1_spec__1_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {1306#false} is VALID [2020-07-28 18:58:28,025 INFO L280 TraceCheckUtils]: 17: Hoare triple {1306#false} __utac_acc__Specification1_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret0 && __utac_acc__Specification1_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0 := __utac_acc__Specification1_spec__1_#t~ret0;havoc __utac_acc__Specification1_spec__1_#t~ret0; {1306#false} is VALID [2020-07-28 18:58:28,026 INFO L280 TraceCheckUtils]: 18: Hoare triple {1306#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {1306#false} is VALID [2020-07-28 18:58:28,026 INFO L280 TraceCheckUtils]: 19: Hoare triple {1306#false} __utac_acc__Specification1_spec__1_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret1 && __utac_acc__Specification1_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0 := __utac_acc__Specification1_spec__1_#t~ret1;havoc __utac_acc__Specification1_spec__1_#t~ret1; {1306#false} is VALID [2020-07-28 18:58:28,029 INFO L280 TraceCheckUtils]: 20: Hoare triple {1306#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0; {1306#false} is VALID [2020-07-28 18:58:28,030 INFO L280 TraceCheckUtils]: 21: Hoare triple {1306#false} assume !false; {1306#false} is VALID [2020-07-28 18:58:28,035 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:58:28,035 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [153907753] [2020-07-28 18:58:28,035 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:58:28,036 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 18:58:28,036 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1350297490] [2020-07-28 18:58:28,036 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 22 [2020-07-28 18:58:28,037 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:58:28,037 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 18:58:28,073 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 22 edges. 22 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:28,073 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 18:58:28,073 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:58:28,074 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 18:58:28,074 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:58:28,074 INFO L87 Difference]: Start difference. First operand 53 states and 76 transitions. Second operand 3 states. [2020-07-28 18:58:28,303 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:28,303 INFO L93 Difference]: Finished difference Result 147 states and 216 transitions. [2020-07-28 18:58:28,303 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 18:58:28,303 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 22 [2020-07-28 18:58:28,304 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:58:28,304 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:58:28,307 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 216 transitions. [2020-07-28 18:58:28,307 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:58:28,310 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 216 transitions. [2020-07-28 18:58:28,310 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 216 transitions. [2020-07-28 18:58:28,544 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 216 edges. 216 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:28,547 INFO L225 Difference]: With dead ends: 147 [2020-07-28 18:58:28,548 INFO L226 Difference]: Without dead ends: 100 [2020-07-28 18:58:28,548 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:58:28,549 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100 states. [2020-07-28 18:58:28,607 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100 to 96. [2020-07-28 18:58:28,608 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:58:28,608 INFO L82 GeneralOperation]: Start isEquivalent. First operand 100 states. Second operand 96 states. [2020-07-28 18:58:28,608 INFO L74 IsIncluded]: Start isIncluded. First operand 100 states. Second operand 96 states. [2020-07-28 18:58:28,608 INFO L87 Difference]: Start difference. First operand 100 states. Second operand 96 states. [2020-07-28 18:58:28,613 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:28,613 INFO L93 Difference]: Finished difference Result 100 states and 145 transitions. [2020-07-28 18:58:28,613 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 145 transitions. [2020-07-28 18:58:28,614 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:28,614 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:28,614 INFO L74 IsIncluded]: Start isIncluded. First operand 96 states. Second operand 100 states. [2020-07-28 18:58:28,614 INFO L87 Difference]: Start difference. First operand 96 states. Second operand 100 states. [2020-07-28 18:58:28,618 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:28,618 INFO L93 Difference]: Finished difference Result 100 states and 145 transitions. [2020-07-28 18:58:28,618 INFO L276 IsEmpty]: Start isEmpty. Operand 100 states and 145 transitions. [2020-07-28 18:58:28,619 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:28,619 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:28,619 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:58:28,619 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:58:28,619 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 96 states. [2020-07-28 18:58:28,623 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 141 transitions. [2020-07-28 18:58:28,623 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 141 transitions. Word has length 22 [2020-07-28 18:58:28,623 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:58:28,623 INFO L479 AbstractCegarLoop]: Abstraction has 96 states and 141 transitions. [2020-07-28 18:58:28,623 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 18:58:28,624 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 141 transitions. [2020-07-28 18:58:28,624 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 18:58:28,624 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:58:28,624 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:58:28,625 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 18:58:28,625 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:58:28,625 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:58:28,625 INFO L82 PathProgramCache]: Analyzing trace with hash 96758808, now seen corresponding path program 1 times [2020-07-28 18:58:28,625 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:58:28,626 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1627202790] [2020-07-28 18:58:28,626 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:58:28,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:58:28,685 INFO L280 TraceCheckUtils]: 0: Hoare triple {1853#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,688 INFO L280 TraceCheckUtils]: 1: Hoare triple {1855#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,692 INFO L280 TraceCheckUtils]: 2: Hoare triple {1855#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,693 INFO L280 TraceCheckUtils]: 3: Hoare triple {1855#(= 0 ~pumpRunning~0)} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,694 INFO L280 TraceCheckUtils]: 4: Hoare triple {1855#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~9; {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,694 INFO L280 TraceCheckUtils]: 5: Hoare triple {1855#(= 0 ~pumpRunning~0)} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,695 INFO L280 TraceCheckUtils]: 6: Hoare triple {1855#(= 0 ~pumpRunning~0)} assume !false; {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,696 INFO L280 TraceCheckUtils]: 7: Hoare triple {1855#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,696 INFO L280 TraceCheckUtils]: 8: Hoare triple {1855#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,697 INFO L280 TraceCheckUtils]: 9: Hoare triple {1855#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~5); {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,698 INFO L280 TraceCheckUtils]: 10: Hoare triple {1855#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,698 INFO L280 TraceCheckUtils]: 11: Hoare triple {1855#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2); {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,699 INFO L280 TraceCheckUtils]: 12: Hoare triple {1855#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,700 INFO L280 TraceCheckUtils]: 13: Hoare triple {1855#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,700 INFO L280 TraceCheckUtils]: 14: Hoare triple {1855#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,701 INFO L280 TraceCheckUtils]: 15: Hoare triple {1855#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret14, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,702 INFO L280 TraceCheckUtils]: 16: Hoare triple {1855#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret13, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {1855#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:28,702 INFO L280 TraceCheckUtils]: 17: Hoare triple {1855#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {1854#false} is VALID [2020-07-28 18:58:28,703 INFO L280 TraceCheckUtils]: 18: Hoare triple {1854#false} havoc __utac_acc__Specification1_spec__1_#t~ret0, __utac_acc__Specification1_spec__1_#t~ret1, __utac_acc__Specification1_spec__1_~tmp~0, __utac_acc__Specification1_spec__1_~tmp___0~0;havoc __utac_acc__Specification1_spec__1_~tmp~0;havoc __utac_acc__Specification1_spec__1_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {1854#false} is VALID [2020-07-28 18:58:28,703 INFO L280 TraceCheckUtils]: 19: Hoare triple {1854#false} __utac_acc__Specification1_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret0 && __utac_acc__Specification1_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0 := __utac_acc__Specification1_spec__1_#t~ret0;havoc __utac_acc__Specification1_spec__1_#t~ret0; {1854#false} is VALID [2020-07-28 18:58:28,703 INFO L280 TraceCheckUtils]: 20: Hoare triple {1854#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {1854#false} is VALID [2020-07-28 18:58:28,704 INFO L280 TraceCheckUtils]: 21: Hoare triple {1854#false} __utac_acc__Specification1_spec__1_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret1 && __utac_acc__Specification1_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0 := __utac_acc__Specification1_spec__1_#t~ret1;havoc __utac_acc__Specification1_spec__1_#t~ret1; {1854#false} is VALID [2020-07-28 18:58:28,704 INFO L280 TraceCheckUtils]: 22: Hoare triple {1854#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0; {1854#false} is VALID [2020-07-28 18:58:28,704 INFO L280 TraceCheckUtils]: 23: Hoare triple {1854#false} assume !false; {1854#false} is VALID [2020-07-28 18:58:28,705 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:58:28,706 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1627202790] [2020-07-28 18:58:28,706 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:58:28,706 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 18:58:28,706 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1758619994] [2020-07-28 18:58:28,707 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 18:58:28,707 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:58:28,707 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 18:58:28,741 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:28,741 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 18:58:28,741 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:58:28,742 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 18:58:28,742 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:58:28,742 INFO L87 Difference]: Start difference. First operand 96 states and 141 transitions. Second operand 3 states. [2020-07-28 18:58:29,014 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:29,014 INFO L93 Difference]: Finished difference Result 227 states and 338 transitions. [2020-07-28 18:58:29,015 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 18:58:29,015 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 18:58:29,015 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:58:29,015 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:58:29,018 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 179 transitions. [2020-07-28 18:58:29,018 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:58:29,021 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 179 transitions. [2020-07-28 18:58:29,021 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 179 transitions. [2020-07-28 18:58:29,223 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 179 edges. 179 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:29,226 INFO L225 Difference]: With dead ends: 227 [2020-07-28 18:58:29,226 INFO L226 Difference]: Without dead ends: 137 [2020-07-28 18:58:29,229 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:58:29,231 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2020-07-28 18:58:29,331 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 135. [2020-07-28 18:58:29,331 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:58:29,331 INFO L82 GeneralOperation]: Start isEquivalent. First operand 137 states. Second operand 135 states. [2020-07-28 18:58:29,331 INFO L74 IsIncluded]: Start isIncluded. First operand 137 states. Second operand 135 states. [2020-07-28 18:58:29,332 INFO L87 Difference]: Start difference. First operand 137 states. Second operand 135 states. [2020-07-28 18:58:29,337 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:29,337 INFO L93 Difference]: Finished difference Result 137 states and 196 transitions. [2020-07-28 18:58:29,337 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 196 transitions. [2020-07-28 18:58:29,338 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:29,338 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:29,338 INFO L74 IsIncluded]: Start isIncluded. First operand 135 states. Second operand 137 states. [2020-07-28 18:58:29,339 INFO L87 Difference]: Start difference. First operand 135 states. Second operand 137 states. [2020-07-28 18:58:29,344 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:29,344 INFO L93 Difference]: Finished difference Result 137 states and 196 transitions. [2020-07-28 18:58:29,344 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 196 transitions. [2020-07-28 18:58:29,345 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:29,345 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:29,345 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:58:29,346 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:58:29,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 135 states. [2020-07-28 18:58:29,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 135 states to 135 states and 195 transitions. [2020-07-28 18:58:29,351 INFO L78 Accepts]: Start accepts. Automaton has 135 states and 195 transitions. Word has length 24 [2020-07-28 18:58:29,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:58:29,351 INFO L479 AbstractCegarLoop]: Abstraction has 135 states and 195 transitions. [2020-07-28 18:58:29,351 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 18:58:29,352 INFO L276 IsEmpty]: Start isEmpty. Operand 135 states and 195 transitions. [2020-07-28 18:58:29,352 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2020-07-28 18:58:29,352 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:58:29,353 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:58:29,353 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 18:58:29,353 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:58:29,353 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:58:29,354 INFO L82 PathProgramCache]: Analyzing trace with hash -732744145, now seen corresponding path program 1 times [2020-07-28 18:58:29,354 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:58:29,354 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2107668161] [2020-07-28 18:58:29,354 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:58:29,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:58:29,443 INFO L280 TraceCheckUtils]: 0: Hoare triple {2643#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,444 INFO L280 TraceCheckUtils]: 1: Hoare triple {2645#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,445 INFO L280 TraceCheckUtils]: 2: Hoare triple {2645#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,445 INFO L280 TraceCheckUtils]: 3: Hoare triple {2645#(= 0 ~pumpRunning~0)} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,446 INFO L280 TraceCheckUtils]: 4: Hoare triple {2645#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~9; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,447 INFO L280 TraceCheckUtils]: 5: Hoare triple {2645#(= 0 ~pumpRunning~0)} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,447 INFO L280 TraceCheckUtils]: 6: Hoare triple {2645#(= 0 ~pumpRunning~0)} assume !false; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,448 INFO L280 TraceCheckUtils]: 7: Hoare triple {2645#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,449 INFO L280 TraceCheckUtils]: 8: Hoare triple {2645#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,449 INFO L280 TraceCheckUtils]: 9: Hoare triple {2645#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~5); {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,450 INFO L280 TraceCheckUtils]: 10: Hoare triple {2645#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,454 INFO L280 TraceCheckUtils]: 11: Hoare triple {2645#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2); {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,458 INFO L280 TraceCheckUtils]: 12: Hoare triple {2645#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,459 INFO L280 TraceCheckUtils]: 13: Hoare triple {2645#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___1~0 := test_#t~nondet37;havoc test_#t~nondet37; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,459 INFO L280 TraceCheckUtils]: 14: Hoare triple {2645#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___1~0; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,460 INFO L280 TraceCheckUtils]: 15: Hoare triple {2645#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,462 INFO L280 TraceCheckUtils]: 16: Hoare triple {2645#(= 0 ~pumpRunning~0)} ~systemActive~0 := 0; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,464 INFO L280 TraceCheckUtils]: 17: Hoare triple {2645#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,466 INFO L280 TraceCheckUtils]: 18: Hoare triple {2645#(= 0 ~pumpRunning~0)} assume !(0 != ~systemActive~0); {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,467 INFO L280 TraceCheckUtils]: 19: Hoare triple {2645#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification1_spec__1_#t~ret0, __utac_acc__Specification1_spec__1_#t~ret1, __utac_acc__Specification1_spec__1_~tmp~0, __utac_acc__Specification1_spec__1_~tmp___0~0;havoc __utac_acc__Specification1_spec__1_~tmp~0;havoc __utac_acc__Specification1_spec__1_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,468 INFO L280 TraceCheckUtils]: 20: Hoare triple {2645#(= 0 ~pumpRunning~0)} __utac_acc__Specification1_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret0 && __utac_acc__Specification1_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0 := __utac_acc__Specification1_spec__1_#t~ret0;havoc __utac_acc__Specification1_spec__1_#t~ret0; {2645#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:58:29,469 INFO L280 TraceCheckUtils]: 21: Hoare triple {2645#(= 0 ~pumpRunning~0)} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {2646#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 18:58:29,469 INFO L280 TraceCheckUtils]: 22: Hoare triple {2646#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification1_spec__1_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret1 && __utac_acc__Specification1_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0 := __utac_acc__Specification1_spec__1_#t~ret1;havoc __utac_acc__Specification1_spec__1_#t~ret1; {2647#(= 0 ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp___0~0)} is VALID [2020-07-28 18:58:29,470 INFO L280 TraceCheckUtils]: 23: Hoare triple {2647#(= 0 ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp___0~0)} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0; {2644#false} is VALID [2020-07-28 18:58:29,470 INFO L280 TraceCheckUtils]: 24: Hoare triple {2644#false} assume !false; {2644#false} is VALID [2020-07-28 18:58:29,472 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:58:29,472 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2107668161] [2020-07-28 18:58:29,472 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:58:29,473 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 18:58:29,473 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1151889402] [2020-07-28 18:58:29,473 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 25 [2020-07-28 18:58:29,474 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:58:29,474 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 18:58:29,508 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:29,508 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 18:58:29,509 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:58:29,509 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 18:58:29,509 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 18:58:29,510 INFO L87 Difference]: Start difference. First operand 135 states and 195 transitions. Second operand 5 states. [2020-07-28 18:58:30,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:30,561 INFO L93 Difference]: Finished difference Result 397 states and 575 transitions. [2020-07-28 18:58:30,561 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 18:58:30,561 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 25 [2020-07-28 18:58:30,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:58:30,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 18:58:30,569 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 302 transitions. [2020-07-28 18:58:30,569 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 18:58:30,574 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 302 transitions. [2020-07-28 18:58:30,575 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 302 transitions. [2020-07-28 18:58:30,904 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 302 edges. 302 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:30,919 INFO L225 Difference]: With dead ends: 397 [2020-07-28 18:58:30,919 INFO L226 Difference]: Without dead ends: 395 [2020-07-28 18:58:30,920 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 18:58:30,921 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 395 states. [2020-07-28 18:58:31,052 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 395 to 135. [2020-07-28 18:58:31,052 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:58:31,052 INFO L82 GeneralOperation]: Start isEquivalent. First operand 395 states. Second operand 135 states. [2020-07-28 18:58:31,052 INFO L74 IsIncluded]: Start isIncluded. First operand 395 states. Second operand 135 states. [2020-07-28 18:58:31,053 INFO L87 Difference]: Start difference. First operand 395 states. Second operand 135 states. [2020-07-28 18:58:31,070 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:31,070 INFO L93 Difference]: Finished difference Result 395 states and 572 transitions. [2020-07-28 18:58:31,071 INFO L276 IsEmpty]: Start isEmpty. Operand 395 states and 572 transitions. [2020-07-28 18:58:31,072 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:31,072 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:31,072 INFO L74 IsIncluded]: Start isIncluded. First operand 135 states. Second operand 395 states. [2020-07-28 18:58:31,073 INFO L87 Difference]: Start difference. First operand 135 states. Second operand 395 states. [2020-07-28 18:58:31,105 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:31,106 INFO L93 Difference]: Finished difference Result 395 states and 572 transitions. [2020-07-28 18:58:31,106 INFO L276 IsEmpty]: Start isEmpty. Operand 395 states and 572 transitions. [2020-07-28 18:58:31,106 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:31,107 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:31,107 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:58:31,107 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:58:31,107 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 135 states. [2020-07-28 18:58:31,110 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 135 states to 135 states and 193 transitions. [2020-07-28 18:58:31,111 INFO L78 Accepts]: Start accepts. Automaton has 135 states and 193 transitions. Word has length 25 [2020-07-28 18:58:31,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:58:31,111 INFO L479 AbstractCegarLoop]: Abstraction has 135 states and 193 transitions. [2020-07-28 18:58:31,111 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 18:58:31,111 INFO L276 IsEmpty]: Start isEmpty. Operand 135 states and 193 transitions. [2020-07-28 18:58:31,112 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 18:58:31,112 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:58:31,112 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:58:31,112 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 18:58:31,113 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:58:31,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:58:31,113 INFO L82 PathProgramCache]: Analyzing trace with hash 1902005189, now seen corresponding path program 1 times [2020-07-28 18:58:31,113 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:58:31,114 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [150353454] [2020-07-28 18:58:31,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:58:31,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:58:31,176 INFO L280 TraceCheckUtils]: 0: Hoare triple {4202#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,177 INFO L280 TraceCheckUtils]: 1: Hoare triple {4204#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,178 INFO L280 TraceCheckUtils]: 2: Hoare triple {4204#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,179 INFO L280 TraceCheckUtils]: 3: Hoare triple {4204#(= 1 ~waterLevel~0)} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,179 INFO L280 TraceCheckUtils]: 4: Hoare triple {4204#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~9; {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,180 INFO L280 TraceCheckUtils]: 5: Hoare triple {4204#(= 1 ~waterLevel~0)} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,181 INFO L280 TraceCheckUtils]: 6: Hoare triple {4204#(= 1 ~waterLevel~0)} assume !false; {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,181 INFO L280 TraceCheckUtils]: 7: Hoare triple {4204#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,182 INFO L280 TraceCheckUtils]: 8: Hoare triple {4204#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,182 INFO L280 TraceCheckUtils]: 9: Hoare triple {4204#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~5); {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,183 INFO L280 TraceCheckUtils]: 10: Hoare triple {4204#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,184 INFO L280 TraceCheckUtils]: 11: Hoare triple {4204#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~2); {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,184 INFO L280 TraceCheckUtils]: 12: Hoare triple {4204#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,185 INFO L280 TraceCheckUtils]: 13: Hoare triple {4204#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,185 INFO L280 TraceCheckUtils]: 14: Hoare triple {4204#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,186 INFO L280 TraceCheckUtils]: 15: Hoare triple {4204#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret14, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,186 INFO L280 TraceCheckUtils]: 16: Hoare triple {4204#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret13, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,187 INFO L280 TraceCheckUtils]: 17: Hoare triple {4204#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~7, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~7;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~4;havoc isHighWaterSensorDry_~retValue_acc~4; {4204#(= 1 ~waterLevel~0)} is VALID [2020-07-28 18:58:31,188 INFO L280 TraceCheckUtils]: 18: Hoare triple {4204#(= 1 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~4 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~4; {4203#false} is VALID [2020-07-28 18:58:31,188 INFO L280 TraceCheckUtils]: 19: Hoare triple {4203#false} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {4203#false} is VALID [2020-07-28 18:58:31,188 INFO L280 TraceCheckUtils]: 20: Hoare triple {4203#false} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {4203#false} is VALID [2020-07-28 18:58:31,189 INFO L280 TraceCheckUtils]: 21: Hoare triple {4203#false} isHighWaterLevel_~retValue_acc~7 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~7; {4203#false} is VALID [2020-07-28 18:58:31,189 INFO L280 TraceCheckUtils]: 22: Hoare triple {4203#false} processEnvironment__wrappee__methaneQuery_#t~ret13 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret13 && processEnvironment__wrappee__methaneQuery_#t~ret13 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~1 := processEnvironment__wrappee__methaneQuery_#t~ret13;havoc processEnvironment__wrappee__methaneQuery_#t~ret13; {4203#false} is VALID [2020-07-28 18:58:31,189 INFO L280 TraceCheckUtils]: 23: Hoare triple {4203#false} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~1;havoc activatePump_#t~ret15, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {4203#false} is VALID [2020-07-28 18:58:31,190 INFO L280 TraceCheckUtils]: 24: Hoare triple {4203#false} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {4203#false} is VALID [2020-07-28 18:58:31,190 INFO L280 TraceCheckUtils]: 25: Hoare triple {4203#false} activatePump_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret15 && activatePump_#t~ret15 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret15;havoc activatePump_#t~ret15; {4203#false} is VALID [2020-07-28 18:58:31,190 INFO L280 TraceCheckUtils]: 26: Hoare triple {4203#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {4203#false} is VALID [2020-07-28 18:58:31,190 INFO L280 TraceCheckUtils]: 27: Hoare triple {4203#false} havoc __utac_acc__Specification1_spec__1_#t~ret0, __utac_acc__Specification1_spec__1_#t~ret1, __utac_acc__Specification1_spec__1_~tmp~0, __utac_acc__Specification1_spec__1_~tmp___0~0;havoc __utac_acc__Specification1_spec__1_~tmp~0;havoc __utac_acc__Specification1_spec__1_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {4203#false} is VALID [2020-07-28 18:58:31,191 INFO L280 TraceCheckUtils]: 28: Hoare triple {4203#false} __utac_acc__Specification1_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret0 && __utac_acc__Specification1_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0 := __utac_acc__Specification1_spec__1_#t~ret0;havoc __utac_acc__Specification1_spec__1_#t~ret0; {4203#false} is VALID [2020-07-28 18:58:31,191 INFO L280 TraceCheckUtils]: 29: Hoare triple {4203#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {4203#false} is VALID [2020-07-28 18:58:31,191 INFO L280 TraceCheckUtils]: 30: Hoare triple {4203#false} __utac_acc__Specification1_spec__1_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret1 && __utac_acc__Specification1_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0 := __utac_acc__Specification1_spec__1_#t~ret1;havoc __utac_acc__Specification1_spec__1_#t~ret1; {4203#false} is VALID [2020-07-28 18:58:31,191 INFO L280 TraceCheckUtils]: 31: Hoare triple {4203#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0; {4203#false} is VALID [2020-07-28 18:58:31,192 INFO L280 TraceCheckUtils]: 32: Hoare triple {4203#false} assume !false; {4203#false} is VALID [2020-07-28 18:58:31,193 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:58:31,193 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [150353454] [2020-07-28 18:58:31,194 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:58:31,194 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 18:58:31,194 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [221535414] [2020-07-28 18:58:31,194 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 33 [2020-07-28 18:58:31,195 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:58:31,195 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 18:58:31,235 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:31,235 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 18:58:31,235 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:58:31,236 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 18:58:31,236 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:58:31,236 INFO L87 Difference]: Start difference. First operand 135 states and 193 transitions. Second operand 3 states. [2020-07-28 18:58:31,686 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:31,687 INFO L93 Difference]: Finished difference Result 363 states and 522 transitions. [2020-07-28 18:58:31,687 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 18:58:31,687 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 33 [2020-07-28 18:58:31,688 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:58:31,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:58:31,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 193 transitions. [2020-07-28 18:58:31,690 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:58:31,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 193 transitions. [2020-07-28 18:58:31,691 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 193 transitions. [2020-07-28 18:58:31,872 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 193 edges. 193 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:31,878 INFO L225 Difference]: With dead ends: 363 [2020-07-28 18:58:31,878 INFO L226 Difference]: Without dead ends: 234 [2020-07-28 18:58:31,883 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:58:31,886 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 234 states. [2020-07-28 18:58:32,143 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 234 to 232. [2020-07-28 18:58:32,143 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:58:32,144 INFO L82 GeneralOperation]: Start isEquivalent. First operand 234 states. Second operand 232 states. [2020-07-28 18:58:32,144 INFO L74 IsIncluded]: Start isIncluded. First operand 234 states. Second operand 232 states. [2020-07-28 18:58:32,144 INFO L87 Difference]: Start difference. First operand 234 states. Second operand 232 states. [2020-07-28 18:58:32,150 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:32,150 INFO L93 Difference]: Finished difference Result 234 states and 327 transitions. [2020-07-28 18:58:32,151 INFO L276 IsEmpty]: Start isEmpty. Operand 234 states and 327 transitions. [2020-07-28 18:58:32,151 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:32,152 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:32,152 INFO L74 IsIncluded]: Start isIncluded. First operand 232 states. Second operand 234 states. [2020-07-28 18:58:32,152 INFO L87 Difference]: Start difference. First operand 232 states. Second operand 234 states. [2020-07-28 18:58:32,158 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:32,158 INFO L93 Difference]: Finished difference Result 234 states and 327 transitions. [2020-07-28 18:58:32,159 INFO L276 IsEmpty]: Start isEmpty. Operand 234 states and 327 transitions. [2020-07-28 18:58:32,159 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:32,160 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:32,160 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:58:32,160 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:58:32,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 232 states. [2020-07-28 18:58:32,166 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 326 transitions. [2020-07-28 18:58:32,167 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 326 transitions. Word has length 33 [2020-07-28 18:58:32,167 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:58:32,167 INFO L479 AbstractCegarLoop]: Abstraction has 232 states and 326 transitions. [2020-07-28 18:58:32,168 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 18:58:32,168 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 326 transitions. [2020-07-28 18:58:32,169 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 18:58:32,169 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:58:32,169 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:58:32,170 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 18:58:32,170 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:58:32,170 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:58:32,170 INFO L82 PathProgramCache]: Analyzing trace with hash -1113098429, now seen corresponding path program 1 times [2020-07-28 18:58:32,171 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:58:32,171 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [673042523] [2020-07-28 18:58:32,171 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:58:32,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:58:32,250 INFO L280 TraceCheckUtils]: 0: Hoare triple {5513#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {5513#true} is VALID [2020-07-28 18:58:32,251 INFO L280 TraceCheckUtils]: 1: Hoare triple {5513#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {5513#true} is VALID [2020-07-28 18:58:32,251 INFO L280 TraceCheckUtils]: 2: Hoare triple {5513#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {5513#true} is VALID [2020-07-28 18:58:32,251 INFO L280 TraceCheckUtils]: 3: Hoare triple {5513#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {5513#true} is VALID [2020-07-28 18:58:32,252 INFO L280 TraceCheckUtils]: 4: Hoare triple {5513#true} assume 0 != main_~tmp~9; {5513#true} is VALID [2020-07-28 18:58:32,252 INFO L280 TraceCheckUtils]: 5: Hoare triple {5513#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {5513#true} is VALID [2020-07-28 18:58:32,252 INFO L280 TraceCheckUtils]: 6: Hoare triple {5513#true} assume !false; {5513#true} is VALID [2020-07-28 18:58:32,253 INFO L280 TraceCheckUtils]: 7: Hoare triple {5513#true} assume test_~splverifierCounter~0 < 4; {5513#true} is VALID [2020-07-28 18:58:32,253 INFO L280 TraceCheckUtils]: 8: Hoare triple {5513#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {5513#true} is VALID [2020-07-28 18:58:32,253 INFO L280 TraceCheckUtils]: 9: Hoare triple {5513#true} assume !(0 != test_~tmp~5); {5513#true} is VALID [2020-07-28 18:58:32,254 INFO L280 TraceCheckUtils]: 10: Hoare triple {5513#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {5513#true} is VALID [2020-07-28 18:58:32,254 INFO L280 TraceCheckUtils]: 11: Hoare triple {5513#true} assume !(0 != test_~tmp___0~2); {5513#true} is VALID [2020-07-28 18:58:32,254 INFO L280 TraceCheckUtils]: 12: Hoare triple {5513#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {5513#true} is VALID [2020-07-28 18:58:32,254 INFO L280 TraceCheckUtils]: 13: Hoare triple {5513#true} assume 0 != test_~tmp___2~0; {5513#true} is VALID [2020-07-28 18:58:32,255 INFO L280 TraceCheckUtils]: 14: Hoare triple {5513#true} assume !(0 != ~pumpRunning~0); {5513#true} is VALID [2020-07-28 18:58:32,255 INFO L280 TraceCheckUtils]: 15: Hoare triple {5513#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret14, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {5513#true} is VALID [2020-07-28 18:58:32,256 INFO L280 TraceCheckUtils]: 16: Hoare triple {5513#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret13, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {5513#true} is VALID [2020-07-28 18:58:32,256 INFO L280 TraceCheckUtils]: 17: Hoare triple {5513#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~7, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~7;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~4;havoc isHighWaterSensorDry_~retValue_acc~4; {5513#true} is VALID [2020-07-28 18:58:32,256 INFO L280 TraceCheckUtils]: 18: Hoare triple {5513#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~4 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~4; {5513#true} is VALID [2020-07-28 18:58:32,257 INFO L280 TraceCheckUtils]: 19: Hoare triple {5513#true} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {5513#true} is VALID [2020-07-28 18:58:32,258 INFO L280 TraceCheckUtils]: 20: Hoare triple {5513#true} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {5515#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} is VALID [2020-07-28 18:58:32,259 INFO L280 TraceCheckUtils]: 21: Hoare triple {5515#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} isHighWaterLevel_~retValue_acc~7 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~7; {5516#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 18:58:32,260 INFO L280 TraceCheckUtils]: 22: Hoare triple {5516#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__methaneQuery_#t~ret13 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret13 && processEnvironment__wrappee__methaneQuery_#t~ret13 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~1 := processEnvironment__wrappee__methaneQuery_#t~ret13;havoc processEnvironment__wrappee__methaneQuery_#t~ret13; {5517#(= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~1)} is VALID [2020-07-28 18:58:32,261 INFO L280 TraceCheckUtils]: 23: Hoare triple {5517#(= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~1)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~1;havoc activatePump_#t~ret15, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {5514#false} is VALID [2020-07-28 18:58:32,261 INFO L280 TraceCheckUtils]: 24: Hoare triple {5514#false} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {5514#false} is VALID [2020-07-28 18:58:32,262 INFO L280 TraceCheckUtils]: 25: Hoare triple {5514#false} activatePump_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret15 && activatePump_#t~ret15 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret15;havoc activatePump_#t~ret15; {5514#false} is VALID [2020-07-28 18:58:32,262 INFO L280 TraceCheckUtils]: 26: Hoare triple {5514#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {5514#false} is VALID [2020-07-28 18:58:32,262 INFO L280 TraceCheckUtils]: 27: Hoare triple {5514#false} havoc __utac_acc__Specification1_spec__1_#t~ret0, __utac_acc__Specification1_spec__1_#t~ret1, __utac_acc__Specification1_spec__1_~tmp~0, __utac_acc__Specification1_spec__1_~tmp___0~0;havoc __utac_acc__Specification1_spec__1_~tmp~0;havoc __utac_acc__Specification1_spec__1_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {5514#false} is VALID [2020-07-28 18:58:32,263 INFO L280 TraceCheckUtils]: 28: Hoare triple {5514#false} __utac_acc__Specification1_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret0 && __utac_acc__Specification1_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0 := __utac_acc__Specification1_spec__1_#t~ret0;havoc __utac_acc__Specification1_spec__1_#t~ret0; {5514#false} is VALID [2020-07-28 18:58:32,263 INFO L280 TraceCheckUtils]: 29: Hoare triple {5514#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {5514#false} is VALID [2020-07-28 18:58:32,263 INFO L280 TraceCheckUtils]: 30: Hoare triple {5514#false} __utac_acc__Specification1_spec__1_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret1 && __utac_acc__Specification1_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0 := __utac_acc__Specification1_spec__1_#t~ret1;havoc __utac_acc__Specification1_spec__1_#t~ret1; {5514#false} is VALID [2020-07-28 18:58:32,264 INFO L280 TraceCheckUtils]: 31: Hoare triple {5514#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0; {5514#false} is VALID [2020-07-28 18:58:32,264 INFO L280 TraceCheckUtils]: 32: Hoare triple {5514#false} assume !false; {5514#false} is VALID [2020-07-28 18:58:32,266 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:58:32,267 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [673042523] [2020-07-28 18:58:32,267 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:58:32,267 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 18:58:32,268 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1604467757] [2020-07-28 18:58:32,268 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2020-07-28 18:58:32,269 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:58:32,269 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 18:58:32,314 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:32,315 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 18:58:32,315 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:58:32,315 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 18:58:32,315 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 18:58:32,316 INFO L87 Difference]: Start difference. First operand 232 states and 326 transitions. Second operand 5 states. [2020-07-28 18:58:33,595 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:33,595 INFO L93 Difference]: Finished difference Result 640 states and 890 transitions. [2020-07-28 18:58:33,596 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 18:58:33,596 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2020-07-28 18:58:33,596 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:58:33,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 18:58:33,598 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 211 transitions. [2020-07-28 18:58:33,599 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 18:58:33,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 211 transitions. [2020-07-28 18:58:33,601 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 211 transitions. [2020-07-28 18:58:33,803 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 211 edges. 211 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:33,820 INFO L225 Difference]: With dead ends: 640 [2020-07-28 18:58:33,820 INFO L226 Difference]: Without dead ends: 414 [2020-07-28 18:58:33,823 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 18:58:33,824 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 414 states. [2020-07-28 18:58:34,102 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 414 to 250. [2020-07-28 18:58:34,102 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:58:34,102 INFO L82 GeneralOperation]: Start isEquivalent. First operand 414 states. Second operand 250 states. [2020-07-28 18:58:34,102 INFO L74 IsIncluded]: Start isIncluded. First operand 414 states. Second operand 250 states. [2020-07-28 18:58:34,103 INFO L87 Difference]: Start difference. First operand 414 states. Second operand 250 states. [2020-07-28 18:58:34,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:34,116 INFO L93 Difference]: Finished difference Result 414 states and 564 transitions. [2020-07-28 18:58:34,116 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 564 transitions. [2020-07-28 18:58:34,117 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:34,117 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:34,117 INFO L74 IsIncluded]: Start isIncluded. First operand 250 states. Second operand 414 states. [2020-07-28 18:58:34,117 INFO L87 Difference]: Start difference. First operand 250 states. Second operand 414 states. [2020-07-28 18:58:34,131 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:34,131 INFO L93 Difference]: Finished difference Result 414 states and 564 transitions. [2020-07-28 18:58:34,132 INFO L276 IsEmpty]: Start isEmpty. Operand 414 states and 564 transitions. [2020-07-28 18:58:34,133 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:34,133 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:34,133 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:58:34,133 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:58:34,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 250 states. [2020-07-28 18:58:34,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 250 states to 250 states and 344 transitions. [2020-07-28 18:58:34,141 INFO L78 Accepts]: Start accepts. Automaton has 250 states and 344 transitions. Word has length 33 [2020-07-28 18:58:34,141 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:58:34,141 INFO L479 AbstractCegarLoop]: Abstraction has 250 states and 344 transitions. [2020-07-28 18:58:34,141 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 18:58:34,141 INFO L276 IsEmpty]: Start isEmpty. Operand 250 states and 344 transitions. [2020-07-28 18:58:34,142 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 18:58:34,142 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:58:34,142 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:58:34,143 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 18:58:34,143 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:58:34,143 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:58:34,143 INFO L82 PathProgramCache]: Analyzing trace with hash -1699904443, now seen corresponding path program 1 times [2020-07-28 18:58:34,144 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:58:34,144 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [22207281] [2020-07-28 18:58:34,145 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:58:34,177 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:58:34,259 INFO L280 TraceCheckUtils]: 0: Hoare triple {7606#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {7606#true} is VALID [2020-07-28 18:58:34,259 INFO L280 TraceCheckUtils]: 1: Hoare triple {7606#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {7606#true} is VALID [2020-07-28 18:58:34,259 INFO L280 TraceCheckUtils]: 2: Hoare triple {7606#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {7606#true} is VALID [2020-07-28 18:58:34,260 INFO L280 TraceCheckUtils]: 3: Hoare triple {7606#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {7606#true} is VALID [2020-07-28 18:58:34,260 INFO L280 TraceCheckUtils]: 4: Hoare triple {7606#true} assume 0 != main_~tmp~9; {7606#true} is VALID [2020-07-28 18:58:34,260 INFO L280 TraceCheckUtils]: 5: Hoare triple {7606#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {7606#true} is VALID [2020-07-28 18:58:34,260 INFO L280 TraceCheckUtils]: 6: Hoare triple {7606#true} assume !false; {7606#true} is VALID [2020-07-28 18:58:34,260 INFO L280 TraceCheckUtils]: 7: Hoare triple {7606#true} assume test_~splverifierCounter~0 < 4; {7606#true} is VALID [2020-07-28 18:58:34,261 INFO L280 TraceCheckUtils]: 8: Hoare triple {7606#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {7606#true} is VALID [2020-07-28 18:58:34,261 INFO L280 TraceCheckUtils]: 9: Hoare triple {7606#true} assume !(0 != test_~tmp~5); {7606#true} is VALID [2020-07-28 18:58:34,261 INFO L280 TraceCheckUtils]: 10: Hoare triple {7606#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {7606#true} is VALID [2020-07-28 18:58:34,261 INFO L280 TraceCheckUtils]: 11: Hoare triple {7606#true} assume !(0 != test_~tmp___0~2); {7606#true} is VALID [2020-07-28 18:58:34,262 INFO L280 TraceCheckUtils]: 12: Hoare triple {7606#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {7606#true} is VALID [2020-07-28 18:58:34,262 INFO L280 TraceCheckUtils]: 13: Hoare triple {7606#true} assume 0 != test_~tmp___2~0; {7606#true} is VALID [2020-07-28 18:58:34,262 INFO L280 TraceCheckUtils]: 14: Hoare triple {7606#true} assume !(0 != ~pumpRunning~0); {7606#true} is VALID [2020-07-28 18:58:34,262 INFO L280 TraceCheckUtils]: 15: Hoare triple {7606#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret14, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {7606#true} is VALID [2020-07-28 18:58:34,262 INFO L280 TraceCheckUtils]: 16: Hoare triple {7606#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret13, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {7606#true} is VALID [2020-07-28 18:58:34,263 INFO L280 TraceCheckUtils]: 17: Hoare triple {7606#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~7, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~7;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~4;havoc isHighWaterSensorDry_~retValue_acc~4; {7606#true} is VALID [2020-07-28 18:58:34,264 INFO L280 TraceCheckUtils]: 18: Hoare triple {7606#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~4 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~4; {7608#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 18:58:34,264 INFO L280 TraceCheckUtils]: 19: Hoare triple {7608#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {7609#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~4)} is VALID [2020-07-28 18:58:34,265 INFO L280 TraceCheckUtils]: 20: Hoare triple {7609#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~4)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {7607#false} is VALID [2020-07-28 18:58:34,265 INFO L280 TraceCheckUtils]: 21: Hoare triple {7607#false} isHighWaterLevel_~retValue_acc~7 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~7; {7607#false} is VALID [2020-07-28 18:58:34,266 INFO L280 TraceCheckUtils]: 22: Hoare triple {7607#false} processEnvironment__wrappee__methaneQuery_#t~ret13 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret13 && processEnvironment__wrappee__methaneQuery_#t~ret13 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~1 := processEnvironment__wrappee__methaneQuery_#t~ret13;havoc processEnvironment__wrappee__methaneQuery_#t~ret13; {7607#false} is VALID [2020-07-28 18:58:34,266 INFO L280 TraceCheckUtils]: 23: Hoare triple {7607#false} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~1;havoc activatePump_#t~ret15, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {7607#false} is VALID [2020-07-28 18:58:34,266 INFO L280 TraceCheckUtils]: 24: Hoare triple {7607#false} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {7607#false} is VALID [2020-07-28 18:58:34,266 INFO L280 TraceCheckUtils]: 25: Hoare triple {7607#false} activatePump_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret15 && activatePump_#t~ret15 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret15;havoc activatePump_#t~ret15; {7607#false} is VALID [2020-07-28 18:58:34,267 INFO L280 TraceCheckUtils]: 26: Hoare triple {7607#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {7607#false} is VALID [2020-07-28 18:58:34,267 INFO L280 TraceCheckUtils]: 27: Hoare triple {7607#false} havoc __utac_acc__Specification1_spec__1_#t~ret0, __utac_acc__Specification1_spec__1_#t~ret1, __utac_acc__Specification1_spec__1_~tmp~0, __utac_acc__Specification1_spec__1_~tmp___0~0;havoc __utac_acc__Specification1_spec__1_~tmp~0;havoc __utac_acc__Specification1_spec__1_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {7607#false} is VALID [2020-07-28 18:58:34,267 INFO L280 TraceCheckUtils]: 28: Hoare triple {7607#false} __utac_acc__Specification1_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret0 && __utac_acc__Specification1_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0 := __utac_acc__Specification1_spec__1_#t~ret0;havoc __utac_acc__Specification1_spec__1_#t~ret0; {7607#false} is VALID [2020-07-28 18:58:34,270 INFO L280 TraceCheckUtils]: 29: Hoare triple {7607#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {7607#false} is VALID [2020-07-28 18:58:34,271 INFO L280 TraceCheckUtils]: 30: Hoare triple {7607#false} __utac_acc__Specification1_spec__1_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret1 && __utac_acc__Specification1_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0 := __utac_acc__Specification1_spec__1_#t~ret1;havoc __utac_acc__Specification1_spec__1_#t~ret1; {7607#false} is VALID [2020-07-28 18:58:34,271 INFO L280 TraceCheckUtils]: 31: Hoare triple {7607#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0; {7607#false} is VALID [2020-07-28 18:58:34,271 INFO L280 TraceCheckUtils]: 32: Hoare triple {7607#false} assume !false; {7607#false} is VALID [2020-07-28 18:58:34,272 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:58:34,273 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [22207281] [2020-07-28 18:58:34,273 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:58:34,273 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 18:58:34,274 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1792450956] [2020-07-28 18:58:34,275 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 18:58:34,275 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:58:34,275 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 18:58:34,314 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:34,314 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 18:58:34,314 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:58:34,315 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 18:58:34,315 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 18:58:34,315 INFO L87 Difference]: Start difference. First operand 250 states and 344 transitions. Second operand 4 states. [2020-07-28 18:58:35,212 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:35,213 INFO L93 Difference]: Finished difference Result 544 states and 742 transitions. [2020-07-28 18:58:35,213 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 18:58:35,213 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 18:58:35,213 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:58:35,214 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 18:58:35,216 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 186 transitions. [2020-07-28 18:58:35,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 18:58:35,218 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 186 transitions. [2020-07-28 18:58:35,218 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 186 transitions. [2020-07-28 18:58:35,443 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 186 edges. 186 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:35,451 INFO L225 Difference]: With dead ends: 544 [2020-07-28 18:58:35,452 INFO L226 Difference]: Without dead ends: 300 [2020-07-28 18:58:35,453 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 18:58:35,454 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 300 states. [2020-07-28 18:58:35,789 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 300 to 209. [2020-07-28 18:58:35,790 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:58:35,790 INFO L82 GeneralOperation]: Start isEquivalent. First operand 300 states. Second operand 209 states. [2020-07-28 18:58:35,790 INFO L74 IsIncluded]: Start isIncluded. First operand 300 states. Second operand 209 states. [2020-07-28 18:58:35,790 INFO L87 Difference]: Start difference. First operand 300 states. Second operand 209 states. [2020-07-28 18:58:35,801 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:35,802 INFO L93 Difference]: Finished difference Result 300 states and 398 transitions. [2020-07-28 18:58:35,802 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 398 transitions. [2020-07-28 18:58:35,803 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:35,803 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:35,803 INFO L74 IsIncluded]: Start isIncluded. First operand 209 states. Second operand 300 states. [2020-07-28 18:58:35,803 INFO L87 Difference]: Start difference. First operand 209 states. Second operand 300 states. [2020-07-28 18:58:35,813 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:35,814 INFO L93 Difference]: Finished difference Result 300 states and 398 transitions. [2020-07-28 18:58:35,814 INFO L276 IsEmpty]: Start isEmpty. Operand 300 states and 398 transitions. [2020-07-28 18:58:35,815 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:35,816 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:35,816 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:58:35,816 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:58:35,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 209 states. [2020-07-28 18:58:35,824 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 209 states to 209 states and 280 transitions. [2020-07-28 18:58:35,824 INFO L78 Accepts]: Start accepts. Automaton has 209 states and 280 transitions. Word has length 33 [2020-07-28 18:58:35,825 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:58:35,825 INFO L479 AbstractCegarLoop]: Abstraction has 209 states and 280 transitions. [2020-07-28 18:58:35,825 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 18:58:35,825 INFO L276 IsEmpty]: Start isEmpty. Operand 209 states and 280 transitions. [2020-07-28 18:58:35,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2020-07-28 18:58:35,827 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:58:35,827 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:58:35,827 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 18:58:35,828 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:58:35,828 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:58:35,828 INFO L82 PathProgramCache]: Analyzing trace with hash -1822472183, now seen corresponding path program 1 times [2020-07-28 18:58:35,829 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:58:35,829 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [748597523] [2020-07-28 18:58:35,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:58:35,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:58:35,979 INFO L280 TraceCheckUtils]: 0: Hoare triple {9271#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:35,980 INFO L280 TraceCheckUtils]: 1: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:35,982 INFO L280 TraceCheckUtils]: 2: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:35,988 INFO L280 TraceCheckUtils]: 3: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:35,990 INFO L280 TraceCheckUtils]: 4: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume 0 != main_~tmp~9; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:35,991 INFO L280 TraceCheckUtils]: 5: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:35,992 INFO L280 TraceCheckUtils]: 6: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !false; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:35,993 INFO L280 TraceCheckUtils]: 7: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume test_~splverifierCounter~0 < 4; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:35,994 INFO L280 TraceCheckUtils]: 8: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:35,994 INFO L280 TraceCheckUtils]: 9: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume 0 != test_~tmp~5; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:35,995 INFO L280 TraceCheckUtils]: 10: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:35,996 INFO L280 TraceCheckUtils]: 11: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:35,997 INFO L280 TraceCheckUtils]: 12: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(0 != test_~tmp___0~2); {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:35,999 INFO L280 TraceCheckUtils]: 13: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:36,000 INFO L280 TraceCheckUtils]: 14: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume 0 != test_~tmp___2~0; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:36,001 INFO L280 TraceCheckUtils]: 15: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0); {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:36,002 INFO L280 TraceCheckUtils]: 16: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret14, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:36,003 INFO L280 TraceCheckUtils]: 17: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret13, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:36,004 INFO L280 TraceCheckUtils]: 18: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~7, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~7;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~4;havoc isHighWaterSensorDry_~retValue_acc~4; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:36,005 INFO L280 TraceCheckUtils]: 19: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~4 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~4; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:36,007 INFO L280 TraceCheckUtils]: 20: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:36,008 INFO L280 TraceCheckUtils]: 21: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:36,009 INFO L280 TraceCheckUtils]: 22: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} isHighWaterLevel_~retValue_acc~7 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~7; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:36,010 INFO L280 TraceCheckUtils]: 23: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} processEnvironment__wrappee__methaneQuery_#t~ret13 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret13 && processEnvironment__wrappee__methaneQuery_#t~ret13 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~1 := processEnvironment__wrappee__methaneQuery_#t~ret13;havoc processEnvironment__wrappee__methaneQuery_#t~ret13; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:36,011 INFO L280 TraceCheckUtils]: 24: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~1;havoc activatePump_#t~ret15, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:36,013 INFO L280 TraceCheckUtils]: 25: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:36,014 INFO L280 TraceCheckUtils]: 26: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} activatePump_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret15 && activatePump_#t~ret15 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret15;havoc activatePump_#t~ret15; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:36,015 INFO L280 TraceCheckUtils]: 27: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 18:58:36,016 INFO L280 TraceCheckUtils]: 28: Hoare triple {9273#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} havoc __utac_acc__Specification1_spec__1_#t~ret0, __utac_acc__Specification1_spec__1_#t~ret1, __utac_acc__Specification1_spec__1_~tmp~0, __utac_acc__Specification1_spec__1_~tmp___0~0;havoc __utac_acc__Specification1_spec__1_~tmp~0;havoc __utac_acc__Specification1_spec__1_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {9274#(and (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} is VALID [2020-07-28 18:58:36,017 INFO L280 TraceCheckUtils]: 29: Hoare triple {9274#(and (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} __utac_acc__Specification1_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret0 && __utac_acc__Specification1_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0 := __utac_acc__Specification1_spec__1_#t~ret0;havoc __utac_acc__Specification1_spec__1_#t~ret0; {9275#(and (<= ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0 0) (<= 0 ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0))} is VALID [2020-07-28 18:58:36,019 INFO L280 TraceCheckUtils]: 30: Hoare triple {9275#(and (<= ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0 0) (<= 0 ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0))} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {9272#false} is VALID [2020-07-28 18:58:36,019 INFO L280 TraceCheckUtils]: 31: Hoare triple {9272#false} __utac_acc__Specification1_spec__1_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret1 && __utac_acc__Specification1_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0 := __utac_acc__Specification1_spec__1_#t~ret1;havoc __utac_acc__Specification1_spec__1_#t~ret1; {9272#false} is VALID [2020-07-28 18:58:36,019 INFO L280 TraceCheckUtils]: 32: Hoare triple {9272#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0; {9272#false} is VALID [2020-07-28 18:58:36,020 INFO L280 TraceCheckUtils]: 33: Hoare triple {9272#false} assume !false; {9272#false} is VALID [2020-07-28 18:58:36,024 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:58:36,025 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [748597523] [2020-07-28 18:58:36,025 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:58:36,026 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 18:58:36,026 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [915629781] [2020-07-28 18:58:36,026 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2020-07-28 18:58:36,027 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:58:36,027 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 18:58:36,090 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:36,091 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 18:58:36,091 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:58:36,091 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 18:58:36,091 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 18:58:36,092 INFO L87 Difference]: Start difference. First operand 209 states and 280 transitions. Second operand 5 states. [2020-07-28 18:58:39,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:39,280 INFO L93 Difference]: Finished difference Result 1093 states and 1472 transitions. [2020-07-28 18:58:39,280 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 18:58:39,281 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2020-07-28 18:58:39,282 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:58:39,282 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 18:58:39,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 387 transitions. [2020-07-28 18:58:39,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 18:58:39,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 387 transitions. [2020-07-28 18:58:39,292 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 387 transitions. [2020-07-28 18:58:39,803 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 387 edges. 387 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:39,848 INFO L225 Difference]: With dead ends: 1093 [2020-07-28 18:58:39,848 INFO L226 Difference]: Without dead ends: 890 [2020-07-28 18:58:39,849 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 18:58:39,850 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 890 states. [2020-07-28 18:58:40,595 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 890 to 398. [2020-07-28 18:58:40,595 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:58:40,595 INFO L82 GeneralOperation]: Start isEquivalent. First operand 890 states. Second operand 398 states. [2020-07-28 18:58:40,596 INFO L74 IsIncluded]: Start isIncluded. First operand 890 states. Second operand 398 states. [2020-07-28 18:58:40,596 INFO L87 Difference]: Start difference. First operand 890 states. Second operand 398 states. [2020-07-28 18:58:40,637 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:40,637 INFO L93 Difference]: Finished difference Result 890 states and 1184 transitions. [2020-07-28 18:58:40,637 INFO L276 IsEmpty]: Start isEmpty. Operand 890 states and 1184 transitions. [2020-07-28 18:58:40,639 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:40,640 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:40,640 INFO L74 IsIncluded]: Start isIncluded. First operand 398 states. Second operand 890 states. [2020-07-28 18:58:40,640 INFO L87 Difference]: Start difference. First operand 398 states. Second operand 890 states. [2020-07-28 18:58:40,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:40,676 INFO L93 Difference]: Finished difference Result 890 states and 1184 transitions. [2020-07-28 18:58:40,676 INFO L276 IsEmpty]: Start isEmpty. Operand 890 states and 1184 transitions. [2020-07-28 18:58:40,678 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:40,678 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:40,678 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:58:40,678 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:58:40,678 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 398 states. [2020-07-28 18:58:40,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 398 states to 398 states and 527 transitions. [2020-07-28 18:58:40,690 INFO L78 Accepts]: Start accepts. Automaton has 398 states and 527 transitions. Word has length 34 [2020-07-28 18:58:40,690 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:58:40,690 INFO L479 AbstractCegarLoop]: Abstraction has 398 states and 527 transitions. [2020-07-28 18:58:40,690 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 18:58:40,690 INFO L276 IsEmpty]: Start isEmpty. Operand 398 states and 527 transitions. [2020-07-28 18:58:40,691 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 18:58:40,691 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:58:40,692 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:58:40,692 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 18:58:40,692 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:58:40,692 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:58:40,692 INFO L82 PathProgramCache]: Analyzing trace with hash 939478607, now seen corresponding path program 1 times [2020-07-28 18:58:40,693 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:58:40,693 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [5208880] [2020-07-28 18:58:40,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:58:40,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:58:40,780 INFO L280 TraceCheckUtils]: 0: Hoare triple {13169#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {13169#true} is VALID [2020-07-28 18:58:40,781 INFO L280 TraceCheckUtils]: 1: Hoare triple {13169#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {13169#true} is VALID [2020-07-28 18:58:40,781 INFO L280 TraceCheckUtils]: 2: Hoare triple {13169#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {13169#true} is VALID [2020-07-28 18:58:40,781 INFO L280 TraceCheckUtils]: 3: Hoare triple {13169#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {13169#true} is VALID [2020-07-28 18:58:40,781 INFO L280 TraceCheckUtils]: 4: Hoare triple {13169#true} assume 0 != main_~tmp~9; {13169#true} is VALID [2020-07-28 18:58:40,782 INFO L280 TraceCheckUtils]: 5: Hoare triple {13169#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {13169#true} is VALID [2020-07-28 18:58:40,782 INFO L280 TraceCheckUtils]: 6: Hoare triple {13169#true} assume !false; {13169#true} is VALID [2020-07-28 18:58:40,782 INFO L280 TraceCheckUtils]: 7: Hoare triple {13169#true} assume test_~splverifierCounter~0 < 4; {13169#true} is VALID [2020-07-28 18:58:40,782 INFO L280 TraceCheckUtils]: 8: Hoare triple {13169#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {13169#true} is VALID [2020-07-28 18:58:40,783 INFO L280 TraceCheckUtils]: 9: Hoare triple {13169#true} assume 0 != test_~tmp~5; {13169#true} is VALID [2020-07-28 18:58:40,783 INFO L280 TraceCheckUtils]: 10: Hoare triple {13169#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13169#true} is VALID [2020-07-28 18:58:40,783 INFO L280 TraceCheckUtils]: 11: Hoare triple {13169#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {13169#true} is VALID [2020-07-28 18:58:40,783 INFO L280 TraceCheckUtils]: 12: Hoare triple {13169#true} assume 0 != test_~tmp___0~2; {13169#true} is VALID [2020-07-28 18:58:40,784 INFO L280 TraceCheckUtils]: 13: Hoare triple {13169#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {13171#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:40,785 INFO L280 TraceCheckUtils]: 14: Hoare triple {13171#(= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {13171#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:40,785 INFO L280 TraceCheckUtils]: 15: Hoare triple {13171#(= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {13171#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:40,786 INFO L280 TraceCheckUtils]: 16: Hoare triple {13171#(= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {13171#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:40,787 INFO L280 TraceCheckUtils]: 17: Hoare triple {13171#(= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret14, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {13171#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:40,788 INFO L280 TraceCheckUtils]: 18: Hoare triple {13171#(= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret13, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {13171#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:40,788 INFO L280 TraceCheckUtils]: 19: Hoare triple {13171#(= 1 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~7, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~7;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~4;havoc isHighWaterSensorDry_~retValue_acc~4; {13171#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:40,789 INFO L280 TraceCheckUtils]: 20: Hoare triple {13171#(= 1 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~4 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~4; {13171#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:40,790 INFO L280 TraceCheckUtils]: 21: Hoare triple {13171#(= 1 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {13171#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:40,790 INFO L280 TraceCheckUtils]: 22: Hoare triple {13171#(= 1 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {13171#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:40,791 INFO L280 TraceCheckUtils]: 23: Hoare triple {13171#(= 1 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~7 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~7; {13171#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:40,792 INFO L280 TraceCheckUtils]: 24: Hoare triple {13171#(= 1 ~methaneLevelCritical~0)} processEnvironment__wrappee__methaneQuery_#t~ret13 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret13 && processEnvironment__wrappee__methaneQuery_#t~ret13 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~1 := processEnvironment__wrappee__methaneQuery_#t~ret13;havoc processEnvironment__wrappee__methaneQuery_#t~ret13; {13171#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:40,793 INFO L280 TraceCheckUtils]: 25: Hoare triple {13171#(= 1 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~1;havoc activatePump_#t~ret15, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {13172#(= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 18:58:40,794 INFO L280 TraceCheckUtils]: 26: Hoare triple {13172#(= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {13173#(= 1 |ULTIMATE.start_isMethaneAlarm_#res|)} is VALID [2020-07-28 18:58:40,795 INFO L280 TraceCheckUtils]: 27: Hoare triple {13173#(= 1 |ULTIMATE.start_isMethaneAlarm_#res|)} activatePump_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret15 && activatePump_#t~ret15 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret15;havoc activatePump_#t~ret15; {13174#(= 1 ULTIMATE.start_activatePump_~tmp~3)} is VALID [2020-07-28 18:58:40,796 INFO L280 TraceCheckUtils]: 28: Hoare triple {13174#(= 1 ULTIMATE.start_activatePump_~tmp~3)} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {13170#false} is VALID [2020-07-28 18:58:40,796 INFO L280 TraceCheckUtils]: 29: Hoare triple {13170#false} havoc __utac_acc__Specification1_spec__1_#t~ret0, __utac_acc__Specification1_spec__1_#t~ret1, __utac_acc__Specification1_spec__1_~tmp~0, __utac_acc__Specification1_spec__1_~tmp___0~0;havoc __utac_acc__Specification1_spec__1_~tmp~0;havoc __utac_acc__Specification1_spec__1_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {13170#false} is VALID [2020-07-28 18:58:40,796 INFO L280 TraceCheckUtils]: 30: Hoare triple {13170#false} __utac_acc__Specification1_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret0 && __utac_acc__Specification1_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0 := __utac_acc__Specification1_spec__1_#t~ret0;havoc __utac_acc__Specification1_spec__1_#t~ret0; {13170#false} is VALID [2020-07-28 18:58:40,796 INFO L280 TraceCheckUtils]: 31: Hoare triple {13170#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {13170#false} is VALID [2020-07-28 18:58:40,797 INFO L280 TraceCheckUtils]: 32: Hoare triple {13170#false} __utac_acc__Specification1_spec__1_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret1 && __utac_acc__Specification1_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0 := __utac_acc__Specification1_spec__1_#t~ret1;havoc __utac_acc__Specification1_spec__1_#t~ret1; {13170#false} is VALID [2020-07-28 18:58:40,797 INFO L280 TraceCheckUtils]: 33: Hoare triple {13170#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0; {13170#false} is VALID [2020-07-28 18:58:40,797 INFO L280 TraceCheckUtils]: 34: Hoare triple {13170#false} assume !false; {13170#false} is VALID [2020-07-28 18:58:40,799 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:58:40,799 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [5208880] [2020-07-28 18:58:40,799 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:58:40,799 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-28 18:58:40,800 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1048496388] [2020-07-28 18:58:40,800 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 35 [2020-07-28 18:58:40,800 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:58:40,801 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 18:58:40,845 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:40,845 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 18:58:40,845 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:58:40,846 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 18:58:40,846 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 18:58:40,846 INFO L87 Difference]: Start difference. First operand 398 states and 527 transitions. Second operand 6 states. [2020-07-28 18:58:44,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:44,866 INFO L93 Difference]: Finished difference Result 1430 states and 1900 transitions. [2020-07-28 18:58:44,866 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2020-07-28 18:58:44,867 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 35 [2020-07-28 18:58:44,867 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:58:44,867 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 18:58:44,869 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 519 transitions. [2020-07-28 18:58:44,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 18:58:44,872 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 519 transitions. [2020-07-28 18:58:44,872 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 13 states and 519 transitions. [2020-07-28 18:58:45,466 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 519 edges. 519 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:45,523 INFO L225 Difference]: With dead ends: 1430 [2020-07-28 18:58:45,524 INFO L226 Difference]: Without dead ends: 1038 [2020-07-28 18:58:45,525 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=60, Invalid=122, Unknown=0, NotChecked=0, Total=182 [2020-07-28 18:58:45,526 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1038 states. [2020-07-28 18:58:46,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1038 to 398. [2020-07-28 18:58:46,559 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:58:46,559 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1038 states. Second operand 398 states. [2020-07-28 18:58:46,559 INFO L74 IsIncluded]: Start isIncluded. First operand 1038 states. Second operand 398 states. [2020-07-28 18:58:46,559 INFO L87 Difference]: Start difference. First operand 1038 states. Second operand 398 states. [2020-07-28 18:58:46,598 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:46,598 INFO L93 Difference]: Finished difference Result 1038 states and 1364 transitions. [2020-07-28 18:58:46,599 INFO L276 IsEmpty]: Start isEmpty. Operand 1038 states and 1364 transitions. [2020-07-28 18:58:46,600 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:46,601 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:46,601 INFO L74 IsIncluded]: Start isIncluded. First operand 398 states. Second operand 1038 states. [2020-07-28 18:58:46,601 INFO L87 Difference]: Start difference. First operand 398 states. Second operand 1038 states. [2020-07-28 18:58:46,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:46,657 INFO L93 Difference]: Finished difference Result 1038 states and 1364 transitions. [2020-07-28 18:58:46,657 INFO L276 IsEmpty]: Start isEmpty. Operand 1038 states and 1364 transitions. [2020-07-28 18:58:46,659 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:46,659 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:46,660 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:58:46,660 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:58:46,660 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 398 states. [2020-07-28 18:58:46,671 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 398 states to 398 states and 517 transitions. [2020-07-28 18:58:46,672 INFO L78 Accepts]: Start accepts. Automaton has 398 states and 517 transitions. Word has length 35 [2020-07-28 18:58:46,672 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:58:46,672 INFO L479 AbstractCegarLoop]: Abstraction has 398 states and 517 transitions. [2020-07-28 18:58:46,672 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 18:58:46,672 INFO L276 IsEmpty]: Start isEmpty. Operand 398 states and 517 transitions. [2020-07-28 18:58:46,673 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2020-07-28 18:58:46,673 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:58:46,674 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:58:46,674 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-28 18:58:46,674 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:58:46,675 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:58:46,675 INFO L82 PathProgramCache]: Analyzing trace with hash 1806093559, now seen corresponding path program 1 times [2020-07-28 18:58:46,675 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:58:46,675 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [301243712] [2020-07-28 18:58:46,675 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:58:46,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:58:46,729 INFO L280 TraceCheckUtils]: 0: Hoare triple {17842#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {17842#true} is VALID [2020-07-28 18:58:46,730 INFO L280 TraceCheckUtils]: 1: Hoare triple {17842#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {17842#true} is VALID [2020-07-28 18:58:46,730 INFO L280 TraceCheckUtils]: 2: Hoare triple {17842#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {17842#true} is VALID [2020-07-28 18:58:46,730 INFO L280 TraceCheckUtils]: 3: Hoare triple {17842#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {17842#true} is VALID [2020-07-28 18:58:46,730 INFO L280 TraceCheckUtils]: 4: Hoare triple {17842#true} assume 0 != main_~tmp~9; {17842#true} is VALID [2020-07-28 18:58:46,730 INFO L280 TraceCheckUtils]: 5: Hoare triple {17842#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {17842#true} is VALID [2020-07-28 18:58:46,730 INFO L280 TraceCheckUtils]: 6: Hoare triple {17842#true} assume !false; {17842#true} is VALID [2020-07-28 18:58:46,731 INFO L280 TraceCheckUtils]: 7: Hoare triple {17842#true} assume test_~splverifierCounter~0 < 4; {17842#true} is VALID [2020-07-28 18:58:46,731 INFO L280 TraceCheckUtils]: 8: Hoare triple {17842#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {17842#true} is VALID [2020-07-28 18:58:46,731 INFO L280 TraceCheckUtils]: 9: Hoare triple {17842#true} assume 0 != test_~tmp~5; {17842#true} is VALID [2020-07-28 18:58:46,731 INFO L280 TraceCheckUtils]: 10: Hoare triple {17842#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {17842#true} is VALID [2020-07-28 18:58:46,731 INFO L280 TraceCheckUtils]: 11: Hoare triple {17842#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {17842#true} is VALID [2020-07-28 18:58:46,731 INFO L280 TraceCheckUtils]: 12: Hoare triple {17842#true} assume !(0 != test_~tmp___0~2); {17842#true} is VALID [2020-07-28 18:58:46,732 INFO L280 TraceCheckUtils]: 13: Hoare triple {17842#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {17842#true} is VALID [2020-07-28 18:58:46,732 INFO L280 TraceCheckUtils]: 14: Hoare triple {17842#true} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___1~0 := test_#t~nondet37;havoc test_#t~nondet37; {17842#true} is VALID [2020-07-28 18:58:46,732 INFO L280 TraceCheckUtils]: 15: Hoare triple {17842#true} assume 0 != test_~tmp___1~0; {17842#true} is VALID [2020-07-28 18:58:46,732 INFO L280 TraceCheckUtils]: 16: Hoare triple {17842#true} assume !(0 != ~pumpRunning~0); {17842#true} is VALID [2020-07-28 18:58:46,733 INFO L280 TraceCheckUtils]: 17: Hoare triple {17842#true} ~systemActive~0 := 0; {17844#(= 0 ~systemActive~0)} is VALID [2020-07-28 18:58:46,733 INFO L280 TraceCheckUtils]: 18: Hoare triple {17844#(= 0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {17844#(= 0 ~systemActive~0)} is VALID [2020-07-28 18:58:46,734 INFO L280 TraceCheckUtils]: 19: Hoare triple {17844#(= 0 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret14, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {17843#false} is VALID [2020-07-28 18:58:46,734 INFO L280 TraceCheckUtils]: 20: Hoare triple {17843#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret13, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {17843#false} is VALID [2020-07-28 18:58:46,734 INFO L280 TraceCheckUtils]: 21: Hoare triple {17843#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~7, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~7;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~4;havoc isHighWaterSensorDry_~retValue_acc~4; {17843#false} is VALID [2020-07-28 18:58:46,735 INFO L280 TraceCheckUtils]: 22: Hoare triple {17843#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~4 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~4; {17843#false} is VALID [2020-07-28 18:58:46,735 INFO L280 TraceCheckUtils]: 23: Hoare triple {17843#false} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {17843#false} is VALID [2020-07-28 18:58:46,735 INFO L280 TraceCheckUtils]: 24: Hoare triple {17843#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {17843#false} is VALID [2020-07-28 18:58:46,735 INFO L280 TraceCheckUtils]: 25: Hoare triple {17843#false} isHighWaterLevel_~retValue_acc~7 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~7; {17843#false} is VALID [2020-07-28 18:58:46,735 INFO L280 TraceCheckUtils]: 26: Hoare triple {17843#false} processEnvironment__wrappee__methaneQuery_#t~ret13 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret13 && processEnvironment__wrappee__methaneQuery_#t~ret13 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~1 := processEnvironment__wrappee__methaneQuery_#t~ret13;havoc processEnvironment__wrappee__methaneQuery_#t~ret13; {17843#false} is VALID [2020-07-28 18:58:46,736 INFO L280 TraceCheckUtils]: 27: Hoare triple {17843#false} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~1;havoc activatePump_#t~ret15, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {17843#false} is VALID [2020-07-28 18:58:46,736 INFO L280 TraceCheckUtils]: 28: Hoare triple {17843#false} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {17843#false} is VALID [2020-07-28 18:58:46,736 INFO L280 TraceCheckUtils]: 29: Hoare triple {17843#false} activatePump_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret15 && activatePump_#t~ret15 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret15;havoc activatePump_#t~ret15; {17843#false} is VALID [2020-07-28 18:58:46,736 INFO L280 TraceCheckUtils]: 30: Hoare triple {17843#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {17843#false} is VALID [2020-07-28 18:58:46,736 INFO L280 TraceCheckUtils]: 31: Hoare triple {17843#false} havoc __utac_acc__Specification1_spec__1_#t~ret0, __utac_acc__Specification1_spec__1_#t~ret1, __utac_acc__Specification1_spec__1_~tmp~0, __utac_acc__Specification1_spec__1_~tmp___0~0;havoc __utac_acc__Specification1_spec__1_~tmp~0;havoc __utac_acc__Specification1_spec__1_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {17843#false} is VALID [2020-07-28 18:58:46,737 INFO L280 TraceCheckUtils]: 32: Hoare triple {17843#false} __utac_acc__Specification1_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret0 && __utac_acc__Specification1_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0 := __utac_acc__Specification1_spec__1_#t~ret0;havoc __utac_acc__Specification1_spec__1_#t~ret0; {17843#false} is VALID [2020-07-28 18:58:46,737 INFO L280 TraceCheckUtils]: 33: Hoare triple {17843#false} assume !(0 != __utac_acc__Specification1_spec__1_~tmp~0); {17843#false} is VALID [2020-07-28 18:58:46,737 INFO L280 TraceCheckUtils]: 34: Hoare triple {17843#false} assume !false; {17843#false} is VALID [2020-07-28 18:58:46,737 INFO L280 TraceCheckUtils]: 35: Hoare triple {17843#false} assume test_~splverifierCounter~0 < 4; {17843#false} is VALID [2020-07-28 18:58:46,737 INFO L280 TraceCheckUtils]: 36: Hoare triple {17843#false} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {17843#false} is VALID [2020-07-28 18:58:46,738 INFO L280 TraceCheckUtils]: 37: Hoare triple {17843#false} assume !(0 != test_~tmp~5); {17843#false} is VALID [2020-07-28 18:58:46,738 INFO L280 TraceCheckUtils]: 38: Hoare triple {17843#false} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {17843#false} is VALID [2020-07-28 18:58:46,738 INFO L280 TraceCheckUtils]: 39: Hoare triple {17843#false} assume 0 != test_~tmp___0~2; {17843#false} is VALID [2020-07-28 18:58:46,738 INFO L280 TraceCheckUtils]: 40: Hoare triple {17843#false} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {17843#false} is VALID [2020-07-28 18:58:46,738 INFO L280 TraceCheckUtils]: 41: Hoare triple {17843#false} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {17843#false} is VALID [2020-07-28 18:58:46,739 INFO L280 TraceCheckUtils]: 42: Hoare triple {17843#false} assume 0 != test_~tmp___2~0; {17843#false} is VALID [2020-07-28 18:58:46,739 INFO L280 TraceCheckUtils]: 43: Hoare triple {17843#false} assume 0 != ~pumpRunning~0; {17843#false} is VALID [2020-07-28 18:58:46,739 INFO L280 TraceCheckUtils]: 44: Hoare triple {17843#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {17843#false} is VALID [2020-07-28 18:58:46,739 INFO L280 TraceCheckUtils]: 45: Hoare triple {17843#false} assume !(0 != ~systemActive~0); {17843#false} is VALID [2020-07-28 18:58:46,739 INFO L280 TraceCheckUtils]: 46: Hoare triple {17843#false} havoc __utac_acc__Specification1_spec__1_#t~ret0, __utac_acc__Specification1_spec__1_#t~ret1, __utac_acc__Specification1_spec__1_~tmp~0, __utac_acc__Specification1_spec__1_~tmp___0~0;havoc __utac_acc__Specification1_spec__1_~tmp~0;havoc __utac_acc__Specification1_spec__1_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {17843#false} is VALID [2020-07-28 18:58:46,739 INFO L280 TraceCheckUtils]: 47: Hoare triple {17843#false} __utac_acc__Specification1_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret0 && __utac_acc__Specification1_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0 := __utac_acc__Specification1_spec__1_#t~ret0;havoc __utac_acc__Specification1_spec__1_#t~ret0; {17843#false} is VALID [2020-07-28 18:58:46,740 INFO L280 TraceCheckUtils]: 48: Hoare triple {17843#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {17843#false} is VALID [2020-07-28 18:58:46,740 INFO L280 TraceCheckUtils]: 49: Hoare triple {17843#false} __utac_acc__Specification1_spec__1_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret1 && __utac_acc__Specification1_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0 := __utac_acc__Specification1_spec__1_#t~ret1;havoc __utac_acc__Specification1_spec__1_#t~ret1; {17843#false} is VALID [2020-07-28 18:58:46,740 INFO L280 TraceCheckUtils]: 50: Hoare triple {17843#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0; {17843#false} is VALID [2020-07-28 18:58:46,741 INFO L280 TraceCheckUtils]: 51: Hoare triple {17843#false} assume !false; {17843#false} is VALID [2020-07-28 18:58:46,743 INFO L134 CoverageAnalysis]: Checked inductivity of 13 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 18:58:46,744 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [301243712] [2020-07-28 18:58:46,744 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:58:46,744 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 18:58:46,744 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1508497665] [2020-07-28 18:58:46,745 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 52 [2020-07-28 18:58:46,745 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:58:46,745 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 18:58:46,795 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:46,795 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 18:58:46,796 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:58:46,796 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 18:58:46,796 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:58:46,796 INFO L87 Difference]: Start difference. First operand 398 states and 517 transitions. Second operand 3 states. [2020-07-28 18:58:47,698 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:47,699 INFO L93 Difference]: Finished difference Result 486 states and 630 transitions. [2020-07-28 18:58:47,699 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 18:58:47,699 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 52 [2020-07-28 18:58:47,699 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:58:47,699 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:58:47,700 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 171 transitions. [2020-07-28 18:58:47,700 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:58:47,701 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 171 transitions. [2020-07-28 18:58:47,701 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 171 transitions. [2020-07-28 18:58:47,893 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 171 edges. 171 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:47,898 INFO L225 Difference]: With dead ends: 486 [2020-07-28 18:58:47,898 INFO L226 Difference]: Without dead ends: 198 [2020-07-28 18:58:47,899 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:58:47,899 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 198 states. [2020-07-28 18:58:48,393 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 198 to 198. [2020-07-28 18:58:48,394 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:58:48,394 INFO L82 GeneralOperation]: Start isEquivalent. First operand 198 states. Second operand 198 states. [2020-07-28 18:58:48,394 INFO L74 IsIncluded]: Start isIncluded. First operand 198 states. Second operand 198 states. [2020-07-28 18:58:48,394 INFO L87 Difference]: Start difference. First operand 198 states. Second operand 198 states. [2020-07-28 18:58:48,398 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:48,398 INFO L93 Difference]: Finished difference Result 198 states and 247 transitions. [2020-07-28 18:58:48,398 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 247 transitions. [2020-07-28 18:58:48,399 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:48,399 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:48,399 INFO L74 IsIncluded]: Start isIncluded. First operand 198 states. Second operand 198 states. [2020-07-28 18:58:48,399 INFO L87 Difference]: Start difference. First operand 198 states. Second operand 198 states. [2020-07-28 18:58:48,405 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:48,406 INFO L93 Difference]: Finished difference Result 198 states and 247 transitions. [2020-07-28 18:58:48,406 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 247 transitions. [2020-07-28 18:58:48,406 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:48,407 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:48,407 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:58:48,407 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:58:48,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 198 states. [2020-07-28 18:58:48,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 198 states to 198 states and 247 transitions. [2020-07-28 18:58:48,411 INFO L78 Accepts]: Start accepts. Automaton has 198 states and 247 transitions. Word has length 52 [2020-07-28 18:58:48,412 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:58:48,412 INFO L479 AbstractCegarLoop]: Abstraction has 198 states and 247 transitions. [2020-07-28 18:58:48,412 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 18:58:48,412 INFO L276 IsEmpty]: Start isEmpty. Operand 198 states and 247 transitions. [2020-07-28 18:58:48,413 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2020-07-28 18:58:48,413 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:58:48,413 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:58:48,414 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 18:58:48,414 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:58:48,414 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:58:48,414 INFO L82 PathProgramCache]: Analyzing trace with hash 1267756066, now seen corresponding path program 1 times [2020-07-28 18:58:48,415 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:58:48,416 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [358513852] [2020-07-28 18:58:48,416 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:58:48,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:58:48,508 INFO L280 TraceCheckUtils]: 0: Hoare triple {19206#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(13);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(110, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 2 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(102, #t~string22.base, 2 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 3 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string24.base, #t~string24.offset, 1);call write~init~int(80, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(117, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(109, #t~string24.base, 3 + #t~string24.offset, 1);call write~init~int(112, #t~string24.base, 4 + #t~string24.offset, 1);call write~init~int(58, #t~string24.base, 5 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 6 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string26.base, #t~string26.offset, 1);call write~init~int(110, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 2 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(102, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 3 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string30.base, #t~string30.offset, 1);call write~init~int(32, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 2 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string32.base, #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 1 + #t~string32.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {19206#true} is VALID [2020-07-28 18:58:48,508 INFO L280 TraceCheckUtils]: 1: Hoare triple {19206#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {19206#true} is VALID [2020-07-28 18:58:48,508 INFO L280 TraceCheckUtils]: 2: Hoare triple {19206#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {19206#true} is VALID [2020-07-28 18:58:48,508 INFO L280 TraceCheckUtils]: 3: Hoare triple {19206#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {19206#true} is VALID [2020-07-28 18:58:48,509 INFO L280 TraceCheckUtils]: 4: Hoare triple {19206#true} assume 0 != main_~tmp~9; {19206#true} is VALID [2020-07-28 18:58:48,509 INFO L280 TraceCheckUtils]: 5: Hoare triple {19206#true} havoc test_#t~nondet34, test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {19206#true} is VALID [2020-07-28 18:58:48,509 INFO L280 TraceCheckUtils]: 6: Hoare triple {19206#true} assume !false; {19206#true} is VALID [2020-07-28 18:58:48,509 INFO L280 TraceCheckUtils]: 7: Hoare triple {19206#true} assume test_~splverifierCounter~0 < 4; {19206#true} is VALID [2020-07-28 18:58:48,510 INFO L280 TraceCheckUtils]: 8: Hoare triple {19206#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {19206#true} is VALID [2020-07-28 18:58:48,510 INFO L280 TraceCheckUtils]: 9: Hoare triple {19206#true} assume 0 != test_~tmp~5; {19206#true} is VALID [2020-07-28 18:58:48,510 INFO L280 TraceCheckUtils]: 10: Hoare triple {19206#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {19206#true} is VALID [2020-07-28 18:58:48,510 INFO L280 TraceCheckUtils]: 11: Hoare triple {19206#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {19206#true} is VALID [2020-07-28 18:58:48,511 INFO L280 TraceCheckUtils]: 12: Hoare triple {19206#true} assume !(0 != test_~tmp___0~2); {19206#true} is VALID [2020-07-28 18:58:48,511 INFO L280 TraceCheckUtils]: 13: Hoare triple {19206#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {19206#true} is VALID [2020-07-28 18:58:48,511 INFO L280 TraceCheckUtils]: 14: Hoare triple {19206#true} assume 0 != test_~tmp___2~0; {19206#true} is VALID [2020-07-28 18:58:48,511 INFO L280 TraceCheckUtils]: 15: Hoare triple {19206#true} assume !(0 != ~pumpRunning~0); {19206#true} is VALID [2020-07-28 18:58:48,511 INFO L280 TraceCheckUtils]: 16: Hoare triple {19206#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret14, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {19206#true} is VALID [2020-07-28 18:58:48,512 INFO L280 TraceCheckUtils]: 17: Hoare triple {19206#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret13, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {19206#true} is VALID [2020-07-28 18:58:48,512 INFO L280 TraceCheckUtils]: 18: Hoare triple {19206#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret33, isHighWaterLevel_~retValue_acc~7, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~7;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~4;havoc isHighWaterSensorDry_~retValue_acc~4; {19206#true} is VALID [2020-07-28 18:58:48,512 INFO L280 TraceCheckUtils]: 19: Hoare triple {19206#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~4 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~4; {19206#true} is VALID [2020-07-28 18:58:48,512 INFO L280 TraceCheckUtils]: 20: Hoare triple {19206#true} isHighWaterLevel_#t~ret33 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret33 && isHighWaterLevel_#t~ret33 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret33;havoc isHighWaterLevel_#t~ret33; {19206#true} is VALID [2020-07-28 18:58:48,513 INFO L280 TraceCheckUtils]: 21: Hoare triple {19206#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {19206#true} is VALID [2020-07-28 18:58:48,513 INFO L280 TraceCheckUtils]: 22: Hoare triple {19206#true} isHighWaterLevel_~retValue_acc~7 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~7; {19206#true} is VALID [2020-07-28 18:58:48,513 INFO L280 TraceCheckUtils]: 23: Hoare triple {19206#true} processEnvironment__wrappee__methaneQuery_#t~ret13 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret13 && processEnvironment__wrappee__methaneQuery_#t~ret13 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~1 := processEnvironment__wrappee__methaneQuery_#t~ret13;havoc processEnvironment__wrappee__methaneQuery_#t~ret13; {19206#true} is VALID [2020-07-28 18:58:48,513 INFO L280 TraceCheckUtils]: 24: Hoare triple {19206#true} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~1;havoc activatePump_#t~ret15, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {19206#true} is VALID [2020-07-28 18:58:48,514 INFO L280 TraceCheckUtils]: 25: Hoare triple {19206#true} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {19206#true} is VALID [2020-07-28 18:58:48,514 INFO L280 TraceCheckUtils]: 26: Hoare triple {19206#true} activatePump_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret15 && activatePump_#t~ret15 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret15;havoc activatePump_#t~ret15; {19206#true} is VALID [2020-07-28 18:58:48,514 INFO L280 TraceCheckUtils]: 27: Hoare triple {19206#true} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {19206#true} is VALID [2020-07-28 18:58:48,515 INFO L280 TraceCheckUtils]: 28: Hoare triple {19206#true} havoc __utac_acc__Specification1_spec__1_#t~ret0, __utac_acc__Specification1_spec__1_#t~ret1, __utac_acc__Specification1_spec__1_~tmp~0, __utac_acc__Specification1_spec__1_~tmp___0~0;havoc __utac_acc__Specification1_spec__1_~tmp~0;havoc __utac_acc__Specification1_spec__1_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {19206#true} is VALID [2020-07-28 18:58:48,515 INFO L280 TraceCheckUtils]: 29: Hoare triple {19206#true} __utac_acc__Specification1_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret0 && __utac_acc__Specification1_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0 := __utac_acc__Specification1_spec__1_#t~ret0;havoc __utac_acc__Specification1_spec__1_#t~ret0; {19206#true} is VALID [2020-07-28 18:58:48,515 INFO L280 TraceCheckUtils]: 30: Hoare triple {19206#true} assume !(0 != __utac_acc__Specification1_spec__1_~tmp~0); {19206#true} is VALID [2020-07-28 18:58:48,515 INFO L280 TraceCheckUtils]: 31: Hoare triple {19206#true} assume !false; {19206#true} is VALID [2020-07-28 18:58:48,516 INFO L280 TraceCheckUtils]: 32: Hoare triple {19206#true} assume test_~splverifierCounter~0 < 4; {19206#true} is VALID [2020-07-28 18:58:48,516 INFO L280 TraceCheckUtils]: 33: Hoare triple {19206#true} assume -2147483648 <= test_#t~nondet34 && test_#t~nondet34 <= 2147483647;test_~tmp~5 := test_#t~nondet34;havoc test_#t~nondet34; {19206#true} is VALID [2020-07-28 18:58:48,516 INFO L280 TraceCheckUtils]: 34: Hoare triple {19206#true} assume !(0 != test_~tmp~5); {19206#true} is VALID [2020-07-28 18:58:48,516 INFO L280 TraceCheckUtils]: 35: Hoare triple {19206#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp___0~2 := test_#t~nondet35;havoc test_#t~nondet35; {19206#true} is VALID [2020-07-28 18:58:48,516 INFO L280 TraceCheckUtils]: 36: Hoare triple {19206#true} assume 0 != test_~tmp___0~2; {19206#true} is VALID [2020-07-28 18:58:48,520 INFO L280 TraceCheckUtils]: 37: Hoare triple {19206#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {19208#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:48,524 INFO L280 TraceCheckUtils]: 38: Hoare triple {19208#(= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___2~0 := test_#t~nondet36;havoc test_#t~nondet36; {19208#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:48,527 INFO L280 TraceCheckUtils]: 39: Hoare triple {19208#(= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {19208#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:48,528 INFO L280 TraceCheckUtils]: 40: Hoare triple {19208#(= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0; {19208#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:48,529 INFO L280 TraceCheckUtils]: 41: Hoare triple {19208#(= 1 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19208#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:48,530 INFO L280 TraceCheckUtils]: 42: Hoare triple {19208#(= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret14, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {19208#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:58:48,531 INFO L280 TraceCheckUtils]: 43: Hoare triple {19208#(= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret16, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {19209#(= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 18:58:48,533 INFO L280 TraceCheckUtils]: 44: Hoare triple {19209#(= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} isMethaneAlarm_#t~ret16 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret16 && isMethaneAlarm_#t~ret16 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret16;havoc isMethaneAlarm_#t~ret16;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {19210#(= 1 |ULTIMATE.start_isMethaneAlarm_#res|)} is VALID [2020-07-28 18:58:48,535 INFO L280 TraceCheckUtils]: 45: Hoare triple {19210#(= 1 |ULTIMATE.start_isMethaneAlarm_#res|)} processEnvironment_#t~ret14 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret14 && processEnvironment_#t~ret14 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret14;havoc processEnvironment_#t~ret14; {19211#(= 1 ULTIMATE.start_processEnvironment_~tmp~2)} is VALID [2020-07-28 18:58:48,536 INFO L280 TraceCheckUtils]: 46: Hoare triple {19211#(= 1 ULTIMATE.start_processEnvironment_~tmp~2)} assume !(0 != processEnvironment_~tmp~2);havoc processEnvironment__wrappee__methaneQuery_#t~ret13, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {19207#false} is VALID [2020-07-28 18:58:48,536 INFO L280 TraceCheckUtils]: 47: Hoare triple {19207#false} assume !(0 == ~pumpRunning~0); {19207#false} is VALID [2020-07-28 18:58:48,536 INFO L280 TraceCheckUtils]: 48: Hoare triple {19207#false} havoc __utac_acc__Specification1_spec__1_#t~ret0, __utac_acc__Specification1_spec__1_#t~ret1, __utac_acc__Specification1_spec__1_~tmp~0, __utac_acc__Specification1_spec__1_~tmp___0~0;havoc __utac_acc__Specification1_spec__1_~tmp~0;havoc __utac_acc__Specification1_spec__1_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~2;havoc isMethaneLevelCritical_~retValue_acc~2;isMethaneLevelCritical_~retValue_acc~2 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~2; {19207#false} is VALID [2020-07-28 18:58:48,537 INFO L280 TraceCheckUtils]: 49: Hoare triple {19207#false} __utac_acc__Specification1_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret0 && __utac_acc__Specification1_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp~0 := __utac_acc__Specification1_spec__1_#t~ret0;havoc __utac_acc__Specification1_spec__1_#t~ret0; {19207#false} is VALID [2020-07-28 18:58:48,537 INFO L280 TraceCheckUtils]: 50: Hoare triple {19207#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {19207#false} is VALID [2020-07-28 18:58:48,537 INFO L280 TraceCheckUtils]: 51: Hoare triple {19207#false} __utac_acc__Specification1_spec__1_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification1_spec__1_#t~ret1 && __utac_acc__Specification1_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification1_spec__1_~tmp___0~0 := __utac_acc__Specification1_spec__1_#t~ret1;havoc __utac_acc__Specification1_spec__1_#t~ret1; {19207#false} is VALID [2020-07-28 18:58:48,537 INFO L280 TraceCheckUtils]: 52: Hoare triple {19207#false} assume 0 != __utac_acc__Specification1_spec__1_~tmp___0~0; {19207#false} is VALID [2020-07-28 18:58:48,537 INFO L280 TraceCheckUtils]: 53: Hoare triple {19207#false} assume !false; {19207#false} is VALID [2020-07-28 18:58:48,540 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 18:58:48,541 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [358513852] [2020-07-28 18:58:48,541 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:58:48,541 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-28 18:58:48,541 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1161765335] [2020-07-28 18:58:48,542 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 54 [2020-07-28 18:58:48,542 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:58:48,542 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 18:58:48,609 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:48,609 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 18:58:48,609 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:58:48,610 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 18:58:48,610 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 18:58:48,610 INFO L87 Difference]: Start difference. First operand 198 states and 247 transitions. Second operand 6 states. [2020-07-28 18:58:50,583 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:50,584 INFO L93 Difference]: Finished difference Result 497 states and 619 transitions. [2020-07-28 18:58:50,586 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2020-07-28 18:58:50,587 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 54 [2020-07-28 18:58:50,588 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:58:50,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 18:58:50,590 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 339 transitions. [2020-07-28 18:58:50,590 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 18:58:50,592 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 339 transitions. [2020-07-28 18:58:50,592 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 339 transitions. [2020-07-28 18:58:51,008 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 339 edges. 339 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:58:51,008 INFO L225 Difference]: With dead ends: 497 [2020-07-28 18:58:51,009 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 18:58:51,010 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 12 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2020-07-28 18:58:51,010 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 18:58:51,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 18:58:51,010 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:58:51,010 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 18:58:51,011 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 18:58:51,011 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 18:58:51,011 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:51,011 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 18:58:51,011 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 18:58:51,011 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:51,011 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:51,011 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 18:58:51,012 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 18:58:51,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:58:51,012 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 18:58:51,012 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 18:58:51,012 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:51,012 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:58:51,012 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:58:51,013 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:58:51,013 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 18:58:51,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 18:58:51,013 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 54 [2020-07-28 18:58:51,013 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:58:51,013 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 18:58:51,013 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 18:58:51,013 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 18:58:51,014 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:58:51,014 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-28 18:58:51,016 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 18:58:51,222 WARN L193 SmtUtils]: Spent 163.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 90 [2020-07-28 18:58:51,866 WARN L193 SmtUtils]: Spent 473.00 ms on a formula simplification. DAG size of input: 169 DAG size of output: 143 [2020-07-28 18:58:52,059 WARN L193 SmtUtils]: Spent 187.00 ms on a formula simplification. DAG size of input: 108 DAG size of output: 89 [2020-07-28 18:58:52,380 WARN L193 SmtUtils]: Spent 306.00 ms on a formula simplification. DAG size of input: 162 DAG size of output: 132 [2020-07-28 18:58:52,571 WARN L193 SmtUtils]: Spent 177.00 ms on a formula simplification. DAG size of input: 116 DAG size of output: 98 [2020-07-28 18:58:52,857 WARN L193 SmtUtils]: Spent 282.00 ms on a formula simplification. DAG size of input: 171 DAG size of output: 141 [2020-07-28 18:58:52,976 WARN L193 SmtUtils]: Spent 114.00 ms on a formula simplification. DAG size of input: 115 DAG size of output: 93 [2020-07-28 18:58:53,113 WARN L193 SmtUtils]: Spent 133.00 ms on a formula simplification. DAG size of input: 95 DAG size of output: 82 [2020-07-28 18:58:53,384 WARN L193 SmtUtils]: Spent 264.00 ms on a formula simplification. DAG size of input: 170 DAG size of output: 138 [2020-07-28 18:58:53,857 WARN L193 SmtUtils]: Spent 380.00 ms on a formula simplification. DAG size of input: 88 DAG size of output: 34 [2020-07-28 18:58:54,301 WARN L193 SmtUtils]: Spent 260.00 ms on a formula simplification. DAG size of input: 66 DAG size of output: 25 [2020-07-28 18:58:55,442 WARN L193 SmtUtils]: Spent 931.00 ms on a formula simplification. DAG size of input: 142 DAG size of output: 22 [2020-07-28 18:58:55,877 WARN L193 SmtUtils]: Spent 421.00 ms on a formula simplification. DAG size of input: 89 DAG size of output: 16 [2020-07-28 18:58:56,752 WARN L193 SmtUtils]: Spent 846.00 ms on a formula simplification. DAG size of input: 131 DAG size of output: 26 [2020-07-28 18:58:57,353 WARN L193 SmtUtils]: Spent 569.00 ms on a formula simplification. DAG size of input: 98 DAG size of output: 16 [2020-07-28 18:58:58,227 WARN L193 SmtUtils]: Spent 869.00 ms on a formula simplification. DAG size of input: 140 DAG size of output: 22 [2020-07-28 18:58:58,667 WARN L193 SmtUtils]: Spent 429.00 ms on a formula simplification. DAG size of input: 92 DAG size of output: 31 [2020-07-28 18:58:59,090 WARN L193 SmtUtils]: Spent 411.00 ms on a formula simplification. DAG size of input: 82 DAG size of output: 14 [2020-07-28 18:58:59,880 WARN L193 SmtUtils]: Spent 779.00 ms on a formula simplification. DAG size of input: 137 DAG size of output: 22 [2020-07-28 18:58:59,896 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 73) no Hoare annotation was computed. [2020-07-28 18:58:59,897 INFO L264 CegarLoopResult]: At program point L235(lines 235 241) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse5 (= 1 ~methaneLevelCritical~0)) (.cse3 (= 0 ~pumpRunning~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (<= ~methaneLevelCritical~0 0)) (.cse6 (= 1 ~systemActive~0)) (.cse4 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse2 .cse3) (and .cse0 .cse1 .cse3 .cse6 .cse4) (and .cse0 .cse5 .cse3 .cse6) (and (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse0 .cse1 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse6 .cse4))) [2020-07-28 18:58:59,897 INFO L264 CegarLoopResult]: At program point L235-1(lines 235 241) the Hoare annotation is: false [2020-07-28 18:58:59,897 INFO L264 CegarLoopResult]: At program point L235-2(lines 235 241) the Hoare annotation is: false [2020-07-28 18:58:59,897 INFO L264 CegarLoopResult]: At program point L103(lines 1 959) the Hoare annotation is: (and (<= ~methaneLevelCritical~0 0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0) (<= 0 ~methaneLevelCritical~0)) [2020-07-28 18:58:59,897 INFO L268 CegarLoopResult]: For program point L205(lines 205 211) no Hoare annotation was computed. [2020-07-28 18:58:59,897 INFO L268 CegarLoopResult]: For program point L205-1(lines 205 211) no Hoare annotation was computed. [2020-07-28 18:58:59,898 INFO L268 CegarLoopResult]: For program point L205-2(lines 205 211) no Hoare annotation was computed. [2020-07-28 18:58:59,898 INFO L268 CegarLoopResult]: For program point L205-3(lines 205 211) no Hoare annotation was computed. [2020-07-28 18:58:59,898 INFO L268 CegarLoopResult]: For program point L73(line 73) no Hoare annotation was computed. [2020-07-28 18:58:59,898 INFO L268 CegarLoopResult]: For program point L205-4(lines 205 211) no Hoare annotation was computed. [2020-07-28 18:58:59,898 INFO L268 CegarLoopResult]: For program point L73-1(line 73) no Hoare annotation was computed. [2020-07-28 18:58:59,898 INFO L268 CegarLoopResult]: For program point L205-5(lines 205 211) no Hoare annotation was computed. [2020-07-28 18:58:59,898 INFO L268 CegarLoopResult]: For program point L73-2(line 73) no Hoare annotation was computed. [2020-07-28 18:58:59,898 INFO L268 CegarLoopResult]: For program point L140(lines 140 144) no Hoare annotation was computed. [2020-07-28 18:58:59,898 INFO L268 CegarLoopResult]: For program point L405(lines 405 409) no Hoare annotation was computed. [2020-07-28 18:58:59,899 INFO L268 CegarLoopResult]: For program point L405-2(lines 405 409) no Hoare annotation was computed. [2020-07-28 18:58:59,899 INFO L268 CegarLoopResult]: For program point L405-3(lines 405 409) no Hoare annotation was computed. [2020-07-28 18:58:59,899 INFO L268 CegarLoopResult]: For program point L405-5(lines 405 409) no Hoare annotation was computed. [2020-07-28 18:58:59,899 INFO L268 CegarLoopResult]: For program point L405-6(lines 405 409) no Hoare annotation was computed. [2020-07-28 18:58:59,899 INFO L268 CegarLoopResult]: For program point L405-8(lines 405 409) no Hoare annotation was computed. [2020-07-28 18:58:59,899 INFO L268 CegarLoopResult]: For program point L405-9(lines 405 409) no Hoare annotation was computed. [2020-07-28 18:58:59,899 INFO L268 CegarLoopResult]: For program point L405-11(lines 405 409) no Hoare annotation was computed. [2020-07-28 18:58:59,899 INFO L268 CegarLoopResult]: For program point L405-12(lines 405 409) no Hoare annotation was computed. [2020-07-28 18:58:59,899 INFO L268 CegarLoopResult]: For program point L405-14(lines 405 409) no Hoare annotation was computed. [2020-07-28 18:58:59,899 INFO L268 CegarLoopResult]: For program point L405-15(lines 405 409) no Hoare annotation was computed. [2020-07-28 18:58:59,900 INFO L268 CegarLoopResult]: For program point L405-17(lines 405 409) no Hoare annotation was computed. [2020-07-28 18:58:59,900 INFO L268 CegarLoopResult]: For program point L472(lines 472 485) no Hoare annotation was computed. [2020-07-28 18:58:59,900 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 73) no Hoare annotation was computed. [2020-07-28 18:58:59,900 INFO L264 CegarLoopResult]: At program point L210(lines 201 214) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 ~pumpRunning~0) (= 1 ~systemActive~0) (<= 0 ~methaneLevelCritical~0)) [2020-07-28 18:58:59,900 INFO L264 CegarLoopResult]: At program point L210-1(lines 201 214) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) .cse1 .cse2 (<= 0 ~methaneLevelCritical~0)) (and .cse0 (= 1 ~methaneLevelCritical~0) .cse1 .cse2))) [2020-07-28 18:58:59,900 INFO L264 CegarLoopResult]: At program point L210-2(lines 201 214) the Hoare annotation is: false [2020-07-28 18:58:59,901 INFO L264 CegarLoopResult]: At program point L111(lines 106 114) the Hoare annotation is: (and (<= ~methaneLevelCritical~0 0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0) (<= 0 ~methaneLevelCritical~0)) [2020-07-28 18:58:59,901 INFO L264 CegarLoopResult]: At program point L210-3(lines 201 214) the Hoare annotation is: false [2020-07-28 18:58:59,901 INFO L264 CegarLoopResult]: At program point L210-4(lines 201 214) the Hoare annotation is: false [2020-07-28 18:58:59,901 INFO L264 CegarLoopResult]: At program point L210-5(lines 201 214) the Hoare annotation is: false [2020-07-28 18:58:59,901 INFO L268 CegarLoopResult]: For program point L443(lines 442 489) no Hoare annotation was computed. [2020-07-28 18:58:59,901 INFO L268 CegarLoopResult]: For program point L444(lines 444 448) no Hoare annotation was computed. [2020-07-28 18:58:59,901 INFO L264 CegarLoopResult]: At program point L411(lines 396 414) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 ~pumpRunning~0) (= 1 ~systemActive~0) (<= 0 ~methaneLevelCritical~0)) [2020-07-28 18:58:59,901 INFO L264 CegarLoopResult]: At program point L411-1(lines 396 414) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) .cse1 .cse2 (<= 0 ~methaneLevelCritical~0)) (and .cse0 (= 1 ~methaneLevelCritical~0) .cse1 .cse2))) [2020-07-28 18:58:59,902 INFO L264 CegarLoopResult]: At program point L411-2(lines 396 414) the Hoare annotation is: false [2020-07-28 18:58:59,902 INFO L264 CegarLoopResult]: At program point L411-3(lines 396 414) the Hoare annotation is: false [2020-07-28 18:58:59,902 INFO L264 CegarLoopResult]: At program point L411-4(lines 396 414) the Hoare annotation is: false [2020-07-28 18:58:59,902 INFO L264 CegarLoopResult]: At program point L411-5(lines 396 414) the Hoare annotation is: false [2020-07-28 18:58:59,902 INFO L268 CegarLoopResult]: For program point L478(lines 478 484) no Hoare annotation was computed. [2020-07-28 18:58:59,902 INFO L264 CegarLoopResult]: At program point L478-1(lines 228 234) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse3 (= 0 ~pumpRunning~0)) (.cse5 (= 1 ~methaneLevelCritical~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (<= ~methaneLevelCritical~0 0)) (.cse6 (= 1 ~systemActive~0)) (.cse4 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse2 .cse3) (and .cse0 .cse5 .cse6) (and .cse0 .cse1 .cse6 .cse4))) [2020-07-28 18:58:59,902 INFO L264 CegarLoopResult]: At program point L347(lines 340 350) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 ~systemActive~0))) (or (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 (= 1 ~methaneLevelCritical~0) (= 1 |ULTIMATE.start_isMethaneAlarm_#res|) .cse1) (and (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse0 (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse1 (<= 0 ~methaneLevelCritical~0)))) [2020-07-28 18:58:59,903 INFO L264 CegarLoopResult]: At program point L347-1(lines 340 350) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 ~pumpRunning~0) (= 1 ~systemActive~0) (<= 0 ~methaneLevelCritical~0)) [2020-07-28 18:58:59,903 INFO L264 CegarLoopResult]: At program point L347-2(lines 340 350) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0))) (or (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 (= 1 ~methaneLevelCritical~0) (= 1 |ULTIMATE.start_isMethaneAlarm_#res|) .cse1 .cse2) (and (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse0 (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse1 .cse2 (<= 0 ~methaneLevelCritical~0)))) [2020-07-28 18:58:59,903 INFO L264 CegarLoopResult]: At program point L347-3(lines 340 350) the Hoare annotation is: false [2020-07-28 18:58:59,903 INFO L264 CegarLoopResult]: At program point L347-4(lines 340 350) the Hoare annotation is: false [2020-07-28 18:58:59,903 INFO L264 CegarLoopResult]: At program point L347-5(lines 340 350) the Hoare annotation is: false [2020-07-28 18:58:59,903 INFO L264 CegarLoopResult]: At program point L347-6(lines 340 350) the Hoare annotation is: false [2020-07-28 18:58:59,903 INFO L264 CegarLoopResult]: At program point L347-7(lines 340 350) the Hoare annotation is: false [2020-07-28 18:58:59,903 INFO L264 CegarLoopResult]: At program point L347-8(lines 340 350) the Hoare annotation is: false [2020-07-28 18:58:59,904 INFO L264 CegarLoopResult]: At program point L876-2(lines 876 890) the Hoare annotation is: false [2020-07-28 18:58:59,904 INFO L268 CegarLoopResult]: For program point L51(lines 51 64) no Hoare annotation was computed. [2020-07-28 18:58:59,904 INFO L264 CegarLoopResult]: At program point L51-1(lines 1 959) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse2 (= 1 ~methaneLevelCritical~0)) (.cse4 (= 0 ~pumpRunning~0)) (.cse8 (<= ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0 0)) (.cse9 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse5 (<= ~methaneLevelCritical~0 0)) (.cse10 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse11 (<= 0 ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0)) (.cse6 (= 1 ~systemActive~0)) (.cse7 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse4 (= 1 ~waterLevel~0) .cse6 .cse7) (and .cse8 .cse9 .cse1 .cse5 .cse3 .cse10 .cse4 .cse11 .cse7) (and .cse0 .cse1 .cse2 .cse4 .cse6) (and .cse8 .cse9 .cse1 .cse5 .cse10 .cse11 .cse6 .cse7))) [2020-07-28 18:58:59,904 INFO L268 CegarLoopResult]: For program point L51-2(lines 51 64) no Hoare annotation was computed. [2020-07-28 18:58:59,904 INFO L264 CegarLoopResult]: At program point L51-3(lines 1 959) the Hoare annotation is: false [2020-07-28 18:58:59,904 INFO L268 CegarLoopResult]: For program point L51-4(lines 51 64) no Hoare annotation was computed. [2020-07-28 18:58:59,904 INFO L264 CegarLoopResult]: At program point L51-5(lines 1 959) the Hoare annotation is: false [2020-07-28 18:58:59,905 INFO L268 CegarLoopResult]: For program point L877(line 877) no Hoare annotation was computed. [2020-07-28 18:58:59,905 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 18:58:59,905 INFO L268 CegarLoopResult]: For program point L152(lines 152 156) no Hoare annotation was computed. [2020-07-28 18:58:59,905 INFO L268 CegarLoopResult]: For program point L880(lines 880 884) no Hoare annotation was computed. [2020-07-28 18:58:59,905 INFO L268 CegarLoopResult]: For program point L880-1(lines 228 234) no Hoare annotation was computed. [2020-07-28 18:58:59,905 INFO L268 CegarLoopResult]: For program point L286(lines 286 303) no Hoare annotation was computed. [2020-07-28 18:58:59,905 INFO L268 CegarLoopResult]: For program point L286-1(lines 286 303) no Hoare annotation was computed. [2020-07-28 18:58:59,905 INFO L268 CegarLoopResult]: For program point L286-2(lines 286 303) no Hoare annotation was computed. [2020-07-28 18:58:59,905 INFO L268 CegarLoopResult]: For program point L55(lines 55 61) no Hoare annotation was computed. [2020-07-28 18:58:59,905 INFO L268 CegarLoopResult]: For program point L55-2(lines 55 61) no Hoare annotation was computed. [2020-07-28 18:58:59,906 INFO L268 CegarLoopResult]: For program point L947(lines 947 954) no Hoare annotation was computed. [2020-07-28 18:58:59,906 INFO L268 CegarLoopResult]: For program point L55-4(lines 55 61) no Hoare annotation was computed. [2020-07-28 18:58:59,906 INFO L271 CegarLoopResult]: At program point L947-1(lines 947 954) the Hoare annotation is: true [2020-07-28 18:58:59,906 INFO L268 CegarLoopResult]: For program point L452(lines 452 458) no Hoare annotation was computed. [2020-07-28 18:58:59,906 INFO L264 CegarLoopResult]: At program point L452-1(lines 452 458) the Hoare annotation is: (let ((.cse3 (= 0 ~systemActive~0)) (.cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse2 (= 1 ~methaneLevelCritical~0)) (.cse4 (= 0 ~pumpRunning~0)) (.cse8 (<= ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0 0)) (.cse9 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse5 (<= ~methaneLevelCritical~0 0)) (.cse10 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse11 (<= 0 ULTIMATE.start___utac_acc__Specification1_spec__1_~tmp~0)) (.cse6 (= 1 ~systemActive~0)) (.cse7 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse1 .cse5 .cse4 .cse6 .cse7) (and .cse8 .cse9 .cse1 .cse5 .cse3 .cse10 .cse4 .cse11 .cse7) (and .cse0 .cse1 .cse2 .cse4 .cse6) (and .cse8 .cse9 .cse1 .cse5 .cse10 .cse11 .cse6 .cse7))) [2020-07-28 18:58:59,906 INFO L268 CegarLoopResult]: For program point L419(lines 419 425) no Hoare annotation was computed. [2020-07-28 18:58:59,906 INFO L264 CegarLoopResult]: At program point L419-1(lines 419 425) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0))) (or (and .cse0 (= 1 ~methaneLevelCritical~0) .cse1) (and .cse0 (<= ~methaneLevelCritical~0 0) .cse1 (<= 0 ~methaneLevelCritical~0)))) [2020-07-28 18:58:59,907 INFO L268 CegarLoopResult]: For program point L322(lines 322 328) no Hoare annotation was computed. [2020-07-28 18:58:59,907 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 18:58:59,907 INFO L268 CegarLoopResult]: For program point L322-2(lines 322 328) no Hoare annotation was computed. [2020-07-28 18:58:59,907 INFO L268 CegarLoopResult]: For program point L322-4(lines 322 328) no Hoare annotation was computed. [2020-07-28 18:58:59,907 INFO L268 CegarLoopResult]: For program point L322-6(lines 322 328) no Hoare annotation was computed. [2020-07-28 18:58:59,907 INFO L268 CegarLoopResult]: For program point L322-8(lines 322 328) no Hoare annotation was computed. [2020-07-28 18:58:59,907 INFO L268 CegarLoopResult]: For program point L322-10(lines 322 328) no Hoare annotation was computed. [2020-07-28 18:58:59,907 INFO L264 CegarLoopResult]: At program point L356(lines 351 359) the Hoare annotation is: (let ((.cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 ~methaneLevelCritical~0)) (.cse3 (= 0 |ULTIMATE.start_isPumpRunning_#res|)) (.cse4 (= 0 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= 1 ~systemActive~0)) (and .cse0 .cse1 .cse2 (= 0 ~systemActive~0) .cse3 .cse4))) [2020-07-28 18:58:59,907 INFO L264 CegarLoopResult]: At program point L356-1(lines 351 359) the Hoare annotation is: false [2020-07-28 18:58:59,908 INFO L268 CegarLoopResult]: For program point L290(lines 290 298) no Hoare annotation was computed. [2020-07-28 18:58:59,908 INFO L264 CegarLoopResult]: At program point L356-2(lines 351 359) the Hoare annotation is: false [2020-07-28 18:58:59,908 INFO L268 CegarLoopResult]: For program point L290-1(lines 290 298) no Hoare annotation was computed. [2020-07-28 18:58:59,908 INFO L268 CegarLoopResult]: For program point L290-2(lines 290 298) no Hoare annotation was computed. [2020-07-28 18:58:59,908 INFO L264 CegarLoopResult]: At program point L490(lines 441 491) the Hoare annotation is: false [2020-07-28 18:58:59,908 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 18:58:59,908 INFO L268 CegarLoopResult]: For program point L260(lines 260 277) no Hoare annotation was computed. [2020-07-28 18:58:59,908 INFO L268 CegarLoopResult]: For program point L260-1(lines 260 277) no Hoare annotation was computed. [2020-07-28 18:58:59,908 INFO L268 CegarLoopResult]: For program point L260-2(lines 260 277) no Hoare annotation was computed. [2020-07-28 18:58:59,909 INFO L268 CegarLoopResult]: For program point L260-3(lines 260 277) no Hoare annotation was computed. [2020-07-28 18:58:59,909 INFO L268 CegarLoopResult]: For program point L128(lines 128 132) no Hoare annotation was computed. [2020-07-28 18:58:59,909 INFO L268 CegarLoopResult]: For program point L260-4(lines 260 277) no Hoare annotation was computed. [2020-07-28 18:58:59,909 INFO L268 CegarLoopResult]: For program point L260-5(lines 260 277) no Hoare annotation was computed. [2020-07-28 18:58:59,909 INFO L268 CegarLoopResult]: For program point L128-3(lines 128 132) no Hoare annotation was computed. [2020-07-28 18:58:59,909 INFO L268 CegarLoopResult]: For program point L128-6(lines 128 132) no Hoare annotation was computed. [2020-07-28 18:58:59,909 INFO L264 CegarLoopResult]: At program point L228(lines 227 246) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse3 (= 0 ~pumpRunning~0)) (.cse5 (= 1 ~methaneLevelCritical~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (<= ~methaneLevelCritical~0 0)) (.cse6 (= 1 ~systemActive~0)) (.cse4 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse2 .cse3) (and .cse0 .cse5 .cse6) (and .cse0 .cse1 .cse6 .cse4))) [2020-07-28 18:58:59,909 INFO L268 CegarLoopResult]: For program point L228-1(lines 228 234) no Hoare annotation was computed. [2020-07-28 18:58:59,909 INFO L264 CegarLoopResult]: At program point L228-2(lines 227 246) the Hoare annotation is: false [2020-07-28 18:58:59,910 INFO L264 CegarLoopResult]: At program point L228-3(lines 227 246) the Hoare annotation is: false [2020-07-28 18:58:59,910 INFO L271 CegarLoopResult]: At program point L956(lines 937 959) the Hoare annotation is: true [2020-07-28 18:58:59,910 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 18:58:59,910 INFO L264 CegarLoopResult]: At program point L924(lines 920 926) the Hoare annotation is: (and (<= ~methaneLevelCritical~0 0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0) (<= 0 ~methaneLevelCritical~0)) [2020-07-28 18:58:59,910 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 73) no Hoare annotation was computed. [2020-07-28 18:58:59,910 INFO L268 CegarLoopResult]: For program point L462(lines 462 468) no Hoare annotation was computed. [2020-07-28 18:58:59,910 INFO L264 CegarLoopResult]: At program point L462-1(lines 462 468) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse3 (= 0 ~pumpRunning~0)) (.cse5 (= 1 ~methaneLevelCritical~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (<= ~methaneLevelCritical~0 0)) (.cse6 (= 1 ~systemActive~0)) (.cse4 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse5 .cse2 .cse3) (and .cse0 .cse5 .cse6) (and .cse0 .cse1 .cse6 .cse4))) [2020-07-28 18:58:59,911 INFO L268 CegarLoopResult]: For program point L264(lines 264 272) no Hoare annotation was computed. [2020-07-28 18:58:59,911 INFO L268 CegarLoopResult]: For program point L264-1(lines 264 272) no Hoare annotation was computed. [2020-07-28 18:58:59,911 INFO L268 CegarLoopResult]: For program point L264-2(lines 264 272) no Hoare annotation was computed. [2020-07-28 18:58:59,911 INFO L264 CegarLoopResult]: At program point L165(lines 160 168) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 ~systemActive~0))) (or (and (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse0 (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse1 (<= 0 ~methaneLevelCritical~0)) (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 (= 1 ~methaneLevelCritical~0) .cse1))) [2020-07-28 18:58:59,911 INFO L268 CegarLoopResult]: For program point L264-3(lines 264 272) no Hoare annotation was computed. [2020-07-28 18:58:59,911 INFO L264 CegarLoopResult]: At program point L165-1(lines 160 168) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 ~pumpRunning~0) (= 1 ~systemActive~0) (<= 0 ~methaneLevelCritical~0)) [2020-07-28 18:58:59,911 INFO L268 CegarLoopResult]: For program point L264-4(lines 264 272) no Hoare annotation was computed. [2020-07-28 18:58:59,911 INFO L264 CegarLoopResult]: At program point L165-2(lines 160 168) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0))) (or (and (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse0 (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse1 .cse2 (<= 0 ~methaneLevelCritical~0)) (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 (= 1 ~methaneLevelCritical~0) .cse1 .cse2))) [2020-07-28 18:58:59,911 INFO L268 CegarLoopResult]: For program point L264-5(lines 264 272) no Hoare annotation was computed. [2020-07-28 18:58:59,912 INFO L264 CegarLoopResult]: At program point L165-3(lines 160 168) the Hoare annotation is: (let ((.cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse2 (= 1 ~methaneLevelCritical~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (= 0 ~pumpRunning~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse6 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse7 (<= ~methaneLevelCritical~0 0)) (.cse8 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse5 (= 1 ~systemActive~0)) (.cse9 (<= 0 ~methaneLevelCritical~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse4 .cse5) (and .cse6 .cse1 .cse7 .cse3 .cse8 .cse4 .cse9) (and .cse1 .cse6 .cse7 .cse8 .cse5 .cse9))) [2020-07-28 18:58:59,912 INFO L264 CegarLoopResult]: At program point L165-4(lines 160 168) the Hoare annotation is: false [2020-07-28 18:58:59,912 INFO L264 CegarLoopResult]: At program point L165-5(lines 160 168) the Hoare annotation is: false [2020-07-28 18:58:59,912 INFO L264 CegarLoopResult]: At program point L165-6(lines 160 168) the Hoare annotation is: false [2020-07-28 18:58:59,912 INFO L264 CegarLoopResult]: At program point L165-7(lines 160 168) the Hoare annotation is: false [2020-07-28 18:58:59,912 INFO L264 CegarLoopResult]: At program point L165-8(lines 160 168) the Hoare annotation is: false [2020-07-28 18:58:59,912 INFO L264 CegarLoopResult]: At program point L165-9(lines 160 168) the Hoare annotation is: false [2020-07-28 18:58:59,912 INFO L264 CegarLoopResult]: At program point L165-10(lines 160 168) the Hoare annotation is: false [2020-07-28 18:58:59,913 INFO L264 CegarLoopResult]: At program point L165-11(lines 160 168) the Hoare annotation is: false [2020-07-28 18:58:59,917 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 18:58:59,917 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 18:58:59,920 WARN L170 areAnnotationChecker]: L947 has no Hoare annotation [2020-07-28 18:58:59,920 WARN L170 areAnnotationChecker]: L947 has no Hoare annotation [2020-07-28 18:58:59,920 WARN L170 areAnnotationChecker]: L947 has no Hoare annotation [2020-07-28 18:58:59,922 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2020-07-28 18:58:59,922 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 18:58:59,922 WARN L170 areAnnotationChecker]: L228-1 has no Hoare annotation [2020-07-28 18:58:59,922 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2020-07-28 18:58:59,922 WARN L170 areAnnotationChecker]: L443 has no Hoare annotation [2020-07-28 18:58:59,923 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 18:58:59,923 WARN L170 areAnnotationChecker]: L228-1 has no Hoare annotation [2020-07-28 18:58:59,923 WARN L170 areAnnotationChecker]: L228-1 has no Hoare annotation [2020-07-28 18:58:59,923 WARN L170 areAnnotationChecker]: L444 has no Hoare annotation [2020-07-28 18:58:59,923 WARN L170 areAnnotationChecker]: L128-3 has no Hoare annotation [2020-07-28 18:58:59,923 WARN L170 areAnnotationChecker]: L128-3 has no Hoare annotation [2020-07-28 18:58:59,923 WARN L170 areAnnotationChecker]: L286-1 has no Hoare annotation [2020-07-28 18:58:59,923 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2020-07-28 18:58:59,923 WARN L170 areAnnotationChecker]: L452 has no Hoare annotation [2020-07-28 18:58:59,923 WARN L170 areAnnotationChecker]: L286-1 has no Hoare annotation [2020-07-28 18:58:59,923 WARN L170 areAnnotationChecker]: L286-1 has no Hoare annotation [2020-07-28 18:58:59,924 WARN L170 areAnnotationChecker]: L140 has no Hoare annotation [2020-07-28 18:58:59,924 WARN L170 areAnnotationChecker]: L140 has no Hoare annotation [2020-07-28 18:58:59,924 WARN L170 areAnnotationChecker]: L462 has no Hoare annotation [2020-07-28 18:58:59,924 WARN L170 areAnnotationChecker]: L260-3 has no Hoare annotation [2020-07-28 18:58:59,924 WARN L170 areAnnotationChecker]: L260-3 has no Hoare annotation [2020-07-28 18:58:59,924 WARN L170 areAnnotationChecker]: L51-2 has no Hoare annotation [2020-07-28 18:58:59,925 WARN L170 areAnnotationChecker]: L462 has no Hoare annotation [2020-07-28 18:58:59,925 WARN L170 areAnnotationChecker]: L462 has no Hoare annotation [2020-07-28 18:58:59,925 WARN L170 areAnnotationChecker]: L290-1 has no Hoare annotation [2020-07-28 18:58:59,925 WARN L170 areAnnotationChecker]: L205-3 has no Hoare annotation [2020-07-28 18:58:59,925 WARN L170 areAnnotationChecker]: L205-3 has no Hoare annotation [2020-07-28 18:58:59,926 WARN L170 areAnnotationChecker]: L51-2 has no Hoare annotation [2020-07-28 18:58:59,926 WARN L170 areAnnotationChecker]: L51-2 has no Hoare annotation [2020-07-28 18:58:59,926 WARN L170 areAnnotationChecker]: L152 has no Hoare annotation [2020-07-28 18:58:59,926 WARN L170 areAnnotationChecker]: L152 has no Hoare annotation [2020-07-28 18:58:59,926 WARN L170 areAnnotationChecker]: L472 has no Hoare annotation [2020-07-28 18:58:59,926 WARN L170 areAnnotationChecker]: L290-1 has no Hoare annotation [2020-07-28 18:58:59,926 WARN L170 areAnnotationChecker]: L290-1 has no Hoare annotation [2020-07-28 18:58:59,927 WARN L170 areAnnotationChecker]: L405-9 has no Hoare annotation [2020-07-28 18:58:59,927 WARN L170 areAnnotationChecker]: L55-2 has no Hoare annotation [2020-07-28 18:58:59,927 WARN L170 areAnnotationChecker]: L472 has no Hoare annotation [2020-07-28 18:58:59,927 WARN L170 areAnnotationChecker]: L472 has no Hoare annotation [2020-07-28 18:58:59,927 WARN L170 areAnnotationChecker]: L260-2 has no Hoare annotation [2020-07-28 18:58:59,927 WARN L170 areAnnotationChecker]: L260-2 has no Hoare annotation [2020-07-28 18:58:59,927 WARN L170 areAnnotationChecker]: L405-9 has no Hoare annotation [2020-07-28 18:58:59,927 WARN L170 areAnnotationChecker]: L405-9 has no Hoare annotation [2020-07-28 18:58:59,927 WARN L170 areAnnotationChecker]: L55-2 has no Hoare annotation [2020-07-28 18:58:59,928 WARN L170 areAnnotationChecker]: L55-2 has no Hoare annotation [2020-07-28 18:58:59,928 WARN L170 areAnnotationChecker]: L877 has no Hoare annotation [2020-07-28 18:58:59,928 WARN L170 areAnnotationChecker]: L128 has no Hoare annotation [2020-07-28 18:58:59,930 WARN L170 areAnnotationChecker]: L478 has no Hoare annotation [2020-07-28 18:58:59,930 WARN L170 areAnnotationChecker]: L478 has no Hoare annotation [2020-07-28 18:58:59,930 WARN L170 areAnnotationChecker]: L205-2 has no Hoare annotation [2020-07-28 18:58:59,930 WARN L170 areAnnotationChecker]: L205-2 has no Hoare annotation [2020-07-28 18:58:59,930 WARN L170 areAnnotationChecker]: L405-11 has no Hoare annotation [2020-07-28 18:58:59,930 WARN L170 areAnnotationChecker]: L73-1 has no Hoare annotation [2020-07-28 18:58:59,930 WARN L170 areAnnotationChecker]: L73-1 has no Hoare annotation [2020-07-28 18:58:59,930 WARN L170 areAnnotationChecker]: L877 has no Hoare annotation [2020-07-28 18:58:59,930 WARN L170 areAnnotationChecker]: L128 has no Hoare annotation [2020-07-28 18:58:59,930 WARN L170 areAnnotationChecker]: L128 has no Hoare annotation [2020-07-28 18:58:59,931 WARN L170 areAnnotationChecker]: L286 has no Hoare annotation [2020-07-28 18:58:59,932 WARN L170 areAnnotationChecker]: L419 has no Hoare annotation [2020-07-28 18:58:59,932 WARN L170 areAnnotationChecker]: L419 has no Hoare annotation [2020-07-28 18:58:59,932 WARN L170 areAnnotationChecker]: L405-6 has no Hoare annotation [2020-07-28 18:58:59,932 WARN L170 areAnnotationChecker]: L264-3 has no Hoare annotation [2020-07-28 18:58:59,932 WARN L170 areAnnotationChecker]: L880 has no Hoare annotation [2020-07-28 18:58:59,932 WARN L170 areAnnotationChecker]: L880 has no Hoare annotation [2020-07-28 18:58:59,933 WARN L170 areAnnotationChecker]: L286 has no Hoare annotation [2020-07-28 18:58:59,933 WARN L170 areAnnotationChecker]: L286 has no Hoare annotation [2020-07-28 18:58:59,935 WARN L170 areAnnotationChecker]: L405-6 has no Hoare annotation [2020-07-28 18:58:59,935 WARN L170 areAnnotationChecker]: L405-6 has no Hoare annotation [2020-07-28 18:58:59,935 WARN L170 areAnnotationChecker]: L264-3 has no Hoare annotation [2020-07-28 18:58:59,935 WARN L170 areAnnotationChecker]: L264-3 has no Hoare annotation [2020-07-28 18:58:59,935 WARN L170 areAnnotationChecker]: L880-1 has no Hoare annotation [2020-07-28 18:58:59,935 WARN L170 areAnnotationChecker]: L880-1 has no Hoare annotation [2020-07-28 18:58:59,936 WARN L170 areAnnotationChecker]: L260-1 has no Hoare annotation [2020-07-28 18:58:59,936 WARN L170 areAnnotationChecker]: L260-1 has no Hoare annotation [2020-07-28 18:58:59,936 WARN L170 areAnnotationChecker]: L51 has no Hoare annotation [2020-07-28 18:58:59,937 WARN L170 areAnnotationChecker]: L405-8 has no Hoare annotation [2020-07-28 18:58:59,937 WARN L170 areAnnotationChecker]: L128-6 has no Hoare annotation [2020-07-28 18:58:59,937 WARN L170 areAnnotationChecker]: L128-6 has no Hoare annotation [2020-07-28 18:58:59,937 WARN L170 areAnnotationChecker]: L286-2 has no Hoare annotation [2020-07-28 18:58:59,937 WARN L170 areAnnotationChecker]: L290 has no Hoare annotation [2020-07-28 18:58:59,937 WARN L170 areAnnotationChecker]: L205-1 has no Hoare annotation [2020-07-28 18:58:59,937 WARN L170 areAnnotationChecker]: L205-1 has no Hoare annotation [2020-07-28 18:58:59,937 WARN L170 areAnnotationChecker]: L51 has no Hoare annotation [2020-07-28 18:58:59,937 WARN L170 areAnnotationChecker]: L51 has no Hoare annotation [2020-07-28 18:58:59,937 WARN L170 areAnnotationChecker]: L264-2 has no Hoare annotation [2020-07-28 18:58:59,937 WARN L170 areAnnotationChecker]: L322-6 has no Hoare annotation [2020-07-28 18:58:59,938 WARN L170 areAnnotationChecker]: L286-2 has no Hoare annotation [2020-07-28 18:58:59,938 WARN L170 areAnnotationChecker]: L286-2 has no Hoare annotation [2020-07-28 18:58:59,938 WARN L170 areAnnotationChecker]: L290 has no Hoare annotation [2020-07-28 18:58:59,938 WARN L170 areAnnotationChecker]: L290 has no Hoare annotation [2020-07-28 18:58:59,938 WARN L170 areAnnotationChecker]: L405-3 has no Hoare annotation [2020-07-28 18:58:59,938 WARN L170 areAnnotationChecker]: L55 has no Hoare annotation [2020-07-28 18:58:59,938 WARN L170 areAnnotationChecker]: L264-2 has no Hoare annotation [2020-07-28 18:58:59,938 WARN L170 areAnnotationChecker]: L264-2 has no Hoare annotation [2020-07-28 18:58:59,939 WARN L170 areAnnotationChecker]: L322-6 has no Hoare annotation [2020-07-28 18:58:59,939 WARN L170 areAnnotationChecker]: L322-6 has no Hoare annotation [2020-07-28 18:58:59,939 WARN L170 areAnnotationChecker]: L260-5 has no Hoare annotation [2020-07-28 18:58:59,939 WARN L170 areAnnotationChecker]: L260-5 has no Hoare annotation [2020-07-28 18:58:59,939 WARN L170 areAnnotationChecker]: L51-4 has no Hoare annotation [2020-07-28 18:58:59,939 WARN L170 areAnnotationChecker]: L260 has no Hoare annotation [2020-07-28 18:58:59,939 WARN L170 areAnnotationChecker]: L260 has no Hoare annotation [2020-07-28 18:58:59,939 WARN L170 areAnnotationChecker]: L405-3 has no Hoare annotation [2020-07-28 18:58:59,939 WARN L170 areAnnotationChecker]: L405-3 has no Hoare annotation [2020-07-28 18:58:59,939 WARN L170 areAnnotationChecker]: L55 has no Hoare annotation [2020-07-28 18:58:59,940 WARN L170 areAnnotationChecker]: L55 has no Hoare annotation [2020-07-28 18:58:59,940 WARN L170 areAnnotationChecker]: L290-2 has no Hoare annotation [2020-07-28 18:58:59,940 WARN L170 areAnnotationChecker]: L205-5 has no Hoare annotation [2020-07-28 18:58:59,940 WARN L170 areAnnotationChecker]: L205-5 has no Hoare annotation [2020-07-28 18:58:59,940 WARN L170 areAnnotationChecker]: L51-4 has no Hoare annotation [2020-07-28 18:58:59,940 WARN L170 areAnnotationChecker]: L51-4 has no Hoare annotation [2020-07-28 18:58:59,940 WARN L170 areAnnotationChecker]: L205 has no Hoare annotation [2020-07-28 18:58:59,940 WARN L170 areAnnotationChecker]: L205 has no Hoare annotation [2020-07-28 18:58:59,940 WARN L170 areAnnotationChecker]: L405-5 has no Hoare annotation [2020-07-28 18:58:59,940 WARN L170 areAnnotationChecker]: L73 has no Hoare annotation [2020-07-28 18:58:59,940 WARN L170 areAnnotationChecker]: L73 has no Hoare annotation [2020-07-28 18:58:59,941 WARN L170 areAnnotationChecker]: L322-4 has no Hoare annotation [2020-07-28 18:58:59,941 WARN L170 areAnnotationChecker]: L290-2 has no Hoare annotation [2020-07-28 18:58:59,941 WARN L170 areAnnotationChecker]: L290-2 has no Hoare annotation [2020-07-28 18:58:59,941 WARN L170 areAnnotationChecker]: L405-15 has no Hoare annotation [2020-07-28 18:58:59,941 WARN L170 areAnnotationChecker]: L55-4 has no Hoare annotation [2020-07-28 18:58:59,941 WARN L170 areAnnotationChecker]: L405 has no Hoare annotation [2020-07-28 18:58:59,941 WARN L170 areAnnotationChecker]: L264-1 has no Hoare annotation [2020-07-28 18:58:59,941 WARN L170 areAnnotationChecker]: L322-4 has no Hoare annotation [2020-07-28 18:58:59,941 WARN L170 areAnnotationChecker]: L322-4 has no Hoare annotation [2020-07-28 18:58:59,941 WARN L170 areAnnotationChecker]: L260-4 has no Hoare annotation [2020-07-28 18:58:59,941 WARN L170 areAnnotationChecker]: L260-4 has no Hoare annotation [2020-07-28 18:58:59,941 WARN L170 areAnnotationChecker]: L405-15 has no Hoare annotation [2020-07-28 18:58:59,942 WARN L170 areAnnotationChecker]: L405-15 has no Hoare annotation [2020-07-28 18:58:59,942 WARN L170 areAnnotationChecker]: L55-4 has no Hoare annotation [2020-07-28 18:58:59,942 WARN L170 areAnnotationChecker]: L55-4 has no Hoare annotation [2020-07-28 18:58:59,942 WARN L170 areAnnotationChecker]: L405 has no Hoare annotation [2020-07-28 18:58:59,942 WARN L170 areAnnotationChecker]: L405 has no Hoare annotation [2020-07-28 18:58:59,942 WARN L170 areAnnotationChecker]: L264-1 has no Hoare annotation [2020-07-28 18:58:59,942 WARN L170 areAnnotationChecker]: L264-1 has no Hoare annotation [2020-07-28 18:58:59,942 WARN L170 areAnnotationChecker]: L205-4 has no Hoare annotation [2020-07-28 18:58:59,942 WARN L170 areAnnotationChecker]: L205-4 has no Hoare annotation [2020-07-28 18:58:59,942 WARN L170 areAnnotationChecker]: L405-17 has no Hoare annotation [2020-07-28 18:58:59,942 WARN L170 areAnnotationChecker]: L73-2 has no Hoare annotation [2020-07-28 18:58:59,942 WARN L170 areAnnotationChecker]: L73-2 has no Hoare annotation [2020-07-28 18:58:59,943 WARN L170 areAnnotationChecker]: L405-2 has no Hoare annotation [2020-07-28 18:58:59,943 WARN L170 areAnnotationChecker]: L405-12 has no Hoare annotation [2020-07-28 18:58:59,944 WARN L170 areAnnotationChecker]: L264-5 has no Hoare annotation [2020-07-28 18:58:59,944 WARN L170 areAnnotationChecker]: L264 has no Hoare annotation [2020-07-28 18:58:59,944 WARN L170 areAnnotationChecker]: L322-2 has no Hoare annotation [2020-07-28 18:58:59,944 WARN L170 areAnnotationChecker]: L405-12 has no Hoare annotation [2020-07-28 18:58:59,944 WARN L170 areAnnotationChecker]: L405-12 has no Hoare annotation [2020-07-28 18:58:59,944 WARN L170 areAnnotationChecker]: L264-5 has no Hoare annotation [2020-07-28 18:58:59,944 WARN L170 areAnnotationChecker]: L264-5 has no Hoare annotation [2020-07-28 18:58:59,944 WARN L170 areAnnotationChecker]: L264 has no Hoare annotation [2020-07-28 18:58:59,944 WARN L170 areAnnotationChecker]: L264 has no Hoare annotation [2020-07-28 18:58:59,944 WARN L170 areAnnotationChecker]: L322-2 has no Hoare annotation [2020-07-28 18:58:59,944 WARN L170 areAnnotationChecker]: L322-2 has no Hoare annotation [2020-07-28 18:58:59,944 WARN L170 areAnnotationChecker]: L405-14 has no Hoare annotation [2020-07-28 18:58:59,945 WARN L170 areAnnotationChecker]: L264-4 has no Hoare annotation [2020-07-28 18:58:59,945 WARN L170 areAnnotationChecker]: L322-10 has no Hoare annotation [2020-07-28 18:58:59,945 WARN L170 areAnnotationChecker]: L322 has no Hoare annotation [2020-07-28 18:58:59,945 WARN L170 areAnnotationChecker]: L264-4 has no Hoare annotation [2020-07-28 18:58:59,945 WARN L170 areAnnotationChecker]: L264-4 has no Hoare annotation [2020-07-28 18:58:59,946 WARN L170 areAnnotationChecker]: L322-10 has no Hoare annotation [2020-07-28 18:58:59,946 WARN L170 areAnnotationChecker]: L322-10 has no Hoare annotation [2020-07-28 18:58:59,946 WARN L170 areAnnotationChecker]: L322 has no Hoare annotation [2020-07-28 18:58:59,946 WARN L170 areAnnotationChecker]: L322 has no Hoare annotation [2020-07-28 18:58:59,946 WARN L170 areAnnotationChecker]: L322-8 has no Hoare annotation [2020-07-28 18:58:59,946 WARN L170 areAnnotationChecker]: L322-8 has no Hoare annotation [2020-07-28 18:58:59,946 WARN L170 areAnnotationChecker]: L322-8 has no Hoare annotation [2020-07-28 18:58:59,946 INFO L163 areAnnotationChecker]: CFG has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 18:58:59,996 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 06:58:59 BoogieIcfgContainer [2020-07-28 18:58:59,997 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 18:58:59,997 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 18:58:59,997 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 18:58:59,998 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 18:58:59,998 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 06:58:25" (3/4) ... [2020-07-28 18:59:00,002 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 18:59:00,023 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 18:59:00,025 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 18:59:00,026 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 18:59:00,027 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 18:59:00,028 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 18:59:00,030 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 18:59:00,031 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 18:59:00,065 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning) || (((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) && 0 <= methaneLevelCritical)) || ((((((((tmp <= 0 && \result <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 == systemActive) && 0 <= \result) && 0 == pumpRunning) && 0 <= tmp) && 0 <= methaneLevelCritical)) || ((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (((((((tmp <= 0 && \result <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 <= tmp) && 1 == systemActive) && 0 <= methaneLevelCritical) [2020-07-28 18:59:00,066 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning) || ((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical)) || ((((((((tmp <= 0 && \result <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 == systemActive) && 0 <= \result) && 0 == pumpRunning) && 0 <= tmp) && 0 <= methaneLevelCritical)) || ((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (((((((tmp <= 0 && \result <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 <= tmp) && 1 == systemActive) && 0 <= methaneLevelCritical) [2020-07-28 18:59:00,067 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == systemActive) && 0 == pumpRunning) && 0 <= methaneLevelCritical) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical)) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 1 == systemActive) && 0 <= methaneLevelCritical) [2020-07-28 18:59:00,069 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning) || ((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || ((((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 == systemActive) && 0 <= \result) && 0 == pumpRunning) && 0 <= methaneLevelCritical)) || (((((0 == splverifierCounter && \result <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 1 == systemActive) && 0 <= methaneLevelCritical) [2020-07-28 18:59:00,070 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 1 == systemActive) && 0 <= methaneLevelCritical) || (((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == systemActive) [2020-07-28 18:59:00,071 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && 1 == systemActive) || (((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 1 == systemActive) && 0 <= methaneLevelCritical) [2020-07-28 18:59:00,076 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) || (((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == \result) && 0 == pumpRunning) [2020-07-28 18:59:00,086 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && \result <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical [2020-07-28 18:59:00,086 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical) || ((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 18:59:00,088 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && \result <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical [2020-07-28 18:59:00,089 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && 0 == pumpRunning) && 1 == systemActive) || ((((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical) [2020-07-28 18:59:00,089 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && \result <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical [2020-07-28 18:59:00,089 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && \result <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical [2020-07-28 18:59:00,201 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 18:59:00,201 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 18:59:00,204 INFO L168 Benchmark]: Toolchain (without parser) took 37240.38 ms. Allocated memory was 1.0 GB in the beginning and 1.6 GB in the end (delta: 610.3 MB). Free memory was 954.9 MB in the beginning and 1.2 GB in the end (delta: -212.3 MB). Peak memory consumption was 398.0 MB. Max. memory is 11.5 GB. [2020-07-28 18:59:00,204 INFO L168 Benchmark]: CDTParser took 0.88 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 18:59:00,204 INFO L168 Benchmark]: CACSL2BoogieTranslator took 714.17 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 141.6 MB). Free memory was 954.9 MB in the beginning and 1.1 GB in the end (delta: -167.6 MB). Peak memory consumption was 31.9 MB. Max. memory is 11.5 GB. [2020-07-28 18:59:00,205 INFO L168 Benchmark]: Boogie Procedure Inliner took 110.81 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2020-07-28 18:59:00,205 INFO L168 Benchmark]: Boogie Preprocessor took 58.81 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2020-07-28 18:59:00,206 INFO L168 Benchmark]: RCFGBuilder took 1675.97 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 924.5 MB in the end (delta: 184.6 MB). Peak memory consumption was 184.6 MB. Max. memory is 11.5 GB. [2020-07-28 18:59:00,206 INFO L168 Benchmark]: TraceAbstraction took 34467.72 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 468.7 MB). Free memory was 917.9 MB in the beginning and 1.2 GB in the end (delta: -265.0 MB). Peak memory consumption was 203.7 MB. Max. memory is 11.5 GB. [2020-07-28 18:59:00,206 INFO L168 Benchmark]: Witness Printer took 204.22 ms. Allocated memory is still 1.6 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 15.7 MB). Peak memory consumption was 15.7 MB. Max. memory is 11.5 GB. [2020-07-28 18:59:00,210 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.88 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 714.17 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 141.6 MB). Free memory was 954.9 MB in the beginning and 1.1 GB in the end (delta: -167.6 MB). Peak memory consumption was 31.9 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 110.81 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 58.81 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1675.97 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 924.5 MB in the end (delta: 184.6 MB). Peak memory consumption was 184.6 MB. Max. memory is 11.5 GB. * TraceAbstraction took 34467.72 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 468.7 MB). Free memory was 917.9 MB in the beginning and 1.2 GB in the end (delta: -265.0 MB). Peak memory consumption was 203.7 MB. Max. memory is 11.5 GB. * Witness Printer took 204.22 ms. Allocated memory is still 1.6 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 15.7 MB). Peak memory consumption was 15.7 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 73]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 73]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 73]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: (((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && 0 == pumpRunning) && 1 == systemActive) || ((((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning) || (((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) && 0 <= methaneLevelCritical)) || ((((((((tmp <= 0 && \result <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 == systemActive) && 0 <= \result) && 0 == pumpRunning) && 0 <= tmp) && 0 <= methaneLevelCritical)) || ((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (((((((tmp <= 0 && \result <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 <= tmp) && 1 == systemActive) && 0 <= methaneLevelCritical) - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 947]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: ((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && 1 == systemActive) || (((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 1 == systemActive) && 0 <= methaneLevelCritical) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && \result <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: (((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 1 == systemActive) && 0 <= methaneLevelCritical) || (((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == systemActive) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((methaneLevelCritical <= 0 && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) && 0 <= methaneLevelCritical - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 235]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: ((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning) || ((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || ((((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 == systemActive) && 0 <= \result) && 0 == pumpRunning) && 0 <= methaneLevelCritical)) || (((((0 == splverifierCounter && \result <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 1 == systemActive) && 0 <= methaneLevelCritical) - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: ((((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical) || ((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 160]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && \result <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical - InvariantResult [Line: 106]: Loop Invariant Derived loop invariant: (((methaneLevelCritical <= 0 && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) && 0 <= methaneLevelCritical - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: (((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) || (((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == \result) && 0 == pumpRunning) - InvariantResult [Line: 396]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 396]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 462]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == systemActive) && 0 == pumpRunning) && 0 <= methaneLevelCritical) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == systemActive)) || (((0 == splverifierCounter && methaneLevelCritical <= 0) && 1 == systemActive) && 0 <= methaneLevelCritical) - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: ((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 396]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && \result <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical - InvariantResult [Line: 396]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 235]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 235]: Loop Invariant Derived loop invariant: (((((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == systemActive) && 0 == pumpRunning) && 0 <= methaneLevelCritical) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical)) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 1 == systemActive) && 0 <= methaneLevelCritical) - InvariantResult [Line: 227]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 937]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 227]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 396]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && \result <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical - InvariantResult [Line: 201]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 396]: Loop Invariant Derived loop invariant: ((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 227]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == systemActive) && 0 == pumpRunning) && 0 <= methaneLevelCritical) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == systemActive)) || (((0 == splverifierCounter && methaneLevelCritical <= 0) && 1 == systemActive) && 0 <= methaneLevelCritical) - InvariantResult [Line: 452]: Loop Invariant Derived loop invariant: (((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning) || ((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && 1 == systemActive) && 0 <= methaneLevelCritical)) || ((((((((tmp <= 0 && \result <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 == systemActive) && 0 <= \result) && 0 == pumpRunning) && 0 <= tmp) && 0 <= methaneLevelCritical)) || ((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (((((((tmp <= 0 && \result <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 <= tmp) && 1 == systemActive) && 0 <= methaneLevelCritical) - InvariantResult [Line: 419]: Loop Invariant Derived loop invariant: ((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) || (((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && 0 <= methaneLevelCritical) - InvariantResult [Line: 876]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 340]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 228]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == systemActive) && 0 == pumpRunning) && 0 <= methaneLevelCritical) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == systemActive)) || (((0 == splverifierCounter && methaneLevelCritical <= 0) && 1 == systemActive) && 0 <= methaneLevelCritical) - InvariantResult [Line: 920]: Loop Invariant Derived loop invariant: (((methaneLevelCritical <= 0 && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) && 0 <= methaneLevelCritical - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 131 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 25.4s, OverallIterations: 12, TraceHistogramMax: 2, AutomataDifference: 18.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 8.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1372 SDtfs, 1653 SDslu, 2302 SDs, 0 SdLazy, 354 SolverSat, 69 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.5s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 81 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 48 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=398occurred in iteration=9, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 3.9s AutomataMinimizationTime, 12 MinimizatonAttempts, 1655 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 56 LocationsWithAnnotation, 56 PreInvPairs, 240 NumberOfFragments, 961 HoareAnnotationTreeSize, 56 FomulaSimplifications, 357384 FormulaSimplificationTreeSizeReduction, 2.3s HoareSimplificationTime, 56 FomulaSimplificationsInter, 97164 FormulaSimplificationTreeSizeReductionInter, 6.4s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 378 NumberOfCodeBlocks, 378 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 366 ConstructedInterpolants, 0 QuantifiedInterpolants, 24924 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 12 InterpolantComputations, 12 PerfectInterpolantSequences, 27/27 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...