./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9c111f83061d8c18367444893b685a787d8ca976 ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 18:59:46,509 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 18:59:46,511 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 18:59:46,524 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 18:59:46,525 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 18:59:46,526 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 18:59:46,528 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 18:59:46,530 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 18:59:46,532 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 18:59:46,533 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 18:59:46,534 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 18:59:46,535 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 18:59:46,535 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 18:59:46,536 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 18:59:46,537 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 18:59:46,538 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 18:59:46,539 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 18:59:46,540 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 18:59:46,542 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 18:59:46,544 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 18:59:46,545 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 18:59:46,546 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 18:59:46,548 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 18:59:46,549 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 18:59:46,551 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 18:59:46,551 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 18:59:46,552 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 18:59:46,552 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 18:59:46,553 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 18:59:46,554 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 18:59:46,554 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 18:59:46,555 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 18:59:46,557 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 18:59:46,559 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 18:59:46,560 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 18:59:46,561 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 18:59:46,561 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 18:59:46,562 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 18:59:46,562 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 18:59:46,566 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 18:59:46,567 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 18:59:46,568 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 18:59:46,595 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 18:59:46,595 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 18:59:46,597 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 18:59:46,597 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 18:59:46,597 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 18:59:46,598 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 18:59:46,598 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 18:59:46,598 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 18:59:46,598 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 18:59:46,599 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 18:59:46,600 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 18:59:46,600 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 18:59:46,600 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 18:59:46,601 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 18:59:46,601 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 18:59:46,601 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 18:59:46,601 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 18:59:46,602 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 18:59:46,602 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 18:59:46,602 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 18:59:46,602 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 18:59:46,603 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 18:59:46,603 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 18:59:46,603 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 18:59:46,603 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 18:59:46,603 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 18:59:46,604 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 18:59:46,604 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 18:59:46,604 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 18:59:46,604 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9c111f83061d8c18367444893b685a787d8ca976 [2020-07-28 18:59:46,945 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 18:59:46,958 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 18:59:46,962 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 18:59:46,963 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 18:59:46,964 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 18:59:46,965 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c [2020-07-28 18:59:47,042 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e6bd3f720/6804769c27fa470bbc14ea38fd2139e7/FLAGad3ec46e8 [2020-07-28 18:59:47,575 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 18:59:47,576 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product40.cil.c [2020-07-28 18:59:47,590 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e6bd3f720/6804769c27fa470bbc14ea38fd2139e7/FLAGad3ec46e8 [2020-07-28 18:59:47,876 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/e6bd3f720/6804769c27fa470bbc14ea38fd2139e7 [2020-07-28 18:59:47,880 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 18:59:47,883 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 18:59:47,884 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 18:59:47,884 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 18:59:47,888 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 18:59:47,889 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 06:59:47" (1/1) ... [2020-07-28 18:59:47,895 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@9d9ae94 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:47, skipping insertion in model container [2020-07-28 18:59:47,895 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 06:59:47" (1/1) ... [2020-07-28 18:59:47,907 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 18:59:47,952 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 18:59:48,387 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 18:59:48,407 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 18:59:48,533 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 18:59:48,573 INFO L208 MainTranslator]: Completed translation [2020-07-28 18:59:48,574 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:48 WrapperNode [2020-07-28 18:59:48,575 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 18:59:48,576 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 18:59:48,576 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 18:59:48,576 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 18:59:48,586 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:48" (1/1) ... [2020-07-28 18:59:48,607 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:48" (1/1) ... [2020-07-28 18:59:48,675 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 18:59:48,676 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 18:59:48,676 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 18:59:48,676 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 18:59:48,688 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:48" (1/1) ... [2020-07-28 18:59:48,688 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:48" (1/1) ... [2020-07-28 18:59:48,694 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:48" (1/1) ... [2020-07-28 18:59:48,695 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:48" (1/1) ... [2020-07-28 18:59:48,714 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:48" (1/1) ... [2020-07-28 18:59:48,738 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:48" (1/1) ... [2020-07-28 18:59:48,750 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:48" (1/1) ... [2020-07-28 18:59:48,756 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 18:59:48,756 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 18:59:48,757 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 18:59:48,757 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 18:59:48,758 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:48" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 18:59:48,825 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 18:59:48,825 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 18:59:48,825 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 18:59:48,826 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 18:59:50,431 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 18:59:50,432 INFO L295 CfgBuilder]: Removed 164 assume(true) statements. [2020-07-28 18:59:50,438 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 06:59:50 BoogieIcfgContainer [2020-07-28 18:59:50,438 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 18:59:50,439 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 18:59:50,440 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 18:59:50,443 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 18:59:50,443 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 06:59:47" (1/3) ... [2020-07-28 18:59:50,444 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2a5ceb16 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 06:59:50, skipping insertion in model container [2020-07-28 18:59:50,445 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:48" (2/3) ... [2020-07-28 18:59:50,445 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2a5ceb16 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 06:59:50, skipping insertion in model container [2020-07-28 18:59:50,445 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 06:59:50" (3/3) ... [2020-07-28 18:59:50,447 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product40.cil.c [2020-07-28 18:59:50,461 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 18:59:50,470 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 18:59:50,486 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 18:59:50,516 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 18:59:50,516 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 18:59:50,516 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 18:59:50,517 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 18:59:50,517 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 18:59:50,518 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 18:59:50,518 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 18:59:50,518 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 18:59:50,540 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states. [2020-07-28 18:59:50,549 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-28 18:59:50,549 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:59:50,551 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:59:50,551 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:59:50,559 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:59:50,559 INFO L82 PathProgramCache]: Analyzing trace with hash 114928579, now seen corresponding path program 1 times [2020-07-28 18:59:50,571 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:59:50,572 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1305525256] [2020-07-28 18:59:50,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:59:50,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:59:50,937 INFO L280 TraceCheckUtils]: 0: Hoare triple {120#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(13);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string5.base, #t~string5.offset, 1);call write~init~int(77, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(101, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(116, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(104, #t~string5.base, 4 + #t~string5.offset, 1);call write~init~int(58, #t~string5.base, 5 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 6 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string7.base, #t~string7.offset, 1);call write~init~int(82, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(73, #t~string7.base, 2 + #t~string7.offset, 1);call write~init~int(84, #t~string7.base, 3 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 4 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(75, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 2 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string11.base, #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 1 + #t~string11.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {120#true} is VALID [2020-07-28 18:59:50,938 INFO L280 TraceCheckUtils]: 1: Hoare triple {120#true} havoc main_#res;havoc main_#t~ret71, main_~retValue_acc~9, main_~tmp~8;havoc main_~retValue_acc~9;havoc main_~tmp~8; {120#true} is VALID [2020-07-28 18:59:50,939 INFO L280 TraceCheckUtils]: 2: Hoare triple {120#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~11;havoc valid_product_~retValue_acc~11;valid_product_~retValue_acc~11 := 1;valid_product_#res := valid_product_~retValue_acc~11; {120#true} is VALID [2020-07-28 18:59:50,939 INFO L280 TraceCheckUtils]: 3: Hoare triple {120#true} main_#t~ret71 := valid_product_#res;assume -2147483648 <= main_#t~ret71 && main_#t~ret71 <= 2147483647;main_~tmp~8 := main_#t~ret71;havoc main_#t~ret71; {120#true} is VALID [2020-07-28 18:59:50,940 INFO L280 TraceCheckUtils]: 4: Hoare triple {120#true} assume 0 != main_~tmp~8; {120#true} is VALID [2020-07-28 18:59:50,941 INFO L280 TraceCheckUtils]: 5: Hoare triple {120#true} ~methAndRunningLastTime~0 := 0; {120#true} is VALID [2020-07-28 18:59:50,941 INFO L280 TraceCheckUtils]: 6: Hoare triple {120#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {120#true} is VALID [2020-07-28 18:59:50,943 INFO L280 TraceCheckUtils]: 7: Hoare triple {120#true} assume !true; {121#false} is VALID [2020-07-28 18:59:50,943 INFO L280 TraceCheckUtils]: 8: Hoare triple {121#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {121#false} is VALID [2020-07-28 18:59:50,944 INFO L280 TraceCheckUtils]: 9: Hoare triple {121#false} assume !(0 != ~pumpRunning~0); {121#false} is VALID [2020-07-28 18:59:50,944 INFO L280 TraceCheckUtils]: 10: Hoare triple {121#false} assume !(0 != ~systemActive~0); {121#false} is VALID [2020-07-28 18:59:50,945 INFO L280 TraceCheckUtils]: 11: Hoare triple {121#false} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {121#false} is VALID [2020-07-28 18:59:50,945 INFO L280 TraceCheckUtils]: 12: Hoare triple {121#false} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {121#false} is VALID [2020-07-28 18:59:50,946 INFO L280 TraceCheckUtils]: 13: Hoare triple {121#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {121#false} is VALID [2020-07-28 18:59:50,946 INFO L280 TraceCheckUtils]: 14: Hoare triple {121#false} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {121#false} is VALID [2020-07-28 18:59:50,947 INFO L280 TraceCheckUtils]: 15: Hoare triple {121#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {121#false} is VALID [2020-07-28 18:59:50,947 INFO L280 TraceCheckUtils]: 16: Hoare triple {121#false} assume 0 != ~methAndRunningLastTime~0; {121#false} is VALID [2020-07-28 18:59:50,948 INFO L280 TraceCheckUtils]: 17: Hoare triple {121#false} assume !false; {121#false} is VALID [2020-07-28 18:59:50,953 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:59:50,954 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1305525256] [2020-07-28 18:59:50,955 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:59:50,956 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 18:59:50,957 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [723966862] [2020-07-28 18:59:50,964 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 18:59:50,966 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:59:50,970 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 18:59:51,017 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:51,017 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 18:59:51,017 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:59:51,027 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 18:59:51,028 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 18:59:51,031 INFO L87 Difference]: Start difference. First operand 117 states. Second operand 2 states. [2020-07-28 18:59:51,333 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:51,333 INFO L93 Difference]: Finished difference Result 227 states and 348 transitions. [2020-07-28 18:59:51,334 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 18:59:51,334 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 18:59:51,334 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:59:51,336 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 18:59:51,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 348 transitions. [2020-07-28 18:59:51,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 18:59:51,357 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 348 transitions. [2020-07-28 18:59:51,358 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 348 transitions. [2020-07-28 18:59:51,772 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 348 edges. 348 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:51,790 INFO L225 Difference]: With dead ends: 227 [2020-07-28 18:59:51,790 INFO L226 Difference]: Without dead ends: 113 [2020-07-28 18:59:51,795 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 18:59:51,815 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 113 states. [2020-07-28 18:59:51,857 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 113 to 113. [2020-07-28 18:59:51,857 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:59:51,858 INFO L82 GeneralOperation]: Start isEquivalent. First operand 113 states. Second operand 113 states. [2020-07-28 18:59:51,859 INFO L74 IsIncluded]: Start isIncluded. First operand 113 states. Second operand 113 states. [2020-07-28 18:59:51,859 INFO L87 Difference]: Start difference. First operand 113 states. Second operand 113 states. [2020-07-28 18:59:51,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:51,869 INFO L93 Difference]: Finished difference Result 113 states and 166 transitions. [2020-07-28 18:59:51,869 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 166 transitions. [2020-07-28 18:59:51,871 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:51,871 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:51,872 INFO L74 IsIncluded]: Start isIncluded. First operand 113 states. Second operand 113 states. [2020-07-28 18:59:51,872 INFO L87 Difference]: Start difference. First operand 113 states. Second operand 113 states. [2020-07-28 18:59:51,880 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:51,881 INFO L93 Difference]: Finished difference Result 113 states and 166 transitions. [2020-07-28 18:59:51,881 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 166 transitions. [2020-07-28 18:59:51,883 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:51,883 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:51,883 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:59:51,884 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:59:51,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 113 states. [2020-07-28 18:59:51,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 113 states to 113 states and 166 transitions. [2020-07-28 18:59:51,893 INFO L78 Accepts]: Start accepts. Automaton has 113 states and 166 transitions. Word has length 18 [2020-07-28 18:59:51,893 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:59:51,894 INFO L479 AbstractCegarLoop]: Abstraction has 113 states and 166 transitions. [2020-07-28 18:59:51,894 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 18:59:51,894 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 166 transitions. [2020-07-28 18:59:51,895 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 18:59:51,896 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:59:51,896 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:59:51,896 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 18:59:51,897 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:59:51,897 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:59:51,898 INFO L82 PathProgramCache]: Analyzing trace with hash -483581501, now seen corresponding path program 1 times [2020-07-28 18:59:51,898 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:59:51,898 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1230176121] [2020-07-28 18:59:51,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:59:51,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:59:52,050 INFO L280 TraceCheckUtils]: 0: Hoare triple {819#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(13);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string5.base, #t~string5.offset, 1);call write~init~int(77, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(101, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(116, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(104, #t~string5.base, 4 + #t~string5.offset, 1);call write~init~int(58, #t~string5.base, 5 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 6 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string7.base, #t~string7.offset, 1);call write~init~int(82, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(73, #t~string7.base, 2 + #t~string7.offset, 1);call write~init~int(84, #t~string7.base, 3 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 4 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(75, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 2 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string11.base, #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 1 + #t~string11.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {819#true} is VALID [2020-07-28 18:59:52,051 INFO L280 TraceCheckUtils]: 1: Hoare triple {819#true} havoc main_#res;havoc main_#t~ret71, main_~retValue_acc~9, main_~tmp~8;havoc main_~retValue_acc~9;havoc main_~tmp~8; {819#true} is VALID [2020-07-28 18:59:52,052 INFO L280 TraceCheckUtils]: 2: Hoare triple {819#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~11;havoc valid_product_~retValue_acc~11;valid_product_~retValue_acc~11 := 1;valid_product_#res := valid_product_~retValue_acc~11; {819#true} is VALID [2020-07-28 18:59:52,052 INFO L280 TraceCheckUtils]: 3: Hoare triple {819#true} main_#t~ret71 := valid_product_#res;assume -2147483648 <= main_#t~ret71 && main_#t~ret71 <= 2147483647;main_~tmp~8 := main_#t~ret71;havoc main_#t~ret71; {819#true} is VALID [2020-07-28 18:59:52,052 INFO L280 TraceCheckUtils]: 4: Hoare triple {819#true} assume 0 != main_~tmp~8; {819#true} is VALID [2020-07-28 18:59:52,052 INFO L280 TraceCheckUtils]: 5: Hoare triple {819#true} ~methAndRunningLastTime~0 := 0; {819#true} is VALID [2020-07-28 18:59:52,054 INFO L280 TraceCheckUtils]: 6: Hoare triple {819#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {821#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 18:59:52,058 INFO L280 TraceCheckUtils]: 7: Hoare triple {821#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {821#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 18:59:52,059 INFO L280 TraceCheckUtils]: 8: Hoare triple {821#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {820#false} is VALID [2020-07-28 18:59:52,059 INFO L280 TraceCheckUtils]: 9: Hoare triple {820#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {820#false} is VALID [2020-07-28 18:59:52,060 INFO L280 TraceCheckUtils]: 10: Hoare triple {820#false} assume !(0 != ~pumpRunning~0); {820#false} is VALID [2020-07-28 18:59:52,060 INFO L280 TraceCheckUtils]: 11: Hoare triple {820#false} assume !(0 != ~systemActive~0); {820#false} is VALID [2020-07-28 18:59:52,060 INFO L280 TraceCheckUtils]: 12: Hoare triple {820#false} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {820#false} is VALID [2020-07-28 18:59:52,061 INFO L280 TraceCheckUtils]: 13: Hoare triple {820#false} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {820#false} is VALID [2020-07-28 18:59:52,061 INFO L280 TraceCheckUtils]: 14: Hoare triple {820#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {820#false} is VALID [2020-07-28 18:59:52,061 INFO L280 TraceCheckUtils]: 15: Hoare triple {820#false} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {820#false} is VALID [2020-07-28 18:59:52,061 INFO L280 TraceCheckUtils]: 16: Hoare triple {820#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {820#false} is VALID [2020-07-28 18:59:52,062 INFO L280 TraceCheckUtils]: 17: Hoare triple {820#false} assume 0 != ~methAndRunningLastTime~0; {820#false} is VALID [2020-07-28 18:59:52,062 INFO L280 TraceCheckUtils]: 18: Hoare triple {820#false} assume !false; {820#false} is VALID [2020-07-28 18:59:52,064 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:59:52,065 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1230176121] [2020-07-28 18:59:52,065 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:59:52,065 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 18:59:52,066 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [136974615] [2020-07-28 18:59:52,068 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 18:59:52,068 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:59:52,068 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 18:59:52,098 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:52,098 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 18:59:52,098 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:59:52,099 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 18:59:52,099 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:59:52,099 INFO L87 Difference]: Start difference. First operand 113 states and 166 transitions. Second operand 3 states. [2020-07-28 18:59:52,349 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:52,349 INFO L93 Difference]: Finished difference Result 113 states and 166 transitions. [2020-07-28 18:59:52,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 18:59:52,349 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 18:59:52,349 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:59:52,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:59:52,352 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 166 transitions. [2020-07-28 18:59:52,352 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:59:52,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 166 transitions. [2020-07-28 18:59:52,355 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 166 transitions. [2020-07-28 18:59:52,552 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 166 edges. 166 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:52,556 INFO L225 Difference]: With dead ends: 113 [2020-07-28 18:59:52,556 INFO L226 Difference]: Without dead ends: 49 [2020-07-28 18:59:52,558 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:59:52,558 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2020-07-28 18:59:52,588 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 49. [2020-07-28 18:59:52,588 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:59:52,589 INFO L82 GeneralOperation]: Start isEquivalent. First operand 49 states. Second operand 49 states. [2020-07-28 18:59:52,589 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand 49 states. [2020-07-28 18:59:52,589 INFO L87 Difference]: Start difference. First operand 49 states. Second operand 49 states. [2020-07-28 18:59:52,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:52,592 INFO L93 Difference]: Finished difference Result 49 states and 71 transitions. [2020-07-28 18:59:52,592 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 71 transitions. [2020-07-28 18:59:52,593 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:52,593 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:52,593 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand 49 states. [2020-07-28 18:59:52,595 INFO L87 Difference]: Start difference. First operand 49 states. Second operand 49 states. [2020-07-28 18:59:52,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:52,597 INFO L93 Difference]: Finished difference Result 49 states and 71 transitions. [2020-07-28 18:59:52,597 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 71 transitions. [2020-07-28 18:59:52,598 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:52,598 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:52,598 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:59:52,598 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:59:52,599 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49 states. [2020-07-28 18:59:52,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 71 transitions. [2020-07-28 18:59:52,601 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 71 transitions. Word has length 19 [2020-07-28 18:59:52,601 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:59:52,601 INFO L479 AbstractCegarLoop]: Abstraction has 49 states and 71 transitions. [2020-07-28 18:59:52,601 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 18:59:52,601 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 71 transitions. [2020-07-28 18:59:52,602 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 18:59:52,602 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:59:52,602 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:59:52,603 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 18:59:52,603 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:59:52,604 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:59:52,604 INFO L82 PathProgramCache]: Analyzing trace with hash -1368517952, now seen corresponding path program 1 times [2020-07-28 18:59:52,606 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:59:52,606 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [299868187] [2020-07-28 18:59:52,606 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:59:52,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:59:52,788 INFO L280 TraceCheckUtils]: 0: Hoare triple {1146#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(13);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string5.base, #t~string5.offset, 1);call write~init~int(77, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(101, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(116, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(104, #t~string5.base, 4 + #t~string5.offset, 1);call write~init~int(58, #t~string5.base, 5 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 6 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string7.base, #t~string7.offset, 1);call write~init~int(82, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(73, #t~string7.base, 2 + #t~string7.offset, 1);call write~init~int(84, #t~string7.base, 3 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 4 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(75, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 2 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string11.base, #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 1 + #t~string11.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {1146#true} is VALID [2020-07-28 18:59:52,789 INFO L280 TraceCheckUtils]: 1: Hoare triple {1146#true} havoc main_#res;havoc main_#t~ret71, main_~retValue_acc~9, main_~tmp~8;havoc main_~retValue_acc~9;havoc main_~tmp~8; {1146#true} is VALID [2020-07-28 18:59:52,789 INFO L280 TraceCheckUtils]: 2: Hoare triple {1146#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~11;havoc valid_product_~retValue_acc~11;valid_product_~retValue_acc~11 := 1;valid_product_#res := valid_product_~retValue_acc~11; {1146#true} is VALID [2020-07-28 18:59:52,789 INFO L280 TraceCheckUtils]: 3: Hoare triple {1146#true} main_#t~ret71 := valid_product_#res;assume -2147483648 <= main_#t~ret71 && main_#t~ret71 <= 2147483647;main_~tmp~8 := main_#t~ret71;havoc main_#t~ret71; {1146#true} is VALID [2020-07-28 18:59:52,789 INFO L280 TraceCheckUtils]: 4: Hoare triple {1146#true} assume 0 != main_~tmp~8; {1146#true} is VALID [2020-07-28 18:59:52,790 INFO L280 TraceCheckUtils]: 5: Hoare triple {1146#true} ~methAndRunningLastTime~0 := 0; {1146#true} is VALID [2020-07-28 18:59:52,790 INFO L280 TraceCheckUtils]: 6: Hoare triple {1146#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1146#true} is VALID [2020-07-28 18:59:52,790 INFO L280 TraceCheckUtils]: 7: Hoare triple {1146#true} assume !false; {1146#true} is VALID [2020-07-28 18:59:52,790 INFO L280 TraceCheckUtils]: 8: Hoare triple {1146#true} assume test_~splverifierCounter~0 < 4; {1146#true} is VALID [2020-07-28 18:59:52,791 INFO L280 TraceCheckUtils]: 9: Hoare triple {1146#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {1146#true} is VALID [2020-07-28 18:59:52,791 INFO L280 TraceCheckUtils]: 10: Hoare triple {1146#true} assume !(0 != test_~tmp~1); {1146#true} is VALID [2020-07-28 18:59:52,792 INFO L280 TraceCheckUtils]: 11: Hoare triple {1146#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {1146#true} is VALID [2020-07-28 18:59:52,792 INFO L280 TraceCheckUtils]: 12: Hoare triple {1146#true} assume !(0 != test_~tmp___0~1); {1146#true} is VALID [2020-07-28 18:59:52,793 INFO L280 TraceCheckUtils]: 13: Hoare triple {1146#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {1146#true} is VALID [2020-07-28 18:59:52,794 INFO L280 TraceCheckUtils]: 14: Hoare triple {1146#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1148#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:59:52,798 INFO L280 TraceCheckUtils]: 15: Hoare triple {1148#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {1148#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:59:52,799 INFO L280 TraceCheckUtils]: 16: Hoare triple {1148#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {1147#false} is VALID [2020-07-28 18:59:52,800 INFO L280 TraceCheckUtils]: 17: Hoare triple {1147#false} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {1147#false} is VALID [2020-07-28 18:59:52,800 INFO L280 TraceCheckUtils]: 18: Hoare triple {1147#false} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {1147#false} is VALID [2020-07-28 18:59:52,800 INFO L280 TraceCheckUtils]: 19: Hoare triple {1147#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {1147#false} is VALID [2020-07-28 18:59:52,800 INFO L280 TraceCheckUtils]: 20: Hoare triple {1147#false} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {1147#false} is VALID [2020-07-28 18:59:52,801 INFO L280 TraceCheckUtils]: 21: Hoare triple {1147#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {1147#false} is VALID [2020-07-28 18:59:52,801 INFO L280 TraceCheckUtils]: 22: Hoare triple {1147#false} assume 0 != ~methAndRunningLastTime~0; {1147#false} is VALID [2020-07-28 18:59:52,801 INFO L280 TraceCheckUtils]: 23: Hoare triple {1147#false} assume !false; {1147#false} is VALID [2020-07-28 18:59:52,802 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:59:52,803 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [299868187] [2020-07-28 18:59:52,803 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:59:52,804 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 18:59:52,804 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [923231992] [2020-07-28 18:59:52,804 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 18:59:52,805 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:59:52,805 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 18:59:52,835 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:52,835 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 18:59:52,836 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:59:52,836 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 18:59:52,836 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:59:52,836 INFO L87 Difference]: Start difference. First operand 49 states and 71 transitions. Second operand 3 states. [2020-07-28 18:59:53,125 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:53,126 INFO L93 Difference]: Finished difference Result 133 states and 199 transitions. [2020-07-28 18:59:53,126 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 18:59:53,126 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 18:59:53,126 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:59:53,127 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:59:53,129 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 199 transitions. [2020-07-28 18:59:53,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:59:53,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 199 transitions. [2020-07-28 18:59:53,133 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 199 transitions. [2020-07-28 18:59:53,376 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 199 edges. 199 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:53,380 INFO L225 Difference]: With dead ends: 133 [2020-07-28 18:59:53,381 INFO L226 Difference]: Without dead ends: 91 [2020-07-28 18:59:53,382 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:59:53,383 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 91 states. [2020-07-28 18:59:53,436 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 91 to 87. [2020-07-28 18:59:53,437 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:59:53,437 INFO L82 GeneralOperation]: Start isEquivalent. First operand 91 states. Second operand 87 states. [2020-07-28 18:59:53,437 INFO L74 IsIncluded]: Start isIncluded. First operand 91 states. Second operand 87 states. [2020-07-28 18:59:53,437 INFO L87 Difference]: Start difference. First operand 91 states. Second operand 87 states. [2020-07-28 18:59:53,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:53,442 INFO L93 Difference]: Finished difference Result 91 states and 134 transitions. [2020-07-28 18:59:53,442 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 134 transitions. [2020-07-28 18:59:53,443 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:53,443 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:53,443 INFO L74 IsIncluded]: Start isIncluded. First operand 87 states. Second operand 91 states. [2020-07-28 18:59:53,443 INFO L87 Difference]: Start difference. First operand 87 states. Second operand 91 states. [2020-07-28 18:59:53,447 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:53,447 INFO L93 Difference]: Finished difference Result 91 states and 134 transitions. [2020-07-28 18:59:53,447 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 134 transitions. [2020-07-28 18:59:53,448 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:53,448 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:53,448 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:59:53,449 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:59:53,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 87 states. [2020-07-28 18:59:53,452 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 130 transitions. [2020-07-28 18:59:53,453 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 130 transitions. Word has length 24 [2020-07-28 18:59:53,453 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:59:53,453 INFO L479 AbstractCegarLoop]: Abstraction has 87 states and 130 transitions. [2020-07-28 18:59:53,453 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 18:59:53,453 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 130 transitions. [2020-07-28 18:59:53,454 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2020-07-28 18:59:53,454 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:59:53,454 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:59:53,455 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 18:59:53,455 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:59:53,455 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:59:53,455 INFO L82 PathProgramCache]: Analyzing trace with hash 418729815, now seen corresponding path program 1 times [2020-07-28 18:59:53,455 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:59:53,456 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1880298633] [2020-07-28 18:59:53,456 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:59:53,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:59:53,587 INFO L280 TraceCheckUtils]: 0: Hoare triple {1635#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(13);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string5.base, #t~string5.offset, 1);call write~init~int(77, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(101, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(116, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(104, #t~string5.base, 4 + #t~string5.offset, 1);call write~init~int(58, #t~string5.base, 5 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 6 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string7.base, #t~string7.offset, 1);call write~init~int(82, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(73, #t~string7.base, 2 + #t~string7.offset, 1);call write~init~int(84, #t~string7.base, 3 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 4 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(75, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 2 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string11.base, #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 1 + #t~string11.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,588 INFO L280 TraceCheckUtils]: 1: Hoare triple {1637#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret71, main_~retValue_acc~9, main_~tmp~8;havoc main_~retValue_acc~9;havoc main_~tmp~8; {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,590 INFO L280 TraceCheckUtils]: 2: Hoare triple {1637#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~11;havoc valid_product_~retValue_acc~11;valid_product_~retValue_acc~11 := 1;valid_product_#res := valid_product_~retValue_acc~11; {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,590 INFO L280 TraceCheckUtils]: 3: Hoare triple {1637#(= 0 ~pumpRunning~0)} main_#t~ret71 := valid_product_#res;assume -2147483648 <= main_#t~ret71 && main_#t~ret71 <= 2147483647;main_~tmp~8 := main_#t~ret71;havoc main_#t~ret71; {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,591 INFO L280 TraceCheckUtils]: 4: Hoare triple {1637#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~8; {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,592 INFO L280 TraceCheckUtils]: 5: Hoare triple {1637#(= 0 ~pumpRunning~0)} ~methAndRunningLastTime~0 := 0; {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,593 INFO L280 TraceCheckUtils]: 6: Hoare triple {1637#(= 0 ~pumpRunning~0)} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,593 INFO L280 TraceCheckUtils]: 7: Hoare triple {1637#(= 0 ~pumpRunning~0)} assume !false; {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,594 INFO L280 TraceCheckUtils]: 8: Hoare triple {1637#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,595 INFO L280 TraceCheckUtils]: 9: Hoare triple {1637#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,595 INFO L280 TraceCheckUtils]: 10: Hoare triple {1637#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~1); {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,596 INFO L280 TraceCheckUtils]: 11: Hoare triple {1637#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,597 INFO L280 TraceCheckUtils]: 12: Hoare triple {1637#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~1); {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,598 INFO L280 TraceCheckUtils]: 13: Hoare triple {1637#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,598 INFO L280 TraceCheckUtils]: 14: Hoare triple {1637#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,600 INFO L280 TraceCheckUtils]: 15: Hoare triple {1637#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,601 INFO L280 TraceCheckUtils]: 16: Hoare triple {1637#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret17, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,602 INFO L280 TraceCheckUtils]: 17: Hoare triple {1637#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret16, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {1637#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:53,603 INFO L280 TraceCheckUtils]: 18: Hoare triple {1637#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {1636#false} is VALID [2020-07-28 18:59:53,603 INFO L280 TraceCheckUtils]: 19: Hoare triple {1636#false} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {1636#false} is VALID [2020-07-28 18:59:53,604 INFO L280 TraceCheckUtils]: 20: Hoare triple {1636#false} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {1636#false} is VALID [2020-07-28 18:59:53,604 INFO L280 TraceCheckUtils]: 21: Hoare triple {1636#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {1636#false} is VALID [2020-07-28 18:59:53,605 INFO L280 TraceCheckUtils]: 22: Hoare triple {1636#false} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {1636#false} is VALID [2020-07-28 18:59:53,605 INFO L280 TraceCheckUtils]: 23: Hoare triple {1636#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {1636#false} is VALID [2020-07-28 18:59:53,605 INFO L280 TraceCheckUtils]: 24: Hoare triple {1636#false} assume 0 != ~methAndRunningLastTime~0; {1636#false} is VALID [2020-07-28 18:59:53,605 INFO L280 TraceCheckUtils]: 25: Hoare triple {1636#false} assume !false; {1636#false} is VALID [2020-07-28 18:59:53,607 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:59:53,607 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1880298633] [2020-07-28 18:59:53,607 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:59:53,608 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 18:59:53,608 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [555617403] [2020-07-28 18:59:53,608 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 18:59:53,609 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:59:53,609 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 18:59:53,644 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:53,645 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 18:59:53,645 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:59:53,645 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 18:59:53,646 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:59:53,646 INFO L87 Difference]: Start difference. First operand 87 states and 130 transitions. Second operand 3 states. [2020-07-28 18:59:53,907 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:53,907 INFO L93 Difference]: Finished difference Result 210 states and 319 transitions. [2020-07-28 18:59:53,907 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 18:59:53,907 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 18:59:53,908 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:59:53,908 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:59:53,910 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 170 transitions. [2020-07-28 18:59:53,910 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:59:53,912 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 170 transitions. [2020-07-28 18:59:53,912 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 170 transitions. [2020-07-28 18:59:54,097 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 170 edges. 170 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:54,101 INFO L225 Difference]: With dead ends: 210 [2020-07-28 18:59:54,102 INFO L226 Difference]: Without dead ends: 130 [2020-07-28 18:59:54,103 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:59:54,104 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130 states. [2020-07-28 18:59:54,176 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130 to 128. [2020-07-28 18:59:54,177 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:59:54,177 INFO L82 GeneralOperation]: Start isEquivalent. First operand 130 states. Second operand 128 states. [2020-07-28 18:59:54,177 INFO L74 IsIncluded]: Start isIncluded. First operand 130 states. Second operand 128 states. [2020-07-28 18:59:54,177 INFO L87 Difference]: Start difference. First operand 130 states. Second operand 128 states. [2020-07-28 18:59:54,186 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:54,186 INFO L93 Difference]: Finished difference Result 130 states and 189 transitions. [2020-07-28 18:59:54,187 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 189 transitions. [2020-07-28 18:59:54,189 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:54,191 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:54,191 INFO L74 IsIncluded]: Start isIncluded. First operand 128 states. Second operand 130 states. [2020-07-28 18:59:54,192 INFO L87 Difference]: Start difference. First operand 128 states. Second operand 130 states. [2020-07-28 18:59:54,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:54,198 INFO L93 Difference]: Finished difference Result 130 states and 189 transitions. [2020-07-28 18:59:54,198 INFO L276 IsEmpty]: Start isEmpty. Operand 130 states and 189 transitions. [2020-07-28 18:59:54,199 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:54,199 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:54,199 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:59:54,199 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:59:54,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 128 states. [2020-07-28 18:59:54,204 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 128 states to 128 states and 188 transitions. [2020-07-28 18:59:54,204 INFO L78 Accepts]: Start accepts. Automaton has 128 states and 188 transitions. Word has length 26 [2020-07-28 18:59:54,204 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:59:54,205 INFO L479 AbstractCegarLoop]: Abstraction has 128 states and 188 transitions. [2020-07-28 18:59:54,205 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 18:59:54,205 INFO L276 IsEmpty]: Start isEmpty. Operand 128 states and 188 transitions. [2020-07-28 18:59:54,206 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2020-07-28 18:59:54,206 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:59:54,207 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:59:54,208 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 18:59:54,208 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:59:54,208 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:59:54,208 INFO L82 PathProgramCache]: Analyzing trace with hash 1090172169, now seen corresponding path program 1 times [2020-07-28 18:59:54,209 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:59:54,209 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [208812811] [2020-07-28 18:59:54,209 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:59:54,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:59:54,358 INFO L280 TraceCheckUtils]: 0: Hoare triple {2365#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(13);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string5.base, #t~string5.offset, 1);call write~init~int(77, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(101, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(116, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(104, #t~string5.base, 4 + #t~string5.offset, 1);call write~init~int(58, #t~string5.base, 5 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 6 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string7.base, #t~string7.offset, 1);call write~init~int(82, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(73, #t~string7.base, 2 + #t~string7.offset, 1);call write~init~int(84, #t~string7.base, 3 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 4 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(75, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 2 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string11.base, #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 1 + #t~string11.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,359 INFO L280 TraceCheckUtils]: 1: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret71, main_~retValue_acc~9, main_~tmp~8;havoc main_~retValue_acc~9;havoc main_~tmp~8; {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,360 INFO L280 TraceCheckUtils]: 2: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~11;havoc valid_product_~retValue_acc~11;valid_product_~retValue_acc~11 := 1;valid_product_#res := valid_product_~retValue_acc~11; {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,361 INFO L280 TraceCheckUtils]: 3: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} main_#t~ret71 := valid_product_#res;assume -2147483648 <= main_#t~ret71 && main_#t~ret71 <= 2147483647;main_~tmp~8 := main_#t~ret71;havoc main_#t~ret71; {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,362 INFO L280 TraceCheckUtils]: 4: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~8; {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,362 INFO L280 TraceCheckUtils]: 5: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} ~methAndRunningLastTime~0 := 0; {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,363 INFO L280 TraceCheckUtils]: 6: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,364 INFO L280 TraceCheckUtils]: 7: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} assume !false; {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,364 INFO L280 TraceCheckUtils]: 8: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,365 INFO L280 TraceCheckUtils]: 9: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,366 INFO L280 TraceCheckUtils]: 10: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp~1); {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,367 INFO L280 TraceCheckUtils]: 11: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,367 INFO L280 TraceCheckUtils]: 12: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~1); {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,368 INFO L280 TraceCheckUtils]: 13: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,369 INFO L280 TraceCheckUtils]: 14: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet15 && test_#t~nondet15 <= 2147483647;test_~tmp___1~0 := test_#t~nondet15;havoc test_#t~nondet15; {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,370 INFO L280 TraceCheckUtils]: 15: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___1~0; {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,370 INFO L280 TraceCheckUtils]: 16: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,371 INFO L280 TraceCheckUtils]: 17: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} ~systemActive~0 := 0; {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,372 INFO L280 TraceCheckUtils]: 18: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,372 INFO L280 TraceCheckUtils]: 19: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~systemActive~0); {2367#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:54,373 INFO L280 TraceCheckUtils]: 20: Hoare triple {2367#(= 0 ~methaneLevelCritical~0)} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {2368#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 18:59:54,374 INFO L280 TraceCheckUtils]: 21: Hoare triple {2368#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {2369#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0)} is VALID [2020-07-28 18:59:54,375 INFO L280 TraceCheckUtils]: 22: Hoare triple {2369#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {2366#false} is VALID [2020-07-28 18:59:54,375 INFO L280 TraceCheckUtils]: 23: Hoare triple {2366#false} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {2366#false} is VALID [2020-07-28 18:59:54,375 INFO L280 TraceCheckUtils]: 24: Hoare triple {2366#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {2366#false} is VALID [2020-07-28 18:59:54,376 INFO L280 TraceCheckUtils]: 25: Hoare triple {2366#false} assume 0 != ~methAndRunningLastTime~0; {2366#false} is VALID [2020-07-28 18:59:54,376 INFO L280 TraceCheckUtils]: 26: Hoare triple {2366#false} assume !false; {2366#false} is VALID [2020-07-28 18:59:54,377 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:59:54,378 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [208812811] [2020-07-28 18:59:54,378 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:59:54,378 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 18:59:54,378 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [584180722] [2020-07-28 18:59:54,379 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 27 [2020-07-28 18:59:54,379 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:59:54,379 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 18:59:54,411 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 27 edges. 27 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:54,411 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 18:59:54,412 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:59:54,412 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 18:59:54,412 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 18:59:54,413 INFO L87 Difference]: Start difference. First operand 128 states and 188 transitions. Second operand 5 states. [2020-07-28 18:59:55,679 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:55,680 INFO L93 Difference]: Finished difference Result 628 states and 933 transitions. [2020-07-28 18:59:55,680 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 18:59:55,680 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 27 [2020-07-28 18:59:55,680 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:59:55,680 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 18:59:55,684 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 353 transitions. [2020-07-28 18:59:55,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 18:59:55,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 353 transitions. [2020-07-28 18:59:55,688 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 353 transitions. [2020-07-28 18:59:56,123 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 353 edges. 353 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:56,143 INFO L225 Difference]: With dead ends: 628 [2020-07-28 18:59:56,143 INFO L226 Difference]: Without dead ends: 507 [2020-07-28 18:59:56,145 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 18:59:56,146 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 507 states. [2020-07-28 18:59:56,398 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 507 to 235. [2020-07-28 18:59:56,398 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:59:56,398 INFO L82 GeneralOperation]: Start isEquivalent. First operand 507 states. Second operand 235 states. [2020-07-28 18:59:56,399 INFO L74 IsIncluded]: Start isIncluded. First operand 507 states. Second operand 235 states. [2020-07-28 18:59:56,399 INFO L87 Difference]: Start difference. First operand 507 states. Second operand 235 states. [2020-07-28 18:59:56,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:56,421 INFO L93 Difference]: Finished difference Result 507 states and 743 transitions. [2020-07-28 18:59:56,421 INFO L276 IsEmpty]: Start isEmpty. Operand 507 states and 743 transitions. [2020-07-28 18:59:56,423 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:56,423 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:56,423 INFO L74 IsIncluded]: Start isIncluded. First operand 235 states. Second operand 507 states. [2020-07-28 18:59:56,423 INFO L87 Difference]: Start difference. First operand 235 states. Second operand 507 states. [2020-07-28 18:59:56,448 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:56,448 INFO L93 Difference]: Finished difference Result 507 states and 743 transitions. [2020-07-28 18:59:56,448 INFO L276 IsEmpty]: Start isEmpty. Operand 507 states and 743 transitions. [2020-07-28 18:59:56,450 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:56,450 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:56,450 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:59:56,450 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:59:56,451 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 235 states. [2020-07-28 18:59:56,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 235 states to 235 states and 340 transitions. [2020-07-28 18:59:56,459 INFO L78 Accepts]: Start accepts. Automaton has 235 states and 340 transitions. Word has length 27 [2020-07-28 18:59:56,460 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:59:56,460 INFO L479 AbstractCegarLoop]: Abstraction has 235 states and 340 transitions. [2020-07-28 18:59:56,460 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 18:59:56,460 INFO L276 IsEmpty]: Start isEmpty. Operand 235 states and 340 transitions. [2020-07-28 18:59:56,461 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2020-07-28 18:59:56,461 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:59:56,462 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:59:56,462 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 18:59:56,462 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:59:56,463 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:59:56,463 INFO L82 PathProgramCache]: Analyzing trace with hash -343972991, now seen corresponding path program 1 times [2020-07-28 18:59:56,463 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:59:56,464 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2081626436] [2020-07-28 18:59:56,464 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:59:56,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:59:56,544 INFO L280 TraceCheckUtils]: 0: Hoare triple {4596#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(13);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string5.base, #t~string5.offset, 1);call write~init~int(77, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(101, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(116, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(104, #t~string5.base, 4 + #t~string5.offset, 1);call write~init~int(58, #t~string5.base, 5 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 6 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string7.base, #t~string7.offset, 1);call write~init~int(82, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(73, #t~string7.base, 2 + #t~string7.offset, 1);call write~init~int(84, #t~string7.base, 3 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 4 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(75, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 2 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string11.base, #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 1 + #t~string11.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,545 INFO L280 TraceCheckUtils]: 1: Hoare triple {4598#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret71, main_~retValue_acc~9, main_~tmp~8;havoc main_~retValue_acc~9;havoc main_~tmp~8; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,546 INFO L280 TraceCheckUtils]: 2: Hoare triple {4598#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~11;havoc valid_product_~retValue_acc~11;valid_product_~retValue_acc~11 := 1;valid_product_#res := valid_product_~retValue_acc~11; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,546 INFO L280 TraceCheckUtils]: 3: Hoare triple {4598#(= 0 ~pumpRunning~0)} main_#t~ret71 := valid_product_#res;assume -2147483648 <= main_#t~ret71 && main_#t~ret71 <= 2147483647;main_~tmp~8 := main_#t~ret71;havoc main_#t~ret71; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,547 INFO L280 TraceCheckUtils]: 4: Hoare triple {4598#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~8; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,548 INFO L280 TraceCheckUtils]: 5: Hoare triple {4598#(= 0 ~pumpRunning~0)} ~methAndRunningLastTime~0 := 0; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,560 INFO L280 TraceCheckUtils]: 6: Hoare triple {4598#(= 0 ~pumpRunning~0)} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,561 INFO L280 TraceCheckUtils]: 7: Hoare triple {4598#(= 0 ~pumpRunning~0)} assume !false; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,562 INFO L280 TraceCheckUtils]: 8: Hoare triple {4598#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,562 INFO L280 TraceCheckUtils]: 9: Hoare triple {4598#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,565 INFO L280 TraceCheckUtils]: 10: Hoare triple {4598#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~1); {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,565 INFO L280 TraceCheckUtils]: 11: Hoare triple {4598#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,566 INFO L280 TraceCheckUtils]: 12: Hoare triple {4598#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___0~1; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,570 INFO L280 TraceCheckUtils]: 13: Hoare triple {4598#(= 0 ~pumpRunning~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,574 INFO L280 TraceCheckUtils]: 14: Hoare triple {4598#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,574 INFO L280 TraceCheckUtils]: 15: Hoare triple {4598#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet15 && test_#t~nondet15 <= 2147483647;test_~tmp___1~0 := test_#t~nondet15;havoc test_#t~nondet15; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,575 INFO L280 TraceCheckUtils]: 16: Hoare triple {4598#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___1~0; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,576 INFO L280 TraceCheckUtils]: 17: Hoare triple {4598#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,577 INFO L280 TraceCheckUtils]: 18: Hoare triple {4598#(= 0 ~pumpRunning~0)} ~systemActive~0 := 0; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,577 INFO L280 TraceCheckUtils]: 19: Hoare triple {4598#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,578 INFO L280 TraceCheckUtils]: 20: Hoare triple {4598#(= 0 ~pumpRunning~0)} assume !(0 != ~systemActive~0); {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,579 INFO L280 TraceCheckUtils]: 21: Hoare triple {4598#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,579 INFO L280 TraceCheckUtils]: 22: Hoare triple {4598#(= 0 ~pumpRunning~0)} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {4598#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,581 INFO L280 TraceCheckUtils]: 23: Hoare triple {4598#(= 0 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {4599#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 18:59:56,582 INFO L280 TraceCheckUtils]: 24: Hoare triple {4599#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {4600#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp___0~0)} is VALID [2020-07-28 18:59:56,582 INFO L280 TraceCheckUtils]: 25: Hoare triple {4600#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp___0~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {4597#false} is VALID [2020-07-28 18:59:56,583 INFO L280 TraceCheckUtils]: 26: Hoare triple {4597#false} assume 0 != ~methAndRunningLastTime~0; {4597#false} is VALID [2020-07-28 18:59:56,583 INFO L280 TraceCheckUtils]: 27: Hoare triple {4597#false} assume !false; {4597#false} is VALID [2020-07-28 18:59:56,586 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:59:56,586 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2081626436] [2020-07-28 18:59:56,586 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:59:56,587 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 18:59:56,587 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1653258087] [2020-07-28 18:59:56,588 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 28 [2020-07-28 18:59:56,588 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:59:56,588 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 18:59:56,640 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:56,640 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 18:59:56,640 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:59:56,642 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 18:59:56,642 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 18:59:56,642 INFO L87 Difference]: Start difference. First operand 235 states and 340 transitions. Second operand 5 states. [2020-07-28 18:59:58,295 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:58,295 INFO L93 Difference]: Finished difference Result 889 states and 1291 transitions. [2020-07-28 18:59:58,296 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 18:59:58,296 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 28 [2020-07-28 18:59:58,296 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:59:58,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 18:59:58,301 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 339 transitions. [2020-07-28 18:59:58,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 18:59:58,306 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 339 transitions. [2020-07-28 18:59:58,307 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 339 transitions. [2020-07-28 18:59:58,723 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 339 edges. 339 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:58,746 INFO L225 Difference]: With dead ends: 889 [2020-07-28 18:59:58,746 INFO L226 Difference]: Without dead ends: 661 [2020-07-28 18:59:58,748 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 18:59:58,749 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 661 states. [2020-07-28 18:59:59,039 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 661 to 233. [2020-07-28 18:59:59,039 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:59:59,039 INFO L82 GeneralOperation]: Start isEquivalent. First operand 661 states. Second operand 233 states. [2020-07-28 18:59:59,039 INFO L74 IsIncluded]: Start isIncluded. First operand 661 states. Second operand 233 states. [2020-07-28 18:59:59,040 INFO L87 Difference]: Start difference. First operand 661 states. Second operand 233 states. [2020-07-28 18:59:59,066 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:59,066 INFO L93 Difference]: Finished difference Result 661 states and 956 transitions. [2020-07-28 18:59:59,066 INFO L276 IsEmpty]: Start isEmpty. Operand 661 states and 956 transitions. [2020-07-28 18:59:59,068 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:59,068 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:59,068 INFO L74 IsIncluded]: Start isIncluded. First operand 233 states. Second operand 661 states. [2020-07-28 18:59:59,068 INFO L87 Difference]: Start difference. First operand 233 states. Second operand 661 states. [2020-07-28 18:59:59,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:59,095 INFO L93 Difference]: Finished difference Result 661 states and 956 transitions. [2020-07-28 18:59:59,096 INFO L276 IsEmpty]: Start isEmpty. Operand 661 states and 956 transitions. [2020-07-28 18:59:59,097 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:59,097 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:59,097 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:59:59,098 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:59:59,098 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 233 states. [2020-07-28 18:59:59,103 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 233 states to 233 states and 334 transitions. [2020-07-28 18:59:59,104 INFO L78 Accepts]: Start accepts. Automaton has 233 states and 334 transitions. Word has length 28 [2020-07-28 18:59:59,104 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:59:59,104 INFO L479 AbstractCegarLoop]: Abstraction has 233 states and 334 transitions. [2020-07-28 18:59:59,104 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 18:59:59,105 INFO L276 IsEmpty]: Start isEmpty. Operand 233 states and 334 transitions. [2020-07-28 18:59:59,105 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 18:59:59,106 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:59:59,106 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:59:59,106 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 18:59:59,106 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:59:59,106 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:59:59,107 INFO L82 PathProgramCache]: Analyzing trace with hash -1676975922, now seen corresponding path program 1 times [2020-07-28 18:59:59,107 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:59:59,107 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1476748001] [2020-07-28 18:59:59,107 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:59:59,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:59:59,172 INFO L280 TraceCheckUtils]: 0: Hoare triple {7493#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(13);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string5.base, #t~string5.offset, 1);call write~init~int(77, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(101, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(116, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(104, #t~string5.base, 4 + #t~string5.offset, 1);call write~init~int(58, #t~string5.base, 5 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 6 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string7.base, #t~string7.offset, 1);call write~init~int(82, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(73, #t~string7.base, 2 + #t~string7.offset, 1);call write~init~int(84, #t~string7.base, 3 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 4 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(75, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 2 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string11.base, #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 1 + #t~string11.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {7493#true} is VALID [2020-07-28 18:59:59,173 INFO L280 TraceCheckUtils]: 1: Hoare triple {7493#true} havoc main_#res;havoc main_#t~ret71, main_~retValue_acc~9, main_~tmp~8;havoc main_~retValue_acc~9;havoc main_~tmp~8; {7493#true} is VALID [2020-07-28 18:59:59,173 INFO L280 TraceCheckUtils]: 2: Hoare triple {7493#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~11;havoc valid_product_~retValue_acc~11;valid_product_~retValue_acc~11 := 1;valid_product_#res := valid_product_~retValue_acc~11; {7493#true} is VALID [2020-07-28 18:59:59,173 INFO L280 TraceCheckUtils]: 3: Hoare triple {7493#true} main_#t~ret71 := valid_product_#res;assume -2147483648 <= main_#t~ret71 && main_#t~ret71 <= 2147483647;main_~tmp~8 := main_#t~ret71;havoc main_#t~ret71; {7493#true} is VALID [2020-07-28 18:59:59,174 INFO L280 TraceCheckUtils]: 4: Hoare triple {7493#true} assume 0 != main_~tmp~8; {7493#true} is VALID [2020-07-28 18:59:59,174 INFO L280 TraceCheckUtils]: 5: Hoare triple {7493#true} ~methAndRunningLastTime~0 := 0; {7493#true} is VALID [2020-07-28 18:59:59,174 INFO L280 TraceCheckUtils]: 6: Hoare triple {7493#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {7493#true} is VALID [2020-07-28 18:59:59,174 INFO L280 TraceCheckUtils]: 7: Hoare triple {7493#true} assume !false; {7493#true} is VALID [2020-07-28 18:59:59,175 INFO L280 TraceCheckUtils]: 8: Hoare triple {7493#true} assume test_~splverifierCounter~0 < 4; {7493#true} is VALID [2020-07-28 18:59:59,175 INFO L280 TraceCheckUtils]: 9: Hoare triple {7493#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {7493#true} is VALID [2020-07-28 18:59:59,175 INFO L280 TraceCheckUtils]: 10: Hoare triple {7493#true} assume !(0 != test_~tmp~1); {7493#true} is VALID [2020-07-28 18:59:59,175 INFO L280 TraceCheckUtils]: 11: Hoare triple {7493#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {7493#true} is VALID [2020-07-28 18:59:59,175 INFO L280 TraceCheckUtils]: 12: Hoare triple {7493#true} assume 0 != test_~tmp___0~1; {7493#true} is VALID [2020-07-28 18:59:59,176 INFO L280 TraceCheckUtils]: 13: Hoare triple {7493#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {7493#true} is VALID [2020-07-28 18:59:59,176 INFO L280 TraceCheckUtils]: 14: Hoare triple {7493#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {7493#true} is VALID [2020-07-28 18:59:59,176 INFO L280 TraceCheckUtils]: 15: Hoare triple {7493#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {7493#true} is VALID [2020-07-28 18:59:59,176 INFO L280 TraceCheckUtils]: 16: Hoare triple {7493#true} assume !(0 != ~pumpRunning~0); {7493#true} is VALID [2020-07-28 18:59:59,177 INFO L280 TraceCheckUtils]: 17: Hoare triple {7493#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret17, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {7493#true} is VALID [2020-07-28 18:59:59,177 INFO L280 TraceCheckUtils]: 18: Hoare triple {7493#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret16, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {7493#true} is VALID [2020-07-28 18:59:59,177 INFO L280 TraceCheckUtils]: 19: Hoare triple {7493#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {7493#true} is VALID [2020-07-28 18:59:59,178 INFO L280 TraceCheckUtils]: 20: Hoare triple {7493#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {7493#true} is VALID [2020-07-28 18:59:59,178 INFO L280 TraceCheckUtils]: 21: Hoare triple {7493#true} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {7493#true} is VALID [2020-07-28 18:59:59,180 INFO L280 TraceCheckUtils]: 22: Hoare triple {7493#true} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~2 := 0; {7495#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2)} is VALID [2020-07-28 18:59:59,181 INFO L280 TraceCheckUtils]: 23: Hoare triple {7495#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {7496#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 18:59:59,182 INFO L280 TraceCheckUtils]: 24: Hoare triple {7496#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__highWaterSensor_#t~ret16 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret16 && processEnvironment__wrappee__highWaterSensor_#t~ret16 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret16;havoc processEnvironment__wrappee__highWaterSensor_#t~ret16; {7497#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2)} is VALID [2020-07-28 18:59:59,182 INFO L280 TraceCheckUtils]: 25: Hoare triple {7497#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {7494#false} is VALID [2020-07-28 18:59:59,183 INFO L280 TraceCheckUtils]: 26: Hoare triple {7494#false} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {7494#false} is VALID [2020-07-28 18:59:59,183 INFO L280 TraceCheckUtils]: 27: Hoare triple {7494#false} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {7494#false} is VALID [2020-07-28 18:59:59,183 INFO L280 TraceCheckUtils]: 28: Hoare triple {7494#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {7494#false} is VALID [2020-07-28 18:59:59,183 INFO L280 TraceCheckUtils]: 29: Hoare triple {7494#false} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {7494#false} is VALID [2020-07-28 18:59:59,184 INFO L280 TraceCheckUtils]: 30: Hoare triple {7494#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {7494#false} is VALID [2020-07-28 18:59:59,184 INFO L280 TraceCheckUtils]: 31: Hoare triple {7494#false} assume 0 != ~methAndRunningLastTime~0; {7494#false} is VALID [2020-07-28 18:59:59,184 INFO L280 TraceCheckUtils]: 32: Hoare triple {7494#false} assume !false; {7494#false} is VALID [2020-07-28 18:59:59,186 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:59:59,186 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1476748001] [2020-07-28 18:59:59,186 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:59:59,186 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 18:59:59,187 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [542321806] [2020-07-28 18:59:59,187 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2020-07-28 18:59:59,187 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:59:59,187 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 18:59:59,228 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:59,228 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 18:59:59,229 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:59:59,229 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 18:59:59,229 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 18:59:59,229 INFO L87 Difference]: Start difference. First operand 233 states and 334 transitions. Second operand 5 states. [2020-07-28 19:00:00,604 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:00,604 INFO L93 Difference]: Finished difference Result 639 states and 901 transitions. [2020-07-28 19:00:00,604 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:00:00,604 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2020-07-28 19:00:00,605 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:00,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:00,607 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 200 transitions. [2020-07-28 19:00:00,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:00,608 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 200 transitions. [2020-07-28 19:00:00,609 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 200 transitions. [2020-07-28 19:00:00,818 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 200 edges. 200 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:00,832 INFO L225 Difference]: With dead ends: 639 [2020-07-28 19:00:00,833 INFO L226 Difference]: Without dead ends: 413 [2020-07-28 19:00:00,835 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:00:00,835 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 413 states. [2020-07-28 19:00:01,213 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 413 to 257. [2020-07-28 19:00:01,213 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:01,214 INFO L82 GeneralOperation]: Start isEquivalent. First operand 413 states. Second operand 257 states. [2020-07-28 19:00:01,214 INFO L74 IsIncluded]: Start isIncluded. First operand 413 states. Second operand 257 states. [2020-07-28 19:00:01,214 INFO L87 Difference]: Start difference. First operand 413 states. Second operand 257 states. [2020-07-28 19:00:01,226 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:01,226 INFO L93 Difference]: Finished difference Result 413 states and 566 transitions. [2020-07-28 19:00:01,226 INFO L276 IsEmpty]: Start isEmpty. Operand 413 states and 566 transitions. [2020-07-28 19:00:01,227 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:01,227 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:01,227 INFO L74 IsIncluded]: Start isIncluded. First operand 257 states. Second operand 413 states. [2020-07-28 19:00:01,227 INFO L87 Difference]: Start difference. First operand 257 states. Second operand 413 states. [2020-07-28 19:00:01,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:01,240 INFO L93 Difference]: Finished difference Result 413 states and 566 transitions. [2020-07-28 19:00:01,240 INFO L276 IsEmpty]: Start isEmpty. Operand 413 states and 566 transitions. [2020-07-28 19:00:01,241 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:01,241 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:01,242 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:01,242 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:01,242 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 257 states. [2020-07-28 19:00:01,248 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 257 states to 257 states and 358 transitions. [2020-07-28 19:00:01,248 INFO L78 Accepts]: Start accepts. Automaton has 257 states and 358 transitions. Word has length 33 [2020-07-28 19:00:01,248 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:01,249 INFO L479 AbstractCegarLoop]: Abstraction has 257 states and 358 transitions. [2020-07-28 19:00:01,249 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:00:01,249 INFO L276 IsEmpty]: Start isEmpty. Operand 257 states and 358 transitions. [2020-07-28 19:00:01,249 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:00:01,250 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:01,250 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:01,250 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:00:01,250 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:01,250 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:01,251 INFO L82 PathProgramCache]: Analyzing trace with hash -975911344, now seen corresponding path program 1 times [2020-07-28 19:00:01,251 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:01,252 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1257999089] [2020-07-28 19:00:01,252 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:01,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:01,354 INFO L280 TraceCheckUtils]: 0: Hoare triple {9574#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(13);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string5.base, #t~string5.offset, 1);call write~init~int(77, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(101, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(116, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(104, #t~string5.base, 4 + #t~string5.offset, 1);call write~init~int(58, #t~string5.base, 5 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 6 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string7.base, #t~string7.offset, 1);call write~init~int(82, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(73, #t~string7.base, 2 + #t~string7.offset, 1);call write~init~int(84, #t~string7.base, 3 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 4 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(75, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 2 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string11.base, #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 1 + #t~string11.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {9574#true} is VALID [2020-07-28 19:00:01,354 INFO L280 TraceCheckUtils]: 1: Hoare triple {9574#true} havoc main_#res;havoc main_#t~ret71, main_~retValue_acc~9, main_~tmp~8;havoc main_~retValue_acc~9;havoc main_~tmp~8; {9574#true} is VALID [2020-07-28 19:00:01,354 INFO L280 TraceCheckUtils]: 2: Hoare triple {9574#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~11;havoc valid_product_~retValue_acc~11;valid_product_~retValue_acc~11 := 1;valid_product_#res := valid_product_~retValue_acc~11; {9574#true} is VALID [2020-07-28 19:00:01,354 INFO L280 TraceCheckUtils]: 3: Hoare triple {9574#true} main_#t~ret71 := valid_product_#res;assume -2147483648 <= main_#t~ret71 && main_#t~ret71 <= 2147483647;main_~tmp~8 := main_#t~ret71;havoc main_#t~ret71; {9574#true} is VALID [2020-07-28 19:00:01,355 INFO L280 TraceCheckUtils]: 4: Hoare triple {9574#true} assume 0 != main_~tmp~8; {9574#true} is VALID [2020-07-28 19:00:01,355 INFO L280 TraceCheckUtils]: 5: Hoare triple {9574#true} ~methAndRunningLastTime~0 := 0; {9574#true} is VALID [2020-07-28 19:00:01,355 INFO L280 TraceCheckUtils]: 6: Hoare triple {9574#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {9574#true} is VALID [2020-07-28 19:00:01,355 INFO L280 TraceCheckUtils]: 7: Hoare triple {9574#true} assume !false; {9574#true} is VALID [2020-07-28 19:00:01,356 INFO L280 TraceCheckUtils]: 8: Hoare triple {9574#true} assume test_~splverifierCounter~0 < 4; {9574#true} is VALID [2020-07-28 19:00:01,356 INFO L280 TraceCheckUtils]: 9: Hoare triple {9574#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {9574#true} is VALID [2020-07-28 19:00:01,356 INFO L280 TraceCheckUtils]: 10: Hoare triple {9574#true} assume !(0 != test_~tmp~1); {9574#true} is VALID [2020-07-28 19:00:01,356 INFO L280 TraceCheckUtils]: 11: Hoare triple {9574#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {9574#true} is VALID [2020-07-28 19:00:01,357 INFO L280 TraceCheckUtils]: 12: Hoare triple {9574#true} assume 0 != test_~tmp___0~1; {9574#true} is VALID [2020-07-28 19:00:01,357 INFO L280 TraceCheckUtils]: 13: Hoare triple {9574#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {9574#true} is VALID [2020-07-28 19:00:01,357 INFO L280 TraceCheckUtils]: 14: Hoare triple {9574#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {9574#true} is VALID [2020-07-28 19:00:01,357 INFO L280 TraceCheckUtils]: 15: Hoare triple {9574#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {9574#true} is VALID [2020-07-28 19:00:01,358 INFO L280 TraceCheckUtils]: 16: Hoare triple {9574#true} assume !(0 != ~pumpRunning~0); {9574#true} is VALID [2020-07-28 19:00:01,359 INFO L280 TraceCheckUtils]: 17: Hoare triple {9574#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret17, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {9574#true} is VALID [2020-07-28 19:00:01,359 INFO L280 TraceCheckUtils]: 18: Hoare triple {9574#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret16, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {9574#true} is VALID [2020-07-28 19:00:01,360 INFO L280 TraceCheckUtils]: 19: Hoare triple {9574#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {9574#true} is VALID [2020-07-28 19:00:01,361 INFO L280 TraceCheckUtils]: 20: Hoare triple {9574#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {9576#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:00:01,362 INFO L280 TraceCheckUtils]: 21: Hoare triple {9576#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {9577#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~4)} is VALID [2020-07-28 19:00:01,364 INFO L280 TraceCheckUtils]: 22: Hoare triple {9577#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~4)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~2 := 1; {9575#false} is VALID [2020-07-28 19:00:01,364 INFO L280 TraceCheckUtils]: 23: Hoare triple {9575#false} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {9575#false} is VALID [2020-07-28 19:00:01,364 INFO L280 TraceCheckUtils]: 24: Hoare triple {9575#false} processEnvironment__wrappee__highWaterSensor_#t~ret16 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret16 && processEnvironment__wrappee__highWaterSensor_#t~ret16 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret16;havoc processEnvironment__wrappee__highWaterSensor_#t~ret16; {9575#false} is VALID [2020-07-28 19:00:01,364 INFO L280 TraceCheckUtils]: 25: Hoare triple {9575#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {9575#false} is VALID [2020-07-28 19:00:01,365 INFO L280 TraceCheckUtils]: 26: Hoare triple {9575#false} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {9575#false} is VALID [2020-07-28 19:00:01,365 INFO L280 TraceCheckUtils]: 27: Hoare triple {9575#false} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {9575#false} is VALID [2020-07-28 19:00:01,365 INFO L280 TraceCheckUtils]: 28: Hoare triple {9575#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {9575#false} is VALID [2020-07-28 19:00:01,365 INFO L280 TraceCheckUtils]: 29: Hoare triple {9575#false} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {9575#false} is VALID [2020-07-28 19:00:01,366 INFO L280 TraceCheckUtils]: 30: Hoare triple {9575#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {9575#false} is VALID [2020-07-28 19:00:01,366 INFO L280 TraceCheckUtils]: 31: Hoare triple {9575#false} assume 0 != ~methAndRunningLastTime~0; {9575#false} is VALID [2020-07-28 19:00:01,366 INFO L280 TraceCheckUtils]: 32: Hoare triple {9575#false} assume !false; {9575#false} is VALID [2020-07-28 19:00:01,368 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:01,368 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1257999089] [2020-07-28 19:00:01,369 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:01,369 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:00:01,369 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [934889514] [2020-07-28 19:00:01,370 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:00:01,370 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:01,370 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:00:01,415 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:01,415 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:00:01,415 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:01,415 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:00:01,415 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:00:01,416 INFO L87 Difference]: Start difference. First operand 257 states and 358 transitions. Second operand 4 states. [2020-07-28 19:00:02,731 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:02,732 INFO L93 Difference]: Finished difference Result 627 states and 863 transitions. [2020-07-28 19:00:02,732 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:00:02,732 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:00:02,732 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:02,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:00:02,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 175 transitions. [2020-07-28 19:00:02,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:00:02,735 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 175 transitions. [2020-07-28 19:00:02,735 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 175 transitions. [2020-07-28 19:00:02,932 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 175 edges. 175 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:02,944 INFO L225 Difference]: With dead ends: 627 [2020-07-28 19:00:02,945 INFO L226 Difference]: Without dead ends: 377 [2020-07-28 19:00:02,946 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:00:02,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 377 states. [2020-07-28 19:00:03,364 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 377 to 273. [2020-07-28 19:00:03,365 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:03,365 INFO L82 GeneralOperation]: Start isEquivalent. First operand 377 states. Second operand 273 states. [2020-07-28 19:00:03,365 INFO L74 IsIncluded]: Start isIncluded. First operand 377 states. Second operand 273 states. [2020-07-28 19:00:03,365 INFO L87 Difference]: Start difference. First operand 377 states. Second operand 273 states. [2020-07-28 19:00:03,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:03,375 INFO L93 Difference]: Finished difference Result 377 states and 504 transitions. [2020-07-28 19:00:03,375 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 504 transitions. [2020-07-28 19:00:03,376 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:03,376 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:03,376 INFO L74 IsIncluded]: Start isIncluded. First operand 273 states. Second operand 377 states. [2020-07-28 19:00:03,377 INFO L87 Difference]: Start difference. First operand 273 states. Second operand 377 states. [2020-07-28 19:00:03,386 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:03,386 INFO L93 Difference]: Finished difference Result 377 states and 504 transitions. [2020-07-28 19:00:03,386 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 504 transitions. [2020-07-28 19:00:03,387 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:03,387 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:03,387 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:03,388 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:03,388 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 273 states. [2020-07-28 19:00:03,394 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 273 states to 273 states and 374 transitions. [2020-07-28 19:00:03,394 INFO L78 Accepts]: Start accepts. Automaton has 273 states and 374 transitions. Word has length 33 [2020-07-28 19:00:03,395 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:03,395 INFO L479 AbstractCegarLoop]: Abstraction has 273 states and 374 transitions. [2020-07-28 19:00:03,395 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:00:03,395 INFO L276 IsEmpty]: Start isEmpty. Operand 273 states and 374 transitions. [2020-07-28 19:00:03,396 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:00:03,396 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:03,396 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:03,396 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:00:03,397 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:03,397 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:03,397 INFO L82 PathProgramCache]: Analyzing trace with hash -1562717358, now seen corresponding path program 1 times [2020-07-28 19:00:03,397 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:03,397 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1051089694] [2020-07-28 19:00:03,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:03,417 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:03,453 INFO L280 TraceCheckUtils]: 0: Hoare triple {11583#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(13);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string5.base, #t~string5.offset, 1);call write~init~int(77, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(101, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(116, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(104, #t~string5.base, 4 + #t~string5.offset, 1);call write~init~int(58, #t~string5.base, 5 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 6 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string7.base, #t~string7.offset, 1);call write~init~int(82, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(73, #t~string7.base, 2 + #t~string7.offset, 1);call write~init~int(84, #t~string7.base, 3 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 4 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(75, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 2 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string11.base, #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 1 + #t~string11.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,454 INFO L280 TraceCheckUtils]: 1: Hoare triple {11585#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret71, main_~retValue_acc~9, main_~tmp~8;havoc main_~retValue_acc~9;havoc main_~tmp~8; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,455 INFO L280 TraceCheckUtils]: 2: Hoare triple {11585#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~11;havoc valid_product_~retValue_acc~11;valid_product_~retValue_acc~11 := 1;valid_product_#res := valid_product_~retValue_acc~11; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,455 INFO L280 TraceCheckUtils]: 3: Hoare triple {11585#(= 1 ~waterLevel~0)} main_#t~ret71 := valid_product_#res;assume -2147483648 <= main_#t~ret71 && main_#t~ret71 <= 2147483647;main_~tmp~8 := main_#t~ret71;havoc main_#t~ret71; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,456 INFO L280 TraceCheckUtils]: 4: Hoare triple {11585#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~8; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,456 INFO L280 TraceCheckUtils]: 5: Hoare triple {11585#(= 1 ~waterLevel~0)} ~methAndRunningLastTime~0 := 0; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,457 INFO L280 TraceCheckUtils]: 6: Hoare triple {11585#(= 1 ~waterLevel~0)} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,458 INFO L280 TraceCheckUtils]: 7: Hoare triple {11585#(= 1 ~waterLevel~0)} assume !false; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,458 INFO L280 TraceCheckUtils]: 8: Hoare triple {11585#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,459 INFO L280 TraceCheckUtils]: 9: Hoare triple {11585#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,460 INFO L280 TraceCheckUtils]: 10: Hoare triple {11585#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~1); {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,461 INFO L280 TraceCheckUtils]: 11: Hoare triple {11585#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,462 INFO L280 TraceCheckUtils]: 12: Hoare triple {11585#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___0~1; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,462 INFO L280 TraceCheckUtils]: 13: Hoare triple {11585#(= 1 ~waterLevel~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,463 INFO L280 TraceCheckUtils]: 14: Hoare triple {11585#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,464 INFO L280 TraceCheckUtils]: 15: Hoare triple {11585#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,464 INFO L280 TraceCheckUtils]: 16: Hoare triple {11585#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,465 INFO L280 TraceCheckUtils]: 17: Hoare triple {11585#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret17, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,465 INFO L280 TraceCheckUtils]: 18: Hoare triple {11585#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret16, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,466 INFO L280 TraceCheckUtils]: 19: Hoare triple {11585#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {11585#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:03,467 INFO L280 TraceCheckUtils]: 20: Hoare triple {11585#(= 1 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {11584#false} is VALID [2020-07-28 19:00:03,467 INFO L280 TraceCheckUtils]: 21: Hoare triple {11584#false} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {11584#false} is VALID [2020-07-28 19:00:03,467 INFO L280 TraceCheckUtils]: 22: Hoare triple {11584#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~2 := 1; {11584#false} is VALID [2020-07-28 19:00:03,468 INFO L280 TraceCheckUtils]: 23: Hoare triple {11584#false} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {11584#false} is VALID [2020-07-28 19:00:03,468 INFO L280 TraceCheckUtils]: 24: Hoare triple {11584#false} processEnvironment__wrappee__highWaterSensor_#t~ret16 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret16 && processEnvironment__wrappee__highWaterSensor_#t~ret16 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret16;havoc processEnvironment__wrappee__highWaterSensor_#t~ret16; {11584#false} is VALID [2020-07-28 19:00:03,468 INFO L280 TraceCheckUtils]: 25: Hoare triple {11584#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {11584#false} is VALID [2020-07-28 19:00:03,468 INFO L280 TraceCheckUtils]: 26: Hoare triple {11584#false} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11584#false} is VALID [2020-07-28 19:00:03,469 INFO L280 TraceCheckUtils]: 27: Hoare triple {11584#false} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {11584#false} is VALID [2020-07-28 19:00:03,469 INFO L280 TraceCheckUtils]: 28: Hoare triple {11584#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {11584#false} is VALID [2020-07-28 19:00:03,469 INFO L280 TraceCheckUtils]: 29: Hoare triple {11584#false} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {11584#false} is VALID [2020-07-28 19:00:03,469 INFO L280 TraceCheckUtils]: 30: Hoare triple {11584#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {11584#false} is VALID [2020-07-28 19:00:03,469 INFO L280 TraceCheckUtils]: 31: Hoare triple {11584#false} assume 0 != ~methAndRunningLastTime~0; {11584#false} is VALID [2020-07-28 19:00:03,470 INFO L280 TraceCheckUtils]: 32: Hoare triple {11584#false} assume !false; {11584#false} is VALID [2020-07-28 19:00:03,472 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:03,472 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1051089694] [2020-07-28 19:00:03,472 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:03,473 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:00:03,473 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [685276423] [2020-07-28 19:00:03,473 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 33 [2020-07-28 19:00:03,474 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:03,474 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:03,512 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:03,513 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:03,513 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:03,513 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:03,513 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:03,513 INFO L87 Difference]: Start difference. First operand 273 states and 374 transitions. Second operand 3 states. [2020-07-28 19:00:04,467 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:04,467 INFO L93 Difference]: Finished difference Result 643 states and 875 transitions. [2020-07-28 19:00:04,468 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:04,468 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 33 [2020-07-28 19:00:04,469 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:04,469 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:04,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 170 transitions. [2020-07-28 19:00:04,471 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:04,472 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 170 transitions. [2020-07-28 19:00:04,473 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 170 transitions. [2020-07-28 19:00:04,654 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 170 edges. 170 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:04,666 INFO L225 Difference]: With dead ends: 643 [2020-07-28 19:00:04,667 INFO L226 Difference]: Without dead ends: 377 [2020-07-28 19:00:04,668 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:04,669 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 377 states. [2020-07-28 19:00:05,439 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 377 to 377. [2020-07-28 19:00:05,439 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:05,440 INFO L82 GeneralOperation]: Start isEquivalent. First operand 377 states. Second operand 377 states. [2020-07-28 19:00:05,440 INFO L74 IsIncluded]: Start isIncluded. First operand 377 states. Second operand 377 states. [2020-07-28 19:00:05,440 INFO L87 Difference]: Start difference. First operand 377 states. Second operand 377 states. [2020-07-28 19:00:05,448 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:05,448 INFO L93 Difference]: Finished difference Result 377 states and 500 transitions. [2020-07-28 19:00:05,448 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 500 transitions. [2020-07-28 19:00:05,449 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:05,449 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:05,449 INFO L74 IsIncluded]: Start isIncluded. First operand 377 states. Second operand 377 states. [2020-07-28 19:00:05,450 INFO L87 Difference]: Start difference. First operand 377 states. Second operand 377 states. [2020-07-28 19:00:05,459 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:05,459 INFO L93 Difference]: Finished difference Result 377 states and 500 transitions. [2020-07-28 19:00:05,459 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 500 transitions. [2020-07-28 19:00:05,460 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:05,460 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:05,460 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:05,460 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:05,460 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 377 states. [2020-07-28 19:00:05,470 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 500 transitions. [2020-07-28 19:00:05,470 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 500 transitions. Word has length 33 [2020-07-28 19:00:05,471 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:05,471 INFO L479 AbstractCegarLoop]: Abstraction has 377 states and 500 transitions. [2020-07-28 19:00:05,471 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:05,471 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 500 transitions. [2020-07-28 19:00:05,472 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2020-07-28 19:00:05,472 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:05,472 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:05,472 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:00:05,472 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:05,473 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:05,473 INFO L82 PathProgramCache]: Analyzing trace with hash 331914770, now seen corresponding path program 1 times [2020-07-28 19:00:05,473 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:05,473 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1874876044] [2020-07-28 19:00:05,473 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:05,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:05,550 INFO L280 TraceCheckUtils]: 0: Hoare triple {13756#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(13);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string5.base, #t~string5.offset, 1);call write~init~int(77, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(101, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(116, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(104, #t~string5.base, 4 + #t~string5.offset, 1);call write~init~int(58, #t~string5.base, 5 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 6 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string7.base, #t~string7.offset, 1);call write~init~int(82, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(73, #t~string7.base, 2 + #t~string7.offset, 1);call write~init~int(84, #t~string7.base, 3 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 4 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(75, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 2 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string11.base, #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 1 + #t~string11.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {13756#true} is VALID [2020-07-28 19:00:05,550 INFO L280 TraceCheckUtils]: 1: Hoare triple {13756#true} havoc main_#res;havoc main_#t~ret71, main_~retValue_acc~9, main_~tmp~8;havoc main_~retValue_acc~9;havoc main_~tmp~8; {13756#true} is VALID [2020-07-28 19:00:05,551 INFO L280 TraceCheckUtils]: 2: Hoare triple {13756#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~11;havoc valid_product_~retValue_acc~11;valid_product_~retValue_acc~11 := 1;valid_product_#res := valid_product_~retValue_acc~11; {13756#true} is VALID [2020-07-28 19:00:05,551 INFO L280 TraceCheckUtils]: 3: Hoare triple {13756#true} main_#t~ret71 := valid_product_#res;assume -2147483648 <= main_#t~ret71 && main_#t~ret71 <= 2147483647;main_~tmp~8 := main_#t~ret71;havoc main_#t~ret71; {13756#true} is VALID [2020-07-28 19:00:05,551 INFO L280 TraceCheckUtils]: 4: Hoare triple {13756#true} assume 0 != main_~tmp~8; {13756#true} is VALID [2020-07-28 19:00:05,552 INFO L280 TraceCheckUtils]: 5: Hoare triple {13756#true} ~methAndRunningLastTime~0 := 0; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,553 INFO L280 TraceCheckUtils]: 6: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,554 INFO L280 TraceCheckUtils]: 7: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume !false; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,555 INFO L280 TraceCheckUtils]: 8: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume test_~splverifierCounter~0 < 4; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,556 INFO L280 TraceCheckUtils]: 9: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,561 INFO L280 TraceCheckUtils]: 10: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume 0 != test_~tmp~1; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,564 INFO L280 TraceCheckUtils]: 11: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,566 INFO L280 TraceCheckUtils]: 12: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,567 INFO L280 TraceCheckUtils]: 13: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume 0 != test_~tmp___0~1; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,570 INFO L280 TraceCheckUtils]: 14: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,572 INFO L280 TraceCheckUtils]: 15: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,573 INFO L280 TraceCheckUtils]: 16: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,574 INFO L280 TraceCheckUtils]: 17: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume !(0 != ~pumpRunning~0); {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,574 INFO L280 TraceCheckUtils]: 18: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret17, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,575 INFO L280 TraceCheckUtils]: 19: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret16, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,575 INFO L280 TraceCheckUtils]: 20: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,576 INFO L280 TraceCheckUtils]: 21: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,577 INFO L280 TraceCheckUtils]: 22: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,577 INFO L280 TraceCheckUtils]: 23: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~2 := 1; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,578 INFO L280 TraceCheckUtils]: 24: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,578 INFO L280 TraceCheckUtils]: 25: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} processEnvironment__wrappee__highWaterSensor_#t~ret16 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret16 && processEnvironment__wrappee__highWaterSensor_#t~ret16 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret16;havoc processEnvironment__wrappee__highWaterSensor_#t~ret16; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,579 INFO L280 TraceCheckUtils]: 26: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,579 INFO L280 TraceCheckUtils]: 27: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,580 INFO L280 TraceCheckUtils]: 28: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,580 INFO L280 TraceCheckUtils]: 29: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,586 INFO L280 TraceCheckUtils]: 30: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,588 INFO L280 TraceCheckUtils]: 31: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {13758#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:05,589 INFO L280 TraceCheckUtils]: 32: Hoare triple {13758#(= 0 ~methAndRunningLastTime~0)} assume 0 != ~methAndRunningLastTime~0; {13757#false} is VALID [2020-07-28 19:00:05,589 INFO L280 TraceCheckUtils]: 33: Hoare triple {13757#false} assume !false; {13757#false} is VALID [2020-07-28 19:00:05,591 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:05,591 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1874876044] [2020-07-28 19:00:05,592 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:05,592 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:00:05,592 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1443868953] [2020-07-28 19:00:05,593 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 34 [2020-07-28 19:00:05,593 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:05,593 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:05,643 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:05,643 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:05,643 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:05,644 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:05,644 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:05,644 INFO L87 Difference]: Start difference. First operand 377 states and 500 transitions. Second operand 3 states. [2020-07-28 19:00:06,867 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:06,867 INFO L93 Difference]: Finished difference Result 579 states and 775 transitions. [2020-07-28 19:00:06,867 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:06,868 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 34 [2020-07-28 19:00:06,868 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:06,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:06,869 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 133 transitions. [2020-07-28 19:00:06,869 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:06,869 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 133 transitions. [2020-07-28 19:00:06,869 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 133 transitions. [2020-07-28 19:00:07,013 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 133 edges. 133 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:07,032 INFO L225 Difference]: With dead ends: 579 [2020-07-28 19:00:07,032 INFO L226 Difference]: Without dead ends: 577 [2020-07-28 19:00:07,033 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:07,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 577 states. [2020-07-28 19:00:07,921 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 577 to 460. [2020-07-28 19:00:07,921 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:07,921 INFO L82 GeneralOperation]: Start isEquivalent. First operand 577 states. Second operand 460 states. [2020-07-28 19:00:07,921 INFO L74 IsIncluded]: Start isIncluded. First operand 577 states. Second operand 460 states. [2020-07-28 19:00:07,922 INFO L87 Difference]: Start difference. First operand 577 states. Second operand 460 states. [2020-07-28 19:00:07,941 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:07,941 INFO L93 Difference]: Finished difference Result 577 states and 772 transitions. [2020-07-28 19:00:07,942 INFO L276 IsEmpty]: Start isEmpty. Operand 577 states and 772 transitions. [2020-07-28 19:00:07,943 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:07,943 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:07,943 INFO L74 IsIncluded]: Start isIncluded. First operand 460 states. Second operand 577 states. [2020-07-28 19:00:07,943 INFO L87 Difference]: Start difference. First operand 460 states. Second operand 577 states. [2020-07-28 19:00:07,962 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:07,963 INFO L93 Difference]: Finished difference Result 577 states and 772 transitions. [2020-07-28 19:00:07,963 INFO L276 IsEmpty]: Start isEmpty. Operand 577 states and 772 transitions. [2020-07-28 19:00:07,964 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:07,964 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:07,965 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:07,965 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:07,965 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 460 states. [2020-07-28 19:00:07,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 460 states to 460 states and 624 transitions. [2020-07-28 19:00:07,983 INFO L78 Accepts]: Start accepts. Automaton has 460 states and 624 transitions. Word has length 34 [2020-07-28 19:00:07,983 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:07,983 INFO L479 AbstractCegarLoop]: Abstraction has 460 states and 624 transitions. [2020-07-28 19:00:07,983 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:07,983 INFO L276 IsEmpty]: Start isEmpty. Operand 460 states and 624 transitions. [2020-07-28 19:00:07,985 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2020-07-28 19:00:07,985 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:07,985 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:07,985 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-28 19:00:07,985 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:07,986 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:07,986 INFO L82 PathProgramCache]: Analyzing trace with hash 206330202, now seen corresponding path program 1 times [2020-07-28 19:00:07,986 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:07,986 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [599152326] [2020-07-28 19:00:07,986 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:08,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:08,039 INFO L280 TraceCheckUtils]: 0: Hoare triple {16362#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(13);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string5.base, #t~string5.offset, 1);call write~init~int(77, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(101, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(116, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(104, #t~string5.base, 4 + #t~string5.offset, 1);call write~init~int(58, #t~string5.base, 5 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 6 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string7.base, #t~string7.offset, 1);call write~init~int(82, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(73, #t~string7.base, 2 + #t~string7.offset, 1);call write~init~int(84, #t~string7.base, 3 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 4 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(75, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 2 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string11.base, #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 1 + #t~string11.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {16362#true} is VALID [2020-07-28 19:00:08,040 INFO L280 TraceCheckUtils]: 1: Hoare triple {16362#true} havoc main_#res;havoc main_#t~ret71, main_~retValue_acc~9, main_~tmp~8;havoc main_~retValue_acc~9;havoc main_~tmp~8; {16362#true} is VALID [2020-07-28 19:00:08,040 INFO L280 TraceCheckUtils]: 2: Hoare triple {16362#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~11;havoc valid_product_~retValue_acc~11;valid_product_~retValue_acc~11 := 1;valid_product_#res := valid_product_~retValue_acc~11; {16362#true} is VALID [2020-07-28 19:00:08,040 INFO L280 TraceCheckUtils]: 3: Hoare triple {16362#true} main_#t~ret71 := valid_product_#res;assume -2147483648 <= main_#t~ret71 && main_#t~ret71 <= 2147483647;main_~tmp~8 := main_#t~ret71;havoc main_#t~ret71; {16362#true} is VALID [2020-07-28 19:00:08,040 INFO L280 TraceCheckUtils]: 4: Hoare triple {16362#true} assume 0 != main_~tmp~8; {16362#true} is VALID [2020-07-28 19:00:08,041 INFO L280 TraceCheckUtils]: 5: Hoare triple {16362#true} ~methAndRunningLastTime~0 := 0; {16362#true} is VALID [2020-07-28 19:00:08,041 INFO L280 TraceCheckUtils]: 6: Hoare triple {16362#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {16362#true} is VALID [2020-07-28 19:00:08,041 INFO L280 TraceCheckUtils]: 7: Hoare triple {16362#true} assume !false; {16362#true} is VALID [2020-07-28 19:00:08,041 INFO L280 TraceCheckUtils]: 8: Hoare triple {16362#true} assume test_~splverifierCounter~0 < 4; {16362#true} is VALID [2020-07-28 19:00:08,041 INFO L280 TraceCheckUtils]: 9: Hoare triple {16362#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {16362#true} is VALID [2020-07-28 19:00:08,042 INFO L280 TraceCheckUtils]: 10: Hoare triple {16362#true} assume 0 != test_~tmp~1; {16362#true} is VALID [2020-07-28 19:00:08,042 INFO L280 TraceCheckUtils]: 11: Hoare triple {16362#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16362#true} is VALID [2020-07-28 19:00:08,042 INFO L280 TraceCheckUtils]: 12: Hoare triple {16362#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {16362#true} is VALID [2020-07-28 19:00:08,042 INFO L280 TraceCheckUtils]: 13: Hoare triple {16362#true} assume 0 != test_~tmp___0~1; {16362#true} is VALID [2020-07-28 19:00:08,042 INFO L280 TraceCheckUtils]: 14: Hoare triple {16362#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {16362#true} is VALID [2020-07-28 19:00:08,043 INFO L280 TraceCheckUtils]: 15: Hoare triple {16362#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {16362#true} is VALID [2020-07-28 19:00:08,043 INFO L280 TraceCheckUtils]: 16: Hoare triple {16362#true} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet15 && test_#t~nondet15 <= 2147483647;test_~tmp___1~0 := test_#t~nondet15;havoc test_#t~nondet15; {16362#true} is VALID [2020-07-28 19:00:08,043 INFO L280 TraceCheckUtils]: 17: Hoare triple {16362#true} assume 0 != test_~tmp___1~0; {16362#true} is VALID [2020-07-28 19:00:08,043 INFO L280 TraceCheckUtils]: 18: Hoare triple {16362#true} assume !(0 != ~pumpRunning~0); {16362#true} is VALID [2020-07-28 19:00:08,044 INFO L280 TraceCheckUtils]: 19: Hoare triple {16362#true} ~systemActive~0 := 0; {16364#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:00:08,045 INFO L280 TraceCheckUtils]: 20: Hoare triple {16364#(= 0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {16364#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:00:08,045 INFO L280 TraceCheckUtils]: 21: Hoare triple {16364#(= 0 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret17, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {16363#false} is VALID [2020-07-28 19:00:08,046 INFO L280 TraceCheckUtils]: 22: Hoare triple {16363#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret16, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {16363#false} is VALID [2020-07-28 19:00:08,046 INFO L280 TraceCheckUtils]: 23: Hoare triple {16363#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {16363#false} is VALID [2020-07-28 19:00:08,046 INFO L280 TraceCheckUtils]: 24: Hoare triple {16363#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {16363#false} is VALID [2020-07-28 19:00:08,046 INFO L280 TraceCheckUtils]: 25: Hoare triple {16363#false} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {16363#false} is VALID [2020-07-28 19:00:08,046 INFO L280 TraceCheckUtils]: 26: Hoare triple {16363#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~2 := 1; {16363#false} is VALID [2020-07-28 19:00:08,047 INFO L280 TraceCheckUtils]: 27: Hoare triple {16363#false} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {16363#false} is VALID [2020-07-28 19:00:08,047 INFO L280 TraceCheckUtils]: 28: Hoare triple {16363#false} processEnvironment__wrappee__highWaterSensor_#t~ret16 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret16 && processEnvironment__wrappee__highWaterSensor_#t~ret16 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret16;havoc processEnvironment__wrappee__highWaterSensor_#t~ret16; {16363#false} is VALID [2020-07-28 19:00:08,047 INFO L280 TraceCheckUtils]: 29: Hoare triple {16363#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {16363#false} is VALID [2020-07-28 19:00:08,087 INFO L280 TraceCheckUtils]: 30: Hoare triple {16363#false} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {16363#false} is VALID [2020-07-28 19:00:08,087 INFO L280 TraceCheckUtils]: 31: Hoare triple {16363#false} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {16363#false} is VALID [2020-07-28 19:00:08,087 INFO L280 TraceCheckUtils]: 32: Hoare triple {16363#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {16363#false} is VALID [2020-07-28 19:00:08,088 INFO L280 TraceCheckUtils]: 33: Hoare triple {16363#false} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {16363#false} is VALID [2020-07-28 19:00:08,088 INFO L280 TraceCheckUtils]: 34: Hoare triple {16363#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {16363#false} is VALID [2020-07-28 19:00:08,088 INFO L280 TraceCheckUtils]: 35: Hoare triple {16363#false} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {16363#false} is VALID [2020-07-28 19:00:08,088 INFO L280 TraceCheckUtils]: 36: Hoare triple {16363#false} assume !false; {16363#false} is VALID [2020-07-28 19:00:08,088 INFO L280 TraceCheckUtils]: 37: Hoare triple {16363#false} assume test_~splverifierCounter~0 < 4; {16363#false} is VALID [2020-07-28 19:00:08,089 INFO L280 TraceCheckUtils]: 38: Hoare triple {16363#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {16363#false} is VALID [2020-07-28 19:00:08,089 INFO L280 TraceCheckUtils]: 39: Hoare triple {16363#false} assume !(0 != test_~tmp~1); {16363#false} is VALID [2020-07-28 19:00:08,089 INFO L280 TraceCheckUtils]: 40: Hoare triple {16363#false} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {16363#false} is VALID [2020-07-28 19:00:08,089 INFO L280 TraceCheckUtils]: 41: Hoare triple {16363#false} assume !(0 != test_~tmp___0~1); {16363#false} is VALID [2020-07-28 19:00:08,089 INFO L280 TraceCheckUtils]: 42: Hoare triple {16363#false} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {16363#false} is VALID [2020-07-28 19:00:08,089 INFO L280 TraceCheckUtils]: 43: Hoare triple {16363#false} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet15 && test_#t~nondet15 <= 2147483647;test_~tmp___1~0 := test_#t~nondet15;havoc test_#t~nondet15; {16363#false} is VALID [2020-07-28 19:00:08,090 INFO L280 TraceCheckUtils]: 44: Hoare triple {16363#false} assume !(0 != test_~tmp___1~0); {16363#false} is VALID [2020-07-28 19:00:08,090 INFO L280 TraceCheckUtils]: 45: Hoare triple {16363#false} assume 0 != ~pumpRunning~0; {16363#false} is VALID [2020-07-28 19:00:08,090 INFO L280 TraceCheckUtils]: 46: Hoare triple {16363#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {16363#false} is VALID [2020-07-28 19:00:08,090 INFO L280 TraceCheckUtils]: 47: Hoare triple {16363#false} assume !(0 != ~systemActive~0); {16363#false} is VALID [2020-07-28 19:00:08,091 INFO L280 TraceCheckUtils]: 48: Hoare triple {16363#false} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {16363#false} is VALID [2020-07-28 19:00:08,091 INFO L280 TraceCheckUtils]: 49: Hoare triple {16363#false} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {16363#false} is VALID [2020-07-28 19:00:08,091 INFO L280 TraceCheckUtils]: 50: Hoare triple {16363#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {16363#false} is VALID [2020-07-28 19:00:08,091 INFO L280 TraceCheckUtils]: 51: Hoare triple {16363#false} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {16363#false} is VALID [2020-07-28 19:00:08,091 INFO L280 TraceCheckUtils]: 52: Hoare triple {16363#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {16363#false} is VALID [2020-07-28 19:00:08,091 INFO L280 TraceCheckUtils]: 53: Hoare triple {16363#false} assume 0 != ~methAndRunningLastTime~0; {16363#false} is VALID [2020-07-28 19:00:08,092 INFO L280 TraceCheckUtils]: 54: Hoare triple {16363#false} assume !false; {16363#false} is VALID [2020-07-28 19:00:08,093 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 19:00:08,094 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [599152326] [2020-07-28 19:00:08,094 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:08,094 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:00:08,094 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1005367909] [2020-07-28 19:00:08,094 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 55 [2020-07-28 19:00:08,095 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:08,095 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:08,161 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:08,162 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:08,162 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:08,162 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:08,162 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:08,163 INFO L87 Difference]: Start difference. First operand 460 states and 624 transitions. Second operand 3 states. [2020-07-28 19:00:09,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:09,221 INFO L93 Difference]: Finished difference Result 771 states and 1041 transitions. [2020-07-28 19:00:09,221 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:09,221 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 55 [2020-07-28 19:00:09,222 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:09,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:09,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 160 transitions. [2020-07-28 19:00:09,223 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:09,223 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 160 transitions. [2020-07-28 19:00:09,223 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 160 transitions. [2020-07-28 19:00:09,404 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 160 edges. 160 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:09,412 INFO L225 Difference]: With dead ends: 771 [2020-07-28 19:00:09,412 INFO L226 Difference]: Without dead ends: 318 [2020-07-28 19:00:09,413 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:09,414 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 318 states. [2020-07-28 19:00:10,039 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 318 to 306. [2020-07-28 19:00:10,040 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:10,040 INFO L82 GeneralOperation]: Start isEquivalent. First operand 318 states. Second operand 306 states. [2020-07-28 19:00:10,040 INFO L74 IsIncluded]: Start isIncluded. First operand 318 states. Second operand 306 states. [2020-07-28 19:00:10,040 INFO L87 Difference]: Start difference. First operand 318 states. Second operand 306 states. [2020-07-28 19:00:10,049 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:10,049 INFO L93 Difference]: Finished difference Result 318 states and 419 transitions. [2020-07-28 19:00:10,049 INFO L276 IsEmpty]: Start isEmpty. Operand 318 states and 419 transitions. [2020-07-28 19:00:10,050 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:10,050 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:10,051 INFO L74 IsIncluded]: Start isIncluded. First operand 306 states. Second operand 318 states. [2020-07-28 19:00:10,051 INFO L87 Difference]: Start difference. First operand 306 states. Second operand 318 states. [2020-07-28 19:00:10,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:10,058 INFO L93 Difference]: Finished difference Result 318 states and 419 transitions. [2020-07-28 19:00:10,058 INFO L276 IsEmpty]: Start isEmpty. Operand 318 states and 419 transitions. [2020-07-28 19:00:10,059 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:10,059 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:10,060 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:10,060 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:10,060 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 306 states. [2020-07-28 19:00:10,067 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 306 states to 306 states and 406 transitions. [2020-07-28 19:00:10,068 INFO L78 Accepts]: Start accepts. Automaton has 306 states and 406 transitions. Word has length 55 [2020-07-28 19:00:10,068 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:10,068 INFO L479 AbstractCegarLoop]: Abstraction has 306 states and 406 transitions. [2020-07-28 19:00:10,069 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:10,069 INFO L276 IsEmpty]: Start isEmpty. Operand 306 states and 406 transitions. [2020-07-28 19:00:10,070 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2020-07-28 19:00:10,071 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:10,071 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:10,071 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:00:10,072 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:10,072 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:10,072 INFO L82 PathProgramCache]: Analyzing trace with hash 351981025, now seen corresponding path program 1 times [2020-07-28 19:00:10,072 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:10,073 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [776256118] [2020-07-28 19:00:10,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:10,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:10,224 INFO L280 TraceCheckUtils]: 0: Hoare triple {18505#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(13);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string5.base, #t~string5.offset, 1);call write~init~int(77, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(101, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(116, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(104, #t~string5.base, 4 + #t~string5.offset, 1);call write~init~int(58, #t~string5.base, 5 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 6 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string7.base, #t~string7.offset, 1);call write~init~int(82, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(73, #t~string7.base, 2 + #t~string7.offset, 1);call write~init~int(84, #t~string7.base, 3 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 4 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(75, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 2 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string11.base, #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 1 + #t~string11.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {18505#true} is VALID [2020-07-28 19:00:10,225 INFO L280 TraceCheckUtils]: 1: Hoare triple {18505#true} havoc main_#res;havoc main_#t~ret71, main_~retValue_acc~9, main_~tmp~8;havoc main_~retValue_acc~9;havoc main_~tmp~8; {18505#true} is VALID [2020-07-28 19:00:10,225 INFO L280 TraceCheckUtils]: 2: Hoare triple {18505#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~11;havoc valid_product_~retValue_acc~11;valid_product_~retValue_acc~11 := 1;valid_product_#res := valid_product_~retValue_acc~11; {18505#true} is VALID [2020-07-28 19:00:10,225 INFO L280 TraceCheckUtils]: 3: Hoare triple {18505#true} main_#t~ret71 := valid_product_#res;assume -2147483648 <= main_#t~ret71 && main_#t~ret71 <= 2147483647;main_~tmp~8 := main_#t~ret71;havoc main_#t~ret71; {18505#true} is VALID [2020-07-28 19:00:10,226 INFO L280 TraceCheckUtils]: 4: Hoare triple {18505#true} assume 0 != main_~tmp~8; {18505#true} is VALID [2020-07-28 19:00:10,226 INFO L280 TraceCheckUtils]: 5: Hoare triple {18505#true} ~methAndRunningLastTime~0 := 0; {18505#true} is VALID [2020-07-28 19:00:10,226 INFO L280 TraceCheckUtils]: 6: Hoare triple {18505#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {18505#true} is VALID [2020-07-28 19:00:10,226 INFO L280 TraceCheckUtils]: 7: Hoare triple {18505#true} assume !false; {18505#true} is VALID [2020-07-28 19:00:10,227 INFO L280 TraceCheckUtils]: 8: Hoare triple {18505#true} assume test_~splverifierCounter~0 < 4; {18505#true} is VALID [2020-07-28 19:00:10,227 INFO L280 TraceCheckUtils]: 9: Hoare triple {18505#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {18505#true} is VALID [2020-07-28 19:00:10,227 INFO L280 TraceCheckUtils]: 10: Hoare triple {18505#true} assume 0 != test_~tmp~1; {18505#true} is VALID [2020-07-28 19:00:10,227 INFO L280 TraceCheckUtils]: 11: Hoare triple {18505#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {18505#true} is VALID [2020-07-28 19:00:10,227 INFO L280 TraceCheckUtils]: 12: Hoare triple {18505#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {18505#true} is VALID [2020-07-28 19:00:10,227 INFO L280 TraceCheckUtils]: 13: Hoare triple {18505#true} assume 0 != test_~tmp___0~1; {18505#true} is VALID [2020-07-28 19:00:10,228 INFO L280 TraceCheckUtils]: 14: Hoare triple {18505#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {18507#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,228 INFO L280 TraceCheckUtils]: 15: Hoare triple {18507#(= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {18507#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,229 INFO L280 TraceCheckUtils]: 16: Hoare triple {18507#(= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {18508#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2020-07-28 19:00:10,229 INFO L280 TraceCheckUtils]: 17: Hoare triple {18508#(= ~methaneLevelCritical~0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {18508#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2020-07-28 19:00:10,230 INFO L280 TraceCheckUtils]: 18: Hoare triple {18508#(= ~methaneLevelCritical~0 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret17, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,230 INFO L280 TraceCheckUtils]: 19: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret16, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,231 INFO L280 TraceCheckUtils]: 20: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,231 INFO L280 TraceCheckUtils]: 21: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,231 INFO L280 TraceCheckUtils]: 22: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,232 INFO L280 TraceCheckUtils]: 23: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~2 := 1; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,232 INFO L280 TraceCheckUtils]: 24: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,233 INFO L280 TraceCheckUtils]: 25: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} processEnvironment__wrappee__highWaterSensor_#t~ret16 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret16 && processEnvironment__wrappee__highWaterSensor_#t~ret16 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret16;havoc processEnvironment__wrappee__highWaterSensor_#t~ret16; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,233 INFO L280 TraceCheckUtils]: 26: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,233 INFO L280 TraceCheckUtils]: 27: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,234 INFO L280 TraceCheckUtils]: 28: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,234 INFO L280 TraceCheckUtils]: 29: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,236 INFO L280 TraceCheckUtils]: 30: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,237 INFO L280 TraceCheckUtils]: 31: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,237 INFO L280 TraceCheckUtils]: 32: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,238 INFO L280 TraceCheckUtils]: 33: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume !false; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,238 INFO L280 TraceCheckUtils]: 34: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume test_~splverifierCounter~0 < 4; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,239 INFO L280 TraceCheckUtils]: 35: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,239 INFO L280 TraceCheckUtils]: 36: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != test_~tmp~1); {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,239 INFO L280 TraceCheckUtils]: 37: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,240 INFO L280 TraceCheckUtils]: 38: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != test_~tmp___0~1); {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,240 INFO L280 TraceCheckUtils]: 39: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,241 INFO L280 TraceCheckUtils]: 40: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,241 INFO L280 TraceCheckUtils]: 41: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume 0 != ~pumpRunning~0; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,242 INFO L280 TraceCheckUtils]: 42: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,242 INFO L280 TraceCheckUtils]: 43: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret17, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {18509#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:10,243 INFO L280 TraceCheckUtils]: 44: Hoare triple {18509#(not (= 0 ~methaneLevelCritical~0))} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret18, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {18510#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} is VALID [2020-07-28 19:00:10,243 INFO L280 TraceCheckUtils]: 45: Hoare triple {18510#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} isMethaneAlarm_#t~ret18 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret18 && isMethaneAlarm_#t~ret18 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret18;havoc isMethaneAlarm_#t~ret18;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {18511#(not (= 0 |ULTIMATE.start_isMethaneAlarm_#res|))} is VALID [2020-07-28 19:00:10,246 INFO L280 TraceCheckUtils]: 46: Hoare triple {18511#(not (= 0 |ULTIMATE.start_isMethaneAlarm_#res|))} processEnvironment_#t~ret17 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret17 && processEnvironment_#t~ret17 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret17;havoc processEnvironment_#t~ret17; {18512#(not (= 0 ULTIMATE.start_processEnvironment_~tmp~3))} is VALID [2020-07-28 19:00:10,247 INFO L280 TraceCheckUtils]: 47: Hoare triple {18512#(not (= 0 ULTIMATE.start_processEnvironment_~tmp~3))} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__highWaterSensor_#t~ret16, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {18506#false} is VALID [2020-07-28 19:00:10,247 INFO L280 TraceCheckUtils]: 48: Hoare triple {18506#false} assume !(0 == ~pumpRunning~0); {18506#false} is VALID [2020-07-28 19:00:10,247 INFO L280 TraceCheckUtils]: 49: Hoare triple {18506#false} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {18506#false} is VALID [2020-07-28 19:00:10,248 INFO L280 TraceCheckUtils]: 50: Hoare triple {18506#false} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {18506#false} is VALID [2020-07-28 19:00:10,248 INFO L280 TraceCheckUtils]: 51: Hoare triple {18506#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {18506#false} is VALID [2020-07-28 19:00:10,248 INFO L280 TraceCheckUtils]: 52: Hoare triple {18506#false} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {18506#false} is VALID [2020-07-28 19:00:10,249 INFO L280 TraceCheckUtils]: 53: Hoare triple {18506#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {18506#false} is VALID [2020-07-28 19:00:10,249 INFO L280 TraceCheckUtils]: 54: Hoare triple {18506#false} assume 0 != ~methAndRunningLastTime~0; {18506#false} is VALID [2020-07-28 19:00:10,249 INFO L280 TraceCheckUtils]: 55: Hoare triple {18506#false} assume !false; {18506#false} is VALID [2020-07-28 19:00:10,254 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 12 proven. 4 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2020-07-28 19:00:10,254 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [776256118] [2020-07-28 19:00:10,254 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1727596982] [2020-07-28 19:00:10,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:00:10,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:10,403 INFO L263 TraceCheckSpWp]: Trace formula consists of 418 conjuncts, 7 conjunts are in the unsatisfiable core [2020-07-28 19:00:10,431 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:10,438 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:00:10,712 INFO L280 TraceCheckUtils]: 0: Hoare triple {18505#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(13);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string5.base, #t~string5.offset, 1);call write~init~int(77, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(101, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(116, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(104, #t~string5.base, 4 + #t~string5.offset, 1);call write~init~int(58, #t~string5.base, 5 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 6 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string7.base, #t~string7.offset, 1);call write~init~int(82, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(73, #t~string7.base, 2 + #t~string7.offset, 1);call write~init~int(84, #t~string7.base, 3 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 4 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(75, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 2 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string11.base, #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 1 + #t~string11.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {18505#true} is VALID [2020-07-28 19:00:10,713 INFO L280 TraceCheckUtils]: 1: Hoare triple {18505#true} havoc main_#res;havoc main_#t~ret71, main_~retValue_acc~9, main_~tmp~8;havoc main_~retValue_acc~9;havoc main_~tmp~8; {18505#true} is VALID [2020-07-28 19:00:10,713 INFO L280 TraceCheckUtils]: 2: Hoare triple {18505#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~11;havoc valid_product_~retValue_acc~11;valid_product_~retValue_acc~11 := 1;valid_product_#res := valid_product_~retValue_acc~11; {18505#true} is VALID [2020-07-28 19:00:10,713 INFO L280 TraceCheckUtils]: 3: Hoare triple {18505#true} main_#t~ret71 := valid_product_#res;assume -2147483648 <= main_#t~ret71 && main_#t~ret71 <= 2147483647;main_~tmp~8 := main_#t~ret71;havoc main_#t~ret71; {18505#true} is VALID [2020-07-28 19:00:10,713 INFO L280 TraceCheckUtils]: 4: Hoare triple {18505#true} assume 0 != main_~tmp~8; {18505#true} is VALID [2020-07-28 19:00:10,713 INFO L280 TraceCheckUtils]: 5: Hoare triple {18505#true} ~methAndRunningLastTime~0 := 0; {18505#true} is VALID [2020-07-28 19:00:10,714 INFO L280 TraceCheckUtils]: 6: Hoare triple {18505#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {18505#true} is VALID [2020-07-28 19:00:10,714 INFO L280 TraceCheckUtils]: 7: Hoare triple {18505#true} assume !false; {18505#true} is VALID [2020-07-28 19:00:10,714 INFO L280 TraceCheckUtils]: 8: Hoare triple {18505#true} assume test_~splverifierCounter~0 < 4; {18505#true} is VALID [2020-07-28 19:00:10,714 INFO L280 TraceCheckUtils]: 9: Hoare triple {18505#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {18505#true} is VALID [2020-07-28 19:00:10,714 INFO L280 TraceCheckUtils]: 10: Hoare triple {18505#true} assume 0 != test_~tmp~1; {18505#true} is VALID [2020-07-28 19:00:10,715 INFO L280 TraceCheckUtils]: 11: Hoare triple {18505#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {18505#true} is VALID [2020-07-28 19:00:10,715 INFO L280 TraceCheckUtils]: 12: Hoare triple {18505#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {18505#true} is VALID [2020-07-28 19:00:10,715 INFO L280 TraceCheckUtils]: 13: Hoare triple {18505#true} assume 0 != test_~tmp___0~1; {18505#true} is VALID [2020-07-28 19:00:10,717 INFO L280 TraceCheckUtils]: 14: Hoare triple {18505#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,717 INFO L280 TraceCheckUtils]: 15: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,718 INFO L280 TraceCheckUtils]: 16: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,719 INFO L280 TraceCheckUtils]: 17: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,719 INFO L280 TraceCheckUtils]: 18: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret17, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,720 INFO L280 TraceCheckUtils]: 19: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret16, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,720 INFO L280 TraceCheckUtils]: 20: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,721 INFO L280 TraceCheckUtils]: 21: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,721 INFO L280 TraceCheckUtils]: 22: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,721 INFO L280 TraceCheckUtils]: 23: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~2 := 1; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,722 INFO L280 TraceCheckUtils]: 24: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,722 INFO L280 TraceCheckUtils]: 25: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} processEnvironment__wrappee__highWaterSensor_#t~ret16 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret16 && processEnvironment__wrappee__highWaterSensor_#t~ret16 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret16;havoc processEnvironment__wrappee__highWaterSensor_#t~ret16; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,723 INFO L280 TraceCheckUtils]: 26: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,723 INFO L280 TraceCheckUtils]: 27: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,723 INFO L280 TraceCheckUtils]: 28: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,724 INFO L280 TraceCheckUtils]: 29: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,724 INFO L280 TraceCheckUtils]: 30: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,725 INFO L280 TraceCheckUtils]: 31: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,725 INFO L280 TraceCheckUtils]: 32: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,725 INFO L280 TraceCheckUtils]: 33: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume !false; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,726 INFO L280 TraceCheckUtils]: 34: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,726 INFO L280 TraceCheckUtils]: 35: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,727 INFO L280 TraceCheckUtils]: 36: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp~1); {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,729 INFO L280 TraceCheckUtils]: 37: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,731 INFO L280 TraceCheckUtils]: 38: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~1); {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,734 INFO L280 TraceCheckUtils]: 39: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,735 INFO L280 TraceCheckUtils]: 40: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,736 INFO L280 TraceCheckUtils]: 41: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,737 INFO L280 TraceCheckUtils]: 42: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,737 INFO L280 TraceCheckUtils]: 43: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret17, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {18558#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:10,738 INFO L280 TraceCheckUtils]: 44: Hoare triple {18558#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret18, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {18649#(<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:00:10,739 INFO L280 TraceCheckUtils]: 45: Hoare triple {18649#(<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} isMethaneAlarm_#t~ret18 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret18 && isMethaneAlarm_#t~ret18 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret18;havoc isMethaneAlarm_#t~ret18;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {18653#(<= 1 |ULTIMATE.start_isMethaneAlarm_#res|)} is VALID [2020-07-28 19:00:10,740 INFO L280 TraceCheckUtils]: 46: Hoare triple {18653#(<= 1 |ULTIMATE.start_isMethaneAlarm_#res|)} processEnvironment_#t~ret17 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret17 && processEnvironment_#t~ret17 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret17;havoc processEnvironment_#t~ret17; {18657#(<= 1 ULTIMATE.start_processEnvironment_~tmp~3)} is VALID [2020-07-28 19:00:10,741 INFO L280 TraceCheckUtils]: 47: Hoare triple {18657#(<= 1 ULTIMATE.start_processEnvironment_~tmp~3)} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__highWaterSensor_#t~ret16, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {18506#false} is VALID [2020-07-28 19:00:10,741 INFO L280 TraceCheckUtils]: 48: Hoare triple {18506#false} assume !(0 == ~pumpRunning~0); {18506#false} is VALID [2020-07-28 19:00:10,741 INFO L280 TraceCheckUtils]: 49: Hoare triple {18506#false} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {18506#false} is VALID [2020-07-28 19:00:10,742 INFO L280 TraceCheckUtils]: 50: Hoare triple {18506#false} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {18506#false} is VALID [2020-07-28 19:00:10,742 INFO L280 TraceCheckUtils]: 51: Hoare triple {18506#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {18506#false} is VALID [2020-07-28 19:00:10,742 INFO L280 TraceCheckUtils]: 52: Hoare triple {18506#false} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {18506#false} is VALID [2020-07-28 19:00:10,743 INFO L280 TraceCheckUtils]: 53: Hoare triple {18506#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {18506#false} is VALID [2020-07-28 19:00:10,743 INFO L280 TraceCheckUtils]: 54: Hoare triple {18506#false} assume 0 != ~methAndRunningLastTime~0; {18506#false} is VALID [2020-07-28 19:00:10,743 INFO L280 TraceCheckUtils]: 55: Hoare triple {18506#false} assume !false; {18506#false} is VALID [2020-07-28 19:00:10,747 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2020-07-28 19:00:10,748 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2020-07-28 19:00:10,748 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [8] total 12 [2020-07-28 19:00:10,749 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1833735424] [2020-07-28 19:00:10,749 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 56 [2020-07-28 19:00:10,749 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:10,750 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:00:10,817 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:10,817 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:00:10,818 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:10,818 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:00:10,818 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=105, Unknown=0, NotChecked=0, Total=132 [2020-07-28 19:00:10,819 INFO L87 Difference]: Start difference. First operand 306 states and 406 transitions. Second operand 6 states. [2020-07-28 19:00:14,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:14,207 INFO L93 Difference]: Finished difference Result 1026 states and 1368 transitions. [2020-07-28 19:00:14,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2020-07-28 19:00:14,207 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 56 [2020-07-28 19:00:14,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:14,208 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:00:14,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 447 transitions. [2020-07-28 19:00:14,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:00:14,211 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 447 transitions. [2020-07-28 19:00:14,212 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 13 states and 447 transitions. [2020-07-28 19:00:14,762 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 447 edges. 447 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:14,796 INFO L225 Difference]: With dead ends: 1026 [2020-07-28 19:00:14,796 INFO L226 Difference]: Without dead ends: 727 [2020-07-28 19:00:14,797 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 57 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 52 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=99, Invalid=281, Unknown=0, NotChecked=0, Total=380 [2020-07-28 19:00:14,798 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 727 states. [2020-07-28 19:00:15,601 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 727 to 283. [2020-07-28 19:00:15,601 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:15,601 INFO L82 GeneralOperation]: Start isEquivalent. First operand 727 states. Second operand 283 states. [2020-07-28 19:00:15,602 INFO L74 IsIncluded]: Start isIncluded. First operand 727 states. Second operand 283 states. [2020-07-28 19:00:15,602 INFO L87 Difference]: Start difference. First operand 727 states. Second operand 283 states. [2020-07-28 19:00:15,632 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:15,633 INFO L93 Difference]: Finished difference Result 727 states and 955 transitions. [2020-07-28 19:00:15,633 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 955 transitions. [2020-07-28 19:00:15,636 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:15,636 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:15,636 INFO L74 IsIncluded]: Start isIncluded. First operand 283 states. Second operand 727 states. [2020-07-28 19:00:15,636 INFO L87 Difference]: Start difference. First operand 283 states. Second operand 727 states. [2020-07-28 19:00:15,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:15,668 INFO L93 Difference]: Finished difference Result 727 states and 955 transitions. [2020-07-28 19:00:15,668 INFO L276 IsEmpty]: Start isEmpty. Operand 727 states and 955 transitions. [2020-07-28 19:00:15,669 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:15,669 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:15,670 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:15,670 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:15,670 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 283 states. [2020-07-28 19:00:15,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 283 states to 283 states and 367 transitions. [2020-07-28 19:00:15,678 INFO L78 Accepts]: Start accepts. Automaton has 283 states and 367 transitions. Word has length 56 [2020-07-28 19:00:15,678 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:15,678 INFO L479 AbstractCegarLoop]: Abstraction has 283 states and 367 transitions. [2020-07-28 19:00:15,678 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:00:15,678 INFO L276 IsEmpty]: Start isEmpty. Operand 283 states and 367 transitions. [2020-07-28 19:00:15,679 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2020-07-28 19:00:15,680 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:15,680 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:15,895 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2020-07-28 19:00:15,896 INFO L427 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:15,896 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:15,897 INFO L82 PathProgramCache]: Analyzing trace with hash 1298950968, now seen corresponding path program 1 times [2020-07-28 19:00:15,897 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:15,897 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1561126169] [2020-07-28 19:00:15,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:15,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:15,978 INFO L280 TraceCheckUtils]: 0: Hoare triple {22013#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(13);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string5.base, #t~string5.offset, 1);call write~init~int(77, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(101, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(116, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(104, #t~string5.base, 4 + #t~string5.offset, 1);call write~init~int(58, #t~string5.base, 5 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 6 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string7.base, #t~string7.offset, 1);call write~init~int(82, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(73, #t~string7.base, 2 + #t~string7.offset, 1);call write~init~int(84, #t~string7.base, 3 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 4 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(75, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 2 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string11.base, #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 1 + #t~string11.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {22013#true} is VALID [2020-07-28 19:00:15,979 INFO L280 TraceCheckUtils]: 1: Hoare triple {22013#true} havoc main_#res;havoc main_#t~ret71, main_~retValue_acc~9, main_~tmp~8;havoc main_~retValue_acc~9;havoc main_~tmp~8; {22013#true} is VALID [2020-07-28 19:00:15,979 INFO L280 TraceCheckUtils]: 2: Hoare triple {22013#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~11;havoc valid_product_~retValue_acc~11;valid_product_~retValue_acc~11 := 1;valid_product_#res := valid_product_~retValue_acc~11; {22013#true} is VALID [2020-07-28 19:00:15,979 INFO L280 TraceCheckUtils]: 3: Hoare triple {22013#true} main_#t~ret71 := valid_product_#res;assume -2147483648 <= main_#t~ret71 && main_#t~ret71 <= 2147483647;main_~tmp~8 := main_#t~ret71;havoc main_#t~ret71; {22013#true} is VALID [2020-07-28 19:00:15,980 INFO L280 TraceCheckUtils]: 4: Hoare triple {22013#true} assume 0 != main_~tmp~8; {22013#true} is VALID [2020-07-28 19:00:15,980 INFO L280 TraceCheckUtils]: 5: Hoare triple {22013#true} ~methAndRunningLastTime~0 := 0; {22013#true} is VALID [2020-07-28 19:00:15,980 INFO L280 TraceCheckUtils]: 6: Hoare triple {22013#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {22013#true} is VALID [2020-07-28 19:00:15,980 INFO L280 TraceCheckUtils]: 7: Hoare triple {22013#true} assume !false; {22013#true} is VALID [2020-07-28 19:00:15,980 INFO L280 TraceCheckUtils]: 8: Hoare triple {22013#true} assume test_~splverifierCounter~0 < 4; {22013#true} is VALID [2020-07-28 19:00:15,981 INFO L280 TraceCheckUtils]: 9: Hoare triple {22013#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {22013#true} is VALID [2020-07-28 19:00:15,981 INFO L280 TraceCheckUtils]: 10: Hoare triple {22013#true} assume 0 != test_~tmp~1; {22013#true} is VALID [2020-07-28 19:00:15,981 INFO L280 TraceCheckUtils]: 11: Hoare triple {22013#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {22013#true} is VALID [2020-07-28 19:00:15,981 INFO L280 TraceCheckUtils]: 12: Hoare triple {22013#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {22013#true} is VALID [2020-07-28 19:00:15,981 INFO L280 TraceCheckUtils]: 13: Hoare triple {22013#true} assume 0 != test_~tmp___0~1; {22013#true} is VALID [2020-07-28 19:00:15,982 INFO L280 TraceCheckUtils]: 14: Hoare triple {22013#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {22013#true} is VALID [2020-07-28 19:00:15,982 INFO L280 TraceCheckUtils]: 15: Hoare triple {22013#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {22013#true} is VALID [2020-07-28 19:00:15,983 INFO L280 TraceCheckUtils]: 16: Hoare triple {22013#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {22015#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:00:15,984 INFO L280 TraceCheckUtils]: 17: Hoare triple {22015#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {22015#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:00:15,984 INFO L280 TraceCheckUtils]: 18: Hoare triple {22015#(= 1 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret17, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {22013#true} is VALID [2020-07-28 19:00:15,984 INFO L280 TraceCheckUtils]: 19: Hoare triple {22013#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret16, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {22013#true} is VALID [2020-07-28 19:00:15,984 INFO L280 TraceCheckUtils]: 20: Hoare triple {22013#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {22013#true} is VALID [2020-07-28 19:00:15,985 INFO L280 TraceCheckUtils]: 21: Hoare triple {22013#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {22013#true} is VALID [2020-07-28 19:00:15,985 INFO L280 TraceCheckUtils]: 22: Hoare triple {22013#true} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {22013#true} is VALID [2020-07-28 19:00:15,985 INFO L280 TraceCheckUtils]: 23: Hoare triple {22013#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~2 := 1; {22013#true} is VALID [2020-07-28 19:00:15,985 INFO L280 TraceCheckUtils]: 24: Hoare triple {22013#true} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {22013#true} is VALID [2020-07-28 19:00:15,986 INFO L280 TraceCheckUtils]: 25: Hoare triple {22013#true} processEnvironment__wrappee__highWaterSensor_#t~ret16 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret16 && processEnvironment__wrappee__highWaterSensor_#t~ret16 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret16;havoc processEnvironment__wrappee__highWaterSensor_#t~ret16; {22013#true} is VALID [2020-07-28 19:00:15,986 INFO L280 TraceCheckUtils]: 26: Hoare triple {22013#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {22016#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:00:15,987 INFO L280 TraceCheckUtils]: 27: Hoare triple {22016#(not (= 0 ~pumpRunning~0))} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {22016#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:00:15,988 INFO L280 TraceCheckUtils]: 28: Hoare triple {22016#(not (= 0 ~pumpRunning~0))} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {22016#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:00:15,989 INFO L280 TraceCheckUtils]: 29: Hoare triple {22016#(not (= 0 ~pumpRunning~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {22016#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:00:15,989 INFO L280 TraceCheckUtils]: 30: Hoare triple {22016#(not (= 0 ~pumpRunning~0))} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {22016#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:00:15,990 INFO L280 TraceCheckUtils]: 31: Hoare triple {22016#(not (= 0 ~pumpRunning~0))} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {22016#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:00:15,991 INFO L280 TraceCheckUtils]: 32: Hoare triple {22016#(not (= 0 ~pumpRunning~0))} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {22016#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:00:15,991 INFO L280 TraceCheckUtils]: 33: Hoare triple {22016#(not (= 0 ~pumpRunning~0))} assume !false; {22016#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:00:15,992 INFO L280 TraceCheckUtils]: 34: Hoare triple {22016#(not (= 0 ~pumpRunning~0))} assume test_~splverifierCounter~0 < 4; {22016#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:00:15,993 INFO L280 TraceCheckUtils]: 35: Hoare triple {22016#(not (= 0 ~pumpRunning~0))} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {22016#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:00:15,993 INFO L280 TraceCheckUtils]: 36: Hoare triple {22016#(not (= 0 ~pumpRunning~0))} assume !(0 != test_~tmp~1); {22016#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:00:15,994 INFO L280 TraceCheckUtils]: 37: Hoare triple {22016#(not (= 0 ~pumpRunning~0))} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {22016#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:00:15,995 INFO L280 TraceCheckUtils]: 38: Hoare triple {22016#(not (= 0 ~pumpRunning~0))} assume !(0 != test_~tmp___0~1); {22016#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:00:15,995 INFO L280 TraceCheckUtils]: 39: Hoare triple {22016#(not (= 0 ~pumpRunning~0))} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {22016#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:00:15,996 INFO L280 TraceCheckUtils]: 40: Hoare triple {22016#(not (= 0 ~pumpRunning~0))} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {22016#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:00:15,997 INFO L280 TraceCheckUtils]: 41: Hoare triple {22016#(not (= 0 ~pumpRunning~0))} assume !(0 != ~pumpRunning~0); {22014#false} is VALID [2020-07-28 19:00:15,997 INFO L280 TraceCheckUtils]: 42: Hoare triple {22014#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret17, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {22014#false} is VALID [2020-07-28 19:00:15,997 INFO L280 TraceCheckUtils]: 43: Hoare triple {22014#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret16, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {22014#false} is VALID [2020-07-28 19:00:15,997 INFO L280 TraceCheckUtils]: 44: Hoare triple {22014#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {22014#false} is VALID [2020-07-28 19:00:15,998 INFO L280 TraceCheckUtils]: 45: Hoare triple {22014#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {22014#false} is VALID [2020-07-28 19:00:15,998 INFO L280 TraceCheckUtils]: 46: Hoare triple {22014#false} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {22014#false} is VALID [2020-07-28 19:00:15,998 INFO L280 TraceCheckUtils]: 47: Hoare triple {22014#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~2 := 1; {22014#false} is VALID [2020-07-28 19:00:15,998 INFO L280 TraceCheckUtils]: 48: Hoare triple {22014#false} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {22014#false} is VALID [2020-07-28 19:00:15,999 INFO L280 TraceCheckUtils]: 49: Hoare triple {22014#false} processEnvironment__wrappee__highWaterSensor_#t~ret16 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret16 && processEnvironment__wrappee__highWaterSensor_#t~ret16 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret16;havoc processEnvironment__wrappee__highWaterSensor_#t~ret16; {22014#false} is VALID [2020-07-28 19:00:15,999 INFO L280 TraceCheckUtils]: 50: Hoare triple {22014#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {22014#false} is VALID [2020-07-28 19:00:15,999 INFO L280 TraceCheckUtils]: 51: Hoare triple {22014#false} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {22014#false} is VALID [2020-07-28 19:00:15,999 INFO L280 TraceCheckUtils]: 52: Hoare triple {22014#false} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {22014#false} is VALID [2020-07-28 19:00:15,999 INFO L280 TraceCheckUtils]: 53: Hoare triple {22014#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {22014#false} is VALID [2020-07-28 19:00:15,999 INFO L280 TraceCheckUtils]: 54: Hoare triple {22014#false} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {22014#false} is VALID [2020-07-28 19:00:16,000 INFO L280 TraceCheckUtils]: 55: Hoare triple {22014#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {22014#false} is VALID [2020-07-28 19:00:16,000 INFO L280 TraceCheckUtils]: 56: Hoare triple {22014#false} assume 0 != ~methAndRunningLastTime~0; {22014#false} is VALID [2020-07-28 19:00:16,000 INFO L280 TraceCheckUtils]: 57: Hoare triple {22014#false} assume !false; {22014#false} is VALID [2020-07-28 19:00:16,003 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 23 proven. 1 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:16,004 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1561126169] [2020-07-28 19:00:16,004 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [182481055] [2020-07-28 19:00:16,004 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:00:16,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:16,135 INFO L263 TraceCheckSpWp]: Trace formula consists of 426 conjuncts, 2 conjunts are in the unsatisfiable core [2020-07-28 19:00:16,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:16,157 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:00:16,230 INFO L280 TraceCheckUtils]: 0: Hoare triple {22013#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(13);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string5.base, #t~string5.offset, 1);call write~init~int(77, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(101, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(116, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(104, #t~string5.base, 4 + #t~string5.offset, 1);call write~init~int(58, #t~string5.base, 5 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 6 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string7.base, #t~string7.offset, 1);call write~init~int(82, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(73, #t~string7.base, 2 + #t~string7.offset, 1);call write~init~int(84, #t~string7.base, 3 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 4 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(75, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 2 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string11.base, #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 1 + #t~string11.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~methAndRunningLastTime~0 := 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {22013#true} is VALID [2020-07-28 19:00:16,231 INFO L280 TraceCheckUtils]: 1: Hoare triple {22013#true} havoc main_#res;havoc main_#t~ret71, main_~retValue_acc~9, main_~tmp~8;havoc main_~retValue_acc~9;havoc main_~tmp~8; {22013#true} is VALID [2020-07-28 19:00:16,231 INFO L280 TraceCheckUtils]: 2: Hoare triple {22013#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~11;havoc valid_product_~retValue_acc~11;valid_product_~retValue_acc~11 := 1;valid_product_#res := valid_product_~retValue_acc~11; {22013#true} is VALID [2020-07-28 19:00:16,231 INFO L280 TraceCheckUtils]: 3: Hoare triple {22013#true} main_#t~ret71 := valid_product_#res;assume -2147483648 <= main_#t~ret71 && main_#t~ret71 <= 2147483647;main_~tmp~8 := main_#t~ret71;havoc main_#t~ret71; {22013#true} is VALID [2020-07-28 19:00:16,232 INFO L280 TraceCheckUtils]: 4: Hoare triple {22013#true} assume 0 != main_~tmp~8; {22013#true} is VALID [2020-07-28 19:00:16,232 INFO L280 TraceCheckUtils]: 5: Hoare triple {22013#true} ~methAndRunningLastTime~0 := 0; {22013#true} is VALID [2020-07-28 19:00:16,232 INFO L280 TraceCheckUtils]: 6: Hoare triple {22013#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {22013#true} is VALID [2020-07-28 19:00:16,232 INFO L280 TraceCheckUtils]: 7: Hoare triple {22013#true} assume !false; {22013#true} is VALID [2020-07-28 19:00:16,233 INFO L280 TraceCheckUtils]: 8: Hoare triple {22013#true} assume test_~splverifierCounter~0 < 4; {22013#true} is VALID [2020-07-28 19:00:16,233 INFO L280 TraceCheckUtils]: 9: Hoare triple {22013#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {22013#true} is VALID [2020-07-28 19:00:16,233 INFO L280 TraceCheckUtils]: 10: Hoare triple {22013#true} assume 0 != test_~tmp~1; {22013#true} is VALID [2020-07-28 19:00:16,234 INFO L280 TraceCheckUtils]: 11: Hoare triple {22013#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {22013#true} is VALID [2020-07-28 19:00:16,234 INFO L280 TraceCheckUtils]: 12: Hoare triple {22013#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {22013#true} is VALID [2020-07-28 19:00:16,234 INFO L280 TraceCheckUtils]: 13: Hoare triple {22013#true} assume 0 != test_~tmp___0~1; {22013#true} is VALID [2020-07-28 19:00:16,234 INFO L280 TraceCheckUtils]: 14: Hoare triple {22013#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {22013#true} is VALID [2020-07-28 19:00:16,234 INFO L280 TraceCheckUtils]: 15: Hoare triple {22013#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {22013#true} is VALID [2020-07-28 19:00:16,235 INFO L280 TraceCheckUtils]: 16: Hoare triple {22013#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {22013#true} is VALID [2020-07-28 19:00:16,235 INFO L280 TraceCheckUtils]: 17: Hoare triple {22013#true} assume !(0 != ~pumpRunning~0); {22013#true} is VALID [2020-07-28 19:00:16,235 INFO L280 TraceCheckUtils]: 18: Hoare triple {22013#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret17, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {22013#true} is VALID [2020-07-28 19:00:16,236 INFO L280 TraceCheckUtils]: 19: Hoare triple {22013#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret16, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {22013#true} is VALID [2020-07-28 19:00:16,236 INFO L280 TraceCheckUtils]: 20: Hoare triple {22013#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {22013#true} is VALID [2020-07-28 19:00:16,236 INFO L280 TraceCheckUtils]: 21: Hoare triple {22013#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {22013#true} is VALID [2020-07-28 19:00:16,236 INFO L280 TraceCheckUtils]: 22: Hoare triple {22013#true} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {22013#true} is VALID [2020-07-28 19:00:16,236 INFO L280 TraceCheckUtils]: 23: Hoare triple {22013#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~2 := 1; {22013#true} is VALID [2020-07-28 19:00:16,236 INFO L280 TraceCheckUtils]: 24: Hoare triple {22013#true} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {22013#true} is VALID [2020-07-28 19:00:16,237 INFO L280 TraceCheckUtils]: 25: Hoare triple {22013#true} processEnvironment__wrappee__highWaterSensor_#t~ret16 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret16 && processEnvironment__wrappee__highWaterSensor_#t~ret16 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret16;havoc processEnvironment__wrappee__highWaterSensor_#t~ret16; {22013#true} is VALID [2020-07-28 19:00:16,240 INFO L280 TraceCheckUtils]: 26: Hoare triple {22013#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {22098#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:00:16,244 INFO L280 TraceCheckUtils]: 27: Hoare triple {22098#(<= 1 ~pumpRunning~0)} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {22098#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:00:16,245 INFO L280 TraceCheckUtils]: 28: Hoare triple {22098#(<= 1 ~pumpRunning~0)} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {22098#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:00:16,246 INFO L280 TraceCheckUtils]: 29: Hoare triple {22098#(<= 1 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {22098#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:00:16,247 INFO L280 TraceCheckUtils]: 30: Hoare triple {22098#(<= 1 ~pumpRunning~0)} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {22098#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:00:16,247 INFO L280 TraceCheckUtils]: 31: Hoare triple {22098#(<= 1 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {22098#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:00:16,248 INFO L280 TraceCheckUtils]: 32: Hoare triple {22098#(<= 1 ~pumpRunning~0)} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {22098#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:00:16,249 INFO L280 TraceCheckUtils]: 33: Hoare triple {22098#(<= 1 ~pumpRunning~0)} assume !false; {22098#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:00:16,249 INFO L280 TraceCheckUtils]: 34: Hoare triple {22098#(<= 1 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {22098#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:00:16,250 INFO L280 TraceCheckUtils]: 35: Hoare triple {22098#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {22098#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:00:16,250 INFO L280 TraceCheckUtils]: 36: Hoare triple {22098#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp~1); {22098#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:00:16,250 INFO L280 TraceCheckUtils]: 37: Hoare triple {22098#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~1 := test_#t~nondet13;havoc test_#t~nondet13; {22098#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:00:16,251 INFO L280 TraceCheckUtils]: 38: Hoare triple {22098#(<= 1 ~pumpRunning~0)} assume !(0 != test_~tmp___0~1); {22098#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:00:16,251 INFO L280 TraceCheckUtils]: 39: Hoare triple {22098#(<= 1 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {22098#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:00:16,252 INFO L280 TraceCheckUtils]: 40: Hoare triple {22098#(<= 1 ~pumpRunning~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {22098#(<= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:00:16,252 INFO L280 TraceCheckUtils]: 41: Hoare triple {22098#(<= 1 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {22014#false} is VALID [2020-07-28 19:00:16,252 INFO L280 TraceCheckUtils]: 42: Hoare triple {22014#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret17, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {22014#false} is VALID [2020-07-28 19:00:16,252 INFO L280 TraceCheckUtils]: 43: Hoare triple {22014#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret16, processEnvironment__wrappee__highWaterSensor_~tmp~2;havoc processEnvironment__wrappee__highWaterSensor_~tmp~2; {22014#false} is VALID [2020-07-28 19:00:16,253 INFO L280 TraceCheckUtils]: 44: Hoare triple {22014#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {22014#false} is VALID [2020-07-28 19:00:16,253 INFO L280 TraceCheckUtils]: 45: Hoare triple {22014#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {22014#false} is VALID [2020-07-28 19:00:16,253 INFO L280 TraceCheckUtils]: 46: Hoare triple {22014#false} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {22014#false} is VALID [2020-07-28 19:00:16,253 INFO L280 TraceCheckUtils]: 47: Hoare triple {22014#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~2 := 1; {22014#false} is VALID [2020-07-28 19:00:16,254 INFO L280 TraceCheckUtils]: 48: Hoare triple {22014#false} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {22014#false} is VALID [2020-07-28 19:00:16,254 INFO L280 TraceCheckUtils]: 49: Hoare triple {22014#false} processEnvironment__wrappee__highWaterSensor_#t~ret16 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret16 && processEnvironment__wrappee__highWaterSensor_#t~ret16 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~2 := processEnvironment__wrappee__highWaterSensor_#t~ret16;havoc processEnvironment__wrappee__highWaterSensor_#t~ret16; {22014#false} is VALID [2020-07-28 19:00:16,255 INFO L280 TraceCheckUtils]: 50: Hoare triple {22014#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~2;~pumpRunning~0 := 1; {22014#false} is VALID [2020-07-28 19:00:16,255 INFO L280 TraceCheckUtils]: 51: Hoare triple {22014#false} havoc __utac_acc__Specification2_spec__2_#t~ret0, __utac_acc__Specification2_spec__2_#t~ret1, __utac_acc__Specification2_spec__2_~tmp~0, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~0;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {22014#false} is VALID [2020-07-28 19:00:16,255 INFO L280 TraceCheckUtils]: 52: Hoare triple {22014#false} __utac_acc__Specification2_spec__2_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret0 && __utac_acc__Specification2_spec__2_#t~ret0 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~0 := __utac_acc__Specification2_spec__2_#t~ret0;havoc __utac_acc__Specification2_spec__2_#t~ret0; {22014#false} is VALID [2020-07-28 19:00:16,256 INFO L280 TraceCheckUtils]: 53: Hoare triple {22014#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {22014#false} is VALID [2020-07-28 19:00:16,256 INFO L280 TraceCheckUtils]: 54: Hoare triple {22014#false} __utac_acc__Specification2_spec__2_#t~ret1 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret1 && __utac_acc__Specification2_spec__2_#t~ret1 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret1;havoc __utac_acc__Specification2_spec__2_#t~ret1; {22014#false} is VALID [2020-07-28 19:00:16,256 INFO L280 TraceCheckUtils]: 55: Hoare triple {22014#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {22014#false} is VALID [2020-07-28 19:00:16,256 INFO L280 TraceCheckUtils]: 56: Hoare triple {22014#false} assume 0 != ~methAndRunningLastTime~0; {22014#false} is VALID [2020-07-28 19:00:16,256 INFO L280 TraceCheckUtils]: 57: Hoare triple {22014#false} assume !false; {22014#false} is VALID [2020-07-28 19:00:16,259 INFO L134 CoverageAnalysis]: Checked inductivity of 24 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:16,260 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2020-07-28 19:00:16,260 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [4] total 5 [2020-07-28 19:00:16,260 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1830790912] [2020-07-28 19:00:16,261 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 58 [2020-07-28 19:00:16,261 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:16,261 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:16,326 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:16,326 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:16,327 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:16,327 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:16,327 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:00:16,328 INFO L87 Difference]: Start difference. First operand 283 states and 367 transitions. Second operand 3 states. [2020-07-28 19:00:17,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:17,207 INFO L93 Difference]: Finished difference Result 443 states and 585 transitions. [2020-07-28 19:00:17,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:17,207 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 58 [2020-07-28 19:00:17,208 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:17,208 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:17,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 149 transitions. [2020-07-28 19:00:17,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:17,210 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 149 transitions. [2020-07-28 19:00:17,210 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 149 transitions. [2020-07-28 19:00:17,419 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 149 edges. 149 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:17,420 INFO L225 Difference]: With dead ends: 443 [2020-07-28 19:00:17,420 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:00:17,423 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 62 GetRequests, 59 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:00:17,423 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:00:17,423 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:00:17,424 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:17,424 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:00:17,424 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:00:17,425 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:00:17,425 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:17,425 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:00:17,425 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:00:17,426 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:17,426 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:17,426 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:00:17,426 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:00:17,426 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:17,427 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:00:17,427 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:00:17,427 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:17,427 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:17,428 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:17,428 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:17,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:00:17,429 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:00:17,429 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 58 [2020-07-28 19:00:17,430 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:17,430 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:00:17,430 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:17,430 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:00:17,431 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:17,631 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2020-07-28 19:00:17,634 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:00:18,119 WARN L193 SmtUtils]: Spent 373.00 ms on a formula simplification. DAG size of input: 165 DAG size of output: 116 [2020-07-28 19:00:18,541 WARN L193 SmtUtils]: Spent 268.00 ms on a formula simplification. DAG size of input: 163 DAG size of output: 124 [2020-07-28 19:00:18,821 WARN L193 SmtUtils]: Spent 277.00 ms on a formula simplification. DAG size of input: 166 DAG size of output: 128 [2020-07-28 19:00:19,361 WARN L193 SmtUtils]: Spent 175.00 ms on a formula simplification. DAG size of input: 154 DAG size of output: 116 [2020-07-28 19:00:19,617 WARN L193 SmtUtils]: Spent 244.00 ms on a formula simplification. DAG size of input: 66 DAG size of output: 22 [2020-07-28 19:00:20,315 WARN L193 SmtUtils]: Spent 690.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 26 [2020-07-28 19:00:20,728 WARN L193 SmtUtils]: Spent 408.00 ms on a formula simplification. DAG size of input: 90 DAG size of output: 33 [2020-07-28 19:00:20,878 WARN L193 SmtUtils]: Spent 144.00 ms on a formula simplification. DAG size of input: 46 DAG size of output: 24 [2020-07-28 19:00:21,474 WARN L193 SmtUtils]: Spent 554.00 ms on a formula simplification. DAG size of input: 122 DAG size of output: 33 [2020-07-28 19:00:22,186 WARN L193 SmtUtils]: Spent 706.00 ms on a formula simplification. DAG size of input: 126 DAG size of output: 32 [2020-07-28 19:00:22,548 WARN L193 SmtUtils]: Spent 330.00 ms on a formula simplification. DAG size of input: 72 DAG size of output: 28 [2020-07-28 19:00:22,940 WARN L193 SmtUtils]: Spent 387.00 ms on a formula simplification. DAG size of input: 90 DAG size of output: 33 [2020-07-28 19:00:23,292 WARN L193 SmtUtils]: Spent 207.00 ms on a formula simplification. DAG size of input: 56 DAG size of output: 20 [2020-07-28 19:00:23,604 WARN L193 SmtUtils]: Spent 290.00 ms on a formula simplification. DAG size of input: 74 DAG size of output: 13 [2020-07-28 19:00:24,141 WARN L193 SmtUtils]: Spent 511.00 ms on a formula simplification. DAG size of input: 114 DAG size of output: 32 [2020-07-28 19:00:24,159 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 829) no Hoare annotation was computed. [2020-07-28 19:00:24,159 INFO L268 CegarLoopResult]: For program point L234(lines 234 240) no Hoare annotation was computed. [2020-07-28 19:00:24,159 INFO L264 CegarLoopResult]: At program point L234-1(lines 265 271) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0)) (.cse0 (= 0 ~methAndRunningLastTime~0)) (.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= 0 ~pumpRunning~0)) (.cse1 (= 0 ~methaneLevelCritical~0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (= 1 ~systemActive~0)) (.cse7 (<= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse2 .cse5 .cse6 .cse3) (and .cse1 .cse2 .cse6 .cse3) (and .cse0 .cse2 .cse5 .cse4 .cse7) (and .cse2 .cse5 (<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse4 .cse7) (and .cse0 .cse2 .cse5 .cse3 .cse4) (and .cse1 .cse2 .cse4 .cse7))) [2020-07-28 19:00:24,159 INFO L268 CegarLoopResult]: For program point L829(line 829) no Hoare annotation was computed. [2020-07-28 19:00:24,160 INFO L268 CegarLoopResult]: For program point L829-1(line 829) no Hoare annotation was computed. [2020-07-28 19:00:24,160 INFO L268 CegarLoopResult]: For program point L829-2(line 829) no Hoare annotation was computed. [2020-07-28 19:00:24,160 INFO L264 CegarLoopResult]: At program point L367(lines 360 370) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (<= 1 ~pumpRunning~0))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse1 .cse2) (and .cse0 (<= 1 |ULTIMATE.start_isMethaneAlarm_#res|) (<= 1 ~methaneLevelCritical~0) (<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse1 .cse2))) [2020-07-28 19:00:24,160 INFO L264 CegarLoopResult]: At program point L367-1(lines 360 370) the Hoare annotation is: false [2020-07-28 19:00:24,161 INFO L268 CegarLoopResult]: For program point L301(lines 301 309) no Hoare annotation was computed. [2020-07-28 19:00:24,161 INFO L264 CegarLoopResult]: At program point L367-2(lines 360 370) the Hoare annotation is: false [2020-07-28 19:00:24,161 INFO L268 CegarLoopResult]: For program point L301-1(lines 301 309) no Hoare annotation was computed. [2020-07-28 19:00:24,161 INFO L268 CegarLoopResult]: For program point L301-2(lines 301 309) no Hoare annotation was computed. [2020-07-28 19:00:24,161 INFO L268 CegarLoopResult]: For program point L301-3(lines 301 309) no Hoare annotation was computed. [2020-07-28 19:00:24,161 INFO L268 CegarLoopResult]: For program point L301-4(lines 301 309) no Hoare annotation was computed. [2020-07-28 19:00:24,162 INFO L268 CegarLoopResult]: For program point L301-5(lines 301 309) no Hoare annotation was computed. [2020-07-28 19:00:24,162 INFO L271 CegarLoopResult]: At program point L929(lines 910 932) the Hoare annotation is: true [2020-07-28 19:00:24,162 INFO L268 CegarLoopResult]: For program point L171(lines 171 177) no Hoare annotation was computed. [2020-07-28 19:00:24,162 INFO L268 CegarLoopResult]: For program point L171-1(lines 171 177) no Hoare annotation was computed. [2020-07-28 19:00:24,162 INFO L268 CegarLoopResult]: For program point L171-2(lines 171 177) no Hoare annotation was computed. [2020-07-28 19:00:24,162 INFO L268 CegarLoopResult]: For program point L171-3(lines 171 177) no Hoare annotation was computed. [2020-07-28 19:00:24,162 INFO L268 CegarLoopResult]: For program point L171-4(lines 171 177) no Hoare annotation was computed. [2020-07-28 19:00:24,162 INFO L268 CegarLoopResult]: For program point L171-5(lines 171 177) no Hoare annotation was computed. [2020-07-28 19:00:24,163 INFO L264 CegarLoopResult]: At program point L964(lines 959 967) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~methAndRunningLastTime~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:00:24,163 INFO L268 CegarLoopResult]: For program point L106(lines 106 110) no Hoare annotation was computed. [2020-07-28 19:00:24,163 INFO L264 CegarLoopResult]: At program point L272(lines 272 278) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0)) (.cse4 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= 0 ~pumpRunning~0)) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= 1 ~systemActive~0)) (.cse6 (<= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse4 .cse5 .cse2) (and .cse0 .cse1 .cse5 .cse2) (and (= 0 ~methAndRunningLastTime~0) .cse1 .cse4 .cse3 .cse6) (and .cse1 .cse4 .cse2 .cse3) (and .cse0 .cse1 .cse3 .cse6))) [2020-07-28 19:00:24,163 INFO L264 CegarLoopResult]: At program point L272-1(lines 272 278) the Hoare annotation is: false [2020-07-28 19:00:24,164 INFO L268 CegarLoopResult]: For program point L206(lines 206 212) no Hoare annotation was computed. [2020-07-28 19:00:24,164 INFO L264 CegarLoopResult]: At program point L272-2(lines 272 278) the Hoare annotation is: false [2020-07-28 19:00:24,164 INFO L264 CegarLoopResult]: At program point L206-1(lines 206 212) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse5 (= 0 ~pumpRunning~0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse9 (<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse0 (= 0 ~methAndRunningLastTime~0)) (.cse1 (= 0 ~methaneLevelCritical~0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0)) (.cse6 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse7 (= 1 ~systemActive~0)) (.cse10 (<= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse5 .cse7) (and .cse0 .cse2 .cse8 .cse4 .cse9 .cse5) (and .cse0 .cse2 .cse8 .cse9 .cse5 .cse7) (and .cse2 .cse8 .cse9 .cse7 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse6 .cse7 .cse10))) [2020-07-28 19:00:24,164 INFO L268 CegarLoopResult]: For program point L439(lines 439 445) no Hoare annotation was computed. [2020-07-28 19:00:24,164 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 829) no Hoare annotation was computed. [2020-07-28 19:00:24,165 INFO L264 CegarLoopResult]: At program point L439-1(lines 439 445) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1) (and .cse0 (<= 1 ~methaneLevelCritical~0) .cse1))) [2020-07-28 19:00:24,165 INFO L264 CegarLoopResult]: At program point L176(lines 167 180) the Hoare annotation is: false [2020-07-28 19:00:24,165 INFO L264 CegarLoopResult]: At program point L176-1(lines 167 180) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (<= 1 ~methaneLevelCritical~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2) (and (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse0 .cse3 .cse1 .cse2) (and (= 0 ~methAndRunningLastTime~0) .cse0 .cse3 .cse1 .cse2))) [2020-07-28 19:00:24,165 INFO L264 CegarLoopResult]: At program point L176-2(lines 167 180) the Hoare annotation is: false [2020-07-28 19:00:24,165 INFO L264 CegarLoopResult]: At program point L176-3(lines 167 180) the Hoare annotation is: false [2020-07-28 19:00:24,166 INFO L264 CegarLoopResult]: At program point L176-4(lines 167 180) the Hoare annotation is: false [2020-07-28 19:00:24,166 INFO L264 CegarLoopResult]: At program point L176-5(lines 167 180) the Hoare annotation is: false [2020-07-28 19:00:24,166 INFO L264 CegarLoopResult]: At program point L376(lines 371 379) the Hoare annotation is: (let ((.cse3 (= 1 ~systemActive~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse2 (<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse4 (= 0 |ULTIMATE.start_isPumpRunning_#res|)) (.cse5 (= 0 ~pumpRunning~0))) (or (and (= 0 ~methAndRunningLastTime~0) .cse0 .cse1 .cse2 .cse3 (<= 1 ~pumpRunning~0)) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse3) (and .cse0 .cse1 (= 0 ~systemActive~0) .cse2 .cse4 .cse5))) [2020-07-28 19:00:24,166 INFO L264 CegarLoopResult]: At program point L376-1(lines 371 379) the Hoare annotation is: false [2020-07-28 19:00:24,167 INFO L264 CegarLoopResult]: At program point L376-2(lines 371 379) the Hoare annotation is: false [2020-07-28 19:00:24,167 INFO L264 CegarLoopResult]: At program point L246(lines 195 247) the Hoare annotation is: false [2020-07-28 19:00:24,167 INFO L264 CegarLoopResult]: At program point L49(lines 44 51) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~methAndRunningLastTime~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:00:24,167 INFO L268 CegarLoopResult]: For program point L216(lines 216 222) no Hoare annotation was computed. [2020-07-28 19:00:24,168 INFO L264 CegarLoopResult]: At program point L216-1(lines 216 222) the Hoare annotation is: (let ((.cse6 (= 0 ~systemActive~0)) (.cse0 (= 0 ~methAndRunningLastTime~0)) (.cse5 (<= 1 ~methaneLevelCritical~0)) (.cse3 (= 0 ~pumpRunning~0)) (.cse1 (= 0 ~methaneLevelCritical~0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (= 1 ~systemActive~0)) (.cse7 (<= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse2 .cse5 .cse6 .cse3) (and .cse0 .cse2 .cse5 .cse4 .cse7) (and .cse0 .cse1 .cse2 .cse6 .cse3) (and .cse2 .cse5 (<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse4 .cse7) (and .cse0 .cse2 .cse5 .cse3 .cse4) (and .cse1 .cse2 .cse4 .cse7))) [2020-07-28 19:00:24,168 INFO L268 CegarLoopResult]: For program point L118(lines 118 122) no Hoare annotation was computed. [2020-07-28 19:00:24,168 INFO L264 CegarLoopResult]: At program point L845-2(lines 845 859) the Hoare annotation is: false [2020-07-28 19:00:24,168 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:00:24,168 INFO L268 CegarLoopResult]: For program point L846(line 846) no Hoare annotation was computed. [2020-07-28 19:00:24,169 INFO L268 CegarLoopResult]: For program point L849(lines 849 853) no Hoare annotation was computed. [2020-07-28 19:00:24,169 INFO L268 CegarLoopResult]: For program point L849-1(lines 265 271) no Hoare annotation was computed. [2020-07-28 19:00:24,169 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:00:24,169 INFO L268 CegarLoopResult]: For program point L323(lines 323 340) no Hoare annotation was computed. [2020-07-28 19:00:24,169 INFO L268 CegarLoopResult]: For program point L323-1(lines 323 340) no Hoare annotation was computed. [2020-07-28 19:00:24,169 INFO L268 CegarLoopResult]: For program point L323-2(lines 323 340) no Hoare annotation was computed. [2020-07-28 19:00:24,170 INFO L268 CegarLoopResult]: For program point L60(lines 60 77) no Hoare annotation was computed. [2020-07-28 19:00:24,170 INFO L264 CegarLoopResult]: At program point L60-1(lines 1 967) the Hoare annotation is: (let ((.cse4 (= 0 ~systemActive~0)) (.cse5 (= 0 ~pumpRunning~0)) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse9 (<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse0 (= 0 ~methAndRunningLastTime~0)) (.cse1 (= 0 ~methaneLevelCritical~0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~0)) (.cse6 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse7 (= 1 ~systemActive~0)) (.cse10 (<= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse2 .cse5 .cse7) (and .cse0 .cse2 .cse8 .cse4 .cse9 .cse5) (and .cse0 .cse2 .cse8 .cse9 .cse5 .cse7) (and .cse2 .cse8 .cse9 .cse7 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse6 .cse7 .cse10))) [2020-07-28 19:00:24,170 INFO L268 CegarLoopResult]: For program point L60-2(lines 60 77) no Hoare annotation was computed. [2020-07-28 19:00:24,170 INFO L264 CegarLoopResult]: At program point L60-3(lines 1 967) the Hoare annotation is: false [2020-07-28 19:00:24,170 INFO L268 CegarLoopResult]: For program point L60-4(lines 60 77) no Hoare annotation was computed. [2020-07-28 19:00:24,170 INFO L264 CegarLoopResult]: At program point L60-5(lines 1 967) the Hoare annotation is: false [2020-07-28 19:00:24,170 INFO L268 CegarLoopResult]: For program point L226(lines 226 241) no Hoare annotation was computed. [2020-07-28 19:00:24,171 INFO L268 CegarLoopResult]: For program point L94(lines 94 98) no Hoare annotation was computed. [2020-07-28 19:00:24,171 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:00:24,171 INFO L268 CegarLoopResult]: For program point L94-3(lines 94 98) no Hoare annotation was computed. [2020-07-28 19:00:24,171 INFO L268 CegarLoopResult]: For program point L920(lines 920 927) no Hoare annotation was computed. [2020-07-28 19:00:24,171 INFO L268 CegarLoopResult]: For program point L94-6(lines 94 98) no Hoare annotation was computed. [2020-07-28 19:00:24,171 INFO L271 CegarLoopResult]: At program point L920-1(lines 920 927) the Hoare annotation is: true [2020-07-28 19:00:24,171 INFO L268 CegarLoopResult]: For program point L425(lines 425 429) no Hoare annotation was computed. [2020-07-28 19:00:24,171 INFO L268 CegarLoopResult]: For program point L425-2(lines 425 429) no Hoare annotation was computed. [2020-07-28 19:00:24,171 INFO L268 CegarLoopResult]: For program point L425-3(lines 425 429) no Hoare annotation was computed. [2020-07-28 19:00:24,171 INFO L268 CegarLoopResult]: For program point L425-5(lines 425 429) no Hoare annotation was computed. [2020-07-28 19:00:24,172 INFO L268 CegarLoopResult]: For program point L425-6(lines 425 429) no Hoare annotation was computed. [2020-07-28 19:00:24,172 INFO L268 CegarLoopResult]: For program point L425-8(lines 425 429) no Hoare annotation was computed. [2020-07-28 19:00:24,172 INFO L268 CegarLoopResult]: For program point L425-9(lines 425 429) no Hoare annotation was computed. [2020-07-28 19:00:24,172 INFO L268 CegarLoopResult]: For program point L425-11(lines 425 429) no Hoare annotation was computed. [2020-07-28 19:00:24,172 INFO L268 CegarLoopResult]: For program point L425-12(lines 425 429) no Hoare annotation was computed. [2020-07-28 19:00:24,172 INFO L268 CegarLoopResult]: For program point L425-14(lines 425 429) no Hoare annotation was computed. [2020-07-28 19:00:24,172 INFO L268 CegarLoopResult]: For program point L425-15(lines 425 429) no Hoare annotation was computed. [2020-07-28 19:00:24,172 INFO L268 CegarLoopResult]: For program point L425-17(lines 425 429) no Hoare annotation was computed. [2020-07-28 19:00:24,173 INFO L268 CegarLoopResult]: For program point L327(lines 327 335) no Hoare annotation was computed. [2020-07-28 19:00:24,173 INFO L268 CegarLoopResult]: For program point L327-1(lines 327 335) no Hoare annotation was computed. [2020-07-28 19:00:24,173 INFO L268 CegarLoopResult]: For program point L327-2(lines 327 335) no Hoare annotation was computed. [2020-07-28 19:00:24,173 INFO L268 CegarLoopResult]: For program point L64(lines 64 74) no Hoare annotation was computed. [2020-07-28 19:00:24,173 INFO L268 CegarLoopResult]: For program point L64-2(lines 64 74) no Hoare annotation was computed. [2020-07-28 19:00:24,173 INFO L264 CegarLoopResult]: At program point L956(lines 1 967) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~methAndRunningLastTime~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:00:24,174 INFO L268 CegarLoopResult]: For program point L64-4(lines 64 74) no Hoare annotation was computed. [2020-07-28 19:00:24,174 INFO L268 CegarLoopResult]: For program point L197(lines 196 245) no Hoare annotation was computed. [2020-07-28 19:00:24,174 INFO L264 CegarLoopResult]: At program point L131(lines 126 134) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 ~systemActive~0)) (.cse2 (<= 1 ~pumpRunning~0))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse1 .cse2) (and .cse0 (<= 1 ~methaneLevelCritical~0) (<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse1 .cse2))) [2020-07-28 19:00:24,174 INFO L264 CegarLoopResult]: At program point L131-1(lines 126 134) the Hoare annotation is: (let ((.cse6 (<= 1 ~pumpRunning~0)) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse3 (<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse5 (= 1 ~systemActive~0)) (.cse7 (= 0 ~methaneLevelCritical~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 0 ~systemActive~0)) (.cse4 (= 0 ~pumpRunning~0)) (.cse8 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and (= 0 ~methAndRunningLastTime~0) .cse0 .cse1 .cse3 .cse5 .cse6) (and .cse7 .cse0 .cse8 .cse5 .cse6) (and .cse7 .cse0 .cse4 .cse8 .cse5) (and .cse0 .cse1 .cse3 .cse4 .cse5) (and .cse7 .cse0 .cse2 .cse4 .cse8))) [2020-07-28 19:00:24,175 INFO L268 CegarLoopResult]: For program point L65(lines 65 71) no Hoare annotation was computed. [2020-07-28 19:00:24,175 INFO L264 CegarLoopResult]: At program point L131-2(lines 126 134) the Hoare annotation is: false [2020-07-28 19:00:24,175 INFO L264 CegarLoopResult]: At program point L131-3(lines 126 134) the Hoare annotation is: false [2020-07-28 19:00:24,175 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:00:24,175 INFO L268 CegarLoopResult]: For program point L65-2(lines 65 71) no Hoare annotation was computed. [2020-07-28 19:00:24,175 INFO L264 CegarLoopResult]: At program point L131-4(lines 126 134) the Hoare annotation is: false [2020-07-28 19:00:24,176 INFO L264 CegarLoopResult]: At program point L131-5(lines 126 134) the Hoare annotation is: false [2020-07-28 19:00:24,176 INFO L268 CegarLoopResult]: For program point L65-4(lines 65 71) no Hoare annotation was computed. [2020-07-28 19:00:24,176 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 829) no Hoare annotation was computed. [2020-07-28 19:00:24,176 INFO L268 CegarLoopResult]: For program point L297(lines 297 314) no Hoare annotation was computed. [2020-07-28 19:00:24,176 INFO L268 CegarLoopResult]: For program point L297-1(lines 297 314) no Hoare annotation was computed. [2020-07-28 19:00:24,177 INFO L268 CegarLoopResult]: For program point L297-2(lines 297 314) no Hoare annotation was computed. [2020-07-28 19:00:24,177 INFO L268 CegarLoopResult]: For program point L198(lines 198 202) no Hoare annotation was computed. [2020-07-28 19:00:24,177 INFO L268 CegarLoopResult]: For program point L297-3(lines 297 314) no Hoare annotation was computed. [2020-07-28 19:00:24,177 INFO L268 CegarLoopResult]: For program point L297-4(lines 297 314) no Hoare annotation was computed. [2020-07-28 19:00:24,177 INFO L268 CegarLoopResult]: For program point L297-5(lines 297 314) no Hoare annotation was computed. [2020-07-28 19:00:24,177 INFO L264 CegarLoopResult]: At program point L265(lines 264 283) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0)) (.cse6 (= 0 ~methAndRunningLastTime~0)) (.cse4 (<= 1 ~methaneLevelCritical~0)) (.cse2 (= 0 ~pumpRunning~0)) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= 1 ~systemActive~0)) (.cse7 (<= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse4 .cse5 .cse2) (and .cse0 .cse1 .cse5 .cse2) (and .cse6 .cse1 .cse4 .cse3 .cse7) (and .cse1 .cse4 (<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse3 .cse7) (and .cse6 .cse1 .cse4 .cse2 .cse3) (and .cse0 .cse1 .cse3 .cse7))) [2020-07-28 19:00:24,178 INFO L268 CegarLoopResult]: For program point L265-1(lines 265 271) no Hoare annotation was computed. [2020-07-28 19:00:24,178 INFO L264 CegarLoopResult]: At program point L265-2(lines 264 283) the Hoare annotation is: false [2020-07-28 19:00:24,178 INFO L264 CegarLoopResult]: At program point L265-3(lines 264 283) the Hoare annotation is: false [2020-07-28 19:00:24,178 INFO L264 CegarLoopResult]: At program point L893(lines 889 895) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~methAndRunningLastTime~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:00:24,178 INFO L264 CegarLoopResult]: At program point L431(lines 416 434) the Hoare annotation is: false [2020-07-28 19:00:24,179 INFO L264 CegarLoopResult]: At program point L431-1(lines 416 434) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (<= 1 ~methaneLevelCritical~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2) (and .cse0 .cse3 .cse1 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2) .cse2) (and (= 0 ~methAndRunningLastTime~0) .cse0 .cse3 .cse1 .cse2))) [2020-07-28 19:00:24,179 INFO L264 CegarLoopResult]: At program point L431-2(lines 416 434) the Hoare annotation is: false [2020-07-28 19:00:24,179 INFO L264 CegarLoopResult]: At program point L431-3(lines 416 434) the Hoare annotation is: false [2020-07-28 19:00:24,179 INFO L264 CegarLoopResult]: At program point L431-4(lines 416 434) the Hoare annotation is: false [2020-07-28 19:00:24,179 INFO L264 CegarLoopResult]: At program point L431-5(lines 416 434) the Hoare annotation is: false [2020-07-28 19:00:24,184 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:00:24,184 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:00:24,189 WARN L170 areAnnotationChecker]: L920 has no Hoare annotation [2020-07-28 19:00:24,189 WARN L170 areAnnotationChecker]: L920 has no Hoare annotation [2020-07-28 19:00:24,189 WARN L170 areAnnotationChecker]: L920 has no Hoare annotation [2020-07-28 19:00:24,190 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:00:24,191 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2020-07-28 19:00:24,191 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:00:24,191 WARN L170 areAnnotationChecker]: L265-1 has no Hoare annotation [2020-07-28 19:00:24,191 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2020-07-28 19:00:24,191 WARN L170 areAnnotationChecker]: L197 has no Hoare annotation [2020-07-28 19:00:24,191 WARN L170 areAnnotationChecker]: L265-1 has no Hoare annotation [2020-07-28 19:00:24,192 WARN L170 areAnnotationChecker]: L265-1 has no Hoare annotation [2020-07-28 19:00:24,192 WARN L170 areAnnotationChecker]: L198 has no Hoare annotation [2020-07-28 19:00:24,192 WARN L170 areAnnotationChecker]: L94-3 has no Hoare annotation [2020-07-28 19:00:24,192 WARN L170 areAnnotationChecker]: L94-3 has no Hoare annotation [2020-07-28 19:00:24,192 WARN L170 areAnnotationChecker]: L323-1 has no Hoare annotation [2020-07-28 19:00:24,192 WARN L170 areAnnotationChecker]: L206 has no Hoare annotation [2020-07-28 19:00:24,192 WARN L170 areAnnotationChecker]: L206 has no Hoare annotation [2020-07-28 19:00:24,192 WARN L170 areAnnotationChecker]: L323-1 has no Hoare annotation [2020-07-28 19:00:24,192 WARN L170 areAnnotationChecker]: L323-1 has no Hoare annotation [2020-07-28 19:00:24,192 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2020-07-28 19:00:24,192 WARN L170 areAnnotationChecker]: L106 has no Hoare annotation [2020-07-28 19:00:24,193 WARN L170 areAnnotationChecker]: L216 has no Hoare annotation [2020-07-28 19:00:24,193 WARN L170 areAnnotationChecker]: L297-3 has no Hoare annotation [2020-07-28 19:00:24,193 WARN L170 areAnnotationChecker]: L297-3 has no Hoare annotation [2020-07-28 19:00:24,193 WARN L170 areAnnotationChecker]: L60-2 has no Hoare annotation [2020-07-28 19:00:24,193 WARN L170 areAnnotationChecker]: L216 has no Hoare annotation [2020-07-28 19:00:24,193 WARN L170 areAnnotationChecker]: L216 has no Hoare annotation [2020-07-28 19:00:24,193 WARN L170 areAnnotationChecker]: L327-1 has no Hoare annotation [2020-07-28 19:00:24,193 WARN L170 areAnnotationChecker]: L171-3 has no Hoare annotation [2020-07-28 19:00:24,193 WARN L170 areAnnotationChecker]: L171-3 has no Hoare annotation [2020-07-28 19:00:24,193 WARN L170 areAnnotationChecker]: L60-2 has no Hoare annotation [2020-07-28 19:00:24,193 WARN L170 areAnnotationChecker]: L60-2 has no Hoare annotation [2020-07-28 19:00:24,193 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2020-07-28 19:00:24,194 WARN L170 areAnnotationChecker]: L118 has no Hoare annotation [2020-07-28 19:00:24,194 WARN L170 areAnnotationChecker]: L226 has no Hoare annotation [2020-07-28 19:00:24,194 WARN L170 areAnnotationChecker]: L327-1 has no Hoare annotation [2020-07-28 19:00:24,194 WARN L170 areAnnotationChecker]: L327-1 has no Hoare annotation [2020-07-28 19:00:24,194 WARN L170 areAnnotationChecker]: L425-9 has no Hoare annotation [2020-07-28 19:00:24,194 WARN L170 areAnnotationChecker]: L64-2 has no Hoare annotation [2020-07-28 19:00:24,194 WARN L170 areAnnotationChecker]: L226 has no Hoare annotation [2020-07-28 19:00:24,194 WARN L170 areAnnotationChecker]: L226 has no Hoare annotation [2020-07-28 19:00:24,194 WARN L170 areAnnotationChecker]: L297-2 has no Hoare annotation [2020-07-28 19:00:24,194 WARN L170 areAnnotationChecker]: L297-2 has no Hoare annotation [2020-07-28 19:00:24,194 WARN L170 areAnnotationChecker]: L425-9 has no Hoare annotation [2020-07-28 19:00:24,194 WARN L170 areAnnotationChecker]: L425-9 has no Hoare annotation [2020-07-28 19:00:24,195 WARN L170 areAnnotationChecker]: L64-2 has no Hoare annotation [2020-07-28 19:00:24,195 WARN L170 areAnnotationChecker]: L64-2 has no Hoare annotation [2020-07-28 19:00:24,195 WARN L170 areAnnotationChecker]: L846 has no Hoare annotation [2020-07-28 19:00:24,195 WARN L170 areAnnotationChecker]: L94 has no Hoare annotation [2020-07-28 19:00:24,196 WARN L170 areAnnotationChecker]: L234 has no Hoare annotation [2020-07-28 19:00:24,196 WARN L170 areAnnotationChecker]: L234 has no Hoare annotation [2020-07-28 19:00:24,196 WARN L170 areAnnotationChecker]: L171-2 has no Hoare annotation [2020-07-28 19:00:24,196 WARN L170 areAnnotationChecker]: L171-2 has no Hoare annotation [2020-07-28 19:00:24,197 WARN L170 areAnnotationChecker]: L425-11 has no Hoare annotation [2020-07-28 19:00:24,197 WARN L170 areAnnotationChecker]: L65-2 has no Hoare annotation [2020-07-28 19:00:24,197 WARN L170 areAnnotationChecker]: L65-2 has no Hoare annotation [2020-07-28 19:00:24,197 WARN L170 areAnnotationChecker]: L846 has no Hoare annotation [2020-07-28 19:00:24,197 WARN L170 areAnnotationChecker]: L94 has no Hoare annotation [2020-07-28 19:00:24,197 WARN L170 areAnnotationChecker]: L94 has no Hoare annotation [2020-07-28 19:00:24,197 WARN L170 areAnnotationChecker]: L323 has no Hoare annotation [2020-07-28 19:00:24,198 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2020-07-28 19:00:24,198 WARN L170 areAnnotationChecker]: L439 has no Hoare annotation [2020-07-28 19:00:24,198 WARN L170 areAnnotationChecker]: L425-6 has no Hoare annotation [2020-07-28 19:00:24,198 WARN L170 areAnnotationChecker]: L301-3 has no Hoare annotation [2020-07-28 19:00:24,199 WARN L170 areAnnotationChecker]: L829-1 has no Hoare annotation [2020-07-28 19:00:24,199 WARN L170 areAnnotationChecker]: L829-1 has no Hoare annotation [2020-07-28 19:00:24,199 WARN L170 areAnnotationChecker]: L849 has no Hoare annotation [2020-07-28 19:00:24,199 WARN L170 areAnnotationChecker]: L849 has no Hoare annotation [2020-07-28 19:00:24,199 WARN L170 areAnnotationChecker]: L323 has no Hoare annotation [2020-07-28 19:00:24,199 WARN L170 areAnnotationChecker]: L323 has no Hoare annotation [2020-07-28 19:00:24,200 WARN L170 areAnnotationChecker]: L425-6 has no Hoare annotation [2020-07-28 19:00:24,200 WARN L170 areAnnotationChecker]: L425-6 has no Hoare annotation [2020-07-28 19:00:24,200 WARN L170 areAnnotationChecker]: L301-3 has no Hoare annotation [2020-07-28 19:00:24,200 WARN L170 areAnnotationChecker]: L301-3 has no Hoare annotation [2020-07-28 19:00:24,201 WARN L170 areAnnotationChecker]: L849-1 has no Hoare annotation [2020-07-28 19:00:24,201 WARN L170 areAnnotationChecker]: L849-1 has no Hoare annotation [2020-07-28 19:00:24,201 WARN L170 areAnnotationChecker]: L297-1 has no Hoare annotation [2020-07-28 19:00:24,202 WARN L170 areAnnotationChecker]: L297-1 has no Hoare annotation [2020-07-28 19:00:24,202 WARN L170 areAnnotationChecker]: L60 has no Hoare annotation [2020-07-28 19:00:24,202 WARN L170 areAnnotationChecker]: L425-8 has no Hoare annotation [2020-07-28 19:00:24,202 WARN L170 areAnnotationChecker]: L94-6 has no Hoare annotation [2020-07-28 19:00:24,202 WARN L170 areAnnotationChecker]: L94-6 has no Hoare annotation [2020-07-28 19:00:24,202 WARN L170 areAnnotationChecker]: L323-2 has no Hoare annotation [2020-07-28 19:00:24,202 WARN L170 areAnnotationChecker]: L327 has no Hoare annotation [2020-07-28 19:00:24,202 WARN L170 areAnnotationChecker]: L171-1 has no Hoare annotation [2020-07-28 19:00:24,202 WARN L170 areAnnotationChecker]: L171-1 has no Hoare annotation [2020-07-28 19:00:24,202 WARN L170 areAnnotationChecker]: L60 has no Hoare annotation [2020-07-28 19:00:24,202 WARN L170 areAnnotationChecker]: L60 has no Hoare annotation [2020-07-28 19:00:24,202 WARN L170 areAnnotationChecker]: L301-2 has no Hoare annotation [2020-07-28 19:00:24,203 WARN L170 areAnnotationChecker]: L323-2 has no Hoare annotation [2020-07-28 19:00:24,203 WARN L170 areAnnotationChecker]: L323-2 has no Hoare annotation [2020-07-28 19:00:24,203 WARN L170 areAnnotationChecker]: L327 has no Hoare annotation [2020-07-28 19:00:24,203 WARN L170 areAnnotationChecker]: L327 has no Hoare annotation [2020-07-28 19:00:24,203 WARN L170 areAnnotationChecker]: L425-3 has no Hoare annotation [2020-07-28 19:00:24,203 WARN L170 areAnnotationChecker]: L64 has no Hoare annotation [2020-07-28 19:00:24,203 WARN L170 areAnnotationChecker]: L301-2 has no Hoare annotation [2020-07-28 19:00:24,203 WARN L170 areAnnotationChecker]: L301-2 has no Hoare annotation [2020-07-28 19:00:24,203 WARN L170 areAnnotationChecker]: L297-5 has no Hoare annotation [2020-07-28 19:00:24,203 WARN L170 areAnnotationChecker]: L297-5 has no Hoare annotation [2020-07-28 19:00:24,203 WARN L170 areAnnotationChecker]: L60-4 has no Hoare annotation [2020-07-28 19:00:24,204 WARN L170 areAnnotationChecker]: L297 has no Hoare annotation [2020-07-28 19:00:24,204 WARN L170 areAnnotationChecker]: L297 has no Hoare annotation [2020-07-28 19:00:24,204 WARN L170 areAnnotationChecker]: L425-3 has no Hoare annotation [2020-07-28 19:00:24,204 WARN L170 areAnnotationChecker]: L425-3 has no Hoare annotation [2020-07-28 19:00:24,204 WARN L170 areAnnotationChecker]: L64 has no Hoare annotation [2020-07-28 19:00:24,204 WARN L170 areAnnotationChecker]: L64 has no Hoare annotation [2020-07-28 19:00:24,204 WARN L170 areAnnotationChecker]: L327-2 has no Hoare annotation [2020-07-28 19:00:24,204 WARN L170 areAnnotationChecker]: L171-5 has no Hoare annotation [2020-07-28 19:00:24,204 WARN L170 areAnnotationChecker]: L171-5 has no Hoare annotation [2020-07-28 19:00:24,204 WARN L170 areAnnotationChecker]: L60-4 has no Hoare annotation [2020-07-28 19:00:24,204 WARN L170 areAnnotationChecker]: L60-4 has no Hoare annotation [2020-07-28 19:00:24,205 WARN L170 areAnnotationChecker]: L171 has no Hoare annotation [2020-07-28 19:00:24,205 WARN L170 areAnnotationChecker]: L171 has no Hoare annotation [2020-07-28 19:00:24,205 WARN L170 areAnnotationChecker]: L425-5 has no Hoare annotation [2020-07-28 19:00:24,205 WARN L170 areAnnotationChecker]: L65 has no Hoare annotation [2020-07-28 19:00:24,205 WARN L170 areAnnotationChecker]: L65 has no Hoare annotation [2020-07-28 19:00:24,205 WARN L170 areAnnotationChecker]: L327-2 has no Hoare annotation [2020-07-28 19:00:24,205 WARN L170 areAnnotationChecker]: L327-2 has no Hoare annotation [2020-07-28 19:00:24,205 WARN L170 areAnnotationChecker]: L425-15 has no Hoare annotation [2020-07-28 19:00:24,205 WARN L170 areAnnotationChecker]: L64-4 has no Hoare annotation [2020-07-28 19:00:24,205 WARN L170 areAnnotationChecker]: L425 has no Hoare annotation [2020-07-28 19:00:24,205 WARN L170 areAnnotationChecker]: L301-1 has no Hoare annotation [2020-07-28 19:00:24,206 WARN L170 areAnnotationChecker]: L829 has no Hoare annotation [2020-07-28 19:00:24,206 WARN L170 areAnnotationChecker]: L829 has no Hoare annotation [2020-07-28 19:00:24,206 WARN L170 areAnnotationChecker]: L297-4 has no Hoare annotation [2020-07-28 19:00:24,206 WARN L170 areAnnotationChecker]: L297-4 has no Hoare annotation [2020-07-28 19:00:24,206 WARN L170 areAnnotationChecker]: L425-15 has no Hoare annotation [2020-07-28 19:00:24,206 WARN L170 areAnnotationChecker]: L425-15 has no Hoare annotation [2020-07-28 19:00:24,206 WARN L170 areAnnotationChecker]: L64-4 has no Hoare annotation [2020-07-28 19:00:24,207 WARN L170 areAnnotationChecker]: L64-4 has no Hoare annotation [2020-07-28 19:00:24,207 WARN L170 areAnnotationChecker]: L425 has no Hoare annotation [2020-07-28 19:00:24,207 WARN L170 areAnnotationChecker]: L425 has no Hoare annotation [2020-07-28 19:00:24,207 WARN L170 areAnnotationChecker]: L301-1 has no Hoare annotation [2020-07-28 19:00:24,207 WARN L170 areAnnotationChecker]: L301-1 has no Hoare annotation [2020-07-28 19:00:24,208 WARN L170 areAnnotationChecker]: L171-4 has no Hoare annotation [2020-07-28 19:00:24,208 WARN L170 areAnnotationChecker]: L171-4 has no Hoare annotation [2020-07-28 19:00:24,208 WARN L170 areAnnotationChecker]: L425-17 has no Hoare annotation [2020-07-28 19:00:24,208 WARN L170 areAnnotationChecker]: L65-4 has no Hoare annotation [2020-07-28 19:00:24,208 WARN L170 areAnnotationChecker]: L65-4 has no Hoare annotation [2020-07-28 19:00:24,208 WARN L170 areAnnotationChecker]: L425-2 has no Hoare annotation [2020-07-28 19:00:24,208 WARN L170 areAnnotationChecker]: L425-12 has no Hoare annotation [2020-07-28 19:00:24,208 WARN L170 areAnnotationChecker]: L301-5 has no Hoare annotation [2020-07-28 19:00:24,208 WARN L170 areAnnotationChecker]: L829-2 has no Hoare annotation [2020-07-28 19:00:24,208 WARN L170 areAnnotationChecker]: L829-2 has no Hoare annotation [2020-07-28 19:00:24,208 WARN L170 areAnnotationChecker]: L301 has no Hoare annotation [2020-07-28 19:00:24,209 WARN L170 areAnnotationChecker]: L425-12 has no Hoare annotation [2020-07-28 19:00:24,209 WARN L170 areAnnotationChecker]: L425-12 has no Hoare annotation [2020-07-28 19:00:24,209 WARN L170 areAnnotationChecker]: L301-5 has no Hoare annotation [2020-07-28 19:00:24,209 WARN L170 areAnnotationChecker]: L301-5 has no Hoare annotation [2020-07-28 19:00:24,209 WARN L170 areAnnotationChecker]: L301 has no Hoare annotation [2020-07-28 19:00:24,209 WARN L170 areAnnotationChecker]: L301 has no Hoare annotation [2020-07-28 19:00:24,210 WARN L170 areAnnotationChecker]: L425-14 has no Hoare annotation [2020-07-28 19:00:24,210 WARN L170 areAnnotationChecker]: L301-4 has no Hoare annotation [2020-07-28 19:00:24,210 WARN L170 areAnnotationChecker]: L301-4 has no Hoare annotation [2020-07-28 19:00:24,210 WARN L170 areAnnotationChecker]: L301-4 has no Hoare annotation [2020-07-28 19:00:24,211 INFO L163 areAnnotationChecker]: CFG has 21 edges. 21 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:00:24,247 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:00:24 BoogieIcfgContainer [2020-07-28 19:00:24,247 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:00:24,248 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:00:24,248 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:00:24,248 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:00:24,249 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 06:59:50" (3/4) ... [2020-07-28 19:00:24,253 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:00:24,273 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:00:24,274 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:00:24,276 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:00:24,277 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:00:24,278 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:00:24,279 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:00:24,280 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:00:24,311 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result) || ((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == systemActive) && 1 <= \result) && 0 == pumpRunning)) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 1 <= \result) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning)) || ((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == \result) && 1 == systemActive) && 1 <= pumpRunning) [2020-07-28 19:00:24,312 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result) || ((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == systemActive) && 1 <= \result) && 0 == pumpRunning)) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 1 <= \result) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning)) || ((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == \result) && 1 == systemActive) && 1 <= pumpRunning) [2020-07-28 19:00:24,312 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == systemActive) && 1 <= pumpRunning) [2020-07-28 19:00:24,313 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || (((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == systemActive) && 1 <= pumpRunning) [2020-07-28 19:00:24,313 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || (((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == systemActive) && 1 <= pumpRunning) [2020-07-28 19:00:24,315 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == systemActive) && 1 <= \result) && 0 == pumpRunning) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive)) || ((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result) [2020-07-28 19:00:24,316 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 1 == systemActive) && 1 <= pumpRunning) || ((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning) [2020-07-28 19:00:24,316 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 1 == systemActive) && 1 <= pumpRunning) || (((((0 == splverifierCounter && 1 <= \result) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning) [2020-07-28 19:00:24,317 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || ((((1 == \result && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:00:24,317 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning) || (((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive)) || (((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == systemActive) && 1 <= \result) && 0 == \result) && 0 == pumpRunning) [2020-07-28 19:00:24,318 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || (((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 0 == \result) && 0 == tmp___0) && 1 == systemActive)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:00:24,388 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:00:24,389 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:00:24,391 INFO L168 Benchmark]: Toolchain (without parser) took 36509.72 ms. Allocated memory was 1.0 GB in the beginning and 1.6 GB in the end (delta: 562.0 MB). Free memory was 960.2 MB in the beginning and 794.4 MB in the end (delta: 165.8 MB). Peak memory consumption was 727.9 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:24,391 INFO L168 Benchmark]: CDTParser took 0.21 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:00:24,392 INFO L168 Benchmark]: CACSL2BoogieTranslator took 691.16 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 113.2 MB). Free memory was 960.2 MB in the beginning and 1.1 GB in the end (delta: -133.1 MB). Peak memory consumption was 26.4 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:24,392 INFO L168 Benchmark]: Boogie Procedure Inliner took 99.97 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:24,393 INFO L168 Benchmark]: Boogie Preprocessor took 80.16 ms. Allocated memory is still 1.1 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:00:24,393 INFO L168 Benchmark]: RCFGBuilder took 1681.59 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 909.2 MB in the end (delta: 177.3 MB). Peak memory consumption was 177.3 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:24,394 INFO L168 Benchmark]: TraceAbstraction took 33808.05 ms. Allocated memory was 1.1 GB in the beginning and 1.6 GB in the end (delta: 448.8 MB). Free memory was 909.2 MB in the beginning and 809.6 MB in the end (delta: 99.6 MB). Peak memory consumption was 548.4 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:24,394 INFO L168 Benchmark]: Witness Printer took 141.20 ms. Allocated memory is still 1.6 GB. Free memory was 809.6 MB in the beginning and 794.4 MB in the end (delta: 15.2 MB). Peak memory consumption was 15.2 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:24,396 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 691.16 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 113.2 MB). Free memory was 960.2 MB in the beginning and 1.1 GB in the end (delta: -133.1 MB). Peak memory consumption was 26.4 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 99.97 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 80.16 ms. Allocated memory is still 1.1 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 1681.59 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 909.2 MB in the end (delta: 177.3 MB). Peak memory consumption was 177.3 MB. Max. memory is 11.5 GB. * TraceAbstraction took 33808.05 ms. Allocated memory was 1.1 GB in the beginning and 1.6 GB in the end (delta: 448.8 MB). Free memory was 909.2 MB in the beginning and 809.6 MB in the end (delta: 99.6 MB). Peak memory consumption was 548.4 MB. Max. memory is 11.5 GB. * Witness Printer took 141.20 ms. Allocated memory is still 1.6 GB. Free memory was 809.6 MB in the beginning and 794.4 MB in the end (delta: 15.2 MB). Peak memory consumption was 15.2 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 829]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 829]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 829]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 272]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 360]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || (((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 0 == \result) && 0 == tmp___0) && 1 == systemActive)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 272]: Loop Invariant Derived loop invariant: (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || (((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 1 == systemActive) && 1 <= pumpRunning)) || (((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == systemActive) && 1 <= pumpRunning) - InvariantResult [Line: 371]: Loop Invariant Derived loop invariant: ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning) || (((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive)) || (((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == systemActive) && 1 <= \result) && 0 == \result) && 0 == pumpRunning) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result) || ((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == systemActive) && 1 <= \result) && 0 == pumpRunning)) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 1 <= \result) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning)) || ((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == \result) && 1 == systemActive) && 1 <= pumpRunning) - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 360]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 44]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 371]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 371]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: (((((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || (((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == systemActive) && 1 <= pumpRunning) - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || (((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == systemActive) && 1 <= pumpRunning) - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 195]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: ((((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == systemActive) && 1 <= \result) && 0 == pumpRunning) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive)) || ((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result) - InvariantResult [Line: 206]: Loop Invariant Derived loop invariant: ((((((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result) || ((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == systemActive) && 1 <= \result) && 0 == pumpRunning)) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 1 <= \result) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning)) || ((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == \result) && 1 == systemActive) && 1 <= pumpRunning) - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 1 == systemActive) && 1 <= pumpRunning) || ((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning) - InvariantResult [Line: 272]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 360]: Loop Invariant Derived loop invariant: ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 1 == systemActive) && 1 <= pumpRunning) || (((((0 == splverifierCounter && 1 <= \result) && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning) - InvariantResult [Line: 416]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 959]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || ((((1 == \result && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 920]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 910]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 439]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) || ((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == pumpRunning) - InvariantResult [Line: 845]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 889]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 216]: Loop Invariant Derived loop invariant: (((((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == systemActive) && 1 <= pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == systemActive) && 1 <= pumpRunning) - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 167]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 117 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 27.1s, OverallIterations: 13, TraceHistogramMax: 2, AutomataDifference: 18.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1267 SDtfs, 1283 SDslu, 1863 SDs, 0 SdLazy, 236 SolverSat, 56 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.5s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 186 GetRequests, 137 SyntacticMatches, 0 SemanticMatches, 49 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=460occurred in iteration=10, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 5.1s AutomataMinimizationTime, 13 MinimizatonAttempts, 1539 StatesRemovedByMinimization, 9 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 45 PreInvPairs, 147 NumberOfFragments, 1062 HoareAnnotationTreeSize, 45 FomulaSimplifications, 281931 FormulaSimplificationTreeSizeReduction, 1.7s HoareSimplificationTime, 45 FomulaSimplificationsInter, 45927 FormulaSimplificationTreeSizeReductionInter, 4.7s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 558 NumberOfCodeBlocks, 558 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 543 ConstructedInterpolants, 0 QuantifiedInterpolants, 43311 SizeOfPredicates, 7 NumberOfNonLiveVariables, 844 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 15 InterpolantComputations, 13 PerfectInterpolantSequences, 94/99 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...