./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product43.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product43.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash d3ef47dc64404f2fae365adb4fa9379fd10f9c50 .......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Writing human readable error path to file UltimateCounterExample.errorpath Result: FALSE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 18:59:48,986 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 18:59:48,988 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 18:59:49,000 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 18:59:49,001 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 18:59:49,002 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 18:59:49,003 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 18:59:49,005 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 18:59:49,007 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 18:59:49,008 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 18:59:49,009 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 18:59:49,010 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 18:59:49,010 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 18:59:49,011 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 18:59:49,012 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 18:59:49,014 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 18:59:49,014 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 18:59:49,015 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 18:59:49,019 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 18:59:49,022 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 18:59:49,025 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 18:59:49,029 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 18:59:49,031 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 18:59:49,031 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 18:59:49,036 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 18:59:49,036 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 18:59:49,037 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 18:59:49,039 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 18:59:49,040 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 18:59:49,041 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 18:59:49,041 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 18:59:49,042 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 18:59:49,043 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 18:59:49,043 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 18:59:49,045 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 18:59:49,046 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 18:59:49,046 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 18:59:49,047 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 18:59:49,047 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 18:59:49,048 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 18:59:49,049 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 18:59:49,050 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 18:59:49,071 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 18:59:49,071 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 18:59:49,073 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 18:59:49,074 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 18:59:49,074 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 18:59:49,074 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 18:59:49,074 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 18:59:49,074 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 18:59:49,075 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 18:59:49,075 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 18:59:49,076 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 18:59:49,076 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 18:59:49,076 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 18:59:49,077 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 18:59:49,077 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 18:59:49,077 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 18:59:49,077 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 18:59:49,078 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 18:59:49,078 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 18:59:49,078 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 18:59:49,078 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 18:59:49,079 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 18:59:49,079 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 18:59:49,079 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 18:59:49,080 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 18:59:49,080 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 18:59:49,080 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 18:59:49,080 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 18:59:49,081 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 18:59:49,081 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d3ef47dc64404f2fae365adb4fa9379fd10f9c50 [2020-07-28 18:59:49,400 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 18:59:49,413 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 18:59:49,416 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 18:59:49,418 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 18:59:49,418 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 18:59:49,419 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product43.cil.c [2020-07-28 18:59:49,482 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/78d3557de/65455ad89486484891566101eb220123/FLAG902e6ea8f [2020-07-28 18:59:49,987 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 18:59:49,988 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product43.cil.c [2020-07-28 18:59:50,001 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/78d3557de/65455ad89486484891566101eb220123/FLAG902e6ea8f [2020-07-28 18:59:50,287 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/78d3557de/65455ad89486484891566101eb220123 [2020-07-28 18:59:50,294 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 18:59:50,298 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 18:59:50,299 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 18:59:50,299 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 18:59:50,305 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 18:59:50,307 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 06:59:50" (1/1) ... [2020-07-28 18:59:50,310 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@f5c8016 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:50, skipping insertion in model container [2020-07-28 18:59:50,310 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 06:59:50" (1/1) ... [2020-07-28 18:59:50,320 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 18:59:50,390 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 18:59:50,874 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 18:59:50,888 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 18:59:50,979 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 18:59:51,017 INFO L208 MainTranslator]: Completed translation [2020-07-28 18:59:51,018 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:51 WrapperNode [2020-07-28 18:59:51,018 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 18:59:51,019 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 18:59:51,019 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 18:59:51,019 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 18:59:51,028 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:51" (1/1) ... [2020-07-28 18:59:51,049 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:51" (1/1) ... [2020-07-28 18:59:51,137 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 18:59:51,139 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 18:59:51,140 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 18:59:51,140 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 18:59:51,154 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:51" (1/1) ... [2020-07-28 18:59:51,154 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:51" (1/1) ... [2020-07-28 18:59:51,169 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:51" (1/1) ... [2020-07-28 18:59:51,169 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:51" (1/1) ... [2020-07-28 18:59:51,189 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:51" (1/1) ... [2020-07-28 18:59:51,209 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:51" (1/1) ... [2020-07-28 18:59:51,213 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:51" (1/1) ... [2020-07-28 18:59:51,217 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 18:59:51,218 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 18:59:51,218 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 18:59:51,219 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 18:59:51,220 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:51" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 18:59:51,297 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 18:59:51,297 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 18:59:51,297 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 18:59:51,298 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 18:59:52,739 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 18:59:52,739 INFO L295 CfgBuilder]: Removed 120 assume(true) statements. [2020-07-28 18:59:52,745 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 06:59:52 BoogieIcfgContainer [2020-07-28 18:59:52,745 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 18:59:52,747 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 18:59:52,747 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 18:59:52,751 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 18:59:52,751 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 06:59:50" (1/3) ... [2020-07-28 18:59:52,752 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c07ef9e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 06:59:52, skipping insertion in model container [2020-07-28 18:59:52,753 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:51" (2/3) ... [2020-07-28 18:59:52,753 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c07ef9e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 06:59:52, skipping insertion in model container [2020-07-28 18:59:52,753 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 06:59:52" (3/3) ... [2020-07-28 18:59:52,755 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product43.cil.c [2020-07-28 18:59:52,766 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 18:59:52,775 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 18:59:52,790 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 18:59:52,817 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 18:59:52,817 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 18:59:52,817 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 18:59:52,818 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 18:59:52,818 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 18:59:52,818 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 18:59:52,818 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 18:59:52,819 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 18:59:52,839 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states. [2020-07-28 18:59:52,847 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-28 18:59:52,847 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:59:52,849 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:59:52,849 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:59:52,856 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:59:52,857 INFO L82 PathProgramCache]: Analyzing trace with hash -1388908220, now seen corresponding path program 1 times [2020-07-28 18:59:52,868 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:59:52,869 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [987411669] [2020-07-28 18:59:52,869 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:59:53,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:59:53,219 INFO L280 TraceCheckUtils]: 0: Hoare triple {96#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(30);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(9);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(13);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(110, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 2 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string63.base, #t~string63.offset, 1);call write~init~int(80, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(117, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(109, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(112, #t~string63.base, 4 + #t~string63.offset, 1);call write~init~int(58, #t~string63.base, 5 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 6 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(110, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 3 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string69.base, #t~string69.offset, 1);call write~init~int(32, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {96#true} is VALID [2020-07-28 18:59:53,222 INFO L280 TraceCheckUtils]: 1: Hoare triple {96#true} havoc main_#res;havoc main_#t~ret45, main_~retValue_acc~6, main_~tmp~3;havoc main_~retValue_acc~6;havoc main_~tmp~3; {96#true} is VALID [2020-07-28 18:59:53,223 INFO L280 TraceCheckUtils]: 2: Hoare triple {96#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {96#true} is VALID [2020-07-28 18:59:53,223 INFO L280 TraceCheckUtils]: 3: Hoare triple {96#true} main_#t~ret45 := valid_product_#res;assume -2147483648 <= main_#t~ret45 && main_#t~ret45 <= 2147483647;main_~tmp~3 := main_#t~ret45;havoc main_#t~ret45; {96#true} is VALID [2020-07-28 18:59:53,224 INFO L280 TraceCheckUtils]: 4: Hoare triple {96#true} assume 0 != main_~tmp~3; {96#true} is VALID [2020-07-28 18:59:53,224 INFO L280 TraceCheckUtils]: 5: Hoare triple {96#true} ~methAndRunningLastTime~0 := 0; {96#true} is VALID [2020-07-28 18:59:53,225 INFO L280 TraceCheckUtils]: 6: Hoare triple {96#true} havoc test_#t~nondet49, test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {96#true} is VALID [2020-07-28 18:59:53,226 INFO L280 TraceCheckUtils]: 7: Hoare triple {96#true} assume false; {97#false} is VALID [2020-07-28 18:59:53,227 INFO L280 TraceCheckUtils]: 8: Hoare triple {97#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {97#false} is VALID [2020-07-28 18:59:53,227 INFO L280 TraceCheckUtils]: 9: Hoare triple {97#false} assume !(0 != ~pumpRunning~0); {97#false} is VALID [2020-07-28 18:59:53,227 INFO L280 TraceCheckUtils]: 10: Hoare triple {97#false} assume !(0 != ~systemActive~0); {97#false} is VALID [2020-07-28 18:59:53,228 INFO L280 TraceCheckUtils]: 11: Hoare triple {97#false} havoc __utac_acc__Specification2_spec__2_#t~ret47, __utac_acc__Specification2_spec__2_#t~ret48, __utac_acc__Specification2_spec__2_~tmp~4, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~4;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {97#false} is VALID [2020-07-28 18:59:53,228 INFO L280 TraceCheckUtils]: 12: Hoare triple {97#false} __utac_acc__Specification2_spec__2_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47 && __utac_acc__Specification2_spec__2_#t~ret47 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~4 := __utac_acc__Specification2_spec__2_#t~ret47;havoc __utac_acc__Specification2_spec__2_#t~ret47; {97#false} is VALID [2020-07-28 18:59:53,229 INFO L280 TraceCheckUtils]: 13: Hoare triple {97#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~4;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {97#false} is VALID [2020-07-28 18:59:53,229 INFO L280 TraceCheckUtils]: 14: Hoare triple {97#false} __utac_acc__Specification2_spec__2_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48 && __utac_acc__Specification2_spec__2_#t~ret48 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret48;havoc __utac_acc__Specification2_spec__2_#t~ret48; {97#false} is VALID [2020-07-28 18:59:53,229 INFO L280 TraceCheckUtils]: 15: Hoare triple {97#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {97#false} is VALID [2020-07-28 18:59:53,230 INFO L280 TraceCheckUtils]: 16: Hoare triple {97#false} assume 0 != ~methAndRunningLastTime~0; {97#false} is VALID [2020-07-28 18:59:53,230 INFO L280 TraceCheckUtils]: 17: Hoare triple {97#false} assume !false; {97#false} is VALID [2020-07-28 18:59:53,234 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:59:53,235 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [987411669] [2020-07-28 18:59:53,236 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:59:53,236 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 18:59:53,237 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [661148376] [2020-07-28 18:59:53,244 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 18:59:53,246 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:59:53,250 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 18:59:53,301 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:53,301 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 18:59:53,301 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:59:53,311 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 18:59:53,312 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 18:59:53,315 INFO L87 Difference]: Start difference. First operand 93 states. Second operand 2 states. [2020-07-28 18:59:53,572 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:53,573 INFO L93 Difference]: Finished difference Result 179 states and 270 transitions. [2020-07-28 18:59:53,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 18:59:53,573 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 18:59:53,574 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:59:53,575 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 18:59:53,587 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 270 transitions. [2020-07-28 18:59:53,587 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 18:59:53,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 270 transitions. [2020-07-28 18:59:53,594 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 270 transitions. [2020-07-28 18:59:53,945 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 270 edges. 270 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:53,962 INFO L225 Difference]: With dead ends: 179 [2020-07-28 18:59:53,962 INFO L226 Difference]: Without dead ends: 89 [2020-07-28 18:59:53,967 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 18:59:53,986 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2020-07-28 18:59:54,045 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 89. [2020-07-28 18:59:54,045 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:59:54,046 INFO L82 GeneralOperation]: Start isEquivalent. First operand 89 states. Second operand 89 states. [2020-07-28 18:59:54,049 INFO L74 IsIncluded]: Start isIncluded. First operand 89 states. Second operand 89 states. [2020-07-28 18:59:54,049 INFO L87 Difference]: Start difference. First operand 89 states. Second operand 89 states. [2020-07-28 18:59:54,062 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:54,063 INFO L93 Difference]: Finished difference Result 89 states and 127 transitions. [2020-07-28 18:59:54,064 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 127 transitions. [2020-07-28 18:59:54,065 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:54,066 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:54,066 INFO L74 IsIncluded]: Start isIncluded. First operand 89 states. Second operand 89 states. [2020-07-28 18:59:54,067 INFO L87 Difference]: Start difference. First operand 89 states. Second operand 89 states. [2020-07-28 18:59:54,081 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:54,083 INFO L93 Difference]: Finished difference Result 89 states and 127 transitions. [2020-07-28 18:59:54,083 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 127 transitions. [2020-07-28 18:59:54,085 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:54,085 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:54,086 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:59:54,086 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:59:54,086 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 89 states. [2020-07-28 18:59:54,096 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 127 transitions. [2020-07-28 18:59:54,098 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 127 transitions. Word has length 18 [2020-07-28 18:59:54,099 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:59:54,099 INFO L479 AbstractCegarLoop]: Abstraction has 89 states and 127 transitions. [2020-07-28 18:59:54,099 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 18:59:54,100 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 127 transitions. [2020-07-28 18:59:54,107 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 18:59:54,108 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:59:54,109 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:59:54,110 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 18:59:54,110 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:59:54,112 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:59:54,112 INFO L82 PathProgramCache]: Analyzing trace with hash -1607744189, now seen corresponding path program 1 times [2020-07-28 18:59:54,112 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:59:54,113 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [153046020] [2020-07-28 18:59:54,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:59:54,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:59:54,246 INFO L280 TraceCheckUtils]: 0: Hoare triple {657#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(30);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(9);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(13);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(110, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 2 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string63.base, #t~string63.offset, 1);call write~init~int(80, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(117, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(109, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(112, #t~string63.base, 4 + #t~string63.offset, 1);call write~init~int(58, #t~string63.base, 5 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 6 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(110, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 3 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string69.base, #t~string69.offset, 1);call write~init~int(32, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {657#true} is VALID [2020-07-28 18:59:54,246 INFO L280 TraceCheckUtils]: 1: Hoare triple {657#true} havoc main_#res;havoc main_#t~ret45, main_~retValue_acc~6, main_~tmp~3;havoc main_~retValue_acc~6;havoc main_~tmp~3; {657#true} is VALID [2020-07-28 18:59:54,247 INFO L280 TraceCheckUtils]: 2: Hoare triple {657#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {657#true} is VALID [2020-07-28 18:59:54,247 INFO L280 TraceCheckUtils]: 3: Hoare triple {657#true} main_#t~ret45 := valid_product_#res;assume -2147483648 <= main_#t~ret45 && main_#t~ret45 <= 2147483647;main_~tmp~3 := main_#t~ret45;havoc main_#t~ret45; {657#true} is VALID [2020-07-28 18:59:54,247 INFO L280 TraceCheckUtils]: 4: Hoare triple {657#true} assume 0 != main_~tmp~3; {657#true} is VALID [2020-07-28 18:59:54,248 INFO L280 TraceCheckUtils]: 5: Hoare triple {657#true} ~methAndRunningLastTime~0 := 0; {657#true} is VALID [2020-07-28 18:59:54,249 INFO L280 TraceCheckUtils]: 6: Hoare triple {657#true} havoc test_#t~nondet49, test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {659#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 18:59:54,250 INFO L280 TraceCheckUtils]: 7: Hoare triple {659#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {659#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 18:59:54,251 INFO L280 TraceCheckUtils]: 8: Hoare triple {659#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {658#false} is VALID [2020-07-28 18:59:54,252 INFO L280 TraceCheckUtils]: 9: Hoare triple {658#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {658#false} is VALID [2020-07-28 18:59:54,252 INFO L280 TraceCheckUtils]: 10: Hoare triple {658#false} assume !(0 != ~pumpRunning~0); {658#false} is VALID [2020-07-28 18:59:54,252 INFO L280 TraceCheckUtils]: 11: Hoare triple {658#false} assume !(0 != ~systemActive~0); {658#false} is VALID [2020-07-28 18:59:54,253 INFO L280 TraceCheckUtils]: 12: Hoare triple {658#false} havoc __utac_acc__Specification2_spec__2_#t~ret47, __utac_acc__Specification2_spec__2_#t~ret48, __utac_acc__Specification2_spec__2_~tmp~4, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~4;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {658#false} is VALID [2020-07-28 18:59:54,253 INFO L280 TraceCheckUtils]: 13: Hoare triple {658#false} __utac_acc__Specification2_spec__2_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47 && __utac_acc__Specification2_spec__2_#t~ret47 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~4 := __utac_acc__Specification2_spec__2_#t~ret47;havoc __utac_acc__Specification2_spec__2_#t~ret47; {658#false} is VALID [2020-07-28 18:59:54,254 INFO L280 TraceCheckUtils]: 14: Hoare triple {658#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~4;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {658#false} is VALID [2020-07-28 18:59:54,254 INFO L280 TraceCheckUtils]: 15: Hoare triple {658#false} __utac_acc__Specification2_spec__2_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48 && __utac_acc__Specification2_spec__2_#t~ret48 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret48;havoc __utac_acc__Specification2_spec__2_#t~ret48; {658#false} is VALID [2020-07-28 18:59:54,255 INFO L280 TraceCheckUtils]: 16: Hoare triple {658#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {658#false} is VALID [2020-07-28 18:59:54,255 INFO L280 TraceCheckUtils]: 17: Hoare triple {658#false} assume 0 != ~methAndRunningLastTime~0; {658#false} is VALID [2020-07-28 18:59:54,256 INFO L280 TraceCheckUtils]: 18: Hoare triple {658#false} assume !false; {658#false} is VALID [2020-07-28 18:59:54,257 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:59:54,257 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [153046020] [2020-07-28 18:59:54,258 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:59:54,258 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 18:59:54,259 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [276979154] [2020-07-28 18:59:54,261 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 18:59:54,261 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:59:54,261 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 18:59:54,291 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:54,292 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 18:59:54,292 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:59:54,292 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 18:59:54,293 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:59:54,293 INFO L87 Difference]: Start difference. First operand 89 states and 127 transitions. Second operand 3 states. [2020-07-28 18:59:54,547 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:54,547 INFO L93 Difference]: Finished difference Result 89 states and 127 transitions. [2020-07-28 18:59:54,548 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 18:59:54,548 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 18:59:54,548 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:59:54,548 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:59:54,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 127 transitions. [2020-07-28 18:59:54,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:59:54,554 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 127 transitions. [2020-07-28 18:59:54,555 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 127 transitions. [2020-07-28 18:59:54,756 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 127 edges. 127 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:54,758 INFO L225 Difference]: With dead ends: 89 [2020-07-28 18:59:54,758 INFO L226 Difference]: Without dead ends: 41 [2020-07-28 18:59:54,760 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:59:54,760 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41 states. [2020-07-28 18:59:54,786 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41 to 41. [2020-07-28 18:59:54,786 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:59:54,786 INFO L82 GeneralOperation]: Start isEquivalent. First operand 41 states. Second operand 41 states. [2020-07-28 18:59:54,787 INFO L74 IsIncluded]: Start isIncluded. First operand 41 states. Second operand 41 states. [2020-07-28 18:59:54,787 INFO L87 Difference]: Start difference. First operand 41 states. Second operand 41 states. [2020-07-28 18:59:54,790 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:54,790 INFO L93 Difference]: Finished difference Result 41 states and 58 transitions. [2020-07-28 18:59:54,791 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 58 transitions. [2020-07-28 18:59:54,791 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:54,791 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:54,791 INFO L74 IsIncluded]: Start isIncluded. First operand 41 states. Second operand 41 states. [2020-07-28 18:59:54,792 INFO L87 Difference]: Start difference. First operand 41 states. Second operand 41 states. [2020-07-28 18:59:54,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:54,795 INFO L93 Difference]: Finished difference Result 41 states and 58 transitions. [2020-07-28 18:59:54,796 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 58 transitions. [2020-07-28 18:59:54,797 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:54,797 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:54,797 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:59:54,798 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:59:54,798 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 41 states. [2020-07-28 18:59:54,800 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41 states to 41 states and 58 transitions. [2020-07-28 18:59:54,800 INFO L78 Accepts]: Start accepts. Automaton has 41 states and 58 transitions. Word has length 19 [2020-07-28 18:59:54,801 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:59:54,801 INFO L479 AbstractCegarLoop]: Abstraction has 41 states and 58 transitions. [2020-07-28 18:59:54,801 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 18:59:54,801 INFO L276 IsEmpty]: Start isEmpty. Operand 41 states and 58 transitions. [2020-07-28 18:59:54,804 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 18:59:54,805 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:59:54,805 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:59:54,806 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 18:59:54,806 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:59:54,806 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:59:54,808 INFO L82 PathProgramCache]: Analyzing trace with hash 1417220031, now seen corresponding path program 1 times [2020-07-28 18:59:54,809 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:59:54,809 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [580657038] [2020-07-28 18:59:54,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:59:54,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:59:55,032 INFO L280 TraceCheckUtils]: 0: Hoare triple {928#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(30);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(9);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(13);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(110, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 2 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string63.base, #t~string63.offset, 1);call write~init~int(80, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(117, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(109, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(112, #t~string63.base, 4 + #t~string63.offset, 1);call write~init~int(58, #t~string63.base, 5 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 6 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(110, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 3 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string69.base, #t~string69.offset, 1);call write~init~int(32, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {930#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:59:55,034 INFO L280 TraceCheckUtils]: 1: Hoare triple {930#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret45, main_~retValue_acc~6, main_~tmp~3;havoc main_~retValue_acc~6;havoc main_~tmp~3; {930#(= 1 ~systemActive~0)} is VALID [2020-07-28 18:59:55,035 INFO L280 TraceCheckUtils]: 2: Hoare triple {930#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {931#(= |ULTIMATE.start_valid_product_#res| ~systemActive~0)} is VALID [2020-07-28 18:59:55,036 INFO L280 TraceCheckUtils]: 3: Hoare triple {931#(= |ULTIMATE.start_valid_product_#res| ~systemActive~0)} main_#t~ret45 := valid_product_#res;assume -2147483648 <= main_#t~ret45 && main_#t~ret45 <= 2147483647;main_~tmp~3 := main_#t~ret45;havoc main_#t~ret45; {932#(= ULTIMATE.start_main_~tmp~3 ~systemActive~0)} is VALID [2020-07-28 18:59:55,037 INFO L280 TraceCheckUtils]: 4: Hoare triple {932#(= ULTIMATE.start_main_~tmp~3 ~systemActive~0)} assume 0 != main_~tmp~3; {933#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 18:59:55,038 INFO L280 TraceCheckUtils]: 5: Hoare triple {933#(not (= 0 ~systemActive~0))} ~methAndRunningLastTime~0 := 0; {933#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 18:59:55,039 INFO L280 TraceCheckUtils]: 6: Hoare triple {933#(not (= 0 ~systemActive~0))} havoc test_#t~nondet49, test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {933#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 18:59:55,039 INFO L280 TraceCheckUtils]: 7: Hoare triple {933#(not (= 0 ~systemActive~0))} assume !false; {933#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 18:59:55,040 INFO L280 TraceCheckUtils]: 8: Hoare triple {933#(not (= 0 ~systemActive~0))} assume test_~splverifierCounter~0 < 4; {933#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 18:59:55,041 INFO L280 TraceCheckUtils]: 9: Hoare triple {933#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet49 && test_#t~nondet49 <= 2147483647;test_~tmp~5 := test_#t~nondet49;havoc test_#t~nondet49; {933#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 18:59:55,042 INFO L280 TraceCheckUtils]: 10: Hoare triple {933#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp~5); {933#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 18:59:55,043 INFO L280 TraceCheckUtils]: 11: Hoare triple {933#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp___0~1 := test_#t~nondet50;havoc test_#t~nondet50; {933#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 18:59:55,044 INFO L280 TraceCheckUtils]: 12: Hoare triple {933#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___0~1); {933#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 18:59:55,045 INFO L280 TraceCheckUtils]: 13: Hoare triple {933#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___2~0 := test_#t~nondet51;havoc test_#t~nondet51; {933#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 18:59:55,048 INFO L280 TraceCheckUtils]: 14: Hoare triple {933#(not (= 0 ~systemActive~0))} assume 0 != test_~tmp___2~0; {933#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 18:59:55,049 INFO L280 TraceCheckUtils]: 15: Hoare triple {933#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {933#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 18:59:55,050 INFO L280 TraceCheckUtils]: 16: Hoare triple {933#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {929#false} is VALID [2020-07-28 18:59:55,050 INFO L280 TraceCheckUtils]: 17: Hoare triple {929#false} havoc __utac_acc__Specification2_spec__2_#t~ret47, __utac_acc__Specification2_spec__2_#t~ret48, __utac_acc__Specification2_spec__2_~tmp~4, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~4;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {929#false} is VALID [2020-07-28 18:59:55,051 INFO L280 TraceCheckUtils]: 18: Hoare triple {929#false} __utac_acc__Specification2_spec__2_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47 && __utac_acc__Specification2_spec__2_#t~ret47 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~4 := __utac_acc__Specification2_spec__2_#t~ret47;havoc __utac_acc__Specification2_spec__2_#t~ret47; {929#false} is VALID [2020-07-28 18:59:55,051 INFO L280 TraceCheckUtils]: 19: Hoare triple {929#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~4;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {929#false} is VALID [2020-07-28 18:59:55,052 INFO L280 TraceCheckUtils]: 20: Hoare triple {929#false} __utac_acc__Specification2_spec__2_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48 && __utac_acc__Specification2_spec__2_#t~ret48 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret48;havoc __utac_acc__Specification2_spec__2_#t~ret48; {929#false} is VALID [2020-07-28 18:59:55,052 INFO L280 TraceCheckUtils]: 21: Hoare triple {929#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {929#false} is VALID [2020-07-28 18:59:55,052 INFO L280 TraceCheckUtils]: 22: Hoare triple {929#false} assume 0 != ~methAndRunningLastTime~0; {929#false} is VALID [2020-07-28 18:59:55,053 INFO L280 TraceCheckUtils]: 23: Hoare triple {929#false} assume !false; {929#false} is VALID [2020-07-28 18:59:55,054 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:59:55,055 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [580657038] [2020-07-28 18:59:55,055 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:59:55,055 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 18:59:55,056 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1713118414] [2020-07-28 18:59:55,056 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 24 [2020-07-28 18:59:55,057 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:59:55,057 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 18:59:55,093 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:55,093 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 18:59:55,093 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:59:55,094 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 18:59:55,094 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2020-07-28 18:59:55,094 INFO L87 Difference]: Start difference. First operand 41 states and 58 transitions. Second operand 6 states. [2020-07-28 18:59:55,876 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:55,876 INFO L93 Difference]: Finished difference Result 133 states and 196 transitions. [2020-07-28 18:59:55,877 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 18:59:55,877 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 24 [2020-07-28 18:59:55,877 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:59:55,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 18:59:55,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 196 transitions. [2020-07-28 18:59:55,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 18:59:55,884 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 196 transitions. [2020-07-28 18:59:55,885 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 196 transitions. [2020-07-28 18:59:56,147 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 196 edges. 196 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:56,150 INFO L225 Difference]: With dead ends: 133 [2020-07-28 18:59:56,150 INFO L226 Difference]: Without dead ends: 99 [2020-07-28 18:59:56,151 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 18:59:56,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 99 states. [2020-07-28 18:59:56,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 99 to 61. [2020-07-28 18:59:56,210 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:59:56,211 INFO L82 GeneralOperation]: Start isEquivalent. First operand 99 states. Second operand 61 states. [2020-07-28 18:59:56,211 INFO L74 IsIncluded]: Start isIncluded. First operand 99 states. Second operand 61 states. [2020-07-28 18:59:56,211 INFO L87 Difference]: Start difference. First operand 99 states. Second operand 61 states. [2020-07-28 18:59:56,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:56,221 INFO L93 Difference]: Finished difference Result 99 states and 143 transitions. [2020-07-28 18:59:56,221 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 143 transitions. [2020-07-28 18:59:56,222 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:56,222 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:56,222 INFO L74 IsIncluded]: Start isIncluded. First operand 61 states. Second operand 99 states. [2020-07-28 18:59:56,222 INFO L87 Difference]: Start difference. First operand 61 states. Second operand 99 states. [2020-07-28 18:59:56,228 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:56,229 INFO L93 Difference]: Finished difference Result 99 states and 143 transitions. [2020-07-28 18:59:56,229 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 143 transitions. [2020-07-28 18:59:56,230 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:56,230 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:56,230 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:59:56,231 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:59:56,231 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 61 states. [2020-07-28 18:59:56,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 61 states to 61 states and 89 transitions. [2020-07-28 18:59:56,234 INFO L78 Accepts]: Start accepts. Automaton has 61 states and 89 transitions. Word has length 24 [2020-07-28 18:59:56,235 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:59:56,235 INFO L479 AbstractCegarLoop]: Abstraction has 61 states and 89 transitions. [2020-07-28 18:59:56,235 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 18:59:56,235 INFO L276 IsEmpty]: Start isEmpty. Operand 61 states and 89 transitions. [2020-07-28 18:59:56,236 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2020-07-28 18:59:56,236 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:59:56,238 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:59:56,238 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 18:59:56,239 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:59:56,240 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:59:56,240 INFO L82 PathProgramCache]: Analyzing trace with hash -462384263, now seen corresponding path program 1 times [2020-07-28 18:59:56,240 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:59:56,241 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [619856738] [2020-07-28 18:59:56,241 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:59:56,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:59:56,336 INFO L280 TraceCheckUtils]: 0: Hoare triple {1409#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(30);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(9);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(13);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(110, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 2 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string63.base, #t~string63.offset, 1);call write~init~int(80, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(117, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(109, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(112, #t~string63.base, 4 + #t~string63.offset, 1);call write~init~int(58, #t~string63.base, 5 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 6 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(110, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 3 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string69.base, #t~string69.offset, 1);call write~init~int(32, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,338 INFO L280 TraceCheckUtils]: 1: Hoare triple {1411#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret45, main_~retValue_acc~6, main_~tmp~3;havoc main_~retValue_acc~6;havoc main_~tmp~3; {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,338 INFO L280 TraceCheckUtils]: 2: Hoare triple {1411#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,339 INFO L280 TraceCheckUtils]: 3: Hoare triple {1411#(= 0 ~pumpRunning~0)} main_#t~ret45 := valid_product_#res;assume -2147483648 <= main_#t~ret45 && main_#t~ret45 <= 2147483647;main_~tmp~3 := main_#t~ret45;havoc main_#t~ret45; {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,340 INFO L280 TraceCheckUtils]: 4: Hoare triple {1411#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~3; {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,341 INFO L280 TraceCheckUtils]: 5: Hoare triple {1411#(= 0 ~pumpRunning~0)} ~methAndRunningLastTime~0 := 0; {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,341 INFO L280 TraceCheckUtils]: 6: Hoare triple {1411#(= 0 ~pumpRunning~0)} havoc test_#t~nondet49, test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,342 INFO L280 TraceCheckUtils]: 7: Hoare triple {1411#(= 0 ~pumpRunning~0)} assume !false; {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,343 INFO L280 TraceCheckUtils]: 8: Hoare triple {1411#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,343 INFO L280 TraceCheckUtils]: 9: Hoare triple {1411#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet49 && test_#t~nondet49 <= 2147483647;test_~tmp~5 := test_#t~nondet49;havoc test_#t~nondet49; {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,344 INFO L280 TraceCheckUtils]: 10: Hoare triple {1411#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~5); {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,345 INFO L280 TraceCheckUtils]: 11: Hoare triple {1411#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp___0~1 := test_#t~nondet50;havoc test_#t~nondet50; {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,346 INFO L280 TraceCheckUtils]: 12: Hoare triple {1411#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~1); {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,346 INFO L280 TraceCheckUtils]: 13: Hoare triple {1411#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___2~0 := test_#t~nondet51;havoc test_#t~nondet51; {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,347 INFO L280 TraceCheckUtils]: 14: Hoare triple {1411#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,348 INFO L280 TraceCheckUtils]: 15: Hoare triple {1411#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,348 INFO L280 TraceCheckUtils]: 16: Hoare triple {1411#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret53, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {1411#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:56,349 INFO L280 TraceCheckUtils]: 17: Hoare triple {1411#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {1410#false} is VALID [2020-07-28 18:59:56,349 INFO L280 TraceCheckUtils]: 18: Hoare triple {1410#false} havoc __utac_acc__Specification2_spec__2_#t~ret47, __utac_acc__Specification2_spec__2_#t~ret48, __utac_acc__Specification2_spec__2_~tmp~4, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~4;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {1410#false} is VALID [2020-07-28 18:59:56,350 INFO L280 TraceCheckUtils]: 19: Hoare triple {1410#false} __utac_acc__Specification2_spec__2_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47 && __utac_acc__Specification2_spec__2_#t~ret47 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~4 := __utac_acc__Specification2_spec__2_#t~ret47;havoc __utac_acc__Specification2_spec__2_#t~ret47; {1410#false} is VALID [2020-07-28 18:59:56,350 INFO L280 TraceCheckUtils]: 20: Hoare triple {1410#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~4;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {1410#false} is VALID [2020-07-28 18:59:56,350 INFO L280 TraceCheckUtils]: 21: Hoare triple {1410#false} __utac_acc__Specification2_spec__2_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48 && __utac_acc__Specification2_spec__2_#t~ret48 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret48;havoc __utac_acc__Specification2_spec__2_#t~ret48; {1410#false} is VALID [2020-07-28 18:59:56,351 INFO L280 TraceCheckUtils]: 22: Hoare triple {1410#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {1410#false} is VALID [2020-07-28 18:59:56,351 INFO L280 TraceCheckUtils]: 23: Hoare triple {1410#false} assume 0 != ~methAndRunningLastTime~0; {1410#false} is VALID [2020-07-28 18:59:56,351 INFO L280 TraceCheckUtils]: 24: Hoare triple {1410#false} assume !false; {1410#false} is VALID [2020-07-28 18:59:56,353 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:59:56,353 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [619856738] [2020-07-28 18:59:56,353 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:59:56,354 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 18:59:56,354 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1177304991] [2020-07-28 18:59:56,355 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 25 [2020-07-28 18:59:56,355 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:59:56,355 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 18:59:56,387 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:56,387 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 18:59:56,387 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:59:56,388 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 18:59:56,388 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:59:56,388 INFO L87 Difference]: Start difference. First operand 61 states and 89 transitions. Second operand 3 states. [2020-07-28 18:59:56,605 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:56,606 INFO L93 Difference]: Finished difference Result 137 states and 203 transitions. [2020-07-28 18:59:56,606 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 18:59:56,606 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 25 [2020-07-28 18:59:56,607 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:59:56,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:59:56,609 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 143 transitions. [2020-07-28 18:59:56,609 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 18:59:56,611 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 143 transitions. [2020-07-28 18:59:56,611 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 143 transitions. [2020-07-28 18:59:56,809 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 143 edges. 143 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:56,811 INFO L225 Difference]: With dead ends: 137 [2020-07-28 18:59:56,812 INFO L226 Difference]: Without dead ends: 83 [2020-07-28 18:59:56,812 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 18:59:56,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2020-07-28 18:59:56,901 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 81. [2020-07-28 18:59:56,902 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:59:56,902 INFO L82 GeneralOperation]: Start isEquivalent. First operand 83 states. Second operand 81 states. [2020-07-28 18:59:56,902 INFO L74 IsIncluded]: Start isIncluded. First operand 83 states. Second operand 81 states. [2020-07-28 18:59:56,902 INFO L87 Difference]: Start difference. First operand 83 states. Second operand 81 states. [2020-07-28 18:59:56,906 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:56,906 INFO L93 Difference]: Finished difference Result 83 states and 117 transitions. [2020-07-28 18:59:56,906 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 117 transitions. [2020-07-28 18:59:56,907 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:56,907 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:56,907 INFO L74 IsIncluded]: Start isIncluded. First operand 81 states. Second operand 83 states. [2020-07-28 18:59:56,908 INFO L87 Difference]: Start difference. First operand 81 states. Second operand 83 states. [2020-07-28 18:59:56,911 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:56,911 INFO L93 Difference]: Finished difference Result 83 states and 117 transitions. [2020-07-28 18:59:56,911 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 117 transitions. [2020-07-28 18:59:56,912 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:56,912 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:56,912 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:59:56,912 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:59:56,913 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 81 states. [2020-07-28 18:59:56,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81 states to 81 states and 116 transitions. [2020-07-28 18:59:56,916 INFO L78 Accepts]: Start accepts. Automaton has 81 states and 116 transitions. Word has length 25 [2020-07-28 18:59:56,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:59:56,916 INFO L479 AbstractCegarLoop]: Abstraction has 81 states and 116 transitions. [2020-07-28 18:59:56,917 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 18:59:56,917 INFO L276 IsEmpty]: Start isEmpty. Operand 81 states and 116 transitions. [2020-07-28 18:59:56,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2020-07-28 18:59:56,918 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:59:56,918 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:59:56,918 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 18:59:56,919 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:59:56,919 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:59:56,919 INFO L82 PathProgramCache]: Analyzing trace with hash 1738728008, now seen corresponding path program 1 times [2020-07-28 18:59:56,920 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:59:56,920 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1394096745] [2020-07-28 18:59:56,920 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:59:56,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:59:57,005 INFO L280 TraceCheckUtils]: 0: Hoare triple {1885#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(30);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(9);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(13);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(110, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 2 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string63.base, #t~string63.offset, 1);call write~init~int(80, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(117, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(109, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(112, #t~string63.base, 4 + #t~string63.offset, 1);call write~init~int(58, #t~string63.base, 5 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 6 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(110, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 3 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string69.base, #t~string69.offset, 1);call write~init~int(32, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,006 INFO L280 TraceCheckUtils]: 1: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret45, main_~retValue_acc~6, main_~tmp~3;havoc main_~retValue_acc~6;havoc main_~tmp~3; {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,007 INFO L280 TraceCheckUtils]: 2: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,008 INFO L280 TraceCheckUtils]: 3: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} main_#t~ret45 := valid_product_#res;assume -2147483648 <= main_#t~ret45 && main_#t~ret45 <= 2147483647;main_~tmp~3 := main_#t~ret45;havoc main_#t~ret45; {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,009 INFO L280 TraceCheckUtils]: 4: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~3; {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,009 INFO L280 TraceCheckUtils]: 5: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} ~methAndRunningLastTime~0 := 0; {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,010 INFO L280 TraceCheckUtils]: 6: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet49, test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,011 INFO L280 TraceCheckUtils]: 7: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} assume !false; {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,011 INFO L280 TraceCheckUtils]: 8: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,012 INFO L280 TraceCheckUtils]: 9: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet49 && test_#t~nondet49 <= 2147483647;test_~tmp~5 := test_#t~nondet49;havoc test_#t~nondet49; {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,013 INFO L280 TraceCheckUtils]: 10: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp~5); {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,014 INFO L280 TraceCheckUtils]: 11: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp___0~1 := test_#t~nondet50;havoc test_#t~nondet50; {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,014 INFO L280 TraceCheckUtils]: 12: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~1); {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,015 INFO L280 TraceCheckUtils]: 13: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___2~0 := test_#t~nondet51;havoc test_#t~nondet51; {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,016 INFO L280 TraceCheckUtils]: 14: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___1~0 := test_#t~nondet52;havoc test_#t~nondet52; {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,017 INFO L280 TraceCheckUtils]: 15: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___1~0; {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,017 INFO L280 TraceCheckUtils]: 16: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,018 INFO L280 TraceCheckUtils]: 17: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} ~systemActive~0 := 0; {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,019 INFO L280 TraceCheckUtils]: 18: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,019 INFO L280 TraceCheckUtils]: 19: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~systemActive~0); {1887#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 18:59:57,020 INFO L280 TraceCheckUtils]: 20: Hoare triple {1887#(= 0 ~methaneLevelCritical~0)} havoc __utac_acc__Specification2_spec__2_#t~ret47, __utac_acc__Specification2_spec__2_#t~ret48, __utac_acc__Specification2_spec__2_~tmp~4, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~4;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {1888#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 18:59:57,021 INFO L280 TraceCheckUtils]: 21: Hoare triple {1888#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification2_spec__2_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47 && __utac_acc__Specification2_spec__2_#t~ret47 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~4 := __utac_acc__Specification2_spec__2_#t~ret47;havoc __utac_acc__Specification2_spec__2_#t~ret47; {1889#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4)} is VALID [2020-07-28 18:59:57,022 INFO L280 TraceCheckUtils]: 22: Hoare triple {1889#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~4)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~4;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {1886#false} is VALID [2020-07-28 18:59:57,022 INFO L280 TraceCheckUtils]: 23: Hoare triple {1886#false} __utac_acc__Specification2_spec__2_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48 && __utac_acc__Specification2_spec__2_#t~ret48 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret48;havoc __utac_acc__Specification2_spec__2_#t~ret48; {1886#false} is VALID [2020-07-28 18:59:57,022 INFO L280 TraceCheckUtils]: 24: Hoare triple {1886#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {1886#false} is VALID [2020-07-28 18:59:57,023 INFO L280 TraceCheckUtils]: 25: Hoare triple {1886#false} assume 0 != ~methAndRunningLastTime~0; {1886#false} is VALID [2020-07-28 18:59:57,023 INFO L280 TraceCheckUtils]: 26: Hoare triple {1886#false} assume !false; {1886#false} is VALID [2020-07-28 18:59:57,025 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:59:57,025 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1394096745] [2020-07-28 18:59:57,025 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:59:57,025 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 18:59:57,025 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [35505140] [2020-07-28 18:59:57,026 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 27 [2020-07-28 18:59:57,026 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:59:57,027 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 18:59:57,064 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 27 edges. 27 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:57,064 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 18:59:57,064 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:59:57,065 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 18:59:57,065 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 18:59:57,065 INFO L87 Difference]: Start difference. First operand 81 states and 116 transitions. Second operand 5 states. [2020-07-28 18:59:58,192 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:58,193 INFO L93 Difference]: Finished difference Result 378 states and 552 transitions. [2020-07-28 18:59:58,193 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 18:59:58,193 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 27 [2020-07-28 18:59:58,194 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 18:59:58,194 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 18:59:58,198 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 291 transitions. [2020-07-28 18:59:58,198 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 18:59:58,201 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 291 transitions. [2020-07-28 18:59:58,202 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 291 transitions. [2020-07-28 18:59:58,548 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 291 edges. 291 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:58,557 INFO L225 Difference]: With dead ends: 378 [2020-07-28 18:59:58,558 INFO L226 Difference]: Without dead ends: 304 [2020-07-28 18:59:58,559 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 18:59:58,560 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 304 states. [2020-07-28 18:59:58,765 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 304 to 144. [2020-07-28 18:59:58,765 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 18:59:58,766 INFO L82 GeneralOperation]: Start isEquivalent. First operand 304 states. Second operand 144 states. [2020-07-28 18:59:58,766 INFO L74 IsIncluded]: Start isIncluded. First operand 304 states. Second operand 144 states. [2020-07-28 18:59:58,766 INFO L87 Difference]: Start difference. First operand 304 states. Second operand 144 states. [2020-07-28 18:59:58,777 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:58,777 INFO L93 Difference]: Finished difference Result 304 states and 436 transitions. [2020-07-28 18:59:58,778 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 436 transitions. [2020-07-28 18:59:58,778 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:58,779 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:58,779 INFO L74 IsIncluded]: Start isIncluded. First operand 144 states. Second operand 304 states. [2020-07-28 18:59:58,779 INFO L87 Difference]: Start difference. First operand 144 states. Second operand 304 states. [2020-07-28 18:59:58,790 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 18:59:58,791 INFO L93 Difference]: Finished difference Result 304 states and 436 transitions. [2020-07-28 18:59:58,791 INFO L276 IsEmpty]: Start isEmpty. Operand 304 states and 436 transitions. [2020-07-28 18:59:58,792 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 18:59:58,792 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 18:59:58,792 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 18:59:58,793 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 18:59:58,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 144 states. [2020-07-28 18:59:58,797 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 203 transitions. [2020-07-28 18:59:58,798 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 203 transitions. Word has length 27 [2020-07-28 18:59:58,798 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 18:59:58,798 INFO L479 AbstractCegarLoop]: Abstraction has 144 states and 203 transitions. [2020-07-28 18:59:58,799 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 18:59:58,799 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 203 transitions. [2020-07-28 18:59:58,800 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2020-07-28 18:59:58,800 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 18:59:58,800 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 18:59:58,800 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 18:59:58,801 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 18:59:58,801 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 18:59:58,801 INFO L82 PathProgramCache]: Analyzing trace with hash 304582848, now seen corresponding path program 1 times [2020-07-28 18:59:58,801 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 18:59:58,802 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1441737201] [2020-07-28 18:59:58,802 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 18:59:58,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 18:59:58,882 INFO L280 TraceCheckUtils]: 0: Hoare triple {3251#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(30);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(9);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(13);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(110, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 2 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string63.base, #t~string63.offset, 1);call write~init~int(80, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(117, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(109, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(112, #t~string63.base, 4 + #t~string63.offset, 1);call write~init~int(58, #t~string63.base, 5 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 6 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(110, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 3 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string69.base, #t~string69.offset, 1);call write~init~int(32, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,883 INFO L280 TraceCheckUtils]: 1: Hoare triple {3253#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret45, main_~retValue_acc~6, main_~tmp~3;havoc main_~retValue_acc~6;havoc main_~tmp~3; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,884 INFO L280 TraceCheckUtils]: 2: Hoare triple {3253#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,885 INFO L280 TraceCheckUtils]: 3: Hoare triple {3253#(= 0 ~pumpRunning~0)} main_#t~ret45 := valid_product_#res;assume -2147483648 <= main_#t~ret45 && main_#t~ret45 <= 2147483647;main_~tmp~3 := main_#t~ret45;havoc main_#t~ret45; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,885 INFO L280 TraceCheckUtils]: 4: Hoare triple {3253#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~3; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,886 INFO L280 TraceCheckUtils]: 5: Hoare triple {3253#(= 0 ~pumpRunning~0)} ~methAndRunningLastTime~0 := 0; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,887 INFO L280 TraceCheckUtils]: 6: Hoare triple {3253#(= 0 ~pumpRunning~0)} havoc test_#t~nondet49, test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,887 INFO L280 TraceCheckUtils]: 7: Hoare triple {3253#(= 0 ~pumpRunning~0)} assume !false; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,888 INFO L280 TraceCheckUtils]: 8: Hoare triple {3253#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,889 INFO L280 TraceCheckUtils]: 9: Hoare triple {3253#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet49 && test_#t~nondet49 <= 2147483647;test_~tmp~5 := test_#t~nondet49;havoc test_#t~nondet49; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,890 INFO L280 TraceCheckUtils]: 10: Hoare triple {3253#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~5); {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,890 INFO L280 TraceCheckUtils]: 11: Hoare triple {3253#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp___0~1 := test_#t~nondet50;havoc test_#t~nondet50; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,891 INFO L280 TraceCheckUtils]: 12: Hoare triple {3253#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___0~1; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,892 INFO L280 TraceCheckUtils]: 13: Hoare triple {3253#(= 0 ~pumpRunning~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,892 INFO L280 TraceCheckUtils]: 14: Hoare triple {3253#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___2~0 := test_#t~nondet51;havoc test_#t~nondet51; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,893 INFO L280 TraceCheckUtils]: 15: Hoare triple {3253#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___1~0 := test_#t~nondet52;havoc test_#t~nondet52; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,894 INFO L280 TraceCheckUtils]: 16: Hoare triple {3253#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___1~0; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,895 INFO L280 TraceCheckUtils]: 17: Hoare triple {3253#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,895 INFO L280 TraceCheckUtils]: 18: Hoare triple {3253#(= 0 ~pumpRunning~0)} ~systemActive~0 := 0; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,896 INFO L280 TraceCheckUtils]: 19: Hoare triple {3253#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,897 INFO L280 TraceCheckUtils]: 20: Hoare triple {3253#(= 0 ~pumpRunning~0)} assume !(0 != ~systemActive~0); {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,898 INFO L280 TraceCheckUtils]: 21: Hoare triple {3253#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification2_spec__2_#t~ret47, __utac_acc__Specification2_spec__2_#t~ret48, __utac_acc__Specification2_spec__2_~tmp~4, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~4;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,898 INFO L280 TraceCheckUtils]: 22: Hoare triple {3253#(= 0 ~pumpRunning~0)} __utac_acc__Specification2_spec__2_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47 && __utac_acc__Specification2_spec__2_#t~ret47 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~4 := __utac_acc__Specification2_spec__2_#t~ret47;havoc __utac_acc__Specification2_spec__2_#t~ret47; {3253#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 18:59:58,899 INFO L280 TraceCheckUtils]: 23: Hoare triple {3253#(= 0 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~4;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {3254#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 18:59:58,900 INFO L280 TraceCheckUtils]: 24: Hoare triple {3254#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification2_spec__2_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48 && __utac_acc__Specification2_spec__2_#t~ret48 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret48;havoc __utac_acc__Specification2_spec__2_#t~ret48; {3255#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp___0~0)} is VALID [2020-07-28 18:59:58,901 INFO L280 TraceCheckUtils]: 25: Hoare triple {3255#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp___0~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {3252#false} is VALID [2020-07-28 18:59:58,901 INFO L280 TraceCheckUtils]: 26: Hoare triple {3252#false} assume 0 != ~methAndRunningLastTime~0; {3252#false} is VALID [2020-07-28 18:59:58,902 INFO L280 TraceCheckUtils]: 27: Hoare triple {3252#false} assume !false; {3252#false} is VALID [2020-07-28 18:59:58,903 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 18:59:58,904 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1441737201] [2020-07-28 18:59:58,904 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 18:59:58,904 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 18:59:58,904 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [819523489] [2020-07-28 18:59:58,905 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 28 [2020-07-28 18:59:58,905 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 18:59:58,905 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 18:59:58,942 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 18:59:58,943 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 18:59:58,943 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 18:59:58,943 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 18:59:58,944 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 18:59:58,944 INFO L87 Difference]: Start difference. First operand 144 states and 203 transitions. Second operand 5 states. [2020-07-28 19:00:00,259 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:00,260 INFO L93 Difference]: Finished difference Result 529 states and 751 transitions. [2020-07-28 19:00:00,260 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 19:00:00,260 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 28 [2020-07-28 19:00:00,260 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:00,261 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:00,274 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 291 transitions. [2020-07-28 19:00:00,275 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:00,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 291 transitions. [2020-07-28 19:00:00,288 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 291 transitions. [2020-07-28 19:00:00,588 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 291 edges. 291 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:00,603 INFO L225 Difference]: With dead ends: 529 [2020-07-28 19:00:00,603 INFO L226 Difference]: Without dead ends: 392 [2020-07-28 19:00:00,605 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:00:00,606 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 392 states. [2020-07-28 19:00:00,916 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 392 to 142. [2020-07-28 19:00:00,917 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:00,917 INFO L82 GeneralOperation]: Start isEquivalent. First operand 392 states. Second operand 142 states. [2020-07-28 19:00:00,917 INFO L74 IsIncluded]: Start isIncluded. First operand 392 states. Second operand 142 states. [2020-07-28 19:00:00,917 INFO L87 Difference]: Start difference. First operand 392 states. Second operand 142 states. [2020-07-28 19:00:00,933 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:00,934 INFO L93 Difference]: Finished difference Result 392 states and 553 transitions. [2020-07-28 19:00:00,934 INFO L276 IsEmpty]: Start isEmpty. Operand 392 states and 553 transitions. [2020-07-28 19:00:00,935 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:00,936 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:00,936 INFO L74 IsIncluded]: Start isIncluded. First operand 142 states. Second operand 392 states. [2020-07-28 19:00:00,936 INFO L87 Difference]: Start difference. First operand 142 states. Second operand 392 states. [2020-07-28 19:00:00,952 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:00,953 INFO L93 Difference]: Finished difference Result 392 states and 553 transitions. [2020-07-28 19:00:00,953 INFO L276 IsEmpty]: Start isEmpty. Operand 392 states and 553 transitions. [2020-07-28 19:00:00,954 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:00,954 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:00,955 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:00,955 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:00,955 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 142 states. [2020-07-28 19:00:00,959 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 197 transitions. [2020-07-28 19:00:00,960 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 197 transitions. Word has length 28 [2020-07-28 19:00:00,960 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:00,960 INFO L479 AbstractCegarLoop]: Abstraction has 142 states and 197 transitions. [2020-07-28 19:00:00,960 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:00:00,961 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 197 transitions. [2020-07-28 19:00:00,961 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 19:00:00,962 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:00,962 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:00,962 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:00:00,962 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:00,963 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:00,963 INFO L82 PathProgramCache]: Analyzing trace with hash 1643402821, now seen corresponding path program 1 times [2020-07-28 19:00:00,963 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:00,964 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [383212609] [2020-07-28 19:00:00,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:00,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:01,042 INFO L280 TraceCheckUtils]: 0: Hoare triple {5008#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(30);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(9);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(13);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(110, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 2 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string63.base, #t~string63.offset, 1);call write~init~int(80, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(117, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(109, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(112, #t~string63.base, 4 + #t~string63.offset, 1);call write~init~int(58, #t~string63.base, 5 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 6 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(110, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 3 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string69.base, #t~string69.offset, 1);call write~init~int(32, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {5008#true} is VALID [2020-07-28 19:00:01,042 INFO L280 TraceCheckUtils]: 1: Hoare triple {5008#true} havoc main_#res;havoc main_#t~ret45, main_~retValue_acc~6, main_~tmp~3;havoc main_~retValue_acc~6;havoc main_~tmp~3; {5008#true} is VALID [2020-07-28 19:00:01,042 INFO L280 TraceCheckUtils]: 2: Hoare triple {5008#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {5008#true} is VALID [2020-07-28 19:00:01,043 INFO L280 TraceCheckUtils]: 3: Hoare triple {5008#true} main_#t~ret45 := valid_product_#res;assume -2147483648 <= main_#t~ret45 && main_#t~ret45 <= 2147483647;main_~tmp~3 := main_#t~ret45;havoc main_#t~ret45; {5008#true} is VALID [2020-07-28 19:00:01,043 INFO L280 TraceCheckUtils]: 4: Hoare triple {5008#true} assume 0 != main_~tmp~3; {5008#true} is VALID [2020-07-28 19:00:01,043 INFO L280 TraceCheckUtils]: 5: Hoare triple {5008#true} ~methAndRunningLastTime~0 := 0; {5008#true} is VALID [2020-07-28 19:00:01,043 INFO L280 TraceCheckUtils]: 6: Hoare triple {5008#true} havoc test_#t~nondet49, test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {5008#true} is VALID [2020-07-28 19:00:01,043 INFO L280 TraceCheckUtils]: 7: Hoare triple {5008#true} assume !false; {5008#true} is VALID [2020-07-28 19:00:01,044 INFO L280 TraceCheckUtils]: 8: Hoare triple {5008#true} assume test_~splverifierCounter~0 < 4; {5008#true} is VALID [2020-07-28 19:00:01,044 INFO L280 TraceCheckUtils]: 9: Hoare triple {5008#true} assume -2147483648 <= test_#t~nondet49 && test_#t~nondet49 <= 2147483647;test_~tmp~5 := test_#t~nondet49;havoc test_#t~nondet49; {5008#true} is VALID [2020-07-28 19:00:01,045 INFO L280 TraceCheckUtils]: 10: Hoare triple {5008#true} assume !(0 != test_~tmp~5); {5008#true} is VALID [2020-07-28 19:00:01,045 INFO L280 TraceCheckUtils]: 11: Hoare triple {5008#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp___0~1 := test_#t~nondet50;havoc test_#t~nondet50; {5008#true} is VALID [2020-07-28 19:00:01,045 INFO L280 TraceCheckUtils]: 12: Hoare triple {5008#true} assume 0 != test_~tmp___0~1; {5008#true} is VALID [2020-07-28 19:00:01,045 INFO L280 TraceCheckUtils]: 13: Hoare triple {5008#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {5008#true} is VALID [2020-07-28 19:00:01,046 INFO L280 TraceCheckUtils]: 14: Hoare triple {5008#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___2~0 := test_#t~nondet51;havoc test_#t~nondet51; {5008#true} is VALID [2020-07-28 19:00:01,046 INFO L280 TraceCheckUtils]: 15: Hoare triple {5008#true} assume 0 != test_~tmp___2~0; {5008#true} is VALID [2020-07-28 19:00:01,046 INFO L280 TraceCheckUtils]: 16: Hoare triple {5008#true} assume !(0 != ~pumpRunning~0); {5008#true} is VALID [2020-07-28 19:00:01,047 INFO L280 TraceCheckUtils]: 17: Hoare triple {5008#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret53, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {5008#true} is VALID [2020-07-28 19:00:01,047 INFO L280 TraceCheckUtils]: 18: Hoare triple {5008#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret72, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {5008#true} is VALID [2020-07-28 19:00:01,047 INFO L280 TraceCheckUtils]: 19: Hoare triple {5008#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {5008#true} is VALID [2020-07-28 19:00:01,047 INFO L280 TraceCheckUtils]: 20: Hoare triple {5008#true} isHighWaterLevel_#t~ret72 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret72 && isHighWaterLevel_#t~ret72 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret72;havoc isHighWaterLevel_#t~ret72; {5008#true} is VALID [2020-07-28 19:00:01,048 INFO L280 TraceCheckUtils]: 21: Hoare triple {5008#true} assume 0 != isHighWaterLevel_~tmp~8;isHighWaterLevel_~tmp___0~2 := 0; {5010#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2)} is VALID [2020-07-28 19:00:01,049 INFO L280 TraceCheckUtils]: 22: Hoare triple {5010#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {5011#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:00:01,050 INFO L280 TraceCheckUtils]: 23: Hoare triple {5011#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment_#t~ret53 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret53 && processEnvironment_#t~ret53 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret53;havoc processEnvironment_#t~ret53; {5012#(= 0 ULTIMATE.start_processEnvironment_~tmp~6)} is VALID [2020-07-28 19:00:01,051 INFO L280 TraceCheckUtils]: 24: Hoare triple {5012#(= 0 ULTIMATE.start_processEnvironment_~tmp~6)} assume 0 != processEnvironment_~tmp~6;havoc activatePump_#t~ret54, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret55, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {5009#false} is VALID [2020-07-28 19:00:01,051 INFO L280 TraceCheckUtils]: 25: Hoare triple {5009#false} isMethaneAlarm_#t~ret55 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret55 && isMethaneAlarm_#t~ret55 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret55;havoc isMethaneAlarm_#t~ret55;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {5009#false} is VALID [2020-07-28 19:00:01,052 INFO L280 TraceCheckUtils]: 26: Hoare triple {5009#false} activatePump_#t~ret54 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret54 && activatePump_#t~ret54 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret54;havoc activatePump_#t~ret54; {5009#false} is VALID [2020-07-28 19:00:01,052 INFO L280 TraceCheckUtils]: 27: Hoare triple {5009#false} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {5009#false} is VALID [2020-07-28 19:00:01,052 INFO L280 TraceCheckUtils]: 28: Hoare triple {5009#false} havoc __utac_acc__Specification2_spec__2_#t~ret47, __utac_acc__Specification2_spec__2_#t~ret48, __utac_acc__Specification2_spec__2_~tmp~4, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~4;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {5009#false} is VALID [2020-07-28 19:00:01,052 INFO L280 TraceCheckUtils]: 29: Hoare triple {5009#false} __utac_acc__Specification2_spec__2_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47 && __utac_acc__Specification2_spec__2_#t~ret47 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~4 := __utac_acc__Specification2_spec__2_#t~ret47;havoc __utac_acc__Specification2_spec__2_#t~ret47; {5009#false} is VALID [2020-07-28 19:00:01,053 INFO L280 TraceCheckUtils]: 30: Hoare triple {5009#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~4;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {5009#false} is VALID [2020-07-28 19:00:01,053 INFO L280 TraceCheckUtils]: 31: Hoare triple {5009#false} __utac_acc__Specification2_spec__2_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48 && __utac_acc__Specification2_spec__2_#t~ret48 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret48;havoc __utac_acc__Specification2_spec__2_#t~ret48; {5009#false} is VALID [2020-07-28 19:00:01,054 INFO L280 TraceCheckUtils]: 32: Hoare triple {5009#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {5009#false} is VALID [2020-07-28 19:00:01,054 INFO L280 TraceCheckUtils]: 33: Hoare triple {5009#false} assume 0 != ~methAndRunningLastTime~0; {5009#false} is VALID [2020-07-28 19:00:01,054 INFO L280 TraceCheckUtils]: 34: Hoare triple {5009#false} assume !false; {5009#false} is VALID [2020-07-28 19:00:01,056 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:01,056 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [383212609] [2020-07-28 19:00:01,056 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:01,056 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:00:01,057 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1712236593] [2020-07-28 19:00:01,057 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 35 [2020-07-28 19:00:01,058 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:01,058 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:00:01,100 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:01,100 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:00:01,100 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:01,100 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:00:01,101 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:00:01,101 INFO L87 Difference]: Start difference. First operand 142 states and 197 transitions. Second operand 5 states. [2020-07-28 19:00:02,171 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:02,171 INFO L93 Difference]: Finished difference Result 429 states and 593 transitions. [2020-07-28 19:00:02,172 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:00:02,172 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 35 [2020-07-28 19:00:02,172 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:02,173 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:02,174 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 170 transitions. [2020-07-28 19:00:02,174 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:02,176 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 170 transitions. [2020-07-28 19:00:02,176 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 170 transitions. [2020-07-28 19:00:02,370 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 170 edges. 170 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:02,380 INFO L225 Difference]: With dead ends: 429 [2020-07-28 19:00:02,380 INFO L226 Difference]: Without dead ends: 294 [2020-07-28 19:00:02,381 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:00:02,382 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 294 states. [2020-07-28 19:00:02,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 294 to 148. [2020-07-28 19:00:02,689 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:02,690 INFO L82 GeneralOperation]: Start isEquivalent. First operand 294 states. Second operand 148 states. [2020-07-28 19:00:02,690 INFO L74 IsIncluded]: Start isIncluded. First operand 294 states. Second operand 148 states. [2020-07-28 19:00:02,690 INFO L87 Difference]: Start difference. First operand 294 states. Second operand 148 states. [2020-07-28 19:00:02,705 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:02,707 INFO L93 Difference]: Finished difference Result 294 states and 401 transitions. [2020-07-28 19:00:02,708 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 401 transitions. [2020-07-28 19:00:02,709 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:02,709 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:02,709 INFO L74 IsIncluded]: Start isIncluded. First operand 148 states. Second operand 294 states. [2020-07-28 19:00:02,709 INFO L87 Difference]: Start difference. First operand 148 states. Second operand 294 states. [2020-07-28 19:00:02,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:02,724 INFO L93 Difference]: Finished difference Result 294 states and 401 transitions. [2020-07-28 19:00:02,724 INFO L276 IsEmpty]: Start isEmpty. Operand 294 states and 401 transitions. [2020-07-28 19:00:02,725 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:02,725 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:02,725 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:02,726 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:02,726 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 148 states. [2020-07-28 19:00:02,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148 states to 148 states and 203 transitions. [2020-07-28 19:00:02,729 INFO L78 Accepts]: Start accepts. Automaton has 148 states and 203 transitions. Word has length 35 [2020-07-28 19:00:02,730 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:02,730 INFO L479 AbstractCegarLoop]: Abstraction has 148 states and 203 transitions. [2020-07-28 19:00:02,730 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:00:02,730 INFO L276 IsEmpty]: Start isEmpty. Operand 148 states and 203 transitions. [2020-07-28 19:00:02,731 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 19:00:02,731 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:02,732 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:02,732 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:00:02,732 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:02,733 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:02,733 INFO L82 PathProgramCache]: Analyzing trace with hash 632285571, now seen corresponding path program 1 times [2020-07-28 19:00:02,733 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:02,734 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [321593186] [2020-07-28 19:00:02,734 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:02,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:02,827 INFO L280 TraceCheckUtils]: 0: Hoare triple {6427#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(30);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(9);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(13);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(110, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 2 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string63.base, #t~string63.offset, 1);call write~init~int(80, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(117, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(109, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(112, #t~string63.base, 4 + #t~string63.offset, 1);call write~init~int(58, #t~string63.base, 5 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 6 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(110, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 3 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string69.base, #t~string69.offset, 1);call write~init~int(32, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {6427#true} is VALID [2020-07-28 19:00:02,827 INFO L280 TraceCheckUtils]: 1: Hoare triple {6427#true} havoc main_#res;havoc main_#t~ret45, main_~retValue_acc~6, main_~tmp~3;havoc main_~retValue_acc~6;havoc main_~tmp~3; {6427#true} is VALID [2020-07-28 19:00:02,828 INFO L280 TraceCheckUtils]: 2: Hoare triple {6427#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {6427#true} is VALID [2020-07-28 19:00:02,828 INFO L280 TraceCheckUtils]: 3: Hoare triple {6427#true} main_#t~ret45 := valid_product_#res;assume -2147483648 <= main_#t~ret45 && main_#t~ret45 <= 2147483647;main_~tmp~3 := main_#t~ret45;havoc main_#t~ret45; {6427#true} is VALID [2020-07-28 19:00:02,829 INFO L280 TraceCheckUtils]: 4: Hoare triple {6427#true} assume 0 != main_~tmp~3; {6427#true} is VALID [2020-07-28 19:00:02,829 INFO L280 TraceCheckUtils]: 5: Hoare triple {6427#true} ~methAndRunningLastTime~0 := 0; {6427#true} is VALID [2020-07-28 19:00:02,829 INFO L280 TraceCheckUtils]: 6: Hoare triple {6427#true} havoc test_#t~nondet49, test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6427#true} is VALID [2020-07-28 19:00:02,830 INFO L280 TraceCheckUtils]: 7: Hoare triple {6427#true} assume !false; {6427#true} is VALID [2020-07-28 19:00:02,830 INFO L280 TraceCheckUtils]: 8: Hoare triple {6427#true} assume test_~splverifierCounter~0 < 4; {6427#true} is VALID [2020-07-28 19:00:02,830 INFO L280 TraceCheckUtils]: 9: Hoare triple {6427#true} assume -2147483648 <= test_#t~nondet49 && test_#t~nondet49 <= 2147483647;test_~tmp~5 := test_#t~nondet49;havoc test_#t~nondet49; {6427#true} is VALID [2020-07-28 19:00:02,831 INFO L280 TraceCheckUtils]: 10: Hoare triple {6427#true} assume !(0 != test_~tmp~5); {6427#true} is VALID [2020-07-28 19:00:02,831 INFO L280 TraceCheckUtils]: 11: Hoare triple {6427#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp___0~1 := test_#t~nondet50;havoc test_#t~nondet50; {6427#true} is VALID [2020-07-28 19:00:02,832 INFO L280 TraceCheckUtils]: 12: Hoare triple {6427#true} assume 0 != test_~tmp___0~1; {6427#true} is VALID [2020-07-28 19:00:02,832 INFO L280 TraceCheckUtils]: 13: Hoare triple {6427#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {6427#true} is VALID [2020-07-28 19:00:02,832 INFO L280 TraceCheckUtils]: 14: Hoare triple {6427#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___2~0 := test_#t~nondet51;havoc test_#t~nondet51; {6427#true} is VALID [2020-07-28 19:00:02,836 INFO L280 TraceCheckUtils]: 15: Hoare triple {6427#true} assume 0 != test_~tmp___2~0; {6427#true} is VALID [2020-07-28 19:00:02,839 INFO L280 TraceCheckUtils]: 16: Hoare triple {6427#true} assume !(0 != ~pumpRunning~0); {6427#true} is VALID [2020-07-28 19:00:02,839 INFO L280 TraceCheckUtils]: 17: Hoare triple {6427#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret53, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {6427#true} is VALID [2020-07-28 19:00:02,840 INFO L280 TraceCheckUtils]: 18: Hoare triple {6427#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret72, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {6427#true} is VALID [2020-07-28 19:00:02,841 INFO L280 TraceCheckUtils]: 19: Hoare triple {6427#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {6429#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:00:02,842 INFO L280 TraceCheckUtils]: 20: Hoare triple {6429#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret72 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret72 && isHighWaterLevel_#t~ret72 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret72;havoc isHighWaterLevel_#t~ret72; {6430#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~8)} is VALID [2020-07-28 19:00:02,843 INFO L280 TraceCheckUtils]: 21: Hoare triple {6430#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~8)} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~2 := 1; {6428#false} is VALID [2020-07-28 19:00:02,843 INFO L280 TraceCheckUtils]: 22: Hoare triple {6428#false} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {6428#false} is VALID [2020-07-28 19:00:02,844 INFO L280 TraceCheckUtils]: 23: Hoare triple {6428#false} processEnvironment_#t~ret53 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret53 && processEnvironment_#t~ret53 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret53;havoc processEnvironment_#t~ret53; {6428#false} is VALID [2020-07-28 19:00:02,844 INFO L280 TraceCheckUtils]: 24: Hoare triple {6428#false} assume 0 != processEnvironment_~tmp~6;havoc activatePump_#t~ret54, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret55, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {6428#false} is VALID [2020-07-28 19:00:02,844 INFO L280 TraceCheckUtils]: 25: Hoare triple {6428#false} isMethaneAlarm_#t~ret55 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret55 && isMethaneAlarm_#t~ret55 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret55;havoc isMethaneAlarm_#t~ret55;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {6428#false} is VALID [2020-07-28 19:00:02,844 INFO L280 TraceCheckUtils]: 26: Hoare triple {6428#false} activatePump_#t~ret54 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret54 && activatePump_#t~ret54 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret54;havoc activatePump_#t~ret54; {6428#false} is VALID [2020-07-28 19:00:02,845 INFO L280 TraceCheckUtils]: 27: Hoare triple {6428#false} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {6428#false} is VALID [2020-07-28 19:00:02,845 INFO L280 TraceCheckUtils]: 28: Hoare triple {6428#false} havoc __utac_acc__Specification2_spec__2_#t~ret47, __utac_acc__Specification2_spec__2_#t~ret48, __utac_acc__Specification2_spec__2_~tmp~4, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~4;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {6428#false} is VALID [2020-07-28 19:00:02,846 INFO L280 TraceCheckUtils]: 29: Hoare triple {6428#false} __utac_acc__Specification2_spec__2_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47 && __utac_acc__Specification2_spec__2_#t~ret47 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~4 := __utac_acc__Specification2_spec__2_#t~ret47;havoc __utac_acc__Specification2_spec__2_#t~ret47; {6428#false} is VALID [2020-07-28 19:00:02,846 INFO L280 TraceCheckUtils]: 30: Hoare triple {6428#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~4;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {6428#false} is VALID [2020-07-28 19:00:02,846 INFO L280 TraceCheckUtils]: 31: Hoare triple {6428#false} __utac_acc__Specification2_spec__2_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48 && __utac_acc__Specification2_spec__2_#t~ret48 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret48;havoc __utac_acc__Specification2_spec__2_#t~ret48; {6428#false} is VALID [2020-07-28 19:00:02,846 INFO L280 TraceCheckUtils]: 32: Hoare triple {6428#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {6428#false} is VALID [2020-07-28 19:00:02,846 INFO L280 TraceCheckUtils]: 33: Hoare triple {6428#false} assume 0 != ~methAndRunningLastTime~0; {6428#false} is VALID [2020-07-28 19:00:02,847 INFO L280 TraceCheckUtils]: 34: Hoare triple {6428#false} assume !false; {6428#false} is VALID [2020-07-28 19:00:02,854 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:02,855 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [321593186] [2020-07-28 19:00:02,857 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:02,858 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:00:02,858 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1564207469] [2020-07-28 19:00:02,859 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 35 [2020-07-28 19:00:02,859 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:02,859 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:00:02,906 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:02,907 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:00:02,907 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:02,908 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:00:02,908 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:00:02,908 INFO L87 Difference]: Start difference. First operand 148 states and 203 transitions. Second operand 4 states. [2020-07-28 19:00:03,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:03,891 INFO L93 Difference]: Finished difference Result 373 states and 511 transitions. [2020-07-28 19:00:03,891 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:00:03,891 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 35 [2020-07-28 19:00:03,891 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:03,892 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:00:03,893 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 144 transitions. [2020-07-28 19:00:03,893 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:00:03,894 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 144 transitions. [2020-07-28 19:00:03,894 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 144 transitions. [2020-07-28 19:00:04,098 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 144 edges. 144 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:04,103 INFO L225 Difference]: With dead ends: 373 [2020-07-28 19:00:04,104 INFO L226 Difference]: Without dead ends: 232 [2020-07-28 19:00:04,105 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:00:04,105 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 232 states. [2020-07-28 19:00:04,429 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 232 to 152. [2020-07-28 19:00:04,430 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:04,430 INFO L82 GeneralOperation]: Start isEquivalent. First operand 232 states. Second operand 152 states. [2020-07-28 19:00:04,430 INFO L74 IsIncluded]: Start isIncluded. First operand 232 states. Second operand 152 states. [2020-07-28 19:00:04,430 INFO L87 Difference]: Start difference. First operand 232 states. Second operand 152 states. [2020-07-28 19:00:04,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:04,436 INFO L93 Difference]: Finished difference Result 232 states and 313 transitions. [2020-07-28 19:00:04,437 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 313 transitions. [2020-07-28 19:00:04,437 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:04,438 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:04,438 INFO L74 IsIncluded]: Start isIncluded. First operand 152 states. Second operand 232 states. [2020-07-28 19:00:04,438 INFO L87 Difference]: Start difference. First operand 152 states. Second operand 232 states. [2020-07-28 19:00:04,444 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:04,444 INFO L93 Difference]: Finished difference Result 232 states and 313 transitions. [2020-07-28 19:00:04,444 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 313 transitions. [2020-07-28 19:00:04,445 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:04,445 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:04,446 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:04,446 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:04,446 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 152 states. [2020-07-28 19:00:04,449 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 207 transitions. [2020-07-28 19:00:04,450 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 207 transitions. Word has length 35 [2020-07-28 19:00:04,450 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:04,450 INFO L479 AbstractCegarLoop]: Abstraction has 152 states and 207 transitions. [2020-07-28 19:00:04,450 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:00:04,451 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 207 transitions. [2020-07-28 19:00:04,451 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 19:00:04,452 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:04,452 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:04,452 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:00:04,452 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:04,453 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:04,453 INFO L82 PathProgramCache]: Analyzing trace with hash -388782783, now seen corresponding path program 1 times [2020-07-28 19:00:04,453 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:04,454 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [78705340] [2020-07-28 19:00:04,454 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:04,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:04,533 INFO L280 TraceCheckUtils]: 0: Hoare triple {7642#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(30);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(9);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(13);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(110, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 2 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string63.base, #t~string63.offset, 1);call write~init~int(80, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(117, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(109, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(112, #t~string63.base, 4 + #t~string63.offset, 1);call write~init~int(58, #t~string63.base, 5 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 6 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(110, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 3 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string69.base, #t~string69.offset, 1);call write~init~int(32, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,534 INFO L280 TraceCheckUtils]: 1: Hoare triple {7644#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret45, main_~retValue_acc~6, main_~tmp~3;havoc main_~retValue_acc~6;havoc main_~tmp~3; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,535 INFO L280 TraceCheckUtils]: 2: Hoare triple {7644#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,535 INFO L280 TraceCheckUtils]: 3: Hoare triple {7644#(= 1 ~waterLevel~0)} main_#t~ret45 := valid_product_#res;assume -2147483648 <= main_#t~ret45 && main_#t~ret45 <= 2147483647;main_~tmp~3 := main_#t~ret45;havoc main_#t~ret45; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,536 INFO L280 TraceCheckUtils]: 4: Hoare triple {7644#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~3; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,537 INFO L280 TraceCheckUtils]: 5: Hoare triple {7644#(= 1 ~waterLevel~0)} ~methAndRunningLastTime~0 := 0; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,538 INFO L280 TraceCheckUtils]: 6: Hoare triple {7644#(= 1 ~waterLevel~0)} havoc test_#t~nondet49, test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,539 INFO L280 TraceCheckUtils]: 7: Hoare triple {7644#(= 1 ~waterLevel~0)} assume !false; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,541 INFO L280 TraceCheckUtils]: 8: Hoare triple {7644#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,542 INFO L280 TraceCheckUtils]: 9: Hoare triple {7644#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet49 && test_#t~nondet49 <= 2147483647;test_~tmp~5 := test_#t~nondet49;havoc test_#t~nondet49; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,542 INFO L280 TraceCheckUtils]: 10: Hoare triple {7644#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~5); {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,543 INFO L280 TraceCheckUtils]: 11: Hoare triple {7644#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp___0~1 := test_#t~nondet50;havoc test_#t~nondet50; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,544 INFO L280 TraceCheckUtils]: 12: Hoare triple {7644#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___0~1; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,545 INFO L280 TraceCheckUtils]: 13: Hoare triple {7644#(= 1 ~waterLevel~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,546 INFO L280 TraceCheckUtils]: 14: Hoare triple {7644#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___2~0 := test_#t~nondet51;havoc test_#t~nondet51; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,546 INFO L280 TraceCheckUtils]: 15: Hoare triple {7644#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,547 INFO L280 TraceCheckUtils]: 16: Hoare triple {7644#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,549 INFO L280 TraceCheckUtils]: 17: Hoare triple {7644#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret53, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,552 INFO L280 TraceCheckUtils]: 18: Hoare triple {7644#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret72, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {7644#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:04,553 INFO L280 TraceCheckUtils]: 19: Hoare triple {7644#(= 1 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {7643#false} is VALID [2020-07-28 19:00:04,553 INFO L280 TraceCheckUtils]: 20: Hoare triple {7643#false} isHighWaterLevel_#t~ret72 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret72 && isHighWaterLevel_#t~ret72 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret72;havoc isHighWaterLevel_#t~ret72; {7643#false} is VALID [2020-07-28 19:00:04,553 INFO L280 TraceCheckUtils]: 21: Hoare triple {7643#false} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~2 := 1; {7643#false} is VALID [2020-07-28 19:00:04,554 INFO L280 TraceCheckUtils]: 22: Hoare triple {7643#false} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {7643#false} is VALID [2020-07-28 19:00:04,554 INFO L280 TraceCheckUtils]: 23: Hoare triple {7643#false} processEnvironment_#t~ret53 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret53 && processEnvironment_#t~ret53 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret53;havoc processEnvironment_#t~ret53; {7643#false} is VALID [2020-07-28 19:00:04,554 INFO L280 TraceCheckUtils]: 24: Hoare triple {7643#false} assume 0 != processEnvironment_~tmp~6;havoc activatePump_#t~ret54, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret55, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {7643#false} is VALID [2020-07-28 19:00:04,554 INFO L280 TraceCheckUtils]: 25: Hoare triple {7643#false} isMethaneAlarm_#t~ret55 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret55 && isMethaneAlarm_#t~ret55 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret55;havoc isMethaneAlarm_#t~ret55;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {7643#false} is VALID [2020-07-28 19:00:04,555 INFO L280 TraceCheckUtils]: 26: Hoare triple {7643#false} activatePump_#t~ret54 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret54 && activatePump_#t~ret54 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret54;havoc activatePump_#t~ret54; {7643#false} is VALID [2020-07-28 19:00:04,555 INFO L280 TraceCheckUtils]: 27: Hoare triple {7643#false} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {7643#false} is VALID [2020-07-28 19:00:04,555 INFO L280 TraceCheckUtils]: 28: Hoare triple {7643#false} havoc __utac_acc__Specification2_spec__2_#t~ret47, __utac_acc__Specification2_spec__2_#t~ret48, __utac_acc__Specification2_spec__2_~tmp~4, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~4;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {7643#false} is VALID [2020-07-28 19:00:04,555 INFO L280 TraceCheckUtils]: 29: Hoare triple {7643#false} __utac_acc__Specification2_spec__2_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47 && __utac_acc__Specification2_spec__2_#t~ret47 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~4 := __utac_acc__Specification2_spec__2_#t~ret47;havoc __utac_acc__Specification2_spec__2_#t~ret47; {7643#false} is VALID [2020-07-28 19:00:04,555 INFO L280 TraceCheckUtils]: 30: Hoare triple {7643#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~4;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {7643#false} is VALID [2020-07-28 19:00:04,556 INFO L280 TraceCheckUtils]: 31: Hoare triple {7643#false} __utac_acc__Specification2_spec__2_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48 && __utac_acc__Specification2_spec__2_#t~ret48 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret48;havoc __utac_acc__Specification2_spec__2_#t~ret48; {7643#false} is VALID [2020-07-28 19:00:04,556 INFO L280 TraceCheckUtils]: 32: Hoare triple {7643#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {7643#false} is VALID [2020-07-28 19:00:04,556 INFO L280 TraceCheckUtils]: 33: Hoare triple {7643#false} assume 0 != ~methAndRunningLastTime~0; {7643#false} is VALID [2020-07-28 19:00:04,557 INFO L280 TraceCheckUtils]: 34: Hoare triple {7643#false} assume !false; {7643#false} is VALID [2020-07-28 19:00:04,559 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:04,560 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [78705340] [2020-07-28 19:00:04,560 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:04,561 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:00:04,563 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [921029990] [2020-07-28 19:00:04,565 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 35 [2020-07-28 19:00:04,565 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:04,566 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:04,612 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:04,613 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:04,613 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:04,613 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:04,613 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:04,614 INFO L87 Difference]: Start difference. First operand 152 states and 207 transitions. Second operand 3 states. [2020-07-28 19:00:05,470 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:05,471 INFO L93 Difference]: Finished difference Result 383 states and 521 transitions. [2020-07-28 19:00:05,471 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:05,472 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 35 [2020-07-28 19:00:05,472 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:05,472 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:05,473 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 145 transitions. [2020-07-28 19:00:05,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:05,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 145 transitions. [2020-07-28 19:00:05,476 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 145 transitions. [2020-07-28 19:00:05,644 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 145 edges. 145 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:05,651 INFO L225 Difference]: With dead ends: 383 [2020-07-28 19:00:05,651 INFO L226 Difference]: Without dead ends: 238 [2020-07-28 19:00:05,652 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:05,653 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 238 states. [2020-07-28 19:00:06,222 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 238 to 238. [2020-07-28 19:00:06,222 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:06,222 INFO L82 GeneralOperation]: Start isEquivalent. First operand 238 states. Second operand 238 states. [2020-07-28 19:00:06,222 INFO L74 IsIncluded]: Start isIncluded. First operand 238 states. Second operand 238 states. [2020-07-28 19:00:06,223 INFO L87 Difference]: Start difference. First operand 238 states. Second operand 238 states. [2020-07-28 19:00:06,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:06,229 INFO L93 Difference]: Finished difference Result 238 states and 315 transitions. [2020-07-28 19:00:06,229 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 315 transitions. [2020-07-28 19:00:06,230 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:06,230 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:06,230 INFO L74 IsIncluded]: Start isIncluded. First operand 238 states. Second operand 238 states. [2020-07-28 19:00:06,230 INFO L87 Difference]: Start difference. First operand 238 states. Second operand 238 states. [2020-07-28 19:00:06,234 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:06,234 INFO L93 Difference]: Finished difference Result 238 states and 315 transitions. [2020-07-28 19:00:06,234 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 315 transitions. [2020-07-28 19:00:06,235 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:06,235 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:06,235 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:06,236 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:06,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 238 states. [2020-07-28 19:00:06,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 238 states to 238 states and 315 transitions. [2020-07-28 19:00:06,240 INFO L78 Accepts]: Start accepts. Automaton has 238 states and 315 transitions. Word has length 35 [2020-07-28 19:00:06,240 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:06,240 INFO L479 AbstractCegarLoop]: Abstraction has 238 states and 315 transitions. [2020-07-28 19:00:06,240 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:06,240 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 315 transitions. [2020-07-28 19:00:06,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:00:06,241 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:06,242 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:06,242 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:00:06,242 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:06,242 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:06,243 INFO L82 PathProgramCache]: Analyzing trace with hash -713441279, now seen corresponding path program 1 times [2020-07-28 19:00:06,243 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:06,243 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [235543630] [2020-07-28 19:00:06,243 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:06,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:06,379 INFO L280 TraceCheckUtils]: 0: Hoare triple {9001#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(30);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(9);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(13);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(110, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 2 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string63.base, #t~string63.offset, 1);call write~init~int(80, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(117, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(109, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(112, #t~string63.base, 4 + #t~string63.offset, 1);call write~init~int(58, #t~string63.base, 5 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 6 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(110, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 3 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string69.base, #t~string69.offset, 1);call write~init~int(32, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {9001#true} is VALID [2020-07-28 19:00:06,379 INFO L280 TraceCheckUtils]: 1: Hoare triple {9001#true} havoc main_#res;havoc main_#t~ret45, main_~retValue_acc~6, main_~tmp~3;havoc main_~retValue_acc~6;havoc main_~tmp~3; {9001#true} is VALID [2020-07-28 19:00:06,380 INFO L280 TraceCheckUtils]: 2: Hoare triple {9001#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {9003#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:00:06,381 INFO L280 TraceCheckUtils]: 3: Hoare triple {9003#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret45 := valid_product_#res;assume -2147483648 <= main_#t~ret45 && main_#t~ret45 <= 2147483647;main_~tmp~3 := main_#t~ret45;havoc main_#t~ret45; {9004#(= 1 ULTIMATE.start_main_~tmp~3)} is VALID [2020-07-28 19:00:06,381 INFO L280 TraceCheckUtils]: 4: Hoare triple {9004#(= 1 ULTIMATE.start_main_~tmp~3)} assume 0 != main_~tmp~3; {9001#true} is VALID [2020-07-28 19:00:06,382 INFO L280 TraceCheckUtils]: 5: Hoare triple {9001#true} ~methAndRunningLastTime~0 := 0; {9001#true} is VALID [2020-07-28 19:00:06,382 INFO L280 TraceCheckUtils]: 6: Hoare triple {9001#true} havoc test_#t~nondet49, test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {9001#true} is VALID [2020-07-28 19:00:06,382 INFO L280 TraceCheckUtils]: 7: Hoare triple {9001#true} assume !false; {9001#true} is VALID [2020-07-28 19:00:06,382 INFO L280 TraceCheckUtils]: 8: Hoare triple {9001#true} assume test_~splverifierCounter~0 < 4; {9001#true} is VALID [2020-07-28 19:00:06,382 INFO L280 TraceCheckUtils]: 9: Hoare triple {9001#true} assume -2147483648 <= test_#t~nondet49 && test_#t~nondet49 <= 2147483647;test_~tmp~5 := test_#t~nondet49;havoc test_#t~nondet49; {9001#true} is VALID [2020-07-28 19:00:06,383 INFO L280 TraceCheckUtils]: 10: Hoare triple {9001#true} assume 0 != test_~tmp~5; {9001#true} is VALID [2020-07-28 19:00:06,383 INFO L280 TraceCheckUtils]: 11: Hoare triple {9001#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9001#true} is VALID [2020-07-28 19:00:06,383 INFO L280 TraceCheckUtils]: 12: Hoare triple {9001#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp___0~1 := test_#t~nondet50;havoc test_#t~nondet50; {9001#true} is VALID [2020-07-28 19:00:06,383 INFO L280 TraceCheckUtils]: 13: Hoare triple {9001#true} assume 0 != test_~tmp___0~1; {9001#true} is VALID [2020-07-28 19:00:06,386 INFO L280 TraceCheckUtils]: 14: Hoare triple {9001#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {9005#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:06,387 INFO L280 TraceCheckUtils]: 15: Hoare triple {9005#(not (= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___2~0 := test_#t~nondet51;havoc test_#t~nondet51; {9005#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:06,387 INFO L280 TraceCheckUtils]: 16: Hoare triple {9005#(not (= 0 ~methaneLevelCritical~0))} assume 0 != test_~tmp___2~0; {9005#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:06,388 INFO L280 TraceCheckUtils]: 17: Hoare triple {9005#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0); {9005#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:06,389 INFO L280 TraceCheckUtils]: 18: Hoare triple {9005#(not (= 0 ~methaneLevelCritical~0))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret53, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {9005#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:06,390 INFO L280 TraceCheckUtils]: 19: Hoare triple {9005#(not (= 0 ~methaneLevelCritical~0))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret72, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {9005#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:06,390 INFO L280 TraceCheckUtils]: 20: Hoare triple {9005#(not (= 0 ~methaneLevelCritical~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {9005#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:06,391 INFO L280 TraceCheckUtils]: 21: Hoare triple {9005#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_#t~ret72 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret72 && isHighWaterLevel_#t~ret72 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret72;havoc isHighWaterLevel_#t~ret72; {9005#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:06,392 INFO L280 TraceCheckUtils]: 22: Hoare triple {9005#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~2 := 1; {9005#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:06,392 INFO L280 TraceCheckUtils]: 23: Hoare triple {9005#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {9005#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:06,393 INFO L280 TraceCheckUtils]: 24: Hoare triple {9005#(not (= 0 ~methaneLevelCritical~0))} processEnvironment_#t~ret53 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret53 && processEnvironment_#t~ret53 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret53;havoc processEnvironment_#t~ret53; {9005#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:06,403 INFO L280 TraceCheckUtils]: 25: Hoare triple {9005#(not (= 0 ~methaneLevelCritical~0))} assume 0 != processEnvironment_~tmp~6;havoc activatePump_#t~ret54, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret55, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {9006#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} is VALID [2020-07-28 19:00:06,405 INFO L280 TraceCheckUtils]: 26: Hoare triple {9006#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} isMethaneAlarm_#t~ret55 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret55 && isMethaneAlarm_#t~ret55 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret55;havoc isMethaneAlarm_#t~ret55;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {9007#(not (= 0 |ULTIMATE.start_isMethaneAlarm_#res|))} is VALID [2020-07-28 19:00:06,406 INFO L280 TraceCheckUtils]: 27: Hoare triple {9007#(not (= 0 |ULTIMATE.start_isMethaneAlarm_#res|))} activatePump_#t~ret54 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret54 && activatePump_#t~ret54 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret54;havoc activatePump_#t~ret54; {9008#(not (= 0 ULTIMATE.start_activatePump_~tmp~7))} is VALID [2020-07-28 19:00:06,407 INFO L280 TraceCheckUtils]: 28: Hoare triple {9008#(not (= 0 ULTIMATE.start_activatePump_~tmp~7))} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {9002#false} is VALID [2020-07-28 19:00:06,407 INFO L280 TraceCheckUtils]: 29: Hoare triple {9002#false} havoc __utac_acc__Specification2_spec__2_#t~ret47, __utac_acc__Specification2_spec__2_#t~ret48, __utac_acc__Specification2_spec__2_~tmp~4, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~4;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {9002#false} is VALID [2020-07-28 19:00:06,407 INFO L280 TraceCheckUtils]: 30: Hoare triple {9002#false} __utac_acc__Specification2_spec__2_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47 && __utac_acc__Specification2_spec__2_#t~ret47 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~4 := __utac_acc__Specification2_spec__2_#t~ret47;havoc __utac_acc__Specification2_spec__2_#t~ret47; {9002#false} is VALID [2020-07-28 19:00:06,408 INFO L280 TraceCheckUtils]: 31: Hoare triple {9002#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~4;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {9002#false} is VALID [2020-07-28 19:00:06,408 INFO L280 TraceCheckUtils]: 32: Hoare triple {9002#false} __utac_acc__Specification2_spec__2_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48 && __utac_acc__Specification2_spec__2_#t~ret48 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret48;havoc __utac_acc__Specification2_spec__2_#t~ret48; {9002#false} is VALID [2020-07-28 19:00:06,408 INFO L280 TraceCheckUtils]: 33: Hoare triple {9002#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {9002#false} is VALID [2020-07-28 19:00:06,408 INFO L280 TraceCheckUtils]: 34: Hoare triple {9002#false} assume 0 != ~methAndRunningLastTime~0; {9002#false} is VALID [2020-07-28 19:00:06,408 INFO L280 TraceCheckUtils]: 35: Hoare triple {9002#false} assume !false; {9002#false} is VALID [2020-07-28 19:00:06,410 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:06,411 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [235543630] [2020-07-28 19:00:06,411 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:06,411 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2020-07-28 19:00:06,411 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [546982161] [2020-07-28 19:00:06,413 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 36 [2020-07-28 19:00:06,414 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:06,414 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2020-07-28 19:00:06,459 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:06,459 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2020-07-28 19:00:06,460 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:06,460 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2020-07-28 19:00:06,460 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:00:06,461 INFO L87 Difference]: Start difference. First operand 238 states and 315 transitions. Second operand 8 states. [2020-07-28 19:00:10,122 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:10,123 INFO L93 Difference]: Finished difference Result 877 states and 1165 transitions. [2020-07-28 19:00:10,123 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2020-07-28 19:00:10,123 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 36 [2020-07-28 19:00:10,123 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:10,123 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:00:10,126 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 432 transitions. [2020-07-28 19:00:10,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:00:10,128 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16 states to 16 states and 432 transitions. [2020-07-28 19:00:10,129 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 16 states and 432 transitions. [2020-07-28 19:00:10,737 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 432 edges. 432 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:10,763 INFO L225 Difference]: With dead ends: 877 [2020-07-28 19:00:10,763 INFO L226 Difference]: Without dead ends: 646 [2020-07-28 19:00:10,764 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 28 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=139, Invalid=281, Unknown=0, NotChecked=0, Total=420 [2020-07-28 19:00:10,765 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 646 states. [2020-07-28 19:00:11,381 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 646 to 238. [2020-07-28 19:00:11,381 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:11,381 INFO L82 GeneralOperation]: Start isEquivalent. First operand 646 states. Second operand 238 states. [2020-07-28 19:00:11,382 INFO L74 IsIncluded]: Start isIncluded. First operand 646 states. Second operand 238 states. [2020-07-28 19:00:11,382 INFO L87 Difference]: Start difference. First operand 646 states. Second operand 238 states. [2020-07-28 19:00:11,400 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:11,400 INFO L93 Difference]: Finished difference Result 646 states and 847 transitions. [2020-07-28 19:00:11,400 INFO L276 IsEmpty]: Start isEmpty. Operand 646 states and 847 transitions. [2020-07-28 19:00:11,401 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:11,401 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:11,401 INFO L74 IsIncluded]: Start isIncluded. First operand 238 states. Second operand 646 states. [2020-07-28 19:00:11,402 INFO L87 Difference]: Start difference. First operand 238 states. Second operand 646 states. [2020-07-28 19:00:11,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:11,416 INFO L93 Difference]: Finished difference Result 646 states and 847 transitions. [2020-07-28 19:00:11,416 INFO L276 IsEmpty]: Start isEmpty. Operand 646 states and 847 transitions. [2020-07-28 19:00:11,417 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:11,418 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:11,418 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:11,418 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:11,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 238 states. [2020-07-28 19:00:11,423 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 238 states to 238 states and 309 transitions. [2020-07-28 19:00:11,424 INFO L78 Accepts]: Start accepts. Automaton has 238 states and 309 transitions. Word has length 36 [2020-07-28 19:00:11,424 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:11,424 INFO L479 AbstractCegarLoop]: Abstraction has 238 states and 309 transitions. [2020-07-28 19:00:11,424 INFO L480 AbstractCegarLoop]: Interpolant automaton has 8 states. [2020-07-28 19:00:11,424 INFO L276 IsEmpty]: Start isEmpty. Operand 238 states and 309 transitions. [2020-07-28 19:00:11,425 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2020-07-28 19:00:11,425 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:11,426 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:11,426 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-28 19:00:11,426 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:11,427 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:11,427 INFO L82 PathProgramCache]: Analyzing trace with hash -838060658, now seen corresponding path program 1 times [2020-07-28 19:00:11,427 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:11,428 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2125722924] [2020-07-28 19:00:11,428 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:11,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:11,488 INFO L280 TraceCheckUtils]: 0: Hoare triple {11931#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(30);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(9);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(25);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(13);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(110, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 2 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(102, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 3 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string63.base, #t~string63.offset, 1);call write~init~int(80, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(117, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(109, #t~string63.base, 3 + #t~string63.offset, 1);call write~init~int(112, #t~string63.base, 4 + #t~string63.offset, 1);call write~init~int(58, #t~string63.base, 5 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 6 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(110, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(102, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 3 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string69.base, #t~string69.offset, 1);call write~init~int(32, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~methAndRunningLastTime~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {11931#true} is VALID [2020-07-28 19:00:11,488 INFO L280 TraceCheckUtils]: 1: Hoare triple {11931#true} havoc main_#res;havoc main_#t~ret45, main_~retValue_acc~6, main_~tmp~3;havoc main_~retValue_acc~6;havoc main_~tmp~3; {11931#true} is VALID [2020-07-28 19:00:11,489 INFO L280 TraceCheckUtils]: 2: Hoare triple {11931#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {11931#true} is VALID [2020-07-28 19:00:11,489 INFO L280 TraceCheckUtils]: 3: Hoare triple {11931#true} main_#t~ret45 := valid_product_#res;assume -2147483648 <= main_#t~ret45 && main_#t~ret45 <= 2147483647;main_~tmp~3 := main_#t~ret45;havoc main_#t~ret45; {11931#true} is VALID [2020-07-28 19:00:11,489 INFO L280 TraceCheckUtils]: 4: Hoare triple {11931#true} assume 0 != main_~tmp~3; {11931#true} is VALID [2020-07-28 19:00:11,489 INFO L280 TraceCheckUtils]: 5: Hoare triple {11931#true} ~methAndRunningLastTime~0 := 0; {11931#true} is VALID [2020-07-28 19:00:11,489 INFO L280 TraceCheckUtils]: 6: Hoare triple {11931#true} havoc test_#t~nondet49, test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11931#true} is VALID [2020-07-28 19:00:11,490 INFO L280 TraceCheckUtils]: 7: Hoare triple {11931#true} assume !false; {11931#true} is VALID [2020-07-28 19:00:11,490 INFO L280 TraceCheckUtils]: 8: Hoare triple {11931#true} assume test_~splverifierCounter~0 < 4; {11931#true} is VALID [2020-07-28 19:00:11,490 INFO L280 TraceCheckUtils]: 9: Hoare triple {11931#true} assume -2147483648 <= test_#t~nondet49 && test_#t~nondet49 <= 2147483647;test_~tmp~5 := test_#t~nondet49;havoc test_#t~nondet49; {11931#true} is VALID [2020-07-28 19:00:11,491 INFO L280 TraceCheckUtils]: 10: Hoare triple {11931#true} assume 0 != test_~tmp~5; {11931#true} is VALID [2020-07-28 19:00:11,491 INFO L280 TraceCheckUtils]: 11: Hoare triple {11931#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11931#true} is VALID [2020-07-28 19:00:11,491 INFO L280 TraceCheckUtils]: 12: Hoare triple {11931#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp___0~1 := test_#t~nondet50;havoc test_#t~nondet50; {11931#true} is VALID [2020-07-28 19:00:11,491 INFO L280 TraceCheckUtils]: 13: Hoare triple {11931#true} assume !(0 != test_~tmp___0~1); {11931#true} is VALID [2020-07-28 19:00:11,492 INFO L280 TraceCheckUtils]: 14: Hoare triple {11931#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___2~0 := test_#t~nondet51;havoc test_#t~nondet51; {11931#true} is VALID [2020-07-28 19:00:11,492 INFO L280 TraceCheckUtils]: 15: Hoare triple {11931#true} assume 0 != test_~tmp___2~0; {11931#true} is VALID [2020-07-28 19:00:11,492 INFO L280 TraceCheckUtils]: 16: Hoare triple {11931#true} assume !(0 != ~pumpRunning~0); {11931#true} is VALID [2020-07-28 19:00:11,492 INFO L280 TraceCheckUtils]: 17: Hoare triple {11931#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret53, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {11931#true} is VALID [2020-07-28 19:00:11,493 INFO L280 TraceCheckUtils]: 18: Hoare triple {11931#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret72, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {11931#true} is VALID [2020-07-28 19:00:11,493 INFO L280 TraceCheckUtils]: 19: Hoare triple {11931#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {11931#true} is VALID [2020-07-28 19:00:11,493 INFO L280 TraceCheckUtils]: 20: Hoare triple {11931#true} isHighWaterLevel_#t~ret72 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret72 && isHighWaterLevel_#t~ret72 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret72;havoc isHighWaterLevel_#t~ret72; {11931#true} is VALID [2020-07-28 19:00:11,493 INFO L280 TraceCheckUtils]: 21: Hoare triple {11931#true} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~2 := 1; {11931#true} is VALID [2020-07-28 19:00:11,494 INFO L280 TraceCheckUtils]: 22: Hoare triple {11931#true} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {11931#true} is VALID [2020-07-28 19:00:11,494 INFO L280 TraceCheckUtils]: 23: Hoare triple {11931#true} processEnvironment_#t~ret53 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret53 && processEnvironment_#t~ret53 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret53;havoc processEnvironment_#t~ret53; {11931#true} is VALID [2020-07-28 19:00:11,494 INFO L280 TraceCheckUtils]: 24: Hoare triple {11931#true} assume 0 != processEnvironment_~tmp~6;havoc activatePump_#t~ret54, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret55, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11931#true} is VALID [2020-07-28 19:00:11,494 INFO L280 TraceCheckUtils]: 25: Hoare triple {11931#true} isMethaneAlarm_#t~ret55 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret55 && isMethaneAlarm_#t~ret55 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret55;havoc isMethaneAlarm_#t~ret55;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {11931#true} is VALID [2020-07-28 19:00:11,494 INFO L280 TraceCheckUtils]: 26: Hoare triple {11931#true} activatePump_#t~ret54 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret54 && activatePump_#t~ret54 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret54;havoc activatePump_#t~ret54; {11931#true} is VALID [2020-07-28 19:00:11,495 INFO L280 TraceCheckUtils]: 27: Hoare triple {11931#true} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {11931#true} is VALID [2020-07-28 19:00:11,495 INFO L280 TraceCheckUtils]: 28: Hoare triple {11931#true} havoc __utac_acc__Specification2_spec__2_#t~ret47, __utac_acc__Specification2_spec__2_#t~ret48, __utac_acc__Specification2_spec__2_~tmp~4, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~4;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11931#true} is VALID [2020-07-28 19:00:11,495 INFO L280 TraceCheckUtils]: 29: Hoare triple {11931#true} __utac_acc__Specification2_spec__2_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47 && __utac_acc__Specification2_spec__2_#t~ret47 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~4 := __utac_acc__Specification2_spec__2_#t~ret47;havoc __utac_acc__Specification2_spec__2_#t~ret47; {11931#true} is VALID [2020-07-28 19:00:11,496 INFO L280 TraceCheckUtils]: 30: Hoare triple {11931#true} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~4);~methAndRunningLastTime~0 := 0; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,497 INFO L280 TraceCheckUtils]: 31: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume !false; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,499 INFO L280 TraceCheckUtils]: 32: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume test_~splverifierCounter~0 < 4; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,501 INFO L280 TraceCheckUtils]: 33: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume -2147483648 <= test_#t~nondet49 && test_#t~nondet49 <= 2147483647;test_~tmp~5 := test_#t~nondet49;havoc test_#t~nondet49; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,502 INFO L280 TraceCheckUtils]: 34: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume !(0 != test_~tmp~5); {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,503 INFO L280 TraceCheckUtils]: 35: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp___0~1 := test_#t~nondet50;havoc test_#t~nondet50; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,504 INFO L280 TraceCheckUtils]: 36: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume 0 != test_~tmp___0~1; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,504 INFO L280 TraceCheckUtils]: 37: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,505 INFO L280 TraceCheckUtils]: 38: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___2~0 := test_#t~nondet51;havoc test_#t~nondet51; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,506 INFO L280 TraceCheckUtils]: 39: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume 0 != test_~tmp___2~0; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,506 INFO L280 TraceCheckUtils]: 40: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume 0 != ~pumpRunning~0; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,507 INFO L280 TraceCheckUtils]: 41: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,507 INFO L280 TraceCheckUtils]: 42: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret53, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,508 INFO L280 TraceCheckUtils]: 43: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume !(0 == ~pumpRunning~0); {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,508 INFO L280 TraceCheckUtils]: 44: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} havoc __utac_acc__Specification2_spec__2_#t~ret47, __utac_acc__Specification2_spec__2_#t~ret48, __utac_acc__Specification2_spec__2_~tmp~4, __utac_acc__Specification2_spec__2_~tmp___0~0;havoc __utac_acc__Specification2_spec__2_~tmp~4;havoc __utac_acc__Specification2_spec__2_~tmp___0~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,509 INFO L280 TraceCheckUtils]: 45: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} __utac_acc__Specification2_spec__2_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret47 && __utac_acc__Specification2_spec__2_#t~ret47 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~4 := __utac_acc__Specification2_spec__2_#t~ret47;havoc __utac_acc__Specification2_spec__2_#t~ret47; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,509 INFO L280 TraceCheckUtils]: 46: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~4;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,510 INFO L280 TraceCheckUtils]: 47: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} __utac_acc__Specification2_spec__2_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret48 && __utac_acc__Specification2_spec__2_#t~ret48 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~0 := __utac_acc__Specification2_spec__2_#t~ret48;havoc __utac_acc__Specification2_spec__2_#t~ret48; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,510 INFO L280 TraceCheckUtils]: 48: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~0; {11933#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:11,511 INFO L280 TraceCheckUtils]: 49: Hoare triple {11933#(= 0 ~methAndRunningLastTime~0)} assume 0 != ~methAndRunningLastTime~0; {11932#false} is VALID [2020-07-28 19:00:11,511 INFO L280 TraceCheckUtils]: 50: Hoare triple {11932#false} assume !false; {11932#false} is VALID [2020-07-28 19:00:11,514 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:11,514 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2125722924] [2020-07-28 19:00:11,514 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:11,514 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:00:11,514 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [706207541] [2020-07-28 19:00:11,515 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 51 [2020-07-28 19:00:11,515 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:11,515 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:11,577 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:11,577 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:11,578 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:11,578 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:11,578 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:11,578 INFO L87 Difference]: Start difference. First operand 238 states and 309 transitions. Second operand 3 states. [2020-07-28 19:00:12,715 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:12,716 INFO L93 Difference]: Finished difference Result 327 states and 426 transitions. [2020-07-28 19:00:12,716 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:12,716 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 51 [2020-07-28 19:00:12,718 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:12,718 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:12,719 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 108 transitions. [2020-07-28 19:00:12,719 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:12,720 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 108 transitions. [2020-07-28 19:00:12,720 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 108 transitions. [2020-07-28 19:00:12,851 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 108 edges. 108 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:12,862 INFO L225 Difference]: With dead ends: 327 [2020-07-28 19:00:12,862 INFO L226 Difference]: Without dead ends: 325 [2020-07-28 19:00:12,863 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:12,864 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 325 states. [2020-07-28 19:00:13,787 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 325 to 258. [2020-07-28 19:00:13,787 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:13,788 INFO L82 GeneralOperation]: Start isEquivalent. First operand 325 states. Second operand 258 states. [2020-07-28 19:00:13,788 INFO L74 IsIncluded]: Start isIncluded. First operand 325 states. Second operand 258 states. [2020-07-28 19:00:13,788 INFO L87 Difference]: Start difference. First operand 325 states. Second operand 258 states. [2020-07-28 19:00:13,794 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:13,795 INFO L93 Difference]: Finished difference Result 325 states and 424 transitions. [2020-07-28 19:00:13,795 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 424 transitions. [2020-07-28 19:00:13,796 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:13,796 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:13,796 INFO L74 IsIncluded]: Start isIncluded. First operand 258 states. Second operand 325 states. [2020-07-28 19:00:13,797 INFO L87 Difference]: Start difference. First operand 258 states. Second operand 325 states. [2020-07-28 19:00:13,804 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:13,805 INFO L93 Difference]: Finished difference Result 325 states and 424 transitions. [2020-07-28 19:00:13,805 INFO L276 IsEmpty]: Start isEmpty. Operand 325 states and 424 transitions. [2020-07-28 19:00:13,806 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:13,806 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:13,806 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:13,807 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:13,807 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 258 states. [2020-07-28 19:00:13,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 339 transitions. [2020-07-28 19:00:13,813 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 339 transitions. Word has length 51 [2020-07-28 19:00:13,814 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:13,814 INFO L479 AbstractCegarLoop]: Abstraction has 258 states and 339 transitions. [2020-07-28 19:00:13,814 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:13,814 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 339 transitions. [2020-07-28 19:00:13,815 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2020-07-28 19:00:13,816 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:13,816 INFO L422 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:13,817 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:00:13,817 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:13,817 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:13,817 INFO L82 PathProgramCache]: Analyzing trace with hash 1134302103, now seen corresponding path program 1 times [2020-07-28 19:00:13,818 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:13,818 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1317372672] [2020-07-28 19:00:13,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:13,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2020-07-28 19:00:13,907 INFO L221 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2020-07-28 19:00:13,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2020-07-28 19:00:13,965 INFO L221 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2020-07-28 19:00:14,055 INFO L174 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2020-07-28 19:00:14,056 INFO L520 BasicCegarLoop]: Counterexample might be feasible [2020-07-28 19:00:14,056 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-28 19:00:14,286 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:00:14,286 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:00:14,286 WARN L170 areAnnotationChecker]: L633 has no Hoare annotation [2020-07-28 19:00:14,287 WARN L170 areAnnotationChecker]: L641 has no Hoare annotation [2020-07-28 19:00:14,287 WARN L170 areAnnotationChecker]: L597 has no Hoare annotation [2020-07-28 19:00:14,287 WARN L170 areAnnotationChecker]: L597 has no Hoare annotation [2020-07-28 19:00:14,287 WARN L170 areAnnotationChecker]: L568 has no Hoare annotation [2020-07-28 19:00:14,287 WARN L170 areAnnotationChecker]: L597-1 has no Hoare annotation [2020-07-28 19:00:14,287 WARN L170 areAnnotationChecker]: L654 has no Hoare annotation [2020-07-28 19:00:14,288 WARN L170 areAnnotationChecker]: L606 has no Hoare annotation [2020-07-28 19:00:14,288 WARN L170 areAnnotationChecker]: L665-1 has no Hoare annotation [2020-07-28 19:00:14,288 WARN L170 areAnnotationChecker]: L665-1 has no Hoare annotation [2020-07-28 19:00:14,288 WARN L170 areAnnotationChecker]: L665-1 has no Hoare annotation [2020-07-28 19:00:14,288 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:00:14,288 WARN L170 areAnnotationChecker]: L746 has no Hoare annotation [2020-07-28 19:00:14,289 WARN L170 areAnnotationChecker]: L699 has no Hoare annotation [2020-07-28 19:00:14,289 WARN L170 areAnnotationChecker]: L699 has no Hoare annotation [2020-07-28 19:00:14,289 WARN L170 areAnnotationChecker]: L764-1 has no Hoare annotation [2020-07-28 19:00:14,289 WARN L170 areAnnotationChecker]: L764-1 has no Hoare annotation [2020-07-28 19:00:14,289 WARN L170 areAnnotationChecker]: L700 has no Hoare annotation [2020-07-28 19:00:14,289 WARN L170 areAnnotationChecker]: L53-3 has no Hoare annotation [2020-07-28 19:00:14,290 WARN L170 areAnnotationChecker]: L53-3 has no Hoare annotation [2020-07-28 19:00:14,290 WARN L170 areAnnotationChecker]: L764-2 has no Hoare annotation [2020-07-28 19:00:14,290 WARN L170 areAnnotationChecker]: L764-2 has no Hoare annotation [2020-07-28 19:00:14,290 WARN L170 areAnnotationChecker]: L708 has no Hoare annotation [2020-07-28 19:00:14,290 WARN L170 areAnnotationChecker]: L708 has no Hoare annotation [2020-07-28 19:00:14,290 WARN L170 areAnnotationChecker]: L796-1 has no Hoare annotation [2020-07-28 19:00:14,291 WARN L170 areAnnotationChecker]: L796-1 has no Hoare annotation [2020-07-28 19:00:14,291 WARN L170 areAnnotationChecker]: L771-1 has no Hoare annotation [2020-07-28 19:00:14,291 WARN L170 areAnnotationChecker]: L65 has no Hoare annotation [2020-07-28 19:00:14,291 WARN L170 areAnnotationChecker]: L65 has no Hoare annotation [2020-07-28 19:00:14,291 WARN L170 areAnnotationChecker]: L708-1 has no Hoare annotation [2020-07-28 19:00:14,291 WARN L170 areAnnotationChecker]: L130-1 has no Hoare annotation [2020-07-28 19:00:14,292 WARN L170 areAnnotationChecker]: L130-1 has no Hoare annotation [2020-07-28 19:00:14,292 WARN L170 areAnnotationChecker]: L90-3 has no Hoare annotation [2020-07-28 19:00:14,292 WARN L170 areAnnotationChecker]: L718 has no Hoare annotation [2020-07-28 19:00:14,292 WARN L170 areAnnotationChecker]: L718 has no Hoare annotation [2020-07-28 19:00:14,292 WARN L170 areAnnotationChecker]: L135-1 has no Hoare annotation [2020-07-28 19:00:14,292 WARN L170 areAnnotationChecker]: L665-2 has no Hoare annotation [2020-07-28 19:00:14,293 WARN L170 areAnnotationChecker]: L665-2 has no Hoare annotation [2020-07-28 19:00:14,293 WARN L170 areAnnotationChecker]: L77 has no Hoare annotation [2020-07-28 19:00:14,293 WARN L170 areAnnotationChecker]: L77 has no Hoare annotation [2020-07-28 19:00:14,293 WARN L170 areAnnotationChecker]: L718-1 has no Hoare annotation [2020-07-28 19:00:14,293 WARN L170 areAnnotationChecker]: L916-3 has no Hoare annotation [2020-07-28 19:00:14,293 WARN L170 areAnnotationChecker]: L916-3 has no Hoare annotation [2020-07-28 19:00:14,294 WARN L170 areAnnotationChecker]: L867-1 has no Hoare annotation [2020-07-28 19:00:14,294 WARN L170 areAnnotationChecker]: L665-3 has no Hoare annotation [2020-07-28 19:00:14,294 WARN L170 areAnnotationChecker]: L728 has no Hoare annotation [2020-07-28 19:00:14,294 WARN L170 areAnnotationChecker]: L728 has no Hoare annotation [2020-07-28 19:00:14,294 WARN L170 areAnnotationChecker]: L916-5 has no Hoare annotation [2020-07-28 19:00:14,294 WARN L170 areAnnotationChecker]: L669-2 has no Hoare annotation [2020-07-28 19:00:14,295 WARN L170 areAnnotationChecker]: L669-2 has no Hoare annotation [2020-07-28 19:00:14,295 WARN L170 areAnnotationChecker]: L519-2 has no Hoare annotation [2020-07-28 19:00:14,295 WARN L170 areAnnotationChecker]: L519-2 has no Hoare annotation [2020-07-28 19:00:14,295 WARN L170 areAnnotationChecker]: L519-2 has no Hoare annotation [2020-07-28 19:00:14,295 WARN L170 areAnnotationChecker]: L734-1 has no Hoare annotation [2020-07-28 19:00:14,295 WARN L170 areAnnotationChecker]: L734-1 has no Hoare annotation [2020-07-28 19:00:14,296 WARN L170 areAnnotationChecker]: L734 has no Hoare annotation [2020-07-28 19:00:14,296 WARN L170 areAnnotationChecker]: L734 has no Hoare annotation [2020-07-28 19:00:14,296 WARN L170 areAnnotationChecker]: L922-1 has no Hoare annotation [2020-07-28 19:00:14,296 WARN L170 areAnnotationChecker]: L670-2 has no Hoare annotation [2020-07-28 19:00:14,296 WARN L170 areAnnotationChecker]: L670-2 has no Hoare annotation [2020-07-28 19:00:14,296 WARN L170 areAnnotationChecker]: L520 has no Hoare annotation [2020-07-28 19:00:14,297 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:00:14,297 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:00:14,297 WARN L170 areAnnotationChecker]: L764 has no Hoare annotation [2020-07-28 19:00:14,297 WARN L170 areAnnotationChecker]: L764 has no Hoare annotation [2020-07-28 19:00:14,297 WARN L170 areAnnotationChecker]: L930 has no Hoare annotation [2020-07-28 19:00:14,297 WARN L170 areAnnotationChecker]: L930 has no Hoare annotation [2020-07-28 19:00:14,298 WARN L170 areAnnotationChecker]: L800-1 has no Hoare annotation [2020-07-28 19:00:14,298 WARN L170 areAnnotationChecker]: L800-1 has no Hoare annotation [2020-07-28 19:00:14,298 WARN L170 areAnnotationChecker]: L946-1 has no Hoare annotation [2020-07-28 19:00:14,298 WARN L170 areAnnotationChecker]: L946-1 has no Hoare annotation [2020-07-28 19:00:14,298 WARN L170 areAnnotationChecker]: L523 has no Hoare annotation [2020-07-28 19:00:14,298 WARN L170 areAnnotationChecker]: L523 has no Hoare annotation [2020-07-28 19:00:14,299 WARN L170 areAnnotationChecker]: L796 has no Hoare annotation [2020-07-28 19:00:14,299 WARN L170 areAnnotationChecker]: L796 has no Hoare annotation [2020-07-28 19:00:14,299 WARN L170 areAnnotationChecker]: L771 has no Hoare annotation [2020-07-28 19:00:14,299 WARN L170 areAnnotationChecker]: L930-1 has no Hoare annotation [2020-07-28 19:00:14,299 WARN L170 areAnnotationChecker]: L90-2 has no Hoare annotation [2020-07-28 19:00:14,299 WARN L170 areAnnotationChecker]: L523-1 has no Hoare annotation [2020-07-28 19:00:14,300 WARN L170 areAnnotationChecker]: L523-1 has no Hoare annotation [2020-07-28 19:00:14,300 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-28 19:00:14,300 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-28 19:00:14,300 WARN L170 areAnnotationChecker]: L90-1 has no Hoare annotation [2020-07-28 19:00:14,300 WARN L170 areAnnotationChecker]: L858-1 has no Hoare annotation [2020-07-28 19:00:14,300 WARN L170 areAnnotationChecker]: L53-6 has no Hoare annotation [2020-07-28 19:00:14,301 WARN L170 areAnnotationChecker]: L53-6 has no Hoare annotation [2020-07-28 19:00:14,301 WARN L170 areAnnotationChecker]: L764-3 has no Hoare annotation [2020-07-28 19:00:14,301 WARN L170 areAnnotationChecker]: L764-3 has no Hoare annotation [2020-07-28 19:00:14,301 WARN L170 areAnnotationChecker]: L135 has no Hoare annotation [2020-07-28 19:00:14,301 WARN L170 areAnnotationChecker]: L665 has no Hoare annotation [2020-07-28 19:00:14,301 WARN L170 areAnnotationChecker]: L665 has no Hoare annotation [2020-07-28 19:00:14,301 WARN L170 areAnnotationChecker]: L833-2 has no Hoare annotation [2020-07-28 19:00:14,302 WARN L170 areAnnotationChecker]: L833-2 has no Hoare annotation [2020-07-28 19:00:14,302 WARN L170 areAnnotationChecker]: L796-2 has no Hoare annotation [2020-07-28 19:00:14,302 WARN L170 areAnnotationChecker]: L796-2 has no Hoare annotation [2020-07-28 19:00:14,302 WARN L170 areAnnotationChecker]: L771-2 has no Hoare annotation [2020-07-28 19:00:14,302 WARN L170 areAnnotationChecker]: L916 has no Hoare annotation [2020-07-28 19:00:14,302 WARN L170 areAnnotationChecker]: L916 has no Hoare annotation [2020-07-28 19:00:14,303 WARN L170 areAnnotationChecker]: L867 has no Hoare annotation [2020-07-28 19:00:14,303 WARN L170 areAnnotationChecker]: L130-2 has no Hoare annotation [2020-07-28 19:00:14,303 WARN L170 areAnnotationChecker]: L130-2 has no Hoare annotation [2020-07-28 19:00:14,303 WARN L170 areAnnotationChecker]: L90-5 has no Hoare annotation [2020-07-28 19:00:14,303 WARN L170 areAnnotationChecker]: L916-2 has no Hoare annotation [2020-07-28 19:00:14,303 WARN L170 areAnnotationChecker]: L669 has no Hoare annotation [2020-07-28 19:00:14,303 WARN L170 areAnnotationChecker]: L669 has no Hoare annotation [2020-07-28 19:00:14,304 WARN L170 areAnnotationChecker]: L135-2 has no Hoare annotation [2020-07-28 19:00:14,304 WARN L170 areAnnotationChecker]: L665-4 has no Hoare annotation [2020-07-28 19:00:14,304 WARN L170 areAnnotationChecker]: L665-4 has no Hoare annotation [2020-07-28 19:00:14,304 WARN L170 areAnnotationChecker]: L922 has no Hoare annotation [2020-07-28 19:00:14,304 WARN L170 areAnnotationChecker]: L670 has no Hoare annotation [2020-07-28 19:00:14,304 WARN L170 areAnnotationChecker]: L670 has no Hoare annotation [2020-07-28 19:00:14,305 WARN L170 areAnnotationChecker]: L916-6 has no Hoare annotation [2020-07-28 19:00:14,305 WARN L170 areAnnotationChecker]: L916-6 has no Hoare annotation [2020-07-28 19:00:14,305 WARN L170 areAnnotationChecker]: L867-2 has no Hoare annotation [2020-07-28 19:00:14,305 WARN L170 areAnnotationChecker]: L665-5 has no Hoare annotation [2020-07-28 19:00:14,305 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2020-07-28 19:00:14,305 WARN L170 areAnnotationChecker]: L800 has no Hoare annotation [2020-07-28 19:00:14,306 WARN L170 areAnnotationChecker]: L946 has no Hoare annotation [2020-07-28 19:00:14,306 WARN L170 areAnnotationChecker]: L946 has no Hoare annotation [2020-07-28 19:00:14,306 WARN L170 areAnnotationChecker]: L916-8 has no Hoare annotation [2020-07-28 19:00:14,306 WARN L170 areAnnotationChecker]: L669-4 has no Hoare annotation [2020-07-28 19:00:14,306 WARN L170 areAnnotationChecker]: L669-4 has no Hoare annotation [2020-07-28 19:00:14,306 WARN L170 areAnnotationChecker]: L90 has no Hoare annotation [2020-07-28 19:00:14,307 WARN L170 areAnnotationChecker]: L922-2 has no Hoare annotation [2020-07-28 19:00:14,307 WARN L170 areAnnotationChecker]: L670-4 has no Hoare annotation [2020-07-28 19:00:14,307 WARN L170 areAnnotationChecker]: L670-4 has no Hoare annotation [2020-07-28 19:00:14,307 WARN L170 areAnnotationChecker]: L858 has no Hoare annotation [2020-07-28 19:00:14,307 WARN L170 areAnnotationChecker]: L800-2 has no Hoare annotation [2020-07-28 19:00:14,307 WARN L170 areAnnotationChecker]: L800-2 has no Hoare annotation [2020-07-28 19:00:14,308 WARN L170 areAnnotationChecker]: L946-2 has no Hoare annotation [2020-07-28 19:00:14,308 WARN L170 areAnnotationChecker]: L946-2 has no Hoare annotation [2020-07-28 19:00:14,308 WARN L170 areAnnotationChecker]: L833 has no Hoare annotation [2020-07-28 19:00:14,308 WARN L170 areAnnotationChecker]: L833 has no Hoare annotation [2020-07-28 19:00:14,308 WARN L170 areAnnotationChecker]: L90-4 has no Hoare annotation [2020-07-28 19:00:14,308 WARN L170 areAnnotationChecker]: L858-2 has no Hoare annotation [2020-07-28 19:00:14,309 WARN L170 areAnnotationChecker]: L833-4 has no Hoare annotation [2020-07-28 19:00:14,309 WARN L170 areAnnotationChecker]: L833-4 has no Hoare annotation [2020-07-28 19:00:14,309 INFO L163 areAnnotationChecker]: CFG has 0 edges. 0 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:00:14,312 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:00:14 BoogieIcfgContainer [2020-07-28 19:00:14,312 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:00:14,312 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:00:14,313 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:00:14,313 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:00:14,314 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 06:59:52" (3/4) ... [2020-07-28 19:00:14,316 INFO L131 WitnessPrinter]: Generating witness for reachability counterexample [2020-07-28 19:00:14,517 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:00:14,517 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:00:14,520 INFO L168 Benchmark]: Toolchain (without parser) took 24225.03 ms. Allocated memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: 489.7 MB). Free memory was 956.2 MB in the beginning and 1.3 GB in the end (delta: -380.5 MB). Peak memory consumption was 109.1 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:14,521 INFO L168 Benchmark]: CDTParser took 0.28 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:00:14,521 INFO L168 Benchmark]: CACSL2BoogieTranslator took 719.74 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 116.9 MB). Free memory was 950.8 MB in the beginning and 1.1 GB in the end (delta: -147.5 MB). Peak memory consumption was 26.5 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:14,522 INFO L168 Benchmark]: Boogie Procedure Inliner took 120.20 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.9 MB). Peak memory consumption was 6.9 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:14,522 INFO L168 Benchmark]: Boogie Preprocessor took 78.37 ms. Allocated memory is still 1.1 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:00:14,523 INFO L168 Benchmark]: RCFGBuilder took 1527.10 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 932.6 MB in the end (delta: 158.8 MB). Peak memory consumption was 158.8 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:14,523 INFO L168 Benchmark]: TraceAbstraction took 21565.55 ms. Allocated memory was 1.1 GB in the beginning and 1.5 GB in the end (delta: 372.8 MB). Free memory was 932.6 MB in the beginning and 1.4 GB in the end (delta: -459.8 MB). There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:00:14,523 INFO L168 Benchmark]: Witness Printer took 205.15 ms. Allocated memory is still 1.5 GB. Free memory was 1.4 GB in the beginning and 1.3 GB in the end (delta: 55.6 MB). Peak memory consumption was 55.6 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:14,526 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 719.74 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 116.9 MB). Free memory was 950.8 MB in the beginning and 1.1 GB in the end (delta: -147.5 MB). Peak memory consumption was 26.5 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 120.20 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.9 MB). Peak memory consumption was 6.9 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 78.37 ms. Allocated memory is still 1.1 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 1527.10 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 932.6 MB in the end (delta: 158.8 MB). Peak memory consumption was 158.8 MB. Max. memory is 11.5 GB. * TraceAbstraction took 21565.55 ms. Allocated memory was 1.1 GB in the beginning and 1.5 GB in the end (delta: 372.8 MB). Free memory was 932.6 MB in the beginning and 1.4 GB in the end (delta: -459.8 MB). There was no memory consumed. Max. memory is 11.5 GB. * Witness Printer took 205.15 ms. Allocated memory is still 1.5 GB. Free memory was 1.4 GB in the beginning and 1.3 GB in the end (delta: 55.6 MB). Peak memory consumption was 55.6 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - CounterExampleResult [Line: 946]: a call of __VERIFIER_error() is reachable a call of __VERIFIER_error() is reachable We found a FailurePath: [L47] int waterLevel = 1; [L48] int methaneLevelCritical = 0; [L310] static struct __ACC__ERR *head = (struct __ACC__ERR *)0; [L507] int cleanupTimeShifts = 4; [L648] int methAndRunningLastTime ; [L757] int pumpRunning = 0; [L758] int systemActive = 1; VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L588] int retValue_acc ; [L589] int tmp ; VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L637] int retValue_acc ; [L640] retValue_acc = 1 [L641] return (retValue_acc); VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L595] tmp = valid_product() [L597] COND TRUE \read(tmp) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L653] methAndRunningLastTime = 0 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L689] int splverifierCounter ; [L690] int tmp ; [L691] int tmp___0 ; [L692] int tmp___1 ; [L693] int tmp___2 ; [L696] splverifierCounter = 0 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L698] COND TRUE 1 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L700] COND TRUE splverifierCounter < 4 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L706] tmp = __VERIFIER_nondet_int() [L708] COND TRUE \read(tmp) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=1] [L65] COND TRUE waterLevel < 2 [L66] waterLevel = waterLevel + 1 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L716] tmp___0 = __VERIFIER_nondet_int() [L718] COND FALSE !(\read(tmp___0)) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L726] tmp___2 = __VERIFIER_nondet_int() [L728] COND TRUE \read(tmp___2) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L764] COND FALSE !(\read(pumpRunning)) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L771] COND TRUE \read(systemActive) [L793] int tmp ; VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L796] COND TRUE ! pumpRunning [L908] int retValue_acc ; [L909] int tmp ; [L910] int tmp___0 ; [L127] int retValue_acc ; VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L130] COND FALSE !(waterLevel < 2) [L134] retValue_acc = 0 [L135] return (retValue_acc); VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L914] tmp = isHighWaterSensorDry() [L916] COND FALSE !(\read(tmp)) [L919] tmp___0 = 1 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L921] retValue_acc = tmp___0 [L922] return (retValue_acc); VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L798] tmp = isHighWaterLevel() [L800] COND TRUE \read(tmp) [L827] int tmp ; [L852] int retValue_acc ; [L86] int retValue_acc ; [L89] retValue_acc = methaneLevelCritical [L90] return (retValue_acc); VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L856] retValue_acc = isMethaneLevelCritical() [L858] return (retValue_acc); VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=0, systemActive=1, waterLevel=2] [L831] tmp = isMethaneAlarm() [L833] COND FALSE !(\read(tmp)) [L821] pumpRunning = 1 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L658] int tmp ; [L659] int tmp___0 ; [L86] int retValue_acc ; [L89] retValue_acc = methaneLevelCritical [L90] return (retValue_acc); VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L663] tmp = isMethaneLevelCritical() [L665] COND FALSE !(\read(tmp)) [L681] methAndRunningLastTime = 0 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L698] COND TRUE 1 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L700] COND TRUE splverifierCounter < 4 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L706] tmp = __VERIFIER_nondet_int() [L708] COND FALSE !(\read(tmp)) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L716] tmp___0 = __VERIFIER_nondet_int() [L718] COND TRUE \read(tmp___0) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=0, pumpRunning=1, systemActive=1, waterLevel=2] [L77] COND FALSE !(\read(methaneLevelCritical)) [L80] methaneLevelCritical = 1 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=2] [L726] tmp___2 = __VERIFIER_nondet_int() [L728] COND TRUE \read(tmp___2) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=2] [L764] COND TRUE \read(pumpRunning) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=2] [L53] COND TRUE waterLevel > 0 [L54] waterLevel = waterLevel - 1 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L771] COND TRUE \read(systemActive) [L793] int tmp ; VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L796] COND FALSE !(! pumpRunning) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L658] int tmp ; [L659] int tmp___0 ; [L86] int retValue_acc ; [L89] retValue_acc = methaneLevelCritical [L90] return (retValue_acc); VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L663] tmp = isMethaneLevelCritical() [L665] COND TRUE \read(tmp) [L863] int retValue_acc ; [L866] retValue_acc = pumpRunning [L867] return (retValue_acc); VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L667] tmp___0 = isPumpRunning() [L669] COND TRUE \read(tmp___0) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=0, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L670] COND FALSE !(\read(methAndRunningLastTime)) [L675] methAndRunningLastTime = 1 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=1, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L698] COND TRUE 1 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=1, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L700] COND TRUE splverifierCounter < 4 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=1, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L706] tmp = __VERIFIER_nondet_int() [L708] COND FALSE !(\read(tmp)) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=1, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L716] tmp___0 = __VERIFIER_nondet_int() [L718] COND FALSE !(\read(tmp___0)) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=1, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L726] tmp___2 = __VERIFIER_nondet_int() [L728] COND TRUE \read(tmp___2) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=1, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L764] COND TRUE \read(pumpRunning) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=1, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=1] [L53] COND TRUE waterLevel > 0 [L54] waterLevel = waterLevel - 1 VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=1, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=0] [L771] COND TRUE \read(systemActive) [L793] int tmp ; VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=1, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=0] [L796] COND FALSE !(! pumpRunning) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=1, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=0] [L658] int tmp ; [L659] int tmp___0 ; [L86] int retValue_acc ; [L89] retValue_acc = methaneLevelCritical [L90] return (retValue_acc); VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=1, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=0] [L663] tmp = isMethaneLevelCritical() [L665] COND TRUE \read(tmp) [L863] int retValue_acc ; [L866] retValue_acc = pumpRunning [L867] return (retValue_acc); VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=1, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=0] [L667] tmp___0 = isPumpRunning() [L669] COND TRUE \read(tmp___0) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=1, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=0] [L670] COND TRUE \read(methAndRunningLastTime) VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=1, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=0] [L946] __VERIFIER_error() VAL [cleanupTimeShifts=4, head={0:0}, methAndRunningLastTime=1, methaneLevelCritical=1, pumpRunning=1, systemActive=1, waterLevel=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 93 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: UNSAFE, OverallTime: 21.2s, OverallIterations: 12, TraceHistogramMax: 3, AutomataDifference: 14.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 944 SDtfs, 1258 SDslu, 1857 SDs, 0 SdLazy, 217 SolverSat, 37 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.3s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 78 GetRequests, 27 SyntacticMatches, 0 SemanticMatches, 51 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 57 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=258occurred in iteration=11, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 3.8s AutomataMinimizationTime, 11 MinimizatonAttempts, 1151 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 402 NumberOfCodeBlocks, 402 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 322 ConstructedInterpolants, 0 QuantifiedInterpolants, 19852 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 11 InterpolantComputations, 11 PerfectInterpolantSequences, 14/14 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be incorrect! Received shutdown request...