./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a22d1d84f43657cc690c98e940f1a10486e8ef5e ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 18:59:57,238 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 18:59:57,241 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 18:59:57,255 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 18:59:57,256 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 18:59:57,257 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 18:59:57,259 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 18:59:57,261 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 18:59:57,263 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 18:59:57,264 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 18:59:57,265 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 18:59:57,267 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 18:59:57,267 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 18:59:57,268 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 18:59:57,270 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 18:59:57,271 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 18:59:57,272 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 18:59:57,274 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 18:59:57,276 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 18:59:57,278 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 18:59:57,280 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 18:59:57,282 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 18:59:57,284 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 18:59:57,285 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 18:59:57,288 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 18:59:57,289 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 18:59:57,289 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 18:59:57,290 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 18:59:57,291 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 18:59:57,292 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 18:59:57,292 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 18:59:57,293 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 18:59:57,294 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 18:59:57,295 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 18:59:57,297 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 18:59:57,297 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 18:59:57,298 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 18:59:57,298 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 18:59:57,299 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 18:59:57,300 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 18:59:57,301 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 18:59:57,302 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 18:59:57,318 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 18:59:57,318 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 18:59:57,320 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 18:59:57,320 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 18:59:57,321 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 18:59:57,321 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 18:59:57,321 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 18:59:57,321 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 18:59:57,322 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 18:59:57,322 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 18:59:57,322 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 18:59:57,323 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 18:59:57,323 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 18:59:57,323 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 18:59:57,323 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 18:59:57,324 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 18:59:57,324 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 18:59:57,324 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 18:59:57,325 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 18:59:57,325 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 18:59:57,325 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 18:59:57,326 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 18:59:57,326 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 18:59:57,326 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 18:59:57,327 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 18:59:57,327 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 18:59:57,327 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 18:59:57,327 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 18:59:57,328 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 18:59:57,328 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a22d1d84f43657cc690c98e940f1a10486e8ef5e [2020-07-28 18:59:57,654 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 18:59:57,669 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 18:59:57,672 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 18:59:57,674 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 18:59:57,674 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 18:59:57,675 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c [2020-07-28 18:59:57,748 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0a3d6ca15/56f74f551d0d4c4a8ee5c4df8f96d13b/FLAGe581aa8fd [2020-07-28 18:59:58,281 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 18:59:58,281 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product48.cil.c [2020-07-28 18:59:58,293 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0a3d6ca15/56f74f551d0d4c4a8ee5c4df8f96d13b/FLAGe581aa8fd [2020-07-28 18:59:58,543 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0a3d6ca15/56f74f551d0d4c4a8ee5c4df8f96d13b [2020-07-28 18:59:58,546 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 18:59:58,549 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 18:59:58,550 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 18:59:58,551 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 18:59:58,556 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 18:59:58,558 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 06:59:58" (1/1) ... [2020-07-28 18:59:58,561 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3bf1f681 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:58, skipping insertion in model container [2020-07-28 18:59:58,562 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 06:59:58" (1/1) ... [2020-07-28 18:59:58,572 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 18:59:58,622 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 18:59:58,961 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 18:59:59,042 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 18:59:59,171 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 18:59:59,210 INFO L208 MainTranslator]: Completed translation [2020-07-28 18:59:59,210 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:59 WrapperNode [2020-07-28 18:59:59,211 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 18:59:59,212 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 18:59:59,212 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 18:59:59,212 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 18:59:59,224 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:59" (1/1) ... [2020-07-28 18:59:59,244 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:59" (1/1) ... [2020-07-28 18:59:59,304 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 18:59:59,304 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 18:59:59,304 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 18:59:59,304 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 18:59:59,316 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:59" (1/1) ... [2020-07-28 18:59:59,316 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:59" (1/1) ... [2020-07-28 18:59:59,322 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:59" (1/1) ... [2020-07-28 18:59:59,322 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:59" (1/1) ... [2020-07-28 18:59:59,341 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:59" (1/1) ... [2020-07-28 18:59:59,351 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:59" (1/1) ... [2020-07-28 18:59:59,356 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:59" (1/1) ... [2020-07-28 18:59:59,363 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 18:59:59,363 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 18:59:59,364 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 18:59:59,364 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 18:59:59,365 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:59" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 18:59:59,444 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 18:59:59,445 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 18:59:59,445 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 18:59:59,446 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:00:01,219 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:00:01,220 INFO L295 CfgBuilder]: Removed 200 assume(true) statements. [2020-07-28 19:00:01,225 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:00:01 BoogieIcfgContainer [2020-07-28 19:00:01,226 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:00:01,227 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:00:01,228 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:00:01,231 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:00:01,232 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 06:59:58" (1/3) ... [2020-07-28 19:00:01,233 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c70fa19 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:00:01, skipping insertion in model container [2020-07-28 19:00:01,233 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 06:59:59" (2/3) ... [2020-07-28 19:00:01,233 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6c70fa19 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:00:01, skipping insertion in model container [2020-07-28 19:00:01,234 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:00:01" (3/3) ... [2020-07-28 19:00:01,236 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product48.cil.c [2020-07-28 19:00:01,247 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:00:01,256 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:00:01,271 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:00:01,296 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:00:01,296 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:00:01,296 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:00:01,297 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:00:01,297 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:00:01,297 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:00:01,298 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:00:01,298 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:00:01,319 INFO L276 IsEmpty]: Start isEmpty. Operand 135 states. [2020-07-28 19:00:01,327 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-28 19:00:01,328 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:01,329 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:01,330 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:01,336 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:01,337 INFO L82 PathProgramCache]: Analyzing trace with hash -330996092, now seen corresponding path program 1 times [2020-07-28 19:00:01,349 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:01,350 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1863089455] [2020-07-28 19:00:01,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:01,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:01,781 INFO L280 TraceCheckUtils]: 0: Hoare triple {138#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {138#true} is VALID [2020-07-28 19:00:01,784 INFO L280 TraceCheckUtils]: 1: Hoare triple {138#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {138#true} is VALID [2020-07-28 19:00:01,785 INFO L280 TraceCheckUtils]: 2: Hoare triple {138#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; {138#true} is VALID [2020-07-28 19:00:01,786 INFO L280 TraceCheckUtils]: 3: Hoare triple {138#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {138#true} is VALID [2020-07-28 19:00:01,786 INFO L280 TraceCheckUtils]: 4: Hoare triple {138#true} assume 0 != main_~tmp~9; {138#true} is VALID [2020-07-28 19:00:01,787 INFO L280 TraceCheckUtils]: 5: Hoare triple {138#true} ~methAndRunningLastTime~0 := 0; {138#true} is VALID [2020-07-28 19:00:01,788 INFO L280 TraceCheckUtils]: 6: Hoare triple {138#true} havoc test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {138#true} is VALID [2020-07-28 19:00:01,789 INFO L280 TraceCheckUtils]: 7: Hoare triple {138#true} assume false; {139#false} is VALID [2020-07-28 19:00:01,790 INFO L280 TraceCheckUtils]: 8: Hoare triple {139#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {139#false} is VALID [2020-07-28 19:00:01,790 INFO L280 TraceCheckUtils]: 9: Hoare triple {139#false} assume !(0 != ~pumpRunning~0); {139#false} is VALID [2020-07-28 19:00:01,790 INFO L280 TraceCheckUtils]: 10: Hoare triple {139#false} assume !(0 != ~systemActive~0); {139#false} is VALID [2020-07-28 19:00:01,791 INFO L280 TraceCheckUtils]: 11: Hoare triple {139#false} havoc __utac_acc__Specification2_spec__2_#t~ret36, __utac_acc__Specification2_spec__2_#t~ret37, __utac_acc__Specification2_spec__2_~tmp~5, __utac_acc__Specification2_spec__2_~tmp___0~2;havoc __utac_acc__Specification2_spec__2_~tmp~5;havoc __utac_acc__Specification2_spec__2_~tmp___0~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {139#false} is VALID [2020-07-28 19:00:01,793 INFO L280 TraceCheckUtils]: 12: Hoare triple {139#false} __utac_acc__Specification2_spec__2_#t~ret36 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret36 && __utac_acc__Specification2_spec__2_#t~ret36 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~5 := __utac_acc__Specification2_spec__2_#t~ret36;havoc __utac_acc__Specification2_spec__2_#t~ret36; {139#false} is VALID [2020-07-28 19:00:01,794 INFO L280 TraceCheckUtils]: 13: Hoare triple {139#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~5;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {139#false} is VALID [2020-07-28 19:00:01,794 INFO L280 TraceCheckUtils]: 14: Hoare triple {139#false} __utac_acc__Specification2_spec__2_#t~ret37 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret37 && __utac_acc__Specification2_spec__2_#t~ret37 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~2 := __utac_acc__Specification2_spec__2_#t~ret37;havoc __utac_acc__Specification2_spec__2_#t~ret37; {139#false} is VALID [2020-07-28 19:00:01,794 INFO L280 TraceCheckUtils]: 15: Hoare triple {139#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~2; {139#false} is VALID [2020-07-28 19:00:01,795 INFO L280 TraceCheckUtils]: 16: Hoare triple {139#false} assume 0 != ~methAndRunningLastTime~0; {139#false} is VALID [2020-07-28 19:00:01,795 INFO L280 TraceCheckUtils]: 17: Hoare triple {139#false} assume !false; {139#false} is VALID [2020-07-28 19:00:01,803 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:01,804 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1863089455] [2020-07-28 19:00:01,806 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:01,807 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:00:01,808 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1814340076] [2020-07-28 19:00:01,818 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:00:01,822 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:01,826 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:00:01,882 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:01,882 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:00:01,883 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:01,892 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:00:01,894 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:00:01,898 INFO L87 Difference]: Start difference. First operand 135 states. Second operand 2 states. [2020-07-28 19:00:02,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:02,236 INFO L93 Difference]: Finished difference Result 263 states and 396 transitions. [2020-07-28 19:00:02,236 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:00:02,236 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:00:02,236 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:02,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:00:02,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 396 transitions. [2020-07-28 19:00:02,250 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:00:02,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 396 transitions. [2020-07-28 19:00:02,264 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 396 transitions. [2020-07-28 19:00:02,825 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 396 edges. 396 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:02,844 INFO L225 Difference]: With dead ends: 263 [2020-07-28 19:00:02,845 INFO L226 Difference]: Without dead ends: 131 [2020-07-28 19:00:02,850 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:00:02,871 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 131 states. [2020-07-28 19:00:02,927 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 131 to 131. [2020-07-28 19:00:02,927 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:02,928 INFO L82 GeneralOperation]: Start isEquivalent. First operand 131 states. Second operand 131 states. [2020-07-28 19:00:02,929 INFO L74 IsIncluded]: Start isIncluded. First operand 131 states. Second operand 131 states. [2020-07-28 19:00:02,929 INFO L87 Difference]: Start difference. First operand 131 states. Second operand 131 states. [2020-07-28 19:00:02,937 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:02,938 INFO L93 Difference]: Finished difference Result 131 states and 190 transitions. [2020-07-28 19:00:02,938 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states and 190 transitions. [2020-07-28 19:00:02,940 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:02,940 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:02,940 INFO L74 IsIncluded]: Start isIncluded. First operand 131 states. Second operand 131 states. [2020-07-28 19:00:02,941 INFO L87 Difference]: Start difference. First operand 131 states. Second operand 131 states. [2020-07-28 19:00:02,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:02,949 INFO L93 Difference]: Finished difference Result 131 states and 190 transitions. [2020-07-28 19:00:02,949 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states and 190 transitions. [2020-07-28 19:00:02,950 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:02,951 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:02,951 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:02,951 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:02,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 131 states. [2020-07-28 19:00:02,958 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 131 states to 131 states and 190 transitions. [2020-07-28 19:00:02,960 INFO L78 Accepts]: Start accepts. Automaton has 131 states and 190 transitions. Word has length 18 [2020-07-28 19:00:02,960 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:02,961 INFO L479 AbstractCegarLoop]: Abstraction has 131 states and 190 transitions. [2020-07-28 19:00:02,961 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:00:02,961 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states and 190 transitions. [2020-07-28 19:00:02,962 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 19:00:02,963 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:02,963 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:02,963 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:00:02,964 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:02,964 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:02,964 INFO L82 PathProgramCache]: Analyzing trace with hash -549832061, now seen corresponding path program 1 times [2020-07-28 19:00:02,965 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:02,965 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1350490367] [2020-07-28 19:00:02,966 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:03,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:03,112 INFO L280 TraceCheckUtils]: 0: Hoare triple {963#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {963#true} is VALID [2020-07-28 19:00:03,113 INFO L280 TraceCheckUtils]: 1: Hoare triple {963#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {963#true} is VALID [2020-07-28 19:00:03,113 INFO L280 TraceCheckUtils]: 2: Hoare triple {963#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; {963#true} is VALID [2020-07-28 19:00:03,113 INFO L280 TraceCheckUtils]: 3: Hoare triple {963#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {963#true} is VALID [2020-07-28 19:00:03,114 INFO L280 TraceCheckUtils]: 4: Hoare triple {963#true} assume 0 != main_~tmp~9; {963#true} is VALID [2020-07-28 19:00:03,114 INFO L280 TraceCheckUtils]: 5: Hoare triple {963#true} ~methAndRunningLastTime~0 := 0; {963#true} is VALID [2020-07-28 19:00:03,115 INFO L280 TraceCheckUtils]: 6: Hoare triple {963#true} havoc test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {965#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:00:03,115 INFO L280 TraceCheckUtils]: 7: Hoare triple {965#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {965#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:00:03,116 INFO L280 TraceCheckUtils]: 8: Hoare triple {965#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {964#false} is VALID [2020-07-28 19:00:03,117 INFO L280 TraceCheckUtils]: 9: Hoare triple {964#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {964#false} is VALID [2020-07-28 19:00:03,117 INFO L280 TraceCheckUtils]: 10: Hoare triple {964#false} assume !(0 != ~pumpRunning~0); {964#false} is VALID [2020-07-28 19:00:03,117 INFO L280 TraceCheckUtils]: 11: Hoare triple {964#false} assume !(0 != ~systemActive~0); {964#false} is VALID [2020-07-28 19:00:03,117 INFO L280 TraceCheckUtils]: 12: Hoare triple {964#false} havoc __utac_acc__Specification2_spec__2_#t~ret36, __utac_acc__Specification2_spec__2_#t~ret37, __utac_acc__Specification2_spec__2_~tmp~5, __utac_acc__Specification2_spec__2_~tmp___0~2;havoc __utac_acc__Specification2_spec__2_~tmp~5;havoc __utac_acc__Specification2_spec__2_~tmp___0~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {964#false} is VALID [2020-07-28 19:00:03,118 INFO L280 TraceCheckUtils]: 13: Hoare triple {964#false} __utac_acc__Specification2_spec__2_#t~ret36 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret36 && __utac_acc__Specification2_spec__2_#t~ret36 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~5 := __utac_acc__Specification2_spec__2_#t~ret36;havoc __utac_acc__Specification2_spec__2_#t~ret36; {964#false} is VALID [2020-07-28 19:00:03,118 INFO L280 TraceCheckUtils]: 14: Hoare triple {964#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~5;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {964#false} is VALID [2020-07-28 19:00:03,119 INFO L280 TraceCheckUtils]: 15: Hoare triple {964#false} __utac_acc__Specification2_spec__2_#t~ret37 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret37 && __utac_acc__Specification2_spec__2_#t~ret37 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~2 := __utac_acc__Specification2_spec__2_#t~ret37;havoc __utac_acc__Specification2_spec__2_#t~ret37; {964#false} is VALID [2020-07-28 19:00:03,119 INFO L280 TraceCheckUtils]: 16: Hoare triple {964#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~2; {964#false} is VALID [2020-07-28 19:00:03,119 INFO L280 TraceCheckUtils]: 17: Hoare triple {964#false} assume 0 != ~methAndRunningLastTime~0; {964#false} is VALID [2020-07-28 19:00:03,119 INFO L280 TraceCheckUtils]: 18: Hoare triple {964#false} assume !false; {964#false} is VALID [2020-07-28 19:00:03,120 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:03,121 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1350490367] [2020-07-28 19:00:03,121 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:03,121 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:00:03,121 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [587297800] [2020-07-28 19:00:03,123 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:00:03,123 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:03,124 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:03,151 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:03,151 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:03,151 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:03,152 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:03,152 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:03,152 INFO L87 Difference]: Start difference. First operand 131 states and 190 transitions. Second operand 3 states. [2020-07-28 19:00:03,522 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:03,522 INFO L93 Difference]: Finished difference Result 131 states and 190 transitions. [2020-07-28 19:00:03,522 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:03,522 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:00:03,522 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:03,523 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:03,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 190 transitions. [2020-07-28 19:00:03,528 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:03,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 190 transitions. [2020-07-28 19:00:03,531 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 190 transitions. [2020-07-28 19:00:03,768 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 190 edges. 190 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:03,770 INFO L225 Difference]: With dead ends: 131 [2020-07-28 19:00:03,771 INFO L226 Difference]: Without dead ends: 55 [2020-07-28 19:00:03,772 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:03,772 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2020-07-28 19:00:03,801 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2020-07-28 19:00:03,801 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:03,801 INFO L82 GeneralOperation]: Start isEquivalent. First operand 55 states. Second operand 55 states. [2020-07-28 19:00:03,801 INFO L74 IsIncluded]: Start isIncluded. First operand 55 states. Second operand 55 states. [2020-07-28 19:00:03,802 INFO L87 Difference]: Start difference. First operand 55 states. Second operand 55 states. [2020-07-28 19:00:03,806 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:03,806 INFO L93 Difference]: Finished difference Result 55 states and 79 transitions. [2020-07-28 19:00:03,806 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 79 transitions. [2020-07-28 19:00:03,807 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:03,807 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:03,807 INFO L74 IsIncluded]: Start isIncluded. First operand 55 states. Second operand 55 states. [2020-07-28 19:00:03,807 INFO L87 Difference]: Start difference. First operand 55 states. Second operand 55 states. [2020-07-28 19:00:03,810 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:03,810 INFO L93 Difference]: Finished difference Result 55 states and 79 transitions. [2020-07-28 19:00:03,810 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 79 transitions. [2020-07-28 19:00:03,811 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:03,811 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:03,811 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:03,811 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:03,811 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55 states. [2020-07-28 19:00:03,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 79 transitions. [2020-07-28 19:00:03,814 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 79 transitions. Word has length 19 [2020-07-28 19:00:03,814 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:03,814 INFO L479 AbstractCegarLoop]: Abstraction has 55 states and 79 transitions. [2020-07-28 19:00:03,814 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:03,814 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 79 transitions. [2020-07-28 19:00:03,815 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 19:00:03,815 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:03,815 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:03,815 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:00:03,816 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:03,816 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:03,816 INFO L82 PathProgramCache]: Analyzing trace with hash 1314651584, now seen corresponding path program 1 times [2020-07-28 19:00:03,816 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:03,817 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1113122959] [2020-07-28 19:00:03,817 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:03,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:03,908 INFO L280 TraceCheckUtils]: 0: Hoare triple {1342#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {1342#true} is VALID [2020-07-28 19:00:03,909 INFO L280 TraceCheckUtils]: 1: Hoare triple {1342#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {1342#true} is VALID [2020-07-28 19:00:03,909 INFO L280 TraceCheckUtils]: 2: Hoare triple {1342#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; {1342#true} is VALID [2020-07-28 19:00:03,909 INFO L280 TraceCheckUtils]: 3: Hoare triple {1342#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {1342#true} is VALID [2020-07-28 19:00:03,910 INFO L280 TraceCheckUtils]: 4: Hoare triple {1342#true} assume 0 != main_~tmp~9; {1342#true} is VALID [2020-07-28 19:00:03,910 INFO L280 TraceCheckUtils]: 5: Hoare triple {1342#true} ~methAndRunningLastTime~0 := 0; {1342#true} is VALID [2020-07-28 19:00:03,910 INFO L280 TraceCheckUtils]: 6: Hoare triple {1342#true} havoc test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1342#true} is VALID [2020-07-28 19:00:03,911 INFO L280 TraceCheckUtils]: 7: Hoare triple {1342#true} assume !false; {1342#true} is VALID [2020-07-28 19:00:03,911 INFO L280 TraceCheckUtils]: 8: Hoare triple {1342#true} assume test_~splverifierCounter~0 < 4; {1342#true} is VALID [2020-07-28 19:00:03,911 INFO L280 TraceCheckUtils]: 9: Hoare triple {1342#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp~0 := test_#t~nondet11;havoc test_#t~nondet11; {1342#true} is VALID [2020-07-28 19:00:03,912 INFO L280 TraceCheckUtils]: 10: Hoare triple {1342#true} assume !(0 != test_~tmp~0); {1342#true} is VALID [2020-07-28 19:00:03,912 INFO L280 TraceCheckUtils]: 11: Hoare triple {1342#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___0~0 := test_#t~nondet12;havoc test_#t~nondet12; {1342#true} is VALID [2020-07-28 19:00:03,912 INFO L280 TraceCheckUtils]: 12: Hoare triple {1342#true} assume !(0 != test_~tmp___0~0); {1342#true} is VALID [2020-07-28 19:00:03,913 INFO L280 TraceCheckUtils]: 13: Hoare triple {1342#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___2~0 := test_#t~nondet13;havoc test_#t~nondet13; {1342#true} is VALID [2020-07-28 19:00:03,914 INFO L280 TraceCheckUtils]: 14: Hoare triple {1342#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1344#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:00:03,914 INFO L280 TraceCheckUtils]: 15: Hoare triple {1344#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {1344#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:00:03,915 INFO L280 TraceCheckUtils]: 16: Hoare triple {1344#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {1343#false} is VALID [2020-07-28 19:00:03,915 INFO L280 TraceCheckUtils]: 17: Hoare triple {1343#false} havoc __utac_acc__Specification2_spec__2_#t~ret36, __utac_acc__Specification2_spec__2_#t~ret37, __utac_acc__Specification2_spec__2_~tmp~5, __utac_acc__Specification2_spec__2_~tmp___0~2;havoc __utac_acc__Specification2_spec__2_~tmp~5;havoc __utac_acc__Specification2_spec__2_~tmp___0~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {1343#false} is VALID [2020-07-28 19:00:03,916 INFO L280 TraceCheckUtils]: 18: Hoare triple {1343#false} __utac_acc__Specification2_spec__2_#t~ret36 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret36 && __utac_acc__Specification2_spec__2_#t~ret36 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~5 := __utac_acc__Specification2_spec__2_#t~ret36;havoc __utac_acc__Specification2_spec__2_#t~ret36; {1343#false} is VALID [2020-07-28 19:00:03,916 INFO L280 TraceCheckUtils]: 19: Hoare triple {1343#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~5;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {1343#false} is VALID [2020-07-28 19:00:03,916 INFO L280 TraceCheckUtils]: 20: Hoare triple {1343#false} __utac_acc__Specification2_spec__2_#t~ret37 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret37 && __utac_acc__Specification2_spec__2_#t~ret37 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~2 := __utac_acc__Specification2_spec__2_#t~ret37;havoc __utac_acc__Specification2_spec__2_#t~ret37; {1343#false} is VALID [2020-07-28 19:00:03,916 INFO L280 TraceCheckUtils]: 21: Hoare triple {1343#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~2; {1343#false} is VALID [2020-07-28 19:00:03,917 INFO L280 TraceCheckUtils]: 22: Hoare triple {1343#false} assume 0 != ~methAndRunningLastTime~0; {1343#false} is VALID [2020-07-28 19:00:03,917 INFO L280 TraceCheckUtils]: 23: Hoare triple {1343#false} assume !false; {1343#false} is VALID [2020-07-28 19:00:03,918 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:03,918 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1113122959] [2020-07-28 19:00:03,918 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:03,919 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:00:03,919 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1050933811] [2020-07-28 19:00:03,919 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 19:00:03,919 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:03,920 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:03,959 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:03,959 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:03,959 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:03,959 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:03,960 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:03,960 INFO L87 Difference]: Start difference. First operand 55 states and 79 transitions. Second operand 3 states. [2020-07-28 19:00:04,274 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:04,275 INFO L93 Difference]: Finished difference Result 151 states and 223 transitions. [2020-07-28 19:00:04,275 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:04,275 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 19:00:04,275 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:04,276 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:04,280 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 223 transitions. [2020-07-28 19:00:04,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:04,289 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 223 transitions. [2020-07-28 19:00:04,290 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 223 transitions. [2020-07-28 19:00:04,552 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 223 edges. 223 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:04,557 INFO L225 Difference]: With dead ends: 151 [2020-07-28 19:00:04,557 INFO L226 Difference]: Without dead ends: 103 [2020-07-28 19:00:04,558 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:04,560 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103 states. [2020-07-28 19:00:04,643 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103 to 99. [2020-07-28 19:00:04,643 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:04,643 INFO L82 GeneralOperation]: Start isEquivalent. First operand 103 states. Second operand 99 states. [2020-07-28 19:00:04,643 INFO L74 IsIncluded]: Start isIncluded. First operand 103 states. Second operand 99 states. [2020-07-28 19:00:04,644 INFO L87 Difference]: Start difference. First operand 103 states. Second operand 99 states. [2020-07-28 19:00:04,648 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:04,648 INFO L93 Difference]: Finished difference Result 103 states and 150 transitions. [2020-07-28 19:00:04,648 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 150 transitions. [2020-07-28 19:00:04,649 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:04,649 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:04,649 INFO L74 IsIncluded]: Start isIncluded. First operand 99 states. Second operand 103 states. [2020-07-28 19:00:04,649 INFO L87 Difference]: Start difference. First operand 99 states. Second operand 103 states. [2020-07-28 19:00:04,660 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:04,660 INFO L93 Difference]: Finished difference Result 103 states and 150 transitions. [2020-07-28 19:00:04,661 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 150 transitions. [2020-07-28 19:00:04,661 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:04,661 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:04,663 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:04,663 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:04,663 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 99 states. [2020-07-28 19:00:04,667 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 99 states to 99 states and 146 transitions. [2020-07-28 19:00:04,668 INFO L78 Accepts]: Start accepts. Automaton has 99 states and 146 transitions. Word has length 24 [2020-07-28 19:00:04,668 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:04,668 INFO L479 AbstractCegarLoop]: Abstraction has 99 states and 146 transitions. [2020-07-28 19:00:04,669 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:04,669 INFO L276 IsEmpty]: Start isEmpty. Operand 99 states and 146 transitions. [2020-07-28 19:00:04,669 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2020-07-28 19:00:04,670 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:04,670 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:04,670 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:00:04,670 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:04,670 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:04,671 INFO L82 PathProgramCache]: Analyzing trace with hash 399769442, now seen corresponding path program 1 times [2020-07-28 19:00:04,671 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:04,671 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1983793506] [2020-07-28 19:00:04,671 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:04,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:04,814 INFO L280 TraceCheckUtils]: 0: Hoare triple {1905#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,815 INFO L280 TraceCheckUtils]: 1: Hoare triple {1907#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,815 INFO L280 TraceCheckUtils]: 2: Hoare triple {1907#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,816 INFO L280 TraceCheckUtils]: 3: Hoare triple {1907#(= 0 ~pumpRunning~0)} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,816 INFO L280 TraceCheckUtils]: 4: Hoare triple {1907#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~9; {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,817 INFO L280 TraceCheckUtils]: 5: Hoare triple {1907#(= 0 ~pumpRunning~0)} ~methAndRunningLastTime~0 := 0; {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,818 INFO L280 TraceCheckUtils]: 6: Hoare triple {1907#(= 0 ~pumpRunning~0)} havoc test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,818 INFO L280 TraceCheckUtils]: 7: Hoare triple {1907#(= 0 ~pumpRunning~0)} assume !false; {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,819 INFO L280 TraceCheckUtils]: 8: Hoare triple {1907#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,819 INFO L280 TraceCheckUtils]: 9: Hoare triple {1907#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp~0 := test_#t~nondet11;havoc test_#t~nondet11; {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,820 INFO L280 TraceCheckUtils]: 10: Hoare triple {1907#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~0); {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,820 INFO L280 TraceCheckUtils]: 11: Hoare triple {1907#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___0~0 := test_#t~nondet12;havoc test_#t~nondet12; {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,821 INFO L280 TraceCheckUtils]: 12: Hoare triple {1907#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~0); {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,822 INFO L280 TraceCheckUtils]: 13: Hoare triple {1907#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___2~0 := test_#t~nondet13;havoc test_#t~nondet13; {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,822 INFO L280 TraceCheckUtils]: 14: Hoare triple {1907#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,823 INFO L280 TraceCheckUtils]: 15: Hoare triple {1907#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,823 INFO L280 TraceCheckUtils]: 16: Hoare triple {1907#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret16, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,824 INFO L280 TraceCheckUtils]: 17: Hoare triple {1907#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret15, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {1907#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:04,825 INFO L280 TraceCheckUtils]: 18: Hoare triple {1907#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {1906#false} is VALID [2020-07-28 19:00:04,825 INFO L280 TraceCheckUtils]: 19: Hoare triple {1906#false} havoc __utac_acc__Specification2_spec__2_#t~ret36, __utac_acc__Specification2_spec__2_#t~ret37, __utac_acc__Specification2_spec__2_~tmp~5, __utac_acc__Specification2_spec__2_~tmp___0~2;havoc __utac_acc__Specification2_spec__2_~tmp~5;havoc __utac_acc__Specification2_spec__2_~tmp___0~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {1906#false} is VALID [2020-07-28 19:00:04,825 INFO L280 TraceCheckUtils]: 20: Hoare triple {1906#false} __utac_acc__Specification2_spec__2_#t~ret36 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret36 && __utac_acc__Specification2_spec__2_#t~ret36 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~5 := __utac_acc__Specification2_spec__2_#t~ret36;havoc __utac_acc__Specification2_spec__2_#t~ret36; {1906#false} is VALID [2020-07-28 19:00:04,825 INFO L280 TraceCheckUtils]: 21: Hoare triple {1906#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~5;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {1906#false} is VALID [2020-07-28 19:00:04,826 INFO L280 TraceCheckUtils]: 22: Hoare triple {1906#false} __utac_acc__Specification2_spec__2_#t~ret37 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret37 && __utac_acc__Specification2_spec__2_#t~ret37 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~2 := __utac_acc__Specification2_spec__2_#t~ret37;havoc __utac_acc__Specification2_spec__2_#t~ret37; {1906#false} is VALID [2020-07-28 19:00:04,826 INFO L280 TraceCheckUtils]: 23: Hoare triple {1906#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~2; {1906#false} is VALID [2020-07-28 19:00:04,826 INFO L280 TraceCheckUtils]: 24: Hoare triple {1906#false} assume 0 != ~methAndRunningLastTime~0; {1906#false} is VALID [2020-07-28 19:00:04,826 INFO L280 TraceCheckUtils]: 25: Hoare triple {1906#false} assume !false; {1906#false} is VALID [2020-07-28 19:00:04,828 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:04,828 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1983793506] [2020-07-28 19:00:04,828 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:04,828 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:00:04,829 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1609962506] [2020-07-28 19:00:04,829 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:00:04,829 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:04,829 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:04,861 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:04,861 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:04,861 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:04,861 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:04,862 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:04,862 INFO L87 Difference]: Start difference. First operand 99 states and 146 transitions. Second operand 3 states. [2020-07-28 19:00:05,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:05,145 INFO L93 Difference]: Finished difference Result 234 states and 351 transitions. [2020-07-28 19:00:05,146 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:05,146 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:00:05,146 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:05,146 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:05,151 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 186 transitions. [2020-07-28 19:00:05,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:05,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 186 transitions. [2020-07-28 19:00:05,155 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 186 transitions. [2020-07-28 19:00:05,374 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 186 edges. 186 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:05,379 INFO L225 Difference]: With dead ends: 234 [2020-07-28 19:00:05,379 INFO L226 Difference]: Without dead ends: 142 [2020-07-28 19:00:05,380 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:05,381 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 142 states. [2020-07-28 19:00:05,508 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 142 to 140. [2020-07-28 19:00:05,508 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:05,508 INFO L82 GeneralOperation]: Start isEquivalent. First operand 142 states. Second operand 140 states. [2020-07-28 19:00:05,509 INFO L74 IsIncluded]: Start isIncluded. First operand 142 states. Second operand 140 states. [2020-07-28 19:00:05,509 INFO L87 Difference]: Start difference. First operand 142 states. Second operand 140 states. [2020-07-28 19:00:05,516 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:05,516 INFO L93 Difference]: Finished difference Result 142 states and 205 transitions. [2020-07-28 19:00:05,516 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 205 transitions. [2020-07-28 19:00:05,517 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:05,517 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:05,517 INFO L74 IsIncluded]: Start isIncluded. First operand 140 states. Second operand 142 states. [2020-07-28 19:00:05,517 INFO L87 Difference]: Start difference. First operand 140 states. Second operand 142 states. [2020-07-28 19:00:05,523 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:05,523 INFO L93 Difference]: Finished difference Result 142 states and 205 transitions. [2020-07-28 19:00:05,524 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 205 transitions. [2020-07-28 19:00:05,524 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:05,524 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:05,524 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:05,525 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:05,525 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 140 states. [2020-07-28 19:00:05,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 140 states to 140 states and 204 transitions. [2020-07-28 19:00:05,530 INFO L78 Accepts]: Start accepts. Automaton has 140 states and 204 transitions. Word has length 26 [2020-07-28 19:00:05,531 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:05,531 INFO L479 AbstractCegarLoop]: Abstraction has 140 states and 204 transitions. [2020-07-28 19:00:05,531 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:05,531 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 204 transitions. [2020-07-28 19:00:05,532 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2020-07-28 19:00:05,532 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:05,532 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:05,532 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:00:05,533 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:05,533 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:05,533 INFO L82 PathProgramCache]: Analyzing trace with hash -521625591, now seen corresponding path program 1 times [2020-07-28 19:00:05,533 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:05,534 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [896039543] [2020-07-28 19:00:05,534 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:05,564 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:05,684 INFO L280 TraceCheckUtils]: 0: Hoare triple {2719#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,685 INFO L280 TraceCheckUtils]: 1: Hoare triple {2721#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,685 INFO L280 TraceCheckUtils]: 2: Hoare triple {2721#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,686 INFO L280 TraceCheckUtils]: 3: Hoare triple {2721#(= 0 ~pumpRunning~0)} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,687 INFO L280 TraceCheckUtils]: 4: Hoare triple {2721#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~9; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,688 INFO L280 TraceCheckUtils]: 5: Hoare triple {2721#(= 0 ~pumpRunning~0)} ~methAndRunningLastTime~0 := 0; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,688 INFO L280 TraceCheckUtils]: 6: Hoare triple {2721#(= 0 ~pumpRunning~0)} havoc test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,689 INFO L280 TraceCheckUtils]: 7: Hoare triple {2721#(= 0 ~pumpRunning~0)} assume !false; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,690 INFO L280 TraceCheckUtils]: 8: Hoare triple {2721#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,690 INFO L280 TraceCheckUtils]: 9: Hoare triple {2721#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp~0 := test_#t~nondet11;havoc test_#t~nondet11; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,691 INFO L280 TraceCheckUtils]: 10: Hoare triple {2721#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~0); {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,692 INFO L280 TraceCheckUtils]: 11: Hoare triple {2721#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___0~0 := test_#t~nondet12;havoc test_#t~nondet12; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,693 INFO L280 TraceCheckUtils]: 12: Hoare triple {2721#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~0); {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,693 INFO L280 TraceCheckUtils]: 13: Hoare triple {2721#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___2~0 := test_#t~nondet13;havoc test_#t~nondet13; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,694 INFO L280 TraceCheckUtils]: 14: Hoare triple {2721#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___1~0 := test_#t~nondet14;havoc test_#t~nondet14; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,695 INFO L280 TraceCheckUtils]: 15: Hoare triple {2721#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___1~0; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,696 INFO L280 TraceCheckUtils]: 16: Hoare triple {2721#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,697 INFO L280 TraceCheckUtils]: 17: Hoare triple {2721#(= 0 ~pumpRunning~0)} ~systemActive~0 := 0; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,697 INFO L280 TraceCheckUtils]: 18: Hoare triple {2721#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,698 INFO L280 TraceCheckUtils]: 19: Hoare triple {2721#(= 0 ~pumpRunning~0)} assume !(0 != ~systemActive~0); {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,699 INFO L280 TraceCheckUtils]: 20: Hoare triple {2721#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification2_spec__2_#t~ret36, __utac_acc__Specification2_spec__2_#t~ret37, __utac_acc__Specification2_spec__2_~tmp~5, __utac_acc__Specification2_spec__2_~tmp___0~2;havoc __utac_acc__Specification2_spec__2_~tmp~5;havoc __utac_acc__Specification2_spec__2_~tmp___0~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,699 INFO L280 TraceCheckUtils]: 21: Hoare triple {2721#(= 0 ~pumpRunning~0)} __utac_acc__Specification2_spec__2_#t~ret36 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret36 && __utac_acc__Specification2_spec__2_#t~ret36 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~5 := __utac_acc__Specification2_spec__2_#t~ret36;havoc __utac_acc__Specification2_spec__2_#t~ret36; {2721#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:05,700 INFO L280 TraceCheckUtils]: 22: Hoare triple {2721#(= 0 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~5;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {2722#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:00:05,701 INFO L280 TraceCheckUtils]: 23: Hoare triple {2722#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification2_spec__2_#t~ret37 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret37 && __utac_acc__Specification2_spec__2_#t~ret37 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~2 := __utac_acc__Specification2_spec__2_#t~ret37;havoc __utac_acc__Specification2_spec__2_#t~ret37; {2723#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp___0~2)} is VALID [2020-07-28 19:00:05,702 INFO L280 TraceCheckUtils]: 24: Hoare triple {2723#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp___0~2)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~2; {2720#false} is VALID [2020-07-28 19:00:05,703 INFO L280 TraceCheckUtils]: 25: Hoare triple {2720#false} assume 0 != ~methAndRunningLastTime~0; {2720#false} is VALID [2020-07-28 19:00:05,703 INFO L280 TraceCheckUtils]: 26: Hoare triple {2720#false} assume !false; {2720#false} is VALID [2020-07-28 19:00:05,705 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:05,705 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [896039543] [2020-07-28 19:00:05,706 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:05,706 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:00:05,706 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2138584846] [2020-07-28 19:00:05,707 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 27 [2020-07-28 19:00:05,707 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:05,707 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:00:05,748 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 27 edges. 27 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:05,748 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:00:05,748 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:05,749 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:00:05,749 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:00:05,749 INFO L87 Difference]: Start difference. First operand 140 states and 204 transitions. Second operand 5 states. [2020-07-28 19:00:06,936 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:06,937 INFO L93 Difference]: Finished difference Result 531 states and 776 transitions. [2020-07-28 19:00:06,937 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 19:00:06,937 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 27 [2020-07-28 19:00:06,940 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:06,940 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:06,946 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 375 transitions. [2020-07-28 19:00:06,946 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:06,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 375 transitions. [2020-07-28 19:00:06,953 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 375 transitions. [2020-07-28 19:00:07,405 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 375 edges. 375 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:07,421 INFO L225 Difference]: With dead ends: 531 [2020-07-28 19:00:07,421 INFO L226 Difference]: Without dead ends: 398 [2020-07-28 19:00:07,423 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:00:07,424 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 398 states. [2020-07-28 19:00:07,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 398 to 138. [2020-07-28 19:00:07,575 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:07,575 INFO L82 GeneralOperation]: Start isEquivalent. First operand 398 states. Second operand 138 states. [2020-07-28 19:00:07,575 INFO L74 IsIncluded]: Start isIncluded. First operand 398 states. Second operand 138 states. [2020-07-28 19:00:07,575 INFO L87 Difference]: Start difference. First operand 398 states. Second operand 138 states. [2020-07-28 19:00:07,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:07,594 INFO L93 Difference]: Finished difference Result 398 states and 577 transitions. [2020-07-28 19:00:07,594 INFO L276 IsEmpty]: Start isEmpty. Operand 398 states and 577 transitions. [2020-07-28 19:00:07,595 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:07,595 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:07,595 INFO L74 IsIncluded]: Start isIncluded. First operand 138 states. Second operand 398 states. [2020-07-28 19:00:07,596 INFO L87 Difference]: Start difference. First operand 138 states. Second operand 398 states. [2020-07-28 19:00:07,615 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:07,615 INFO L93 Difference]: Finished difference Result 398 states and 577 transitions. [2020-07-28 19:00:07,615 INFO L276 IsEmpty]: Start isEmpty. Operand 398 states and 577 transitions. [2020-07-28 19:00:07,616 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:07,616 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:07,616 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:07,617 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:07,617 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 138 states. [2020-07-28 19:00:07,622 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 138 states to 138 states and 198 transitions. [2020-07-28 19:00:07,622 INFO L78 Accepts]: Start accepts. Automaton has 138 states and 198 transitions. Word has length 27 [2020-07-28 19:00:07,622 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:07,622 INFO L479 AbstractCegarLoop]: Abstraction has 138 states and 198 transitions. [2020-07-28 19:00:07,622 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:00:07,622 INFO L276 IsEmpty]: Start isEmpty. Operand 138 states and 198 transitions. [2020-07-28 19:00:07,623 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 19:00:07,623 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:07,623 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:07,624 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:00:07,624 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:07,624 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:07,624 INFO L82 PathProgramCache]: Analyzing trace with hash 2090011764, now seen corresponding path program 1 times [2020-07-28 19:00:07,624 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:07,625 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [957765386] [2020-07-28 19:00:07,625 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:07,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:07,718 INFO L280 TraceCheckUtils]: 0: Hoare triple {4476#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {4476#true} is VALID [2020-07-28 19:00:07,718 INFO L280 TraceCheckUtils]: 1: Hoare triple {4476#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {4476#true} is VALID [2020-07-28 19:00:07,718 INFO L280 TraceCheckUtils]: 2: Hoare triple {4476#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; {4476#true} is VALID [2020-07-28 19:00:07,719 INFO L280 TraceCheckUtils]: 3: Hoare triple {4476#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {4476#true} is VALID [2020-07-28 19:00:07,719 INFO L280 TraceCheckUtils]: 4: Hoare triple {4476#true} assume 0 != main_~tmp~9; {4476#true} is VALID [2020-07-28 19:00:07,719 INFO L280 TraceCheckUtils]: 5: Hoare triple {4476#true} ~methAndRunningLastTime~0 := 0; {4476#true} is VALID [2020-07-28 19:00:07,719 INFO L280 TraceCheckUtils]: 6: Hoare triple {4476#true} havoc test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {4476#true} is VALID [2020-07-28 19:00:07,719 INFO L280 TraceCheckUtils]: 7: Hoare triple {4476#true} assume !false; {4476#true} is VALID [2020-07-28 19:00:07,720 INFO L280 TraceCheckUtils]: 8: Hoare triple {4476#true} assume test_~splverifierCounter~0 < 4; {4476#true} is VALID [2020-07-28 19:00:07,720 INFO L280 TraceCheckUtils]: 9: Hoare triple {4476#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp~0 := test_#t~nondet11;havoc test_#t~nondet11; {4476#true} is VALID [2020-07-28 19:00:07,725 INFO L280 TraceCheckUtils]: 10: Hoare triple {4476#true} assume !(0 != test_~tmp~0); {4476#true} is VALID [2020-07-28 19:00:07,726 INFO L280 TraceCheckUtils]: 11: Hoare triple {4476#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___0~0 := test_#t~nondet12;havoc test_#t~nondet12; {4476#true} is VALID [2020-07-28 19:00:07,726 INFO L280 TraceCheckUtils]: 12: Hoare triple {4476#true} assume !(0 != test_~tmp___0~0); {4476#true} is VALID [2020-07-28 19:00:07,726 INFO L280 TraceCheckUtils]: 13: Hoare triple {4476#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___2~0 := test_#t~nondet13;havoc test_#t~nondet13; {4476#true} is VALID [2020-07-28 19:00:07,726 INFO L280 TraceCheckUtils]: 14: Hoare triple {4476#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {4476#true} is VALID [2020-07-28 19:00:07,727 INFO L280 TraceCheckUtils]: 15: Hoare triple {4476#true} assume !(0 != ~pumpRunning~0); {4476#true} is VALID [2020-07-28 19:00:07,727 INFO L280 TraceCheckUtils]: 16: Hoare triple {4476#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret16, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {4476#true} is VALID [2020-07-28 19:00:07,727 INFO L280 TraceCheckUtils]: 17: Hoare triple {4476#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret15, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {4476#true} is VALID [2020-07-28 19:00:07,728 INFO L280 TraceCheckUtils]: 18: Hoare triple {4476#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~7, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~7;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {4476#true} is VALID [2020-07-28 19:00:07,728 INFO L280 TraceCheckUtils]: 19: Hoare triple {4476#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {4476#true} is VALID [2020-07-28 19:00:07,728 INFO L280 TraceCheckUtils]: 20: Hoare triple {4476#true} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {4476#true} is VALID [2020-07-28 19:00:07,735 INFO L280 TraceCheckUtils]: 21: Hoare triple {4476#true} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {4478#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} is VALID [2020-07-28 19:00:07,737 INFO L280 TraceCheckUtils]: 22: Hoare triple {4478#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} isHighWaterLevel_~retValue_acc~7 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~7; {4479#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:00:07,738 INFO L280 TraceCheckUtils]: 23: Hoare triple {4479#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__methaneQuery_#t~ret15 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret15 && processEnvironment__wrappee__methaneQuery_#t~ret15 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~1 := processEnvironment__wrappee__methaneQuery_#t~ret15;havoc processEnvironment__wrappee__methaneQuery_#t~ret15; {4480#(= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~1)} is VALID [2020-07-28 19:00:07,738 INFO L280 TraceCheckUtils]: 24: Hoare triple {4480#(= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~1)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~1;havoc activatePump_#t~ret17, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret18, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {4477#false} is VALID [2020-07-28 19:00:07,739 INFO L280 TraceCheckUtils]: 25: Hoare triple {4477#false} isMethaneAlarm_#t~ret18 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret18 && isMethaneAlarm_#t~ret18 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret18;havoc isMethaneAlarm_#t~ret18;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {4477#false} is VALID [2020-07-28 19:00:07,739 INFO L280 TraceCheckUtils]: 26: Hoare triple {4477#false} activatePump_#t~ret17 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret17 && activatePump_#t~ret17 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret17;havoc activatePump_#t~ret17; {4477#false} is VALID [2020-07-28 19:00:07,739 INFO L280 TraceCheckUtils]: 27: Hoare triple {4477#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {4477#false} is VALID [2020-07-28 19:00:07,739 INFO L280 TraceCheckUtils]: 28: Hoare triple {4477#false} havoc __utac_acc__Specification2_spec__2_#t~ret36, __utac_acc__Specification2_spec__2_#t~ret37, __utac_acc__Specification2_spec__2_~tmp~5, __utac_acc__Specification2_spec__2_~tmp___0~2;havoc __utac_acc__Specification2_spec__2_~tmp~5;havoc __utac_acc__Specification2_spec__2_~tmp___0~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {4477#false} is VALID [2020-07-28 19:00:07,739 INFO L280 TraceCheckUtils]: 29: Hoare triple {4477#false} __utac_acc__Specification2_spec__2_#t~ret36 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret36 && __utac_acc__Specification2_spec__2_#t~ret36 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~5 := __utac_acc__Specification2_spec__2_#t~ret36;havoc __utac_acc__Specification2_spec__2_#t~ret36; {4477#false} is VALID [2020-07-28 19:00:07,740 INFO L280 TraceCheckUtils]: 30: Hoare triple {4477#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~5;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {4477#false} is VALID [2020-07-28 19:00:07,740 INFO L280 TraceCheckUtils]: 31: Hoare triple {4477#false} __utac_acc__Specification2_spec__2_#t~ret37 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret37 && __utac_acc__Specification2_spec__2_#t~ret37 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~2 := __utac_acc__Specification2_spec__2_#t~ret37;havoc __utac_acc__Specification2_spec__2_#t~ret37; {4477#false} is VALID [2020-07-28 19:00:07,740 INFO L280 TraceCheckUtils]: 32: Hoare triple {4477#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~2; {4477#false} is VALID [2020-07-28 19:00:07,740 INFO L280 TraceCheckUtils]: 33: Hoare triple {4477#false} assume 0 != ~methAndRunningLastTime~0; {4477#false} is VALID [2020-07-28 19:00:07,741 INFO L280 TraceCheckUtils]: 34: Hoare triple {4477#false} assume !false; {4477#false} is VALID [2020-07-28 19:00:07,743 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:07,743 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [957765386] [2020-07-28 19:00:07,743 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:07,744 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:00:07,744 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1600049709] [2020-07-28 19:00:07,747 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 35 [2020-07-28 19:00:07,747 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:07,747 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:00:07,790 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:07,790 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:00:07,790 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:07,790 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:00:07,791 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:00:07,791 INFO L87 Difference]: Start difference. First operand 138 states and 198 transitions. Second operand 5 states. [2020-07-28 19:00:08,678 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:08,678 INFO L93 Difference]: Finished difference Result 363 states and 517 transitions. [2020-07-28 19:00:08,678 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:00:08,679 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 35 [2020-07-28 19:00:08,679 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:08,679 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:08,682 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 216 transitions. [2020-07-28 19:00:08,682 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:08,684 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 216 transitions. [2020-07-28 19:00:08,685 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 216 transitions. [2020-07-28 19:00:08,938 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 216 edges. 216 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:08,945 INFO L225 Difference]: With dead ends: 363 [2020-07-28 19:00:08,946 INFO L226 Difference]: Without dead ends: 232 [2020-07-28 19:00:08,948 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:00:08,949 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 232 states. [2020-07-28 19:00:09,145 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 232 to 150. [2020-07-28 19:00:09,146 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:09,146 INFO L82 GeneralOperation]: Start isEquivalent. First operand 232 states. Second operand 150 states. [2020-07-28 19:00:09,146 INFO L74 IsIncluded]: Start isIncluded. First operand 232 states. Second operand 150 states. [2020-07-28 19:00:09,147 INFO L87 Difference]: Start difference. First operand 232 states. Second operand 150 states. [2020-07-28 19:00:09,154 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:09,154 INFO L93 Difference]: Finished difference Result 232 states and 322 transitions. [2020-07-28 19:00:09,154 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 322 transitions. [2020-07-28 19:00:09,155 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:09,155 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:09,155 INFO L74 IsIncluded]: Start isIncluded. First operand 150 states. Second operand 232 states. [2020-07-28 19:00:09,155 INFO L87 Difference]: Start difference. First operand 150 states. Second operand 232 states. [2020-07-28 19:00:09,162 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:09,162 INFO L93 Difference]: Finished difference Result 232 states and 322 transitions. [2020-07-28 19:00:09,163 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 322 transitions. [2020-07-28 19:00:09,163 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:09,163 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:09,164 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:09,164 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:09,164 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 150 states. [2020-07-28 19:00:09,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150 states to 150 states and 210 transitions. [2020-07-28 19:00:09,168 INFO L78 Accepts]: Start accepts. Automaton has 150 states and 210 transitions. Word has length 35 [2020-07-28 19:00:09,169 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:09,169 INFO L479 AbstractCegarLoop]: Abstraction has 150 states and 210 transitions. [2020-07-28 19:00:09,169 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:00:09,169 INFO L276 IsEmpty]: Start isEmpty. Operand 150 states and 210 transitions. [2020-07-28 19:00:09,170 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 19:00:09,170 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:09,170 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:09,170 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:00:09,171 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:09,171 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:09,171 INFO L82 PathProgramCache]: Analyzing trace with hash 1078894514, now seen corresponding path program 1 times [2020-07-28 19:00:09,171 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:09,172 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [748555977] [2020-07-28 19:00:09,172 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:09,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:09,314 INFO L280 TraceCheckUtils]: 0: Hoare triple {5675#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {5675#true} is VALID [2020-07-28 19:00:09,314 INFO L280 TraceCheckUtils]: 1: Hoare triple {5675#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {5675#true} is VALID [2020-07-28 19:00:09,314 INFO L280 TraceCheckUtils]: 2: Hoare triple {5675#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; {5675#true} is VALID [2020-07-28 19:00:09,315 INFO L280 TraceCheckUtils]: 3: Hoare triple {5675#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {5675#true} is VALID [2020-07-28 19:00:09,315 INFO L280 TraceCheckUtils]: 4: Hoare triple {5675#true} assume 0 != main_~tmp~9; {5675#true} is VALID [2020-07-28 19:00:09,315 INFO L280 TraceCheckUtils]: 5: Hoare triple {5675#true} ~methAndRunningLastTime~0 := 0; {5675#true} is VALID [2020-07-28 19:00:09,315 INFO L280 TraceCheckUtils]: 6: Hoare triple {5675#true} havoc test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {5675#true} is VALID [2020-07-28 19:00:09,316 INFO L280 TraceCheckUtils]: 7: Hoare triple {5675#true} assume !false; {5675#true} is VALID [2020-07-28 19:00:09,316 INFO L280 TraceCheckUtils]: 8: Hoare triple {5675#true} assume test_~splverifierCounter~0 < 4; {5675#true} is VALID [2020-07-28 19:00:09,316 INFO L280 TraceCheckUtils]: 9: Hoare triple {5675#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp~0 := test_#t~nondet11;havoc test_#t~nondet11; {5675#true} is VALID [2020-07-28 19:00:09,316 INFO L280 TraceCheckUtils]: 10: Hoare triple {5675#true} assume !(0 != test_~tmp~0); {5675#true} is VALID [2020-07-28 19:00:09,317 INFO L280 TraceCheckUtils]: 11: Hoare triple {5675#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___0~0 := test_#t~nondet12;havoc test_#t~nondet12; {5675#true} is VALID [2020-07-28 19:00:09,317 INFO L280 TraceCheckUtils]: 12: Hoare triple {5675#true} assume !(0 != test_~tmp___0~0); {5675#true} is VALID [2020-07-28 19:00:09,317 INFO L280 TraceCheckUtils]: 13: Hoare triple {5675#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___2~0 := test_#t~nondet13;havoc test_#t~nondet13; {5675#true} is VALID [2020-07-28 19:00:09,318 INFO L280 TraceCheckUtils]: 14: Hoare triple {5675#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {5677#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:00:09,319 INFO L280 TraceCheckUtils]: 15: Hoare triple {5677#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {5677#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:00:09,319 INFO L280 TraceCheckUtils]: 16: Hoare triple {5677#(= 1 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret16, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {5675#true} is VALID [2020-07-28 19:00:09,319 INFO L280 TraceCheckUtils]: 17: Hoare triple {5675#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret15, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {5675#true} is VALID [2020-07-28 19:00:09,319 INFO L280 TraceCheckUtils]: 18: Hoare triple {5675#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~7, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~7;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {5675#true} is VALID [2020-07-28 19:00:09,320 INFO L280 TraceCheckUtils]: 19: Hoare triple {5675#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {5678#(not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))} is VALID [2020-07-28 19:00:09,323 INFO L280 TraceCheckUtils]: 20: Hoare triple {5678#(not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {5679#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4))} is VALID [2020-07-28 19:00:09,324 INFO L280 TraceCheckUtils]: 21: Hoare triple {5679#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4))} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {5676#false} is VALID [2020-07-28 19:00:09,324 INFO L280 TraceCheckUtils]: 22: Hoare triple {5676#false} isHighWaterLevel_~retValue_acc~7 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~7; {5676#false} is VALID [2020-07-28 19:00:09,325 INFO L280 TraceCheckUtils]: 23: Hoare triple {5676#false} processEnvironment__wrappee__methaneQuery_#t~ret15 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret15 && processEnvironment__wrappee__methaneQuery_#t~ret15 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~1 := processEnvironment__wrappee__methaneQuery_#t~ret15;havoc processEnvironment__wrappee__methaneQuery_#t~ret15; {5676#false} is VALID [2020-07-28 19:00:09,325 INFO L280 TraceCheckUtils]: 24: Hoare triple {5676#false} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~1;havoc activatePump_#t~ret17, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret18, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {5676#false} is VALID [2020-07-28 19:00:09,325 INFO L280 TraceCheckUtils]: 25: Hoare triple {5676#false} isMethaneAlarm_#t~ret18 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret18 && isMethaneAlarm_#t~ret18 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret18;havoc isMethaneAlarm_#t~ret18;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {5676#false} is VALID [2020-07-28 19:00:09,326 INFO L280 TraceCheckUtils]: 26: Hoare triple {5676#false} activatePump_#t~ret17 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret17 && activatePump_#t~ret17 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret17;havoc activatePump_#t~ret17; {5676#false} is VALID [2020-07-28 19:00:09,326 INFO L280 TraceCheckUtils]: 27: Hoare triple {5676#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {5676#false} is VALID [2020-07-28 19:00:09,326 INFO L280 TraceCheckUtils]: 28: Hoare triple {5676#false} havoc __utac_acc__Specification2_spec__2_#t~ret36, __utac_acc__Specification2_spec__2_#t~ret37, __utac_acc__Specification2_spec__2_~tmp~5, __utac_acc__Specification2_spec__2_~tmp___0~2;havoc __utac_acc__Specification2_spec__2_~tmp~5;havoc __utac_acc__Specification2_spec__2_~tmp___0~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {5676#false} is VALID [2020-07-28 19:00:09,327 INFO L280 TraceCheckUtils]: 29: Hoare triple {5676#false} __utac_acc__Specification2_spec__2_#t~ret36 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret36 && __utac_acc__Specification2_spec__2_#t~ret36 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~5 := __utac_acc__Specification2_spec__2_#t~ret36;havoc __utac_acc__Specification2_spec__2_#t~ret36; {5676#false} is VALID [2020-07-28 19:00:09,327 INFO L280 TraceCheckUtils]: 30: Hoare triple {5676#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~5;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {5676#false} is VALID [2020-07-28 19:00:09,328 INFO L280 TraceCheckUtils]: 31: Hoare triple {5676#false} __utac_acc__Specification2_spec__2_#t~ret37 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret37 && __utac_acc__Specification2_spec__2_#t~ret37 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~2 := __utac_acc__Specification2_spec__2_#t~ret37;havoc __utac_acc__Specification2_spec__2_#t~ret37; {5676#false} is VALID [2020-07-28 19:00:09,329 INFO L280 TraceCheckUtils]: 32: Hoare triple {5676#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~2; {5676#false} is VALID [2020-07-28 19:00:09,329 INFO L280 TraceCheckUtils]: 33: Hoare triple {5676#false} assume 0 != ~methAndRunningLastTime~0; {5676#false} is VALID [2020-07-28 19:00:09,329 INFO L280 TraceCheckUtils]: 34: Hoare triple {5676#false} assume !false; {5676#false} is VALID [2020-07-28 19:00:09,331 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:09,332 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [748555977] [2020-07-28 19:00:09,332 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:09,332 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:00:09,333 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1112253739] [2020-07-28 19:00:09,333 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 35 [2020-07-28 19:00:09,334 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:09,334 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:00:09,386 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:09,386 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:00:09,386 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:09,387 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:00:09,387 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:00:09,387 INFO L87 Difference]: Start difference. First operand 150 states and 210 transitions. Second operand 5 states. [2020-07-28 19:00:10,476 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:10,477 INFO L93 Difference]: Finished difference Result 406 states and 560 transitions. [2020-07-28 19:00:10,477 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 19:00:10,477 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 35 [2020-07-28 19:00:10,478 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:10,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:10,481 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 373 transitions. [2020-07-28 19:00:10,481 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:10,484 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 373 transitions. [2020-07-28 19:00:10,484 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 373 transitions. [2020-07-28 19:00:10,935 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 373 edges. 373 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:10,942 INFO L225 Difference]: With dead ends: 406 [2020-07-28 19:00:10,943 INFO L226 Difference]: Without dead ends: 263 [2020-07-28 19:00:10,943 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:00:10,944 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 263 states. [2020-07-28 19:00:11,149 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 263 to 158. [2020-07-28 19:00:11,150 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:11,150 INFO L82 GeneralOperation]: Start isEquivalent. First operand 263 states. Second operand 158 states. [2020-07-28 19:00:11,150 INFO L74 IsIncluded]: Start isIncluded. First operand 263 states. Second operand 158 states. [2020-07-28 19:00:11,150 INFO L87 Difference]: Start difference. First operand 263 states. Second operand 158 states. [2020-07-28 19:00:11,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:11,157 INFO L93 Difference]: Finished difference Result 263 states and 353 transitions. [2020-07-28 19:00:11,157 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 353 transitions. [2020-07-28 19:00:11,158 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:11,158 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:11,158 INFO L74 IsIncluded]: Start isIncluded. First operand 158 states. Second operand 263 states. [2020-07-28 19:00:11,158 INFO L87 Difference]: Start difference. First operand 158 states. Second operand 263 states. [2020-07-28 19:00:11,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:11,165 INFO L93 Difference]: Finished difference Result 263 states and 353 transitions. [2020-07-28 19:00:11,166 INFO L276 IsEmpty]: Start isEmpty. Operand 263 states and 353 transitions. [2020-07-28 19:00:11,167 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:11,167 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:11,167 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:11,167 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:11,168 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 158 states. [2020-07-28 19:00:11,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 158 states to 158 states and 218 transitions. [2020-07-28 19:00:11,171 INFO L78 Accepts]: Start accepts. Automaton has 158 states and 218 transitions. Word has length 35 [2020-07-28 19:00:11,171 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:11,172 INFO L479 AbstractCegarLoop]: Abstraction has 158 states and 218 transitions. [2020-07-28 19:00:11,172 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:00:11,172 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 218 transitions. [2020-07-28 19:00:11,172 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 19:00:11,173 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:11,173 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:11,173 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:00:11,173 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:11,173 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:11,174 INFO L82 PathProgramCache]: Analyzing trace with hash 57826160, now seen corresponding path program 1 times [2020-07-28 19:00:11,174 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:11,175 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2035145687] [2020-07-28 19:00:11,176 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:11,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:11,275 INFO L280 TraceCheckUtils]: 0: Hoare triple {7011#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,276 INFO L280 TraceCheckUtils]: 1: Hoare triple {7013#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,277 INFO L280 TraceCheckUtils]: 2: Hoare triple {7013#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,278 INFO L280 TraceCheckUtils]: 3: Hoare triple {7013#(= 1 ~waterLevel~0)} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,279 INFO L280 TraceCheckUtils]: 4: Hoare triple {7013#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~9; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,279 INFO L280 TraceCheckUtils]: 5: Hoare triple {7013#(= 1 ~waterLevel~0)} ~methAndRunningLastTime~0 := 0; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,280 INFO L280 TraceCheckUtils]: 6: Hoare triple {7013#(= 1 ~waterLevel~0)} havoc test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,281 INFO L280 TraceCheckUtils]: 7: Hoare triple {7013#(= 1 ~waterLevel~0)} assume !false; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,285 INFO L280 TraceCheckUtils]: 8: Hoare triple {7013#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,286 INFO L280 TraceCheckUtils]: 9: Hoare triple {7013#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp~0 := test_#t~nondet11;havoc test_#t~nondet11; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,287 INFO L280 TraceCheckUtils]: 10: Hoare triple {7013#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~0); {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,288 INFO L280 TraceCheckUtils]: 11: Hoare triple {7013#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___0~0 := test_#t~nondet12;havoc test_#t~nondet12; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,288 INFO L280 TraceCheckUtils]: 12: Hoare triple {7013#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,289 INFO L280 TraceCheckUtils]: 13: Hoare triple {7013#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___2~0 := test_#t~nondet13;havoc test_#t~nondet13; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,290 INFO L280 TraceCheckUtils]: 14: Hoare triple {7013#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,291 INFO L280 TraceCheckUtils]: 15: Hoare triple {7013#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,292 INFO L280 TraceCheckUtils]: 16: Hoare triple {7013#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret16, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,292 INFO L280 TraceCheckUtils]: 17: Hoare triple {7013#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret15, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,293 INFO L280 TraceCheckUtils]: 18: Hoare triple {7013#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~7, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~7;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {7013#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:11,294 INFO L280 TraceCheckUtils]: 19: Hoare triple {7013#(= 1 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {7012#false} is VALID [2020-07-28 19:00:11,294 INFO L280 TraceCheckUtils]: 20: Hoare triple {7012#false} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {7012#false} is VALID [2020-07-28 19:00:11,294 INFO L280 TraceCheckUtils]: 21: Hoare triple {7012#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {7012#false} is VALID [2020-07-28 19:00:11,295 INFO L280 TraceCheckUtils]: 22: Hoare triple {7012#false} isHighWaterLevel_~retValue_acc~7 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~7; {7012#false} is VALID [2020-07-28 19:00:11,295 INFO L280 TraceCheckUtils]: 23: Hoare triple {7012#false} processEnvironment__wrappee__methaneQuery_#t~ret15 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret15 && processEnvironment__wrappee__methaneQuery_#t~ret15 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~1 := processEnvironment__wrappee__methaneQuery_#t~ret15;havoc processEnvironment__wrappee__methaneQuery_#t~ret15; {7012#false} is VALID [2020-07-28 19:00:11,295 INFO L280 TraceCheckUtils]: 24: Hoare triple {7012#false} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~1;havoc activatePump_#t~ret17, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret18, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {7012#false} is VALID [2020-07-28 19:00:11,297 INFO L280 TraceCheckUtils]: 25: Hoare triple {7012#false} isMethaneAlarm_#t~ret18 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret18 && isMethaneAlarm_#t~ret18 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret18;havoc isMethaneAlarm_#t~ret18;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {7012#false} is VALID [2020-07-28 19:00:11,298 INFO L280 TraceCheckUtils]: 26: Hoare triple {7012#false} activatePump_#t~ret17 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret17 && activatePump_#t~ret17 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret17;havoc activatePump_#t~ret17; {7012#false} is VALID [2020-07-28 19:00:11,298 INFO L280 TraceCheckUtils]: 27: Hoare triple {7012#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {7012#false} is VALID [2020-07-28 19:00:11,298 INFO L280 TraceCheckUtils]: 28: Hoare triple {7012#false} havoc __utac_acc__Specification2_spec__2_#t~ret36, __utac_acc__Specification2_spec__2_#t~ret37, __utac_acc__Specification2_spec__2_~tmp~5, __utac_acc__Specification2_spec__2_~tmp___0~2;havoc __utac_acc__Specification2_spec__2_~tmp~5;havoc __utac_acc__Specification2_spec__2_~tmp___0~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {7012#false} is VALID [2020-07-28 19:00:11,298 INFO L280 TraceCheckUtils]: 29: Hoare triple {7012#false} __utac_acc__Specification2_spec__2_#t~ret36 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret36 && __utac_acc__Specification2_spec__2_#t~ret36 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~5 := __utac_acc__Specification2_spec__2_#t~ret36;havoc __utac_acc__Specification2_spec__2_#t~ret36; {7012#false} is VALID [2020-07-28 19:00:11,299 INFO L280 TraceCheckUtils]: 30: Hoare triple {7012#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~5;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {7012#false} is VALID [2020-07-28 19:00:11,299 INFO L280 TraceCheckUtils]: 31: Hoare triple {7012#false} __utac_acc__Specification2_spec__2_#t~ret37 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret37 && __utac_acc__Specification2_spec__2_#t~ret37 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~2 := __utac_acc__Specification2_spec__2_#t~ret37;havoc __utac_acc__Specification2_spec__2_#t~ret37; {7012#false} is VALID [2020-07-28 19:00:11,299 INFO L280 TraceCheckUtils]: 32: Hoare triple {7012#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~2; {7012#false} is VALID [2020-07-28 19:00:11,299 INFO L280 TraceCheckUtils]: 33: Hoare triple {7012#false} assume 0 != ~methAndRunningLastTime~0; {7012#false} is VALID [2020-07-28 19:00:11,299 INFO L280 TraceCheckUtils]: 34: Hoare triple {7012#false} assume !false; {7012#false} is VALID [2020-07-28 19:00:11,304 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:11,304 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2035145687] [2020-07-28 19:00:11,305 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:11,305 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:00:11,305 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [594162684] [2020-07-28 19:00:11,305 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 35 [2020-07-28 19:00:11,306 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:11,306 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:11,354 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:11,354 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:11,354 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:11,354 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:11,355 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:11,355 INFO L87 Difference]: Start difference. First operand 158 states and 218 transitions. Second operand 3 states. [2020-07-28 19:00:11,885 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:11,885 INFO L93 Difference]: Finished difference Result 363 states and 500 transitions. [2020-07-28 19:00:11,886 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:11,886 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 35 [2020-07-28 19:00:11,886 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:11,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:11,888 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 186 transitions. [2020-07-28 19:00:11,888 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:11,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 186 transitions. [2020-07-28 19:00:11,889 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 186 transitions. [2020-07-28 19:00:12,081 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 186 edges. 186 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:12,089 INFO L225 Difference]: With dead ends: 363 [2020-07-28 19:00:12,089 INFO L226 Difference]: Without dead ends: 212 [2020-07-28 19:00:12,089 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:12,090 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 212 states. [2020-07-28 19:00:12,456 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 212 to 212. [2020-07-28 19:00:12,456 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:12,456 INFO L82 GeneralOperation]: Start isEquivalent. First operand 212 states. Second operand 212 states. [2020-07-28 19:00:12,457 INFO L74 IsIncluded]: Start isIncluded. First operand 212 states. Second operand 212 states. [2020-07-28 19:00:12,457 INFO L87 Difference]: Start difference. First operand 212 states. Second operand 212 states. [2020-07-28 19:00:12,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:12,465 INFO L93 Difference]: Finished difference Result 212 states and 285 transitions. [2020-07-28 19:00:12,466 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 285 transitions. [2020-07-28 19:00:12,466 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:12,466 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:12,466 INFO L74 IsIncluded]: Start isIncluded. First operand 212 states. Second operand 212 states. [2020-07-28 19:00:12,467 INFO L87 Difference]: Start difference. First operand 212 states. Second operand 212 states. [2020-07-28 19:00:12,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:12,471 INFO L93 Difference]: Finished difference Result 212 states and 285 transitions. [2020-07-28 19:00:12,471 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 285 transitions. [2020-07-28 19:00:12,472 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:12,472 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:12,472 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:12,473 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:12,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 212 states. [2020-07-28 19:00:12,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 212 states to 212 states and 285 transitions. [2020-07-28 19:00:12,478 INFO L78 Accepts]: Start accepts. Automaton has 212 states and 285 transitions. Word has length 35 [2020-07-28 19:00:12,478 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:12,478 INFO L479 AbstractCegarLoop]: Abstraction has 212 states and 285 transitions. [2020-07-28 19:00:12,479 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:12,479 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 285 transitions. [2020-07-28 19:00:12,481 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:00:12,481 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:12,482 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:12,482 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:00:12,482 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:12,483 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:12,484 INFO L82 PathProgramCache]: Analyzing trace with hash -266832336, now seen corresponding path program 1 times [2020-07-28 19:00:12,484 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:12,485 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [229081758] [2020-07-28 19:00:12,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:12,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:12,545 INFO L280 TraceCheckUtils]: 0: Hoare triple {8248#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {8248#true} is VALID [2020-07-28 19:00:12,545 INFO L280 TraceCheckUtils]: 1: Hoare triple {8248#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {8248#true} is VALID [2020-07-28 19:00:12,545 INFO L280 TraceCheckUtils]: 2: Hoare triple {8248#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; {8248#true} is VALID [2020-07-28 19:00:12,545 INFO L280 TraceCheckUtils]: 3: Hoare triple {8248#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {8248#true} is VALID [2020-07-28 19:00:12,546 INFO L280 TraceCheckUtils]: 4: Hoare triple {8248#true} assume 0 != main_~tmp~9; {8248#true} is VALID [2020-07-28 19:00:12,547 INFO L280 TraceCheckUtils]: 5: Hoare triple {8248#true} ~methAndRunningLastTime~0 := 0; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,547 INFO L280 TraceCheckUtils]: 6: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} havoc test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,548 INFO L280 TraceCheckUtils]: 7: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume !false; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,549 INFO L280 TraceCheckUtils]: 8: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume test_~splverifierCounter~0 < 4; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,550 INFO L280 TraceCheckUtils]: 9: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp~0 := test_#t~nondet11;havoc test_#t~nondet11; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,550 INFO L280 TraceCheckUtils]: 10: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume 0 != test_~tmp~0; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,551 INFO L280 TraceCheckUtils]: 11: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,552 INFO L280 TraceCheckUtils]: 12: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___0~0 := test_#t~nondet12;havoc test_#t~nondet12; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,553 INFO L280 TraceCheckUtils]: 13: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume !(0 != test_~tmp___0~0); {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,553 INFO L280 TraceCheckUtils]: 14: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___2~0 := test_#t~nondet13;havoc test_#t~nondet13; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,554 INFO L280 TraceCheckUtils]: 15: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,555 INFO L280 TraceCheckUtils]: 16: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume !(0 != ~pumpRunning~0); {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,556 INFO L280 TraceCheckUtils]: 17: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret16, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,556 INFO L280 TraceCheckUtils]: 18: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret15, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,557 INFO L280 TraceCheckUtils]: 19: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~7, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~7;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,558 INFO L280 TraceCheckUtils]: 20: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,558 INFO L280 TraceCheckUtils]: 21: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,559 INFO L280 TraceCheckUtils]: 22: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,560 INFO L280 TraceCheckUtils]: 23: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} isHighWaterLevel_~retValue_acc~7 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~7; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,561 INFO L280 TraceCheckUtils]: 24: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} processEnvironment__wrappee__methaneQuery_#t~ret15 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret15 && processEnvironment__wrappee__methaneQuery_#t~ret15 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~1 := processEnvironment__wrappee__methaneQuery_#t~ret15;havoc processEnvironment__wrappee__methaneQuery_#t~ret15; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,561 INFO L280 TraceCheckUtils]: 25: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~1;havoc activatePump_#t~ret17, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret18, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,562 INFO L280 TraceCheckUtils]: 26: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} isMethaneAlarm_#t~ret18 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret18 && isMethaneAlarm_#t~ret18 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret18;havoc isMethaneAlarm_#t~ret18;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,563 INFO L280 TraceCheckUtils]: 27: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} activatePump_#t~ret17 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret17 && activatePump_#t~ret17 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret17;havoc activatePump_#t~ret17; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,563 INFO L280 TraceCheckUtils]: 28: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,564 INFO L280 TraceCheckUtils]: 29: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} havoc __utac_acc__Specification2_spec__2_#t~ret36, __utac_acc__Specification2_spec__2_#t~ret37, __utac_acc__Specification2_spec__2_~tmp~5, __utac_acc__Specification2_spec__2_~tmp___0~2;havoc __utac_acc__Specification2_spec__2_~tmp~5;havoc __utac_acc__Specification2_spec__2_~tmp___0~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,565 INFO L280 TraceCheckUtils]: 30: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} __utac_acc__Specification2_spec__2_#t~ret36 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret36 && __utac_acc__Specification2_spec__2_#t~ret36 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~5 := __utac_acc__Specification2_spec__2_#t~ret36;havoc __utac_acc__Specification2_spec__2_#t~ret36; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,565 INFO L280 TraceCheckUtils]: 31: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~5;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,566 INFO L280 TraceCheckUtils]: 32: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} __utac_acc__Specification2_spec__2_#t~ret37 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret37 && __utac_acc__Specification2_spec__2_#t~ret37 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~2 := __utac_acc__Specification2_spec__2_#t~ret37;havoc __utac_acc__Specification2_spec__2_#t~ret37; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,567 INFO L280 TraceCheckUtils]: 33: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~2; {8250#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:12,567 INFO L280 TraceCheckUtils]: 34: Hoare triple {8250#(= 0 ~methAndRunningLastTime~0)} assume 0 != ~methAndRunningLastTime~0; {8249#false} is VALID [2020-07-28 19:00:12,568 INFO L280 TraceCheckUtils]: 35: Hoare triple {8249#false} assume !false; {8249#false} is VALID [2020-07-28 19:00:12,570 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:12,570 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [229081758] [2020-07-28 19:00:12,570 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:12,570 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:00:12,571 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1090160699] [2020-07-28 19:00:12,571 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 36 [2020-07-28 19:00:12,572 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:12,572 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:12,619 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:12,619 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:12,619 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:12,620 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:12,620 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:12,620 INFO L87 Difference]: Start difference. First operand 212 states and 285 transitions. Second operand 3 states. [2020-07-28 19:00:13,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:13,357 INFO L93 Difference]: Finished difference Result 339 states and 460 transitions. [2020-07-28 19:00:13,357 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:13,357 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 36 [2020-07-28 19:00:13,358 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:13,358 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:13,359 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 149 transitions. [2020-07-28 19:00:13,359 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:13,360 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 149 transitions. [2020-07-28 19:00:13,360 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 149 transitions. [2020-07-28 19:00:13,533 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 149 edges. 149 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:13,541 INFO L225 Difference]: With dead ends: 339 [2020-07-28 19:00:13,542 INFO L226 Difference]: Without dead ends: 337 [2020-07-28 19:00:13,542 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:13,543 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 337 states. [2020-07-28 19:00:14,001 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 337 to 307. [2020-07-28 19:00:14,001 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:14,001 INFO L82 GeneralOperation]: Start isEquivalent. First operand 337 states. Second operand 307 states. [2020-07-28 19:00:14,001 INFO L74 IsIncluded]: Start isIncluded. First operand 337 states. Second operand 307 states. [2020-07-28 19:00:14,002 INFO L87 Difference]: Start difference. First operand 337 states. Second operand 307 states. [2020-07-28 19:00:14,011 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:14,012 INFO L93 Difference]: Finished difference Result 337 states and 457 transitions. [2020-07-28 19:00:14,012 INFO L276 IsEmpty]: Start isEmpty. Operand 337 states and 457 transitions. [2020-07-28 19:00:14,013 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:14,013 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:14,013 INFO L74 IsIncluded]: Start isIncluded. First operand 307 states. Second operand 337 states. [2020-07-28 19:00:14,013 INFO L87 Difference]: Start difference. First operand 307 states. Second operand 337 states. [2020-07-28 19:00:14,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:14,022 INFO L93 Difference]: Finished difference Result 337 states and 457 transitions. [2020-07-28 19:00:14,022 INFO L276 IsEmpty]: Start isEmpty. Operand 337 states and 457 transitions. [2020-07-28 19:00:14,023 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:14,023 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:14,023 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:14,023 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:14,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 307 states. [2020-07-28 19:00:14,032 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 307 states to 307 states and 425 transitions. [2020-07-28 19:00:14,032 INFO L78 Accepts]: Start accepts. Automaton has 307 states and 425 transitions. Word has length 36 [2020-07-28 19:00:14,032 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:14,032 INFO L479 AbstractCegarLoop]: Abstraction has 307 states and 425 transitions. [2020-07-28 19:00:14,032 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:14,032 INFO L276 IsEmpty]: Start isEmpty. Operand 307 states and 425 transitions. [2020-07-28 19:00:14,034 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2020-07-28 19:00:14,035 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:14,035 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:14,035 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:00:14,036 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:14,036 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:14,036 INFO L82 PathProgramCache]: Analyzing trace with hash 1113567680, now seen corresponding path program 1 times [2020-07-28 19:00:14,036 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:14,036 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [860500199] [2020-07-28 19:00:14,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:14,073 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:14,117 INFO L280 TraceCheckUtils]: 0: Hoare triple {9839#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {9839#true} is VALID [2020-07-28 19:00:14,117 INFO L280 TraceCheckUtils]: 1: Hoare triple {9839#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {9839#true} is VALID [2020-07-28 19:00:14,117 INFO L280 TraceCheckUtils]: 2: Hoare triple {9839#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; {9839#true} is VALID [2020-07-28 19:00:14,118 INFO L280 TraceCheckUtils]: 3: Hoare triple {9839#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {9839#true} is VALID [2020-07-28 19:00:14,118 INFO L280 TraceCheckUtils]: 4: Hoare triple {9839#true} assume 0 != main_~tmp~9; {9839#true} is VALID [2020-07-28 19:00:14,118 INFO L280 TraceCheckUtils]: 5: Hoare triple {9839#true} ~methAndRunningLastTime~0 := 0; {9839#true} is VALID [2020-07-28 19:00:14,121 INFO L280 TraceCheckUtils]: 6: Hoare triple {9839#true} havoc test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {9839#true} is VALID [2020-07-28 19:00:14,122 INFO L280 TraceCheckUtils]: 7: Hoare triple {9839#true} assume !false; {9839#true} is VALID [2020-07-28 19:00:14,122 INFO L280 TraceCheckUtils]: 8: Hoare triple {9839#true} assume test_~splverifierCounter~0 < 4; {9839#true} is VALID [2020-07-28 19:00:14,122 INFO L280 TraceCheckUtils]: 9: Hoare triple {9839#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp~0 := test_#t~nondet11;havoc test_#t~nondet11; {9839#true} is VALID [2020-07-28 19:00:14,122 INFO L280 TraceCheckUtils]: 10: Hoare triple {9839#true} assume 0 != test_~tmp~0; {9839#true} is VALID [2020-07-28 19:00:14,123 INFO L280 TraceCheckUtils]: 11: Hoare triple {9839#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9839#true} is VALID [2020-07-28 19:00:14,123 INFO L280 TraceCheckUtils]: 12: Hoare triple {9839#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___0~0 := test_#t~nondet12;havoc test_#t~nondet12; {9839#true} is VALID [2020-07-28 19:00:14,123 INFO L280 TraceCheckUtils]: 13: Hoare triple {9839#true} assume !(0 != test_~tmp___0~0); {9839#true} is VALID [2020-07-28 19:00:14,123 INFO L280 TraceCheckUtils]: 14: Hoare triple {9839#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___2~0 := test_#t~nondet13;havoc test_#t~nondet13; {9839#true} is VALID [2020-07-28 19:00:14,123 INFO L280 TraceCheckUtils]: 15: Hoare triple {9839#true} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___1~0 := test_#t~nondet14;havoc test_#t~nondet14; {9839#true} is VALID [2020-07-28 19:00:14,124 INFO L280 TraceCheckUtils]: 16: Hoare triple {9839#true} assume 0 != test_~tmp___1~0; {9839#true} is VALID [2020-07-28 19:00:14,124 INFO L280 TraceCheckUtils]: 17: Hoare triple {9839#true} assume !(0 != ~pumpRunning~0); {9839#true} is VALID [2020-07-28 19:00:14,129 INFO L280 TraceCheckUtils]: 18: Hoare triple {9839#true} ~systemActive~0 := 0; {9841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:00:14,130 INFO L280 TraceCheckUtils]: 19: Hoare triple {9841#(= 0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {9841#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:00:14,132 INFO L280 TraceCheckUtils]: 20: Hoare triple {9841#(= 0 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret16, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {9840#false} is VALID [2020-07-28 19:00:14,132 INFO L280 TraceCheckUtils]: 21: Hoare triple {9840#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret15, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {9840#false} is VALID [2020-07-28 19:00:14,132 INFO L280 TraceCheckUtils]: 22: Hoare triple {9840#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~7, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~7;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {9840#false} is VALID [2020-07-28 19:00:14,133 INFO L280 TraceCheckUtils]: 23: Hoare triple {9840#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {9840#false} is VALID [2020-07-28 19:00:14,133 INFO L280 TraceCheckUtils]: 24: Hoare triple {9840#false} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {9840#false} is VALID [2020-07-28 19:00:14,133 INFO L280 TraceCheckUtils]: 25: Hoare triple {9840#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {9840#false} is VALID [2020-07-28 19:00:14,133 INFO L280 TraceCheckUtils]: 26: Hoare triple {9840#false} isHighWaterLevel_~retValue_acc~7 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~7; {9840#false} is VALID [2020-07-28 19:00:14,134 INFO L280 TraceCheckUtils]: 27: Hoare triple {9840#false} processEnvironment__wrappee__methaneQuery_#t~ret15 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret15 && processEnvironment__wrappee__methaneQuery_#t~ret15 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~1 := processEnvironment__wrappee__methaneQuery_#t~ret15;havoc processEnvironment__wrappee__methaneQuery_#t~ret15; {9840#false} is VALID [2020-07-28 19:00:14,134 INFO L280 TraceCheckUtils]: 28: Hoare triple {9840#false} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~1;havoc activatePump_#t~ret17, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret18, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {9840#false} is VALID [2020-07-28 19:00:14,134 INFO L280 TraceCheckUtils]: 29: Hoare triple {9840#false} isMethaneAlarm_#t~ret18 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret18 && isMethaneAlarm_#t~ret18 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret18;havoc isMethaneAlarm_#t~ret18;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {9840#false} is VALID [2020-07-28 19:00:14,134 INFO L280 TraceCheckUtils]: 30: Hoare triple {9840#false} activatePump_#t~ret17 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret17 && activatePump_#t~ret17 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret17;havoc activatePump_#t~ret17; {9840#false} is VALID [2020-07-28 19:00:14,134 INFO L280 TraceCheckUtils]: 31: Hoare triple {9840#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {9840#false} is VALID [2020-07-28 19:00:14,134 INFO L280 TraceCheckUtils]: 32: Hoare triple {9840#false} havoc __utac_acc__Specification2_spec__2_#t~ret36, __utac_acc__Specification2_spec__2_#t~ret37, __utac_acc__Specification2_spec__2_~tmp~5, __utac_acc__Specification2_spec__2_~tmp___0~2;havoc __utac_acc__Specification2_spec__2_~tmp~5;havoc __utac_acc__Specification2_spec__2_~tmp___0~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {9840#false} is VALID [2020-07-28 19:00:14,135 INFO L280 TraceCheckUtils]: 33: Hoare triple {9840#false} __utac_acc__Specification2_spec__2_#t~ret36 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret36 && __utac_acc__Specification2_spec__2_#t~ret36 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~5 := __utac_acc__Specification2_spec__2_#t~ret36;havoc __utac_acc__Specification2_spec__2_#t~ret36; {9840#false} is VALID [2020-07-28 19:00:14,135 INFO L280 TraceCheckUtils]: 34: Hoare triple {9840#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~5;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {9840#false} is VALID [2020-07-28 19:00:14,135 INFO L280 TraceCheckUtils]: 35: Hoare triple {9840#false} __utac_acc__Specification2_spec__2_#t~ret37 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret37 && __utac_acc__Specification2_spec__2_#t~ret37 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~2 := __utac_acc__Specification2_spec__2_#t~ret37;havoc __utac_acc__Specification2_spec__2_#t~ret37; {9840#false} is VALID [2020-07-28 19:00:14,135 INFO L280 TraceCheckUtils]: 36: Hoare triple {9840#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~2; {9840#false} is VALID [2020-07-28 19:00:14,135 INFO L280 TraceCheckUtils]: 37: Hoare triple {9840#false} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {9840#false} is VALID [2020-07-28 19:00:14,136 INFO L280 TraceCheckUtils]: 38: Hoare triple {9840#false} assume !false; {9840#false} is VALID [2020-07-28 19:00:14,136 INFO L280 TraceCheckUtils]: 39: Hoare triple {9840#false} assume test_~splverifierCounter~0 < 4; {9840#false} is VALID [2020-07-28 19:00:14,136 INFO L280 TraceCheckUtils]: 40: Hoare triple {9840#false} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp~0 := test_#t~nondet11;havoc test_#t~nondet11; {9840#false} is VALID [2020-07-28 19:00:14,136 INFO L280 TraceCheckUtils]: 41: Hoare triple {9840#false} assume !(0 != test_~tmp~0); {9840#false} is VALID [2020-07-28 19:00:14,136 INFO L280 TraceCheckUtils]: 42: Hoare triple {9840#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___0~0 := test_#t~nondet12;havoc test_#t~nondet12; {9840#false} is VALID [2020-07-28 19:00:14,137 INFO L280 TraceCheckUtils]: 43: Hoare triple {9840#false} assume !(0 != test_~tmp___0~0); {9840#false} is VALID [2020-07-28 19:00:14,137 INFO L280 TraceCheckUtils]: 44: Hoare triple {9840#false} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___2~0 := test_#t~nondet13;havoc test_#t~nondet13; {9840#false} is VALID [2020-07-28 19:00:14,137 INFO L280 TraceCheckUtils]: 45: Hoare triple {9840#false} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___1~0 := test_#t~nondet14;havoc test_#t~nondet14; {9840#false} is VALID [2020-07-28 19:00:14,137 INFO L280 TraceCheckUtils]: 46: Hoare triple {9840#false} assume !(0 != test_~tmp___1~0); {9840#false} is VALID [2020-07-28 19:00:14,137 INFO L280 TraceCheckUtils]: 47: Hoare triple {9840#false} assume 0 != ~pumpRunning~0; {9840#false} is VALID [2020-07-28 19:00:14,138 INFO L280 TraceCheckUtils]: 48: Hoare triple {9840#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {9840#false} is VALID [2020-07-28 19:00:14,138 INFO L280 TraceCheckUtils]: 49: Hoare triple {9840#false} assume !(0 != ~systemActive~0); {9840#false} is VALID [2020-07-28 19:00:14,138 INFO L280 TraceCheckUtils]: 50: Hoare triple {9840#false} havoc __utac_acc__Specification2_spec__2_#t~ret36, __utac_acc__Specification2_spec__2_#t~ret37, __utac_acc__Specification2_spec__2_~tmp~5, __utac_acc__Specification2_spec__2_~tmp___0~2;havoc __utac_acc__Specification2_spec__2_~tmp~5;havoc __utac_acc__Specification2_spec__2_~tmp___0~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {9840#false} is VALID [2020-07-28 19:00:14,138 INFO L280 TraceCheckUtils]: 51: Hoare triple {9840#false} __utac_acc__Specification2_spec__2_#t~ret36 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret36 && __utac_acc__Specification2_spec__2_#t~ret36 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~5 := __utac_acc__Specification2_spec__2_#t~ret36;havoc __utac_acc__Specification2_spec__2_#t~ret36; {9840#false} is VALID [2020-07-28 19:00:14,138 INFO L280 TraceCheckUtils]: 52: Hoare triple {9840#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~5;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {9840#false} is VALID [2020-07-28 19:00:14,139 INFO L280 TraceCheckUtils]: 53: Hoare triple {9840#false} __utac_acc__Specification2_spec__2_#t~ret37 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret37 && __utac_acc__Specification2_spec__2_#t~ret37 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~2 := __utac_acc__Specification2_spec__2_#t~ret37;havoc __utac_acc__Specification2_spec__2_#t~ret37; {9840#false} is VALID [2020-07-28 19:00:14,139 INFO L280 TraceCheckUtils]: 54: Hoare triple {9840#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~2; {9840#false} is VALID [2020-07-28 19:00:14,139 INFO L280 TraceCheckUtils]: 55: Hoare triple {9840#false} assume 0 != ~methAndRunningLastTime~0; {9840#false} is VALID [2020-07-28 19:00:14,139 INFO L280 TraceCheckUtils]: 56: Hoare triple {9840#false} assume !false; {9840#false} is VALID [2020-07-28 19:00:14,142 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 19:00:14,143 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [860500199] [2020-07-28 19:00:14,143 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:14,143 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:00:14,143 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1646636046] [2020-07-28 19:00:14,145 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 57 [2020-07-28 19:00:14,145 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:14,145 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:14,201 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 52 edges. 52 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:14,201 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:14,202 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:14,202 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:14,202 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:14,202 INFO L87 Difference]: Start difference. First operand 307 states and 425 transitions. Second operand 3 states. [2020-07-28 19:00:15,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:15,059 INFO L93 Difference]: Finished difference Result 503 states and 694 transitions. [2020-07-28 19:00:15,059 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:15,060 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 57 [2020-07-28 19:00:15,060 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:15,060 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:15,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 176 transitions. [2020-07-28 19:00:15,063 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:15,066 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 176 transitions. [2020-07-28 19:00:15,066 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 176 transitions. [2020-07-28 19:00:15,260 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 176 edges. 176 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:15,265 INFO L225 Difference]: With dead ends: 503 [2020-07-28 19:00:15,265 INFO L226 Difference]: Without dead ends: 203 [2020-07-28 19:00:15,266 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:15,267 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 203 states. [2020-07-28 19:00:15,666 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 203 to 195. [2020-07-28 19:00:15,666 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:15,667 INFO L82 GeneralOperation]: Start isEquivalent. First operand 203 states. Second operand 195 states. [2020-07-28 19:00:15,667 INFO L74 IsIncluded]: Start isIncluded. First operand 203 states. Second operand 195 states. [2020-07-28 19:00:15,667 INFO L87 Difference]: Start difference. First operand 203 states. Second operand 195 states. [2020-07-28 19:00:15,672 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:15,673 INFO L93 Difference]: Finished difference Result 203 states and 273 transitions. [2020-07-28 19:00:15,673 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 273 transitions. [2020-07-28 19:00:15,674 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:15,675 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:15,675 INFO L74 IsIncluded]: Start isIncluded. First operand 195 states. Second operand 203 states. [2020-07-28 19:00:15,675 INFO L87 Difference]: Start difference. First operand 195 states. Second operand 203 states. [2020-07-28 19:00:15,683 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:15,683 INFO L93 Difference]: Finished difference Result 203 states and 273 transitions. [2020-07-28 19:00:15,684 INFO L276 IsEmpty]: Start isEmpty. Operand 203 states and 273 transitions. [2020-07-28 19:00:15,685 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:15,685 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:15,686 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:15,686 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:15,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 195 states. [2020-07-28 19:00:15,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 195 states to 195 states and 264 transitions. [2020-07-28 19:00:15,692 INFO L78 Accepts]: Start accepts. Automaton has 195 states and 264 transitions. Word has length 57 [2020-07-28 19:00:15,692 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:15,692 INFO L479 AbstractCegarLoop]: Abstraction has 195 states and 264 transitions. [2020-07-28 19:00:15,692 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:15,692 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states and 264 transitions. [2020-07-28 19:00:15,694 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2020-07-28 19:00:15,694 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:15,694 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:15,695 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-28 19:00:15,695 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:15,695 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:15,696 INFO L82 PathProgramCache]: Analyzing trace with hash -1876529836, now seen corresponding path program 1 times [2020-07-28 19:00:15,696 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:15,697 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [63200467] [2020-07-28 19:00:15,697 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:15,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:15,826 INFO L280 TraceCheckUtils]: 0: Hoare triple {11237#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {11237#true} is VALID [2020-07-28 19:00:15,826 INFO L280 TraceCheckUtils]: 1: Hoare triple {11237#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {11237#true} is VALID [2020-07-28 19:00:15,826 INFO L280 TraceCheckUtils]: 2: Hoare triple {11237#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; {11237#true} is VALID [2020-07-28 19:00:15,827 INFO L280 TraceCheckUtils]: 3: Hoare triple {11237#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {11237#true} is VALID [2020-07-28 19:00:15,827 INFO L280 TraceCheckUtils]: 4: Hoare triple {11237#true} assume 0 != main_~tmp~9; {11237#true} is VALID [2020-07-28 19:00:15,827 INFO L280 TraceCheckUtils]: 5: Hoare triple {11237#true} ~methAndRunningLastTime~0 := 0; {11237#true} is VALID [2020-07-28 19:00:15,827 INFO L280 TraceCheckUtils]: 6: Hoare triple {11237#true} havoc test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11237#true} is VALID [2020-07-28 19:00:15,828 INFO L280 TraceCheckUtils]: 7: Hoare triple {11237#true} assume !false; {11237#true} is VALID [2020-07-28 19:00:15,828 INFO L280 TraceCheckUtils]: 8: Hoare triple {11237#true} assume test_~splverifierCounter~0 < 4; {11237#true} is VALID [2020-07-28 19:00:15,828 INFO L280 TraceCheckUtils]: 9: Hoare triple {11237#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp~0 := test_#t~nondet11;havoc test_#t~nondet11; {11237#true} is VALID [2020-07-28 19:00:15,828 INFO L280 TraceCheckUtils]: 10: Hoare triple {11237#true} assume 0 != test_~tmp~0; {11237#true} is VALID [2020-07-28 19:00:15,829 INFO L280 TraceCheckUtils]: 11: Hoare triple {11237#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11237#true} is VALID [2020-07-28 19:00:15,829 INFO L280 TraceCheckUtils]: 12: Hoare triple {11237#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___0~0 := test_#t~nondet12;havoc test_#t~nondet12; {11237#true} is VALID [2020-07-28 19:00:15,829 INFO L280 TraceCheckUtils]: 13: Hoare triple {11237#true} assume !(0 != test_~tmp___0~0); {11237#true} is VALID [2020-07-28 19:00:15,829 INFO L280 TraceCheckUtils]: 14: Hoare triple {11237#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___2~0 := test_#t~nondet13;havoc test_#t~nondet13; {11237#true} is VALID [2020-07-28 19:00:15,830 INFO L280 TraceCheckUtils]: 15: Hoare triple {11237#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {11237#true} is VALID [2020-07-28 19:00:15,830 INFO L280 TraceCheckUtils]: 16: Hoare triple {11237#true} assume !(0 != ~pumpRunning~0); {11237#true} is VALID [2020-07-28 19:00:15,830 INFO L280 TraceCheckUtils]: 17: Hoare triple {11237#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret16, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {11237#true} is VALID [2020-07-28 19:00:15,831 INFO L280 TraceCheckUtils]: 18: Hoare triple {11237#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret15, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {11237#true} is VALID [2020-07-28 19:00:15,831 INFO L280 TraceCheckUtils]: 19: Hoare triple {11237#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~7, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~7;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {11237#true} is VALID [2020-07-28 19:00:15,831 INFO L280 TraceCheckUtils]: 20: Hoare triple {11237#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {11237#true} is VALID [2020-07-28 19:00:15,831 INFO L280 TraceCheckUtils]: 21: Hoare triple {11237#true} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {11237#true} is VALID [2020-07-28 19:00:15,831 INFO L280 TraceCheckUtils]: 22: Hoare triple {11237#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {11237#true} is VALID [2020-07-28 19:00:15,832 INFO L280 TraceCheckUtils]: 23: Hoare triple {11237#true} isHighWaterLevel_~retValue_acc~7 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~7; {11237#true} is VALID [2020-07-28 19:00:15,832 INFO L280 TraceCheckUtils]: 24: Hoare triple {11237#true} processEnvironment__wrappee__methaneQuery_#t~ret15 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret15 && processEnvironment__wrappee__methaneQuery_#t~ret15 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~1 := processEnvironment__wrappee__methaneQuery_#t~ret15;havoc processEnvironment__wrappee__methaneQuery_#t~ret15; {11237#true} is VALID [2020-07-28 19:00:15,832 INFO L280 TraceCheckUtils]: 25: Hoare triple {11237#true} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~1;havoc activatePump_#t~ret17, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret18, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11237#true} is VALID [2020-07-28 19:00:15,832 INFO L280 TraceCheckUtils]: 26: Hoare triple {11237#true} isMethaneAlarm_#t~ret18 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret18 && isMethaneAlarm_#t~ret18 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret18;havoc isMethaneAlarm_#t~ret18;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {11237#true} is VALID [2020-07-28 19:00:15,833 INFO L280 TraceCheckUtils]: 27: Hoare triple {11237#true} activatePump_#t~ret17 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret17 && activatePump_#t~ret17 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret17;havoc activatePump_#t~ret17; {11237#true} is VALID [2020-07-28 19:00:15,833 INFO L280 TraceCheckUtils]: 28: Hoare triple {11237#true} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {11237#true} is VALID [2020-07-28 19:00:15,833 INFO L280 TraceCheckUtils]: 29: Hoare triple {11237#true} havoc __utac_acc__Specification2_spec__2_#t~ret36, __utac_acc__Specification2_spec__2_#t~ret37, __utac_acc__Specification2_spec__2_~tmp~5, __utac_acc__Specification2_spec__2_~tmp___0~2;havoc __utac_acc__Specification2_spec__2_~tmp~5;havoc __utac_acc__Specification2_spec__2_~tmp___0~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11237#true} is VALID [2020-07-28 19:00:15,834 INFO L280 TraceCheckUtils]: 30: Hoare triple {11237#true} __utac_acc__Specification2_spec__2_#t~ret36 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret36 && __utac_acc__Specification2_spec__2_#t~ret36 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~5 := __utac_acc__Specification2_spec__2_#t~ret36;havoc __utac_acc__Specification2_spec__2_#t~ret36; {11237#true} is VALID [2020-07-28 19:00:15,834 INFO L280 TraceCheckUtils]: 31: Hoare triple {11237#true} assume 0 != __utac_acc__Specification2_spec__2_~tmp~5;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {11237#true} is VALID [2020-07-28 19:00:15,834 INFO L280 TraceCheckUtils]: 32: Hoare triple {11237#true} __utac_acc__Specification2_spec__2_#t~ret37 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret37 && __utac_acc__Specification2_spec__2_#t~ret37 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~2 := __utac_acc__Specification2_spec__2_#t~ret37;havoc __utac_acc__Specification2_spec__2_#t~ret37; {11237#true} is VALID [2020-07-28 19:00:15,835 INFO L280 TraceCheckUtils]: 33: Hoare triple {11237#true} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~2; {11237#true} is VALID [2020-07-28 19:00:15,835 INFO L280 TraceCheckUtils]: 34: Hoare triple {11237#true} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {11237#true} is VALID [2020-07-28 19:00:15,835 INFO L280 TraceCheckUtils]: 35: Hoare triple {11237#true} assume !false; {11237#true} is VALID [2020-07-28 19:00:15,835 INFO L280 TraceCheckUtils]: 36: Hoare triple {11237#true} assume test_~splverifierCounter~0 < 4; {11237#true} is VALID [2020-07-28 19:00:15,836 INFO L280 TraceCheckUtils]: 37: Hoare triple {11237#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp~0 := test_#t~nondet11;havoc test_#t~nondet11; {11237#true} is VALID [2020-07-28 19:00:15,836 INFO L280 TraceCheckUtils]: 38: Hoare triple {11237#true} assume !(0 != test_~tmp~0); {11237#true} is VALID [2020-07-28 19:00:15,836 INFO L280 TraceCheckUtils]: 39: Hoare triple {11237#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___0~0 := test_#t~nondet12;havoc test_#t~nondet12; {11237#true} is VALID [2020-07-28 19:00:15,837 INFO L280 TraceCheckUtils]: 40: Hoare triple {11237#true} assume !(0 != test_~tmp___0~0); {11237#true} is VALID [2020-07-28 19:00:15,862 INFO L280 TraceCheckUtils]: 41: Hoare triple {11237#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___2~0 := test_#t~nondet13;havoc test_#t~nondet13; {11237#true} is VALID [2020-07-28 19:00:15,863 INFO L280 TraceCheckUtils]: 42: Hoare triple {11237#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {11237#true} is VALID [2020-07-28 19:00:15,863 INFO L280 TraceCheckUtils]: 43: Hoare triple {11237#true} assume 0 != ~pumpRunning~0; {11237#true} is VALID [2020-07-28 19:00:15,863 INFO L280 TraceCheckUtils]: 44: Hoare triple {11237#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11237#true} is VALID [2020-07-28 19:00:15,864 INFO L280 TraceCheckUtils]: 45: Hoare triple {11237#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret16, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {11237#true} is VALID [2020-07-28 19:00:15,868 INFO L280 TraceCheckUtils]: 46: Hoare triple {11237#true} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret18, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11239#(= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:00:15,870 INFO L280 TraceCheckUtils]: 47: Hoare triple {11239#(= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} isMethaneAlarm_#t~ret18 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret18 && isMethaneAlarm_#t~ret18 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret18;havoc isMethaneAlarm_#t~ret18;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {11240#(= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:15,872 INFO L280 TraceCheckUtils]: 48: Hoare triple {11240#(= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0)} processEnvironment_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret16 && processEnvironment_#t~ret16 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret16;havoc processEnvironment_#t~ret16; {11241#(= ~methaneLevelCritical~0 ULTIMATE.start_processEnvironment_~tmp~2)} is VALID [2020-07-28 19:00:15,873 INFO L280 TraceCheckUtils]: 49: Hoare triple {11241#(= ~methaneLevelCritical~0 ULTIMATE.start_processEnvironment_~tmp~2)} assume !(0 != processEnvironment_~tmp~2);havoc processEnvironment__wrappee__methaneQuery_#t~ret15, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {11242#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:15,874 INFO L280 TraceCheckUtils]: 50: Hoare triple {11242#(= 0 ~methaneLevelCritical~0)} assume !(0 == ~pumpRunning~0); {11242#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:15,875 INFO L280 TraceCheckUtils]: 51: Hoare triple {11242#(= 0 ~methaneLevelCritical~0)} havoc __utac_acc__Specification2_spec__2_#t~ret36, __utac_acc__Specification2_spec__2_#t~ret37, __utac_acc__Specification2_spec__2_~tmp~5, __utac_acc__Specification2_spec__2_~tmp___0~2;havoc __utac_acc__Specification2_spec__2_~tmp~5;havoc __utac_acc__Specification2_spec__2_~tmp___0~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11243#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:00:15,877 INFO L280 TraceCheckUtils]: 52: Hoare triple {11243#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification2_spec__2_#t~ret36 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret36 && __utac_acc__Specification2_spec__2_#t~ret36 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~5 := __utac_acc__Specification2_spec__2_#t~ret36;havoc __utac_acc__Specification2_spec__2_#t~ret36; {11244#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~5)} is VALID [2020-07-28 19:00:15,878 INFO L280 TraceCheckUtils]: 53: Hoare triple {11244#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~5)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~5;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {11238#false} is VALID [2020-07-28 19:00:15,878 INFO L280 TraceCheckUtils]: 54: Hoare triple {11238#false} __utac_acc__Specification2_spec__2_#t~ret37 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret37 && __utac_acc__Specification2_spec__2_#t~ret37 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~2 := __utac_acc__Specification2_spec__2_#t~ret37;havoc __utac_acc__Specification2_spec__2_#t~ret37; {11238#false} is VALID [2020-07-28 19:00:15,878 INFO L280 TraceCheckUtils]: 55: Hoare triple {11238#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~2; {11238#false} is VALID [2020-07-28 19:00:15,879 INFO L280 TraceCheckUtils]: 56: Hoare triple {11238#false} assume 0 != ~methAndRunningLastTime~0; {11238#false} is VALID [2020-07-28 19:00:15,879 INFO L280 TraceCheckUtils]: 57: Hoare triple {11238#false} assume !false; {11238#false} is VALID [2020-07-28 19:00:15,882 INFO L134 CoverageAnalysis]: Checked inductivity of 17 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 19:00:15,882 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [63200467] [2020-07-28 19:00:15,882 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:15,882 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2020-07-28 19:00:15,882 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1695489008] [2020-07-28 19:00:15,883 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 58 [2020-07-28 19:00:15,883 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:15,883 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2020-07-28 19:00:15,940 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:15,941 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2020-07-28 19:00:15,941 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:15,941 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2020-07-28 19:00:15,942 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:00:15,942 INFO L87 Difference]: Start difference. First operand 195 states and 264 transitions. Second operand 8 states. [2020-07-28 19:00:20,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:20,445 INFO L93 Difference]: Finished difference Result 1213 states and 1636 transitions. [2020-07-28 19:00:20,445 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2020-07-28 19:00:20,445 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 58 [2020-07-28 19:00:20,445 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:20,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:00:20,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 603 transitions. [2020-07-28 19:00:20,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:00:20,451 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20 states to 20 states and 603 transitions. [2020-07-28 19:00:20,451 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 20 states and 603 transitions. [2020-07-28 19:00:21,187 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 603 edges. 603 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:21,241 INFO L225 Difference]: With dead ends: 1213 [2020-07-28 19:00:21,242 INFO L226 Difference]: Without dead ends: 1025 [2020-07-28 19:00:21,243 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 36 GetRequests, 15 SyntacticMatches, 0 SemanticMatches, 21 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 85 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=144, Invalid=362, Unknown=0, NotChecked=0, Total=506 [2020-07-28 19:00:21,244 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1025 states. [2020-07-28 19:00:21,939 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1025 to 296. [2020-07-28 19:00:21,939 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:21,939 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1025 states. Second operand 296 states. [2020-07-28 19:00:21,939 INFO L74 IsIncluded]: Start isIncluded. First operand 1025 states. Second operand 296 states. [2020-07-28 19:00:21,940 INFO L87 Difference]: Start difference. First operand 1025 states. Second operand 296 states. [2020-07-28 19:00:21,981 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:21,981 INFO L93 Difference]: Finished difference Result 1025 states and 1352 transitions. [2020-07-28 19:00:21,981 INFO L276 IsEmpty]: Start isEmpty. Operand 1025 states and 1352 transitions. [2020-07-28 19:00:21,983 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:21,984 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:21,984 INFO L74 IsIncluded]: Start isIncluded. First operand 296 states. Second operand 1025 states. [2020-07-28 19:00:21,984 INFO L87 Difference]: Start difference. First operand 296 states. Second operand 1025 states. [2020-07-28 19:00:22,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:22,022 INFO L93 Difference]: Finished difference Result 1025 states and 1352 transitions. [2020-07-28 19:00:22,022 INFO L276 IsEmpty]: Start isEmpty. Operand 1025 states and 1352 transitions. [2020-07-28 19:00:22,024 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:22,024 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:22,024 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:22,025 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:22,025 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 296 states. [2020-07-28 19:00:22,032 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 296 states to 296 states and 390 transitions. [2020-07-28 19:00:22,032 INFO L78 Accepts]: Start accepts. Automaton has 296 states and 390 transitions. Word has length 58 [2020-07-28 19:00:22,032 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:22,032 INFO L479 AbstractCegarLoop]: Abstraction has 296 states and 390 transitions. [2020-07-28 19:00:22,032 INFO L480 AbstractCegarLoop]: Interpolant automaton has 8 states. [2020-07-28 19:00:22,032 INFO L276 IsEmpty]: Start isEmpty. Operand 296 states and 390 transitions. [2020-07-28 19:00:22,033 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2020-07-28 19:00:22,033 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:22,034 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:22,034 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:00:22,034 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:22,034 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:22,034 INFO L82 PathProgramCache]: Analyzing trace with hash -1677699262, now seen corresponding path program 1 times [2020-07-28 19:00:22,035 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:22,035 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1497792465] [2020-07-28 19:00:22,035 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:22,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:22,160 INFO L280 TraceCheckUtils]: 0: Hoare triple {15494#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(13);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string22.base, #t~string22.offset, 1);call write~init~int(110, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string24.base, #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 1 + #t~string24.offset, 1);call write~init~int(102, #t~string24.base, 2 + #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 3 + #t~string24.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string26.base, #t~string26.offset, 1);call write~init~int(80, #t~string26.base, 1 + #t~string26.offset, 1);call write~init~int(117, #t~string26.base, 2 + #t~string26.offset, 1);call write~init~int(109, #t~string26.base, 3 + #t~string26.offset, 1);call write~init~int(112, #t~string26.base, 4 + #t~string26.offset, 1);call write~init~int(58, #t~string26.base, 5 + #t~string26.offset, 1);call write~init~int(0, #t~string26.base, 6 + #t~string26.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string28.base, #t~string28.offset, 1);call write~init~int(110, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 2 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string30.base, #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(102, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 3 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string32.base, #t~string32.offset, 1);call write~init~int(32, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(30);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(9);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(21);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(30);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(9);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(21);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(30);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(9);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(25);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(30);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(9);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {15494#true} is VALID [2020-07-28 19:00:22,160 INFO L280 TraceCheckUtils]: 1: Hoare triple {15494#true} havoc main_#res;havoc main_#t~ret73, main_~retValue_acc~11, main_~tmp~9;havoc main_~retValue_acc~11;havoc main_~tmp~9; {15494#true} is VALID [2020-07-28 19:00:22,160 INFO L280 TraceCheckUtils]: 2: Hoare triple {15494#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; {15494#true} is VALID [2020-07-28 19:00:22,160 INFO L280 TraceCheckUtils]: 3: Hoare triple {15494#true} main_#t~ret73 := valid_product_#res;assume -2147483648 <= main_#t~ret73 && main_#t~ret73 <= 2147483647;main_~tmp~9 := main_#t~ret73;havoc main_#t~ret73; {15494#true} is VALID [2020-07-28 19:00:22,161 INFO L280 TraceCheckUtils]: 4: Hoare triple {15494#true} assume 0 != main_~tmp~9; {15494#true} is VALID [2020-07-28 19:00:22,161 INFO L280 TraceCheckUtils]: 5: Hoare triple {15494#true} ~methAndRunningLastTime~0 := 0; {15494#true} is VALID [2020-07-28 19:00:22,161 INFO L280 TraceCheckUtils]: 6: Hoare triple {15494#true} havoc test_#t~nondet11, test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {15494#true} is VALID [2020-07-28 19:00:22,161 INFO L280 TraceCheckUtils]: 7: Hoare triple {15494#true} assume !false; {15494#true} is VALID [2020-07-28 19:00:22,161 INFO L280 TraceCheckUtils]: 8: Hoare triple {15494#true} assume test_~splverifierCounter~0 < 4; {15494#true} is VALID [2020-07-28 19:00:22,162 INFO L280 TraceCheckUtils]: 9: Hoare triple {15494#true} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp~0 := test_#t~nondet11;havoc test_#t~nondet11; {15494#true} is VALID [2020-07-28 19:00:22,162 INFO L280 TraceCheckUtils]: 10: Hoare triple {15494#true} assume 0 != test_~tmp~0; {15494#true} is VALID [2020-07-28 19:00:22,162 INFO L280 TraceCheckUtils]: 11: Hoare triple {15494#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15494#true} is VALID [2020-07-28 19:00:22,162 INFO L280 TraceCheckUtils]: 12: Hoare triple {15494#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___0~0 := test_#t~nondet12;havoc test_#t~nondet12; {15494#true} is VALID [2020-07-28 19:00:22,163 INFO L280 TraceCheckUtils]: 13: Hoare triple {15494#true} assume 0 != test_~tmp___0~0; {15494#true} is VALID [2020-07-28 19:00:22,166 INFO L280 TraceCheckUtils]: 14: Hoare triple {15494#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {15496#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:22,167 INFO L280 TraceCheckUtils]: 15: Hoare triple {15496#(= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___2~0 := test_#t~nondet13;havoc test_#t~nondet13; {15496#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:22,167 INFO L280 TraceCheckUtils]: 16: Hoare triple {15496#(= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {15496#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:22,168 INFO L280 TraceCheckUtils]: 17: Hoare triple {15496#(= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {15496#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:22,169 INFO L280 TraceCheckUtils]: 18: Hoare triple {15496#(= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret16, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {15496#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:22,170 INFO L280 TraceCheckUtils]: 19: Hoare triple {15496#(= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret15, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {15496#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:22,171 INFO L280 TraceCheckUtils]: 20: Hoare triple {15496#(= 1 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~7, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~7;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {15496#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:22,171 INFO L280 TraceCheckUtils]: 21: Hoare triple {15496#(= 1 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {15496#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:22,172 INFO L280 TraceCheckUtils]: 22: Hoare triple {15496#(= 1 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {15496#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:22,173 INFO L280 TraceCheckUtils]: 23: Hoare triple {15496#(= 1 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {15496#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:22,174 INFO L280 TraceCheckUtils]: 24: Hoare triple {15496#(= 1 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~7 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~7; {15496#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:22,174 INFO L280 TraceCheckUtils]: 25: Hoare triple {15496#(= 1 ~methaneLevelCritical~0)} processEnvironment__wrappee__methaneQuery_#t~ret15 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret15 && processEnvironment__wrappee__methaneQuery_#t~ret15 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~1 := processEnvironment__wrappee__methaneQuery_#t~ret15;havoc processEnvironment__wrappee__methaneQuery_#t~ret15; {15496#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:22,175 INFO L280 TraceCheckUtils]: 26: Hoare triple {15496#(= 1 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~1;havoc activatePump_#t~ret17, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret18, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {15497#(= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:00:22,176 INFO L280 TraceCheckUtils]: 27: Hoare triple {15497#(= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} isMethaneAlarm_#t~ret18 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret18 && isMethaneAlarm_#t~ret18 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret18;havoc isMethaneAlarm_#t~ret18;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {15498#(= 1 |ULTIMATE.start_isMethaneAlarm_#res|)} is VALID [2020-07-28 19:00:22,177 INFO L280 TraceCheckUtils]: 28: Hoare triple {15498#(= 1 |ULTIMATE.start_isMethaneAlarm_#res|)} activatePump_#t~ret17 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret17 && activatePump_#t~ret17 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret17;havoc activatePump_#t~ret17; {15499#(= 1 ULTIMATE.start_activatePump_~tmp~3)} is VALID [2020-07-28 19:00:22,178 INFO L280 TraceCheckUtils]: 29: Hoare triple {15499#(= 1 ULTIMATE.start_activatePump_~tmp~3)} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {15495#false} is VALID [2020-07-28 19:00:22,179 INFO L280 TraceCheckUtils]: 30: Hoare triple {15495#false} havoc __utac_acc__Specification2_spec__2_#t~ret36, __utac_acc__Specification2_spec__2_#t~ret37, __utac_acc__Specification2_spec__2_~tmp~5, __utac_acc__Specification2_spec__2_~tmp___0~2;havoc __utac_acc__Specification2_spec__2_~tmp~5;havoc __utac_acc__Specification2_spec__2_~tmp___0~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {15495#false} is VALID [2020-07-28 19:00:22,179 INFO L280 TraceCheckUtils]: 31: Hoare triple {15495#false} __utac_acc__Specification2_spec__2_#t~ret36 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret36 && __utac_acc__Specification2_spec__2_#t~ret36 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~5 := __utac_acc__Specification2_spec__2_#t~ret36;havoc __utac_acc__Specification2_spec__2_#t~ret36; {15495#false} is VALID [2020-07-28 19:00:22,179 INFO L280 TraceCheckUtils]: 32: Hoare triple {15495#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~5;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {15495#false} is VALID [2020-07-28 19:00:22,179 INFO L280 TraceCheckUtils]: 33: Hoare triple {15495#false} __utac_acc__Specification2_spec__2_#t~ret37 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret37 && __utac_acc__Specification2_spec__2_#t~ret37 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~2 := __utac_acc__Specification2_spec__2_#t~ret37;havoc __utac_acc__Specification2_spec__2_#t~ret37; {15495#false} is VALID [2020-07-28 19:00:22,180 INFO L280 TraceCheckUtils]: 34: Hoare triple {15495#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~2; {15495#false} is VALID [2020-07-28 19:00:22,180 INFO L280 TraceCheckUtils]: 35: Hoare triple {15495#false} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {15495#false} is VALID [2020-07-28 19:00:22,180 INFO L280 TraceCheckUtils]: 36: Hoare triple {15495#false} assume !false; {15495#false} is VALID [2020-07-28 19:00:22,180 INFO L280 TraceCheckUtils]: 37: Hoare triple {15495#false} assume test_~splverifierCounter~0 < 4; {15495#false} is VALID [2020-07-28 19:00:22,181 INFO L280 TraceCheckUtils]: 38: Hoare triple {15495#false} assume -2147483648 <= test_#t~nondet11 && test_#t~nondet11 <= 2147483647;test_~tmp~0 := test_#t~nondet11;havoc test_#t~nondet11; {15495#false} is VALID [2020-07-28 19:00:22,181 INFO L280 TraceCheckUtils]: 39: Hoare triple {15495#false} assume !(0 != test_~tmp~0); {15495#false} is VALID [2020-07-28 19:00:22,181 INFO L280 TraceCheckUtils]: 40: Hoare triple {15495#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp___0~0 := test_#t~nondet12;havoc test_#t~nondet12; {15495#false} is VALID [2020-07-28 19:00:22,181 INFO L280 TraceCheckUtils]: 41: Hoare triple {15495#false} assume !(0 != test_~tmp___0~0); {15495#false} is VALID [2020-07-28 19:00:22,181 INFO L280 TraceCheckUtils]: 42: Hoare triple {15495#false} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___2~0 := test_#t~nondet13;havoc test_#t~nondet13; {15495#false} is VALID [2020-07-28 19:00:22,182 INFO L280 TraceCheckUtils]: 43: Hoare triple {15495#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {15495#false} is VALID [2020-07-28 19:00:22,182 INFO L280 TraceCheckUtils]: 44: Hoare triple {15495#false} assume !(0 != ~pumpRunning~0); {15495#false} is VALID [2020-07-28 19:00:22,182 INFO L280 TraceCheckUtils]: 45: Hoare triple {15495#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret16, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {15495#false} is VALID [2020-07-28 19:00:22,182 INFO L280 TraceCheckUtils]: 46: Hoare triple {15495#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret15, processEnvironment__wrappee__methaneQuery_~tmp~1;havoc processEnvironment__wrappee__methaneQuery_~tmp~1; {15495#false} is VALID [2020-07-28 19:00:22,182 INFO L280 TraceCheckUtils]: 47: Hoare triple {15495#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret35, isHighWaterLevel_~retValue_acc~7, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~7;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {15495#false} is VALID [2020-07-28 19:00:22,183 INFO L280 TraceCheckUtils]: 48: Hoare triple {15495#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {15495#false} is VALID [2020-07-28 19:00:22,183 INFO L280 TraceCheckUtils]: 49: Hoare triple {15495#false} isHighWaterLevel_#t~ret35 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret35 && isHighWaterLevel_#t~ret35 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret35;havoc isHighWaterLevel_#t~ret35; {15495#false} is VALID [2020-07-28 19:00:22,183 INFO L280 TraceCheckUtils]: 50: Hoare triple {15495#false} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {15495#false} is VALID [2020-07-28 19:00:22,183 INFO L280 TraceCheckUtils]: 51: Hoare triple {15495#false} isHighWaterLevel_~retValue_acc~7 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~7; {15495#false} is VALID [2020-07-28 19:00:22,183 INFO L280 TraceCheckUtils]: 52: Hoare triple {15495#false} processEnvironment__wrappee__methaneQuery_#t~ret15 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret15 && processEnvironment__wrappee__methaneQuery_#t~ret15 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~1 := processEnvironment__wrappee__methaneQuery_#t~ret15;havoc processEnvironment__wrappee__methaneQuery_#t~ret15; {15495#false} is VALID [2020-07-28 19:00:22,183 INFO L280 TraceCheckUtils]: 53: Hoare triple {15495#false} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~1;havoc activatePump_#t~ret17, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret18, isMethaneAlarm_~retValue_acc~5;havoc isMethaneAlarm_~retValue_acc~5;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {15495#false} is VALID [2020-07-28 19:00:22,184 INFO L280 TraceCheckUtils]: 54: Hoare triple {15495#false} isMethaneAlarm_#t~ret18 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret18 && isMethaneAlarm_#t~ret18 <= 2147483647;isMethaneAlarm_~retValue_acc~5 := isMethaneAlarm_#t~ret18;havoc isMethaneAlarm_#t~ret18;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~5; {15495#false} is VALID [2020-07-28 19:00:22,184 INFO L280 TraceCheckUtils]: 55: Hoare triple {15495#false} activatePump_#t~ret17 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret17 && activatePump_#t~ret17 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret17;havoc activatePump_#t~ret17; {15495#false} is VALID [2020-07-28 19:00:22,184 INFO L280 TraceCheckUtils]: 56: Hoare triple {15495#false} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {15495#false} is VALID [2020-07-28 19:00:22,184 INFO L280 TraceCheckUtils]: 57: Hoare triple {15495#false} havoc __utac_acc__Specification2_spec__2_#t~ret36, __utac_acc__Specification2_spec__2_#t~ret37, __utac_acc__Specification2_spec__2_~tmp~5, __utac_acc__Specification2_spec__2_~tmp___0~2;havoc __utac_acc__Specification2_spec__2_~tmp~5;havoc __utac_acc__Specification2_spec__2_~tmp___0~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {15495#false} is VALID [2020-07-28 19:00:22,184 INFO L280 TraceCheckUtils]: 58: Hoare triple {15495#false} __utac_acc__Specification2_spec__2_#t~ret36 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret36 && __utac_acc__Specification2_spec__2_#t~ret36 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~5 := __utac_acc__Specification2_spec__2_#t~ret36;havoc __utac_acc__Specification2_spec__2_#t~ret36; {15495#false} is VALID [2020-07-28 19:00:22,185 INFO L280 TraceCheckUtils]: 59: Hoare triple {15495#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~5;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~6;havoc isPumpRunning_~retValue_acc~6;isPumpRunning_~retValue_acc~6 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~6; {15495#false} is VALID [2020-07-28 19:00:22,185 INFO L280 TraceCheckUtils]: 60: Hoare triple {15495#false} __utac_acc__Specification2_spec__2_#t~ret37 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret37 && __utac_acc__Specification2_spec__2_#t~ret37 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~2 := __utac_acc__Specification2_spec__2_#t~ret37;havoc __utac_acc__Specification2_spec__2_#t~ret37; {15495#false} is VALID [2020-07-28 19:00:22,185 INFO L280 TraceCheckUtils]: 61: Hoare triple {15495#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~2; {15495#false} is VALID [2020-07-28 19:00:22,185 INFO L280 TraceCheckUtils]: 62: Hoare triple {15495#false} assume 0 != ~methAndRunningLastTime~0; {15495#false} is VALID [2020-07-28 19:00:22,185 INFO L280 TraceCheckUtils]: 63: Hoare triple {15495#false} assume !false; {15495#false} is VALID [2020-07-28 19:00:22,193 INFO L134 CoverageAnalysis]: Checked inductivity of 27 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 19:00:22,193 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1497792465] [2020-07-28 19:00:22,194 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:22,194 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-28 19:00:22,194 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [315536303] [2020-07-28 19:00:22,196 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 64 [2020-07-28 19:00:22,197 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:22,197 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:00:22,265 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:22,265 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:00:22,266 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:22,266 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:00:22,266 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:00:22,266 INFO L87 Difference]: Start difference. First operand 296 states and 390 transitions. Second operand 6 states. [2020-07-28 19:00:25,899 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:25,900 INFO L93 Difference]: Finished difference Result 1072 states and 1390 transitions. [2020-07-28 19:00:25,900 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2020-07-28 19:00:25,900 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 64 [2020-07-28 19:00:25,900 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:25,900 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:00:25,903 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 492 transitions. [2020-07-28 19:00:25,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:00:25,905 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 492 transitions. [2020-07-28 19:00:25,905 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 13 states and 492 transitions. [2020-07-28 19:00:26,555 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 492 edges. 492 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:26,555 INFO L225 Difference]: With dead ends: 1072 [2020-07-28 19:00:26,556 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:00:26,558 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 26 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=60, Invalid=122, Unknown=0, NotChecked=0, Total=182 [2020-07-28 19:00:26,558 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:00:26,558 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:00:26,558 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:26,558 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:00:26,558 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:00:26,559 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:00:26,559 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:26,559 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:00:26,559 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:00:26,559 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:26,559 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:26,559 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:00:26,559 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:00:26,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:26,560 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:00:26,560 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:00:26,560 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:26,560 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:26,560 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:26,560 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:26,560 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:00:26,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:00:26,561 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 64 [2020-07-28 19:00:26,561 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:26,561 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:00:26,561 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:00:26,561 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:00:26,561 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:26,561 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-28 19:00:26,563 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:00:26,763 WARN L193 SmtUtils]: Spent 186.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 77 [2020-07-28 19:00:26,889 WARN L193 SmtUtils]: Spent 123.00 ms on a formula simplification. DAG size of input: 122 DAG size of output: 52 [2020-07-28 19:00:27,383 WARN L193 SmtUtils]: Spent 460.00 ms on a formula simplification. DAG size of input: 171 DAG size of output: 121 [2020-07-28 19:00:27,696 WARN L193 SmtUtils]: Spent 307.00 ms on a formula simplification. DAG size of input: 171 DAG size of output: 104 [2020-07-28 19:00:28,046 WARN L193 SmtUtils]: Spent 344.00 ms on a formula simplification. DAG size of input: 173 DAG size of output: 102 [2020-07-28 19:00:28,318 WARN L193 SmtUtils]: Spent 270.00 ms on a formula simplification. DAG size of input: 166 DAG size of output: 99 [2020-07-28 19:00:28,459 WARN L193 SmtUtils]: Spent 139.00 ms on a formula simplification. DAG size of input: 116 DAG size of output: 85 [2020-07-28 19:00:28,694 WARN L193 SmtUtils]: Spent 172.00 ms on a formula simplification. DAG size of input: 108 DAG size of output: 89 [2020-07-28 19:00:29,216 WARN L193 SmtUtils]: Spent 289.00 ms on a formula simplification. DAG size of input: 74 DAG size of output: 21 [2020-07-28 19:00:29,441 WARN L193 SmtUtils]: Spent 211.00 ms on a formula simplification. DAG size of input: 47 DAG size of output: 30 [2020-07-28 19:00:30,295 WARN L193 SmtUtils]: Spent 699.00 ms on a formula simplification. DAG size of input: 121 DAG size of output: 26 [2020-07-28 19:00:30,800 WARN L193 SmtUtils]: Spent 495.00 ms on a formula simplification. DAG size of input: 99 DAG size of output: 30 [2020-07-28 19:00:31,329 WARN L193 SmtUtils]: Spent 517.00 ms on a formula simplification. DAG size of input: 97 DAG size of output: 30 [2020-07-28 19:00:31,885 WARN L193 SmtUtils]: Spent 551.00 ms on a formula simplification. DAG size of input: 95 DAG size of output: 32 [2020-07-28 19:00:32,254 WARN L193 SmtUtils]: Spent 365.00 ms on a formula simplification. DAG size of input: 82 DAG size of output: 25 [2020-07-28 19:00:32,449 WARN L193 SmtUtils]: Spent 191.00 ms on a formula simplification. DAG size of input: 62 DAG size of output: 22 [2020-07-28 19:00:32,619 WARN L193 SmtUtils]: Spent 120.00 ms on a formula simplification. DAG size of input: 42 DAG size of output: 17 [2020-07-28 19:00:33,031 WARN L193 SmtUtils]: Spent 407.00 ms on a formula simplification. DAG size of input: 89 DAG size of output: 13 [2020-07-28 19:00:33,319 WARN L193 SmtUtils]: Spent 221.00 ms on a formula simplification. DAG size of input: 49 DAG size of output: 27 [2020-07-28 19:00:33,801 WARN L193 SmtUtils]: Spent 313.00 ms on a formula simplification. DAG size of input: 79 DAG size of output: 26 [2020-07-28 19:00:33,955 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 885) no Hoare annotation was computed. [2020-07-28 19:00:33,956 INFO L268 CegarLoopResult]: For program point L498(lines 498 504) no Hoare annotation was computed. [2020-07-28 19:00:33,956 INFO L268 CegarLoopResult]: For program point L498-2(lines 498 504) no Hoare annotation was computed. [2020-07-28 19:00:33,956 INFO L268 CegarLoopResult]: For program point L498-4(lines 498 504) no Hoare annotation was computed. [2020-07-28 19:00:33,956 INFO L268 CegarLoopResult]: For program point L300(lines 300 308) no Hoare annotation was computed. [2020-07-28 19:00:33,956 INFO L268 CegarLoopResult]: For program point L300-1(lines 300 308) no Hoare annotation was computed. [2020-07-28 19:00:33,956 INFO L268 CegarLoopResult]: For program point L300-2(lines 300 308) no Hoare annotation was computed. [2020-07-28 19:00:33,956 INFO L268 CegarLoopResult]: For program point L300-3(lines 300 308) no Hoare annotation was computed. [2020-07-28 19:00:33,956 INFO L268 CegarLoopResult]: For program point L300-4(lines 300 308) no Hoare annotation was computed. [2020-07-28 19:00:33,957 INFO L264 CegarLoopResult]: At program point L135(lines 126 139) the Hoare annotation is: (and (= ~methaneLevelCritical~0 ULTIMATE.start_processEnvironment_~tmp~2) (= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 ~pumpRunning~0) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 1 ~systemActive~0)) [2020-07-28 19:00:33,957 INFO L268 CegarLoopResult]: For program point L300-5(lines 300 308) no Hoare annotation was computed. [2020-07-28 19:00:33,957 INFO L264 CegarLoopResult]: At program point L135-1(lines 126 139) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= 1 ~methaneLevelCritical~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2) (and .cse0 .cse3 .cse1 (not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) .cse2) (and (= 0 ~methAndRunningLastTime~0) .cse0 .cse3 .cse1 .cse2))) [2020-07-28 19:00:33,958 INFO L264 CegarLoopResult]: At program point L135-2(lines 126 139) the Hoare annotation is: false [2020-07-28 19:00:33,958 INFO L264 CegarLoopResult]: At program point L135-3(lines 126 139) the Hoare annotation is: false [2020-07-28 19:00:33,958 INFO L264 CegarLoopResult]: At program point L135-4(lines 126 139) the Hoare annotation is: false [2020-07-28 19:00:33,958 INFO L264 CegarLoopResult]: At program point L135-5(lines 126 139) the Hoare annotation is: false [2020-07-28 19:00:33,958 INFO L268 CegarLoopResult]: For program point L203(lines 203 209) no Hoare annotation was computed. [2020-07-28 19:00:33,959 INFO L264 CegarLoopResult]: At program point L203-1(lines 203 209) the Hoare annotation is: (let ((.cse3 (= 1 ~methaneLevelCritical~0)) (.cse6 (= 1 ~systemActive~0)) (.cse0 (= 0 ~methAndRunningLastTime~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse4 (= 0 ~systemActive~0)) (.cse5 (= 0 ~pumpRunning~0)) (.cse7 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse8 (= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~5))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse5 .cse6) (and .cse0 .cse1 .cse3 .cse2 .cse5 .cse6) (and .cse0 (= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0) .cse1 .cse2 .cse7 .cse6 .cse8) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse7 .cse8))) [2020-07-28 19:00:33,959 INFO L264 CegarLoopResult]: At program point L271(lines 271 277) the Hoare annotation is: (let ((.cse0 (= 0 ~methaneLevelCritical~0)) (.cse4 (= 0 ~systemActive~0)) (.cse5 (= 1 ~methaneLevelCritical~0)) (.cse2 (= 0 ~pumpRunning~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse4 .cse2) (and .cse1 .cse5 .cse4 .cse2) (and .cse1 .cse5 .cse2 .cse3) (and (= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0) .cse1 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse3))) [2020-07-28 19:00:33,959 INFO L264 CegarLoopResult]: At program point L271-1(lines 271 277) the Hoare annotation is: false [2020-07-28 19:00:33,959 INFO L264 CegarLoopResult]: At program point L271-2(lines 271 277) the Hoare annotation is: false [2020-07-28 19:00:33,959 INFO L264 CegarLoopResult]: At program point L174(lines 169 177) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~methAndRunningLastTime~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:00:33,959 INFO L264 CegarLoopResult]: At program point L901-2(lines 901 915) the Hoare annotation is: false [2020-07-28 19:00:33,960 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 885) no Hoare annotation was computed. [2020-07-28 19:00:33,960 INFO L268 CegarLoopResult]: For program point L902(line 902) no Hoare annotation was computed. [2020-07-28 19:00:33,960 INFO L268 CegarLoopResult]: For program point L77(lines 77 81) no Hoare annotation was computed. [2020-07-28 19:00:33,960 INFO L268 CegarLoopResult]: For program point L441(lines 441 445) no Hoare annotation was computed. [2020-07-28 19:00:33,960 INFO L268 CegarLoopResult]: For program point L441-2(lines 441 445) no Hoare annotation was computed. [2020-07-28 19:00:33,960 INFO L268 CegarLoopResult]: For program point L441-3(lines 441 445) no Hoare annotation was computed. [2020-07-28 19:00:33,960 INFO L268 CegarLoopResult]: For program point L441-5(lines 441 445) no Hoare annotation was computed. [2020-07-28 19:00:33,960 INFO L264 CegarLoopResult]: At program point L243(lines 192 244) the Hoare annotation is: false [2020-07-28 19:00:33,961 INFO L268 CegarLoopResult]: For program point L441-6(lines 441 445) no Hoare annotation was computed. [2020-07-28 19:00:33,961 INFO L268 CegarLoopResult]: For program point L441-8(lines 441 445) no Hoare annotation was computed. [2020-07-28 19:00:33,961 INFO L268 CegarLoopResult]: For program point L441-9(lines 441 445) no Hoare annotation was computed. [2020-07-28 19:00:33,961 INFO L268 CegarLoopResult]: For program point L441-11(lines 441 445) no Hoare annotation was computed. [2020-07-28 19:00:33,961 INFO L268 CegarLoopResult]: For program point L441-12(lines 441 445) no Hoare annotation was computed. [2020-07-28 19:00:33,961 INFO L268 CegarLoopResult]: For program point L441-14(lines 441 445) no Hoare annotation was computed. [2020-07-28 19:00:33,961 INFO L268 CegarLoopResult]: For program point L441-15(lines 441 445) no Hoare annotation was computed. [2020-07-28 19:00:33,961 INFO L268 CegarLoopResult]: For program point L441-17(lines 441 445) no Hoare annotation was computed. [2020-07-28 19:00:33,961 INFO L268 CegarLoopResult]: For program point L905(lines 905 909) no Hoare annotation was computed. [2020-07-28 19:00:33,961 INFO L268 CegarLoopResult]: For program point L905-1(lines 264 270) no Hoare annotation was computed. [2020-07-28 19:00:33,962 INFO L268 CegarLoopResult]: For program point L213(lines 213 219) no Hoare annotation was computed. [2020-07-28 19:00:33,962 INFO L264 CegarLoopResult]: At program point L213-1(lines 213 219) the Hoare annotation is: (let ((.cse0 (= 0 ~methaneLevelCritical~0)) (.cse6 (= 0 ~systemActive~0)) (.cse7 (= 0 ~pumpRunning~0)) (.cse3 (= 1 ~methaneLevelCritical~0)) (.cse5 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse4 (= 0 ~methAndRunningLastTime~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse8 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2) (and .cse3 (or (and .cse4 .cse1 .cse5 .cse6 .cse7) (and .cse4 .cse1 .cse6 .cse7 .cse8))) (and .cse0 .cse4 .cse1 .cse6 .cse7) (and .cse4 .cse1 .cse3 .cse7 .cse2) (and .cse3 (or (and .cse4 (= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0) .cse1 .cse5 .cse2) (and .cse4 .cse1 .cse8 .cse2))))) [2020-07-28 19:00:33,962 INFO L268 CegarLoopResult]: For program point L973(lines 973 980) no Hoare annotation was computed. [2020-07-28 19:00:33,962 INFO L271 CegarLoopResult]: At program point L973-1(lines 973 980) the Hoare annotation is: true [2020-07-28 19:00:33,962 INFO L264 CegarLoopResult]: At program point L447(lines 432 450) the Hoare annotation is: (and (= ~methaneLevelCritical~0 ULTIMATE.start_processEnvironment_~tmp~2) (= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 ~pumpRunning~0) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 1 ~systemActive~0)) [2020-07-28 19:00:33,962 INFO L264 CegarLoopResult]: At program point L447-1(lines 432 450) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 ~methaneLevelCritical~0)) (.cse2 (= 0 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0))) (or (and (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) .cse0 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1) .cse1 .cse2 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|) .cse3) (and (= 0 ~methaneLevelCritical~0) .cse0 .cse2 .cse3) (and (= 0 ~methAndRunningLastTime~0) .cse0 .cse1 .cse2 .cse3))) [2020-07-28 19:00:33,962 INFO L264 CegarLoopResult]: At program point L447-2(lines 432 450) the Hoare annotation is: false [2020-07-28 19:00:33,963 INFO L264 CegarLoopResult]: At program point L447-3(lines 432 450) the Hoare annotation is: false [2020-07-28 19:00:33,963 INFO L264 CegarLoopResult]: At program point L447-4(lines 432 450) the Hoare annotation is: false [2020-07-28 19:00:33,963 INFO L264 CegarLoopResult]: At program point L447-5(lines 432 450) the Hoare annotation is: false [2020-07-28 19:00:33,963 INFO L264 CegarLoopResult]: At program point L482(lines 477 484) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~methAndRunningLastTime~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:00:33,963 INFO L264 CegarLoopResult]: At program point L383(lines 376 386) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 (= 1 ~methaneLevelCritical~0) (= 1 |ULTIMATE.start_isMethaneAlarm_#res|) .cse2) (and (= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0) .cse0 .cse1 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse2))) [2020-07-28 19:00:33,963 INFO L264 CegarLoopResult]: At program point L383-1(lines 376 386) the Hoare annotation is: (and (= ~methaneLevelCritical~0 ULTIMATE.start_processEnvironment_~tmp~2) (= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 ~pumpRunning~0) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 1 ~systemActive~0)) [2020-07-28 19:00:33,963 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:00:33,964 INFO L264 CegarLoopResult]: At program point L383-2(lines 376 386) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse2 (= 0 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0))) (or (and (= 0 ~methAndRunningLastTime~0) .cse0 .cse1 (= 1 ~methaneLevelCritical~0) (= 1 |ULTIMATE.start_isMethaneAlarm_#res|) .cse2 .cse3) (and (= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0) .cse0 .cse1 .cse2 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse3))) [2020-07-28 19:00:33,964 INFO L264 CegarLoopResult]: At program point L383-3(lines 376 386) the Hoare annotation is: false [2020-07-28 19:00:33,964 INFO L264 CegarLoopResult]: At program point L383-4(lines 376 386) the Hoare annotation is: false [2020-07-28 19:00:33,964 INFO L264 CegarLoopResult]: At program point L383-5(lines 376 386) the Hoare annotation is: false [2020-07-28 19:00:33,964 INFO L264 CegarLoopResult]: At program point L383-6(lines 376 386) the Hoare annotation is: false [2020-07-28 19:00:33,964 INFO L264 CegarLoopResult]: At program point L383-7(lines 376 386) the Hoare annotation is: false [2020-07-28 19:00:33,964 INFO L264 CegarLoopResult]: At program point L383-8(lines 376 386) the Hoare annotation is: false [2020-07-28 19:00:33,964 INFO L268 CegarLoopResult]: For program point L53(lines 53 57) no Hoare annotation was computed. [2020-07-28 19:00:33,964 INFO L268 CegarLoopResult]: For program point L53-3(lines 53 57) no Hoare annotation was computed. [2020-07-28 19:00:33,965 INFO L268 CegarLoopResult]: For program point L53-6(lines 53 57) no Hoare annotation was computed. [2020-07-28 19:00:33,965 INFO L264 CegarLoopResult]: At program point L90(lines 85 93) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 (= 1 ~methaneLevelCritical~0) .cse2) (and .cse0 .cse1 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse2))) [2020-07-28 19:00:33,965 INFO L264 CegarLoopResult]: At program point L90-1(lines 85 93) the Hoare annotation is: (and (= ~methaneLevelCritical~0 ULTIMATE.start_processEnvironment_~tmp~2) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 ~pumpRunning~0) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 1 ~systemActive~0)) [2020-07-28 19:00:33,965 INFO L264 CegarLoopResult]: At program point L90-2(lines 85 93) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse2 (= 0 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse3) (and (= 0 ~methAndRunningLastTime~0) .cse0 (= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3))) [2020-07-28 19:00:33,965 INFO L264 CegarLoopResult]: At program point L90-3(lines 85 93) the Hoare annotation is: (let ((.cse5 (= 0 ~systemActive~0)) (.cse6 (= 1 ~methaneLevelCritical~0)) (.cse2 (= 0 ~pumpRunning~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse3 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse4 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse5 .cse2 .cse3) (and .cse0 .cse6 .cse1 .cse5 .cse2) (and .cse0 .cse1 .cse6 .cse2 .cse4) (and (= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0) .cse0 .cse1 .cse3 .cse4))) [2020-07-28 19:00:33,965 INFO L264 CegarLoopResult]: At program point L90-4(lines 85 93) the Hoare annotation is: false [2020-07-28 19:00:33,966 INFO L271 CegarLoopResult]: At program point L982(lines 963 985) the Hoare annotation is: true [2020-07-28 19:00:33,966 INFO L264 CegarLoopResult]: At program point L949(lines 945 951) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~methAndRunningLastTime~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:00:33,966 INFO L264 CegarLoopResult]: At program point L90-5(lines 85 93) the Hoare annotation is: false [2020-07-28 19:00:33,966 INFO L264 CegarLoopResult]: At program point L90-6(lines 85 93) the Hoare annotation is: false [2020-07-28 19:00:33,966 INFO L264 CegarLoopResult]: At program point L90-7(lines 85 93) the Hoare annotation is: false [2020-07-28 19:00:33,966 INFO L264 CegarLoopResult]: At program point L90-8(lines 85 93) the Hoare annotation is: false [2020-07-28 19:00:33,966 INFO L264 CegarLoopResult]: At program point L90-9(lines 85 93) the Hoare annotation is: false [2020-07-28 19:00:33,966 INFO L264 CegarLoopResult]: At program point L90-10(lines 85 93) the Hoare annotation is: false [2020-07-28 19:00:33,966 INFO L264 CegarLoopResult]: At program point L90-11(lines 85 93) the Hoare annotation is: false [2020-07-28 19:00:33,967 INFO L268 CegarLoopResult]: For program point L322(lines 322 339) no Hoare annotation was computed. [2020-07-28 19:00:33,967 INFO L268 CegarLoopResult]: For program point L322-1(lines 322 339) no Hoare annotation was computed. [2020-07-28 19:00:33,967 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:00:33,967 INFO L268 CegarLoopResult]: For program point L322-2(lines 322 339) no Hoare annotation was computed. [2020-07-28 19:00:33,967 INFO L268 CegarLoopResult]: For program point L223(lines 223 238) no Hoare annotation was computed. [2020-07-28 19:00:33,967 INFO L268 CegarLoopResult]: For program point L455(lines 455 461) no Hoare annotation was computed. [2020-07-28 19:00:33,967 INFO L264 CegarLoopResult]: At program point L455-1(lines 455 461) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1) (and .cse0 (= 1 ~methaneLevelCritical~0) .cse1))) [2020-07-28 19:00:33,967 INFO L268 CegarLoopResult]: For program point L885(line 885) no Hoare annotation was computed. [2020-07-28 19:00:33,967 INFO L268 CegarLoopResult]: For program point L885-1(line 885) no Hoare annotation was computed. [2020-07-28 19:00:33,967 INFO L268 CegarLoopResult]: For program point L885-2(line 885) no Hoare annotation was computed. [2020-07-28 19:00:33,968 INFO L268 CegarLoopResult]: For program point L358(lines 358 364) no Hoare annotation was computed. [2020-07-28 19:00:33,968 INFO L268 CegarLoopResult]: For program point L358-2(lines 358 364) no Hoare annotation was computed. [2020-07-28 19:00:33,968 INFO L268 CegarLoopResult]: For program point L358-4(lines 358 364) no Hoare annotation was computed. [2020-07-28 19:00:33,968 INFO L268 CegarLoopResult]: For program point L358-6(lines 358 364) no Hoare annotation was computed. [2020-07-28 19:00:33,968 INFO L268 CegarLoopResult]: For program point L358-8(lines 358 364) no Hoare annotation was computed. [2020-07-28 19:00:33,968 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:00:33,968 INFO L268 CegarLoopResult]: For program point L358-10(lines 358 364) no Hoare annotation was computed. [2020-07-28 19:00:33,968 INFO L264 CegarLoopResult]: At program point L392(lines 387 395) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 ~methaneLevelCritical~0)) (.cse1 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse3 (= 0 |ULTIMATE.start_isPumpRunning_#res|)) (.cse4 (= 0 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= 1 ~systemActive~0)) (and .cse0 .cse2 .cse1 (= 0 ~systemActive~0) .cse3 .cse4))) [2020-07-28 19:00:33,968 INFO L264 CegarLoopResult]: At program point L392-1(lines 387 395) the Hoare annotation is: false [2020-07-28 19:00:33,969 INFO L268 CegarLoopResult]: For program point L326(lines 326 334) no Hoare annotation was computed. [2020-07-28 19:00:33,969 INFO L264 CegarLoopResult]: At program point L392-2(lines 387 395) the Hoare annotation is: false [2020-07-28 19:00:33,969 INFO L268 CegarLoopResult]: For program point L326-1(lines 326 334) no Hoare annotation was computed. [2020-07-28 19:00:33,969 INFO L268 CegarLoopResult]: For program point L326-2(lines 326 334) no Hoare annotation was computed. [2020-07-28 19:00:33,969 INFO L268 CegarLoopResult]: For program point L194(lines 193 242) no Hoare annotation was computed. [2020-07-28 19:00:33,969 INFO L268 CegarLoopResult]: For program point L195(lines 195 199) no Hoare annotation was computed. [2020-07-28 19:00:33,969 INFO L268 CegarLoopResult]: For program point L493(lines 493 510) no Hoare annotation was computed. [2020-07-28 19:00:33,969 INFO L264 CegarLoopResult]: At program point L493-1(lines 1 985) the Hoare annotation is: (let ((.cse5 (= 1 ~methaneLevelCritical~0)) (.cse3 (= 1 ~systemActive~0)) (.cse0 (= 0 ~methAndRunningLastTime~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse6 (= 0 ~systemActive~0)) (.cse2 (= 0 ~pumpRunning~0)) (.cse7 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse8 (= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~5))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 (= 1 ~waterLevel~0) .cse3) (and .cse0 .cse1 .cse4 .cse5 .cse6 .cse2) (and .cse0 .cse1 .cse4 .cse2 .cse7 .cse3 .cse8) (and .cse0 .cse1 .cse5 .cse4 .cse2 .cse3) (and .cse0 (= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0) .cse1 .cse4 .cse7 .cse3 .cse8) (and .cse0 .cse1 .cse4 .cse6 .cse2 .cse7 .cse8))) [2020-07-28 19:00:33,969 INFO L268 CegarLoopResult]: For program point L493-2(lines 493 510) no Hoare annotation was computed. [2020-07-28 19:00:33,970 INFO L264 CegarLoopResult]: At program point L493-3(lines 1 985) the Hoare annotation is: false [2020-07-28 19:00:33,970 INFO L268 CegarLoopResult]: For program point L493-4(lines 493 510) no Hoare annotation was computed. [2020-07-28 19:00:33,970 INFO L264 CegarLoopResult]: At program point L493-5(lines 1 985) the Hoare annotation is: false [2020-07-28 19:00:33,970 INFO L268 CegarLoopResult]: For program point L130(lines 130 136) no Hoare annotation was computed. [2020-07-28 19:00:33,970 INFO L268 CegarLoopResult]: For program point L130-1(lines 130 136) no Hoare annotation was computed. [2020-07-28 19:00:33,970 INFO L268 CegarLoopResult]: For program point L130-2(lines 130 136) no Hoare annotation was computed. [2020-07-28 19:00:33,970 INFO L268 CegarLoopResult]: For program point L130-3(lines 130 136) no Hoare annotation was computed. [2020-07-28 19:00:33,970 INFO L268 CegarLoopResult]: For program point L130-4(lines 130 136) no Hoare annotation was computed. [2020-07-28 19:00:33,970 INFO L268 CegarLoopResult]: For program point L130-5(lines 130 136) no Hoare annotation was computed. [2020-07-28 19:00:33,970 INFO L268 CegarLoopResult]: For program point L296(lines 296 313) no Hoare annotation was computed. [2020-07-28 19:00:33,971 INFO L268 CegarLoopResult]: For program point L296-1(lines 296 313) no Hoare annotation was computed. [2020-07-28 19:00:33,971 INFO L268 CegarLoopResult]: For program point L296-2(lines 296 313) no Hoare annotation was computed. [2020-07-28 19:00:33,971 INFO L268 CegarLoopResult]: For program point L296-3(lines 296 313) no Hoare annotation was computed. [2020-07-28 19:00:33,971 INFO L268 CegarLoopResult]: For program point L296-4(lines 296 313) no Hoare annotation was computed. [2020-07-28 19:00:33,971 INFO L268 CegarLoopResult]: For program point L296-5(lines 296 313) no Hoare annotation was computed. [2020-07-28 19:00:33,971 INFO L268 CegarLoopResult]: For program point L65(lines 65 69) no Hoare annotation was computed. [2020-07-28 19:00:33,971 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:00:33,971 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 885) no Hoare annotation was computed. [2020-07-28 19:00:33,972 INFO L264 CegarLoopResult]: At program point L264(lines 263 282) the Hoare annotation is: (let ((.cse0 (= 0 ~methaneLevelCritical~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (= 0 ~pumpRunning~0)) (.cse5 (= 1 ~methaneLevelCritical~0)) (.cse6 (= 0 ~methAndRunningLastTime~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse4) (and .cse1 .cse5 .cse2 .cse3) (and .cse6 .cse1 .cse5 .cse3 .cse4) (and .cse5 (or (and .cse6 (= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0) .cse1 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse4) (and .cse6 .cse1 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse4))))) [2020-07-28 19:00:33,972 INFO L268 CegarLoopResult]: For program point L231(lines 231 237) no Hoare annotation was computed. [2020-07-28 19:00:33,972 INFO L268 CegarLoopResult]: For program point L264-1(lines 264 270) no Hoare annotation was computed. [2020-07-28 19:00:33,972 INFO L264 CegarLoopResult]: At program point L231-1(lines 264 270) the Hoare annotation is: (let ((.cse0 (= 0 ~methaneLevelCritical~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (= 0 ~pumpRunning~0)) (.cse5 (= 1 ~methaneLevelCritical~0)) (.cse6 (= 0 ~methAndRunningLastTime~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse1 .cse4) (and .cse1 .cse5 .cse2 .cse3) (and .cse6 .cse1 .cse5 .cse3 .cse4) (and .cse5 (or (and .cse6 (= |ULTIMATE.start_isMethaneAlarm_#res| ~methaneLevelCritical~0) .cse1 (= ~methaneLevelCritical~0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse4) (and .cse6 .cse1 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse4))))) [2020-07-28 19:00:33,972 INFO L264 CegarLoopResult]: At program point L264-2(lines 263 282) the Hoare annotation is: false [2020-07-28 19:00:33,972 INFO L264 CegarLoopResult]: At program point L264-3(lines 263 282) the Hoare annotation is: false [2020-07-28 19:00:33,973 INFO L264 CegarLoopResult]: At program point L166(lines 1 985) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~methAndRunningLastTime~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:00:33,973 INFO L268 CegarLoopResult]: For program point L497(lines 497 507) no Hoare annotation was computed. [2020-07-28 19:00:33,973 INFO L268 CegarLoopResult]: For program point L497-2(lines 497 507) no Hoare annotation was computed. [2020-07-28 19:00:33,973 INFO L268 CegarLoopResult]: For program point L497-4(lines 497 507) no Hoare annotation was computed. [2020-07-28 19:00:33,978 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:00:33,978 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:00:33,984 WARN L170 areAnnotationChecker]: L973 has no Hoare annotation [2020-07-28 19:00:33,984 WARN L170 areAnnotationChecker]: L973 has no Hoare annotation [2020-07-28 19:00:33,984 WARN L170 areAnnotationChecker]: L973 has no Hoare annotation [2020-07-28 19:00:33,988 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:00:33,993 WARN L170 areAnnotationChecker]: L194 has no Hoare annotation [2020-07-28 19:00:33,993 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:00:33,993 WARN L170 areAnnotationChecker]: L264-1 has no Hoare annotation [2020-07-28 19:00:33,993 WARN L170 areAnnotationChecker]: L194 has no Hoare annotation [2020-07-28 19:00:33,993 WARN L170 areAnnotationChecker]: L194 has no Hoare annotation [2020-07-28 19:00:33,993 WARN L170 areAnnotationChecker]: L264-1 has no Hoare annotation [2020-07-28 19:00:33,994 WARN L170 areAnnotationChecker]: L264-1 has no Hoare annotation [2020-07-28 19:00:33,994 WARN L170 areAnnotationChecker]: L195 has no Hoare annotation [2020-07-28 19:00:33,994 WARN L170 areAnnotationChecker]: L53-3 has no Hoare annotation [2020-07-28 19:00:33,994 WARN L170 areAnnotationChecker]: L53-3 has no Hoare annotation [2020-07-28 19:00:33,994 WARN L170 areAnnotationChecker]: L322-1 has no Hoare annotation [2020-07-28 19:00:33,994 WARN L170 areAnnotationChecker]: L203 has no Hoare annotation [2020-07-28 19:00:33,994 WARN L170 areAnnotationChecker]: L203 has no Hoare annotation [2020-07-28 19:00:33,994 WARN L170 areAnnotationChecker]: L322-1 has no Hoare annotation [2020-07-28 19:00:33,994 WARN L170 areAnnotationChecker]: L322-1 has no Hoare annotation [2020-07-28 19:00:33,994 WARN L170 areAnnotationChecker]: L65 has no Hoare annotation [2020-07-28 19:00:33,995 WARN L170 areAnnotationChecker]: L65 has no Hoare annotation [2020-07-28 19:00:33,995 WARN L170 areAnnotationChecker]: L213 has no Hoare annotation [2020-07-28 19:00:33,995 WARN L170 areAnnotationChecker]: L296-3 has no Hoare annotation [2020-07-28 19:00:33,995 WARN L170 areAnnotationChecker]: L296-3 has no Hoare annotation [2020-07-28 19:00:33,995 WARN L170 areAnnotationChecker]: L493-2 has no Hoare annotation [2020-07-28 19:00:33,995 WARN L170 areAnnotationChecker]: L213 has no Hoare annotation [2020-07-28 19:00:33,995 WARN L170 areAnnotationChecker]: L213 has no Hoare annotation [2020-07-28 19:00:33,995 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2020-07-28 19:00:33,995 WARN L170 areAnnotationChecker]: L130-3 has no Hoare annotation [2020-07-28 19:00:33,995 WARN L170 areAnnotationChecker]: L130-3 has no Hoare annotation [2020-07-28 19:00:33,996 WARN L170 areAnnotationChecker]: L493-2 has no Hoare annotation [2020-07-28 19:00:33,996 WARN L170 areAnnotationChecker]: L493-2 has no Hoare annotation [2020-07-28 19:00:33,996 WARN L170 areAnnotationChecker]: L77 has no Hoare annotation [2020-07-28 19:00:33,996 WARN L170 areAnnotationChecker]: L77 has no Hoare annotation [2020-07-28 19:00:33,996 WARN L170 areAnnotationChecker]: L223 has no Hoare annotation [2020-07-28 19:00:33,996 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2020-07-28 19:00:33,996 WARN L170 areAnnotationChecker]: L326-1 has no Hoare annotation [2020-07-28 19:00:33,996 WARN L170 areAnnotationChecker]: L441-9 has no Hoare annotation [2020-07-28 19:00:33,996 WARN L170 areAnnotationChecker]: L497-2 has no Hoare annotation [2020-07-28 19:00:33,997 WARN L170 areAnnotationChecker]: L223 has no Hoare annotation [2020-07-28 19:00:33,997 WARN L170 areAnnotationChecker]: L223 has no Hoare annotation [2020-07-28 19:00:33,997 WARN L170 areAnnotationChecker]: L296-2 has no Hoare annotation [2020-07-28 19:00:33,997 WARN L170 areAnnotationChecker]: L296-2 has no Hoare annotation [2020-07-28 19:00:33,997 WARN L170 areAnnotationChecker]: L441-9 has no Hoare annotation [2020-07-28 19:00:33,997 WARN L170 areAnnotationChecker]: L441-9 has no Hoare annotation [2020-07-28 19:00:33,998 WARN L170 areAnnotationChecker]: L497-2 has no Hoare annotation [2020-07-28 19:00:33,998 WARN L170 areAnnotationChecker]: L497-2 has no Hoare annotation [2020-07-28 19:00:33,998 WARN L170 areAnnotationChecker]: L902 has no Hoare annotation [2020-07-28 19:00:33,998 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:00:34,003 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2020-07-28 19:00:34,004 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2020-07-28 19:00:34,004 WARN L170 areAnnotationChecker]: L130-2 has no Hoare annotation [2020-07-28 19:00:34,004 WARN L170 areAnnotationChecker]: L130-2 has no Hoare annotation [2020-07-28 19:00:34,004 WARN L170 areAnnotationChecker]: L441-11 has no Hoare annotation [2020-07-28 19:00:34,004 WARN L170 areAnnotationChecker]: L498-2 has no Hoare annotation [2020-07-28 19:00:34,004 WARN L170 areAnnotationChecker]: L498-2 has no Hoare annotation [2020-07-28 19:00:34,004 WARN L170 areAnnotationChecker]: L902 has no Hoare annotation [2020-07-28 19:00:34,004 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:00:34,004 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:00:34,005 WARN L170 areAnnotationChecker]: L322 has no Hoare annotation [2020-07-28 19:00:34,006 WARN L170 areAnnotationChecker]: L455 has no Hoare annotation [2020-07-28 19:00:34,006 WARN L170 areAnnotationChecker]: L455 has no Hoare annotation [2020-07-28 19:00:34,006 WARN L170 areAnnotationChecker]: L441-6 has no Hoare annotation [2020-07-28 19:00:34,006 WARN L170 areAnnotationChecker]: L300-3 has no Hoare annotation [2020-07-28 19:00:34,006 WARN L170 areAnnotationChecker]: L885-1 has no Hoare annotation [2020-07-28 19:00:34,006 WARN L170 areAnnotationChecker]: L885-1 has no Hoare annotation [2020-07-28 19:00:34,006 WARN L170 areAnnotationChecker]: L905 has no Hoare annotation [2020-07-28 19:00:34,007 WARN L170 areAnnotationChecker]: L905 has no Hoare annotation [2020-07-28 19:00:34,007 WARN L170 areAnnotationChecker]: L322 has no Hoare annotation [2020-07-28 19:00:34,007 WARN L170 areAnnotationChecker]: L322 has no Hoare annotation [2020-07-28 19:00:34,009 WARN L170 areAnnotationChecker]: L441-6 has no Hoare annotation [2020-07-28 19:00:34,009 WARN L170 areAnnotationChecker]: L441-6 has no Hoare annotation [2020-07-28 19:00:34,009 WARN L170 areAnnotationChecker]: L300-3 has no Hoare annotation [2020-07-28 19:00:34,009 WARN L170 areAnnotationChecker]: L300-3 has no Hoare annotation [2020-07-28 19:00:34,009 WARN L170 areAnnotationChecker]: L905-1 has no Hoare annotation [2020-07-28 19:00:34,010 WARN L170 areAnnotationChecker]: L905-1 has no Hoare annotation [2020-07-28 19:00:34,011 WARN L170 areAnnotationChecker]: L296-1 has no Hoare annotation [2020-07-28 19:00:34,011 WARN L170 areAnnotationChecker]: L296-1 has no Hoare annotation [2020-07-28 19:00:34,011 WARN L170 areAnnotationChecker]: L493 has no Hoare annotation [2020-07-28 19:00:34,011 WARN L170 areAnnotationChecker]: L441-8 has no Hoare annotation [2020-07-28 19:00:34,011 WARN L170 areAnnotationChecker]: L53-6 has no Hoare annotation [2020-07-28 19:00:34,011 WARN L170 areAnnotationChecker]: L53-6 has no Hoare annotation [2020-07-28 19:00:34,012 WARN L170 areAnnotationChecker]: L322-2 has no Hoare annotation [2020-07-28 19:00:34,012 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2020-07-28 19:00:34,012 WARN L170 areAnnotationChecker]: L130-1 has no Hoare annotation [2020-07-28 19:00:34,012 WARN L170 areAnnotationChecker]: L130-1 has no Hoare annotation [2020-07-28 19:00:34,012 WARN L170 areAnnotationChecker]: L493 has no Hoare annotation [2020-07-28 19:00:34,012 WARN L170 areAnnotationChecker]: L493 has no Hoare annotation [2020-07-28 19:00:34,012 WARN L170 areAnnotationChecker]: L300-2 has no Hoare annotation [2020-07-28 19:00:34,012 WARN L170 areAnnotationChecker]: L358-6 has no Hoare annotation [2020-07-28 19:00:34,012 WARN L170 areAnnotationChecker]: L322-2 has no Hoare annotation [2020-07-28 19:00:34,013 WARN L170 areAnnotationChecker]: L322-2 has no Hoare annotation [2020-07-28 19:00:34,013 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2020-07-28 19:00:34,013 WARN L170 areAnnotationChecker]: L326 has no Hoare annotation [2020-07-28 19:00:34,013 WARN L170 areAnnotationChecker]: L441-3 has no Hoare annotation [2020-07-28 19:00:34,013 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2020-07-28 19:00:34,013 WARN L170 areAnnotationChecker]: L300-2 has no Hoare annotation [2020-07-28 19:00:34,013 WARN L170 areAnnotationChecker]: L300-2 has no Hoare annotation [2020-07-28 19:00:34,013 WARN L170 areAnnotationChecker]: L358-6 has no Hoare annotation [2020-07-28 19:00:34,013 WARN L170 areAnnotationChecker]: L358-6 has no Hoare annotation [2020-07-28 19:00:34,013 WARN L170 areAnnotationChecker]: L296-5 has no Hoare annotation [2020-07-28 19:00:34,014 WARN L170 areAnnotationChecker]: L296-5 has no Hoare annotation [2020-07-28 19:00:34,014 WARN L170 areAnnotationChecker]: L493-4 has no Hoare annotation [2020-07-28 19:00:34,014 WARN L170 areAnnotationChecker]: L296 has no Hoare annotation [2020-07-28 19:00:34,014 WARN L170 areAnnotationChecker]: L296 has no Hoare annotation [2020-07-28 19:00:34,014 WARN L170 areAnnotationChecker]: L441-3 has no Hoare annotation [2020-07-28 19:00:34,014 WARN L170 areAnnotationChecker]: L441-3 has no Hoare annotation [2020-07-28 19:00:34,014 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2020-07-28 19:00:34,014 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2020-07-28 19:00:34,014 WARN L170 areAnnotationChecker]: L326-2 has no Hoare annotation [2020-07-28 19:00:34,014 WARN L170 areAnnotationChecker]: L130-5 has no Hoare annotation [2020-07-28 19:00:34,015 WARN L170 areAnnotationChecker]: L130-5 has no Hoare annotation [2020-07-28 19:00:34,015 WARN L170 areAnnotationChecker]: L493-4 has no Hoare annotation [2020-07-28 19:00:34,015 WARN L170 areAnnotationChecker]: L493-4 has no Hoare annotation [2020-07-28 19:00:34,015 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-28 19:00:34,015 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-28 19:00:34,015 WARN L170 areAnnotationChecker]: L441-5 has no Hoare annotation [2020-07-28 19:00:34,015 WARN L170 areAnnotationChecker]: L498 has no Hoare annotation [2020-07-28 19:00:34,015 WARN L170 areAnnotationChecker]: L498 has no Hoare annotation [2020-07-28 19:00:34,015 WARN L170 areAnnotationChecker]: L358-4 has no Hoare annotation [2020-07-28 19:00:34,016 WARN L170 areAnnotationChecker]: L326-2 has no Hoare annotation [2020-07-28 19:00:34,016 WARN L170 areAnnotationChecker]: L326-2 has no Hoare annotation [2020-07-28 19:00:34,016 WARN L170 areAnnotationChecker]: L441-15 has no Hoare annotation [2020-07-28 19:00:34,016 WARN L170 areAnnotationChecker]: L497-4 has no Hoare annotation [2020-07-28 19:00:34,016 WARN L170 areAnnotationChecker]: L441 has no Hoare annotation [2020-07-28 19:00:34,016 WARN L170 areAnnotationChecker]: L300-1 has no Hoare annotation [2020-07-28 19:00:34,016 WARN L170 areAnnotationChecker]: L885 has no Hoare annotation [2020-07-28 19:00:34,016 WARN L170 areAnnotationChecker]: L885 has no Hoare annotation [2020-07-28 19:00:34,016 WARN L170 areAnnotationChecker]: L358-4 has no Hoare annotation [2020-07-28 19:00:34,017 WARN L170 areAnnotationChecker]: L358-4 has no Hoare annotation [2020-07-28 19:00:34,017 WARN L170 areAnnotationChecker]: L296-4 has no Hoare annotation [2020-07-28 19:00:34,017 WARN L170 areAnnotationChecker]: L296-4 has no Hoare annotation [2020-07-28 19:00:34,017 WARN L170 areAnnotationChecker]: L441-15 has no Hoare annotation [2020-07-28 19:00:34,017 WARN L170 areAnnotationChecker]: L441-15 has no Hoare annotation [2020-07-28 19:00:34,017 WARN L170 areAnnotationChecker]: L497-4 has no Hoare annotation [2020-07-28 19:00:34,017 WARN L170 areAnnotationChecker]: L497-4 has no Hoare annotation [2020-07-28 19:00:34,017 WARN L170 areAnnotationChecker]: L441 has no Hoare annotation [2020-07-28 19:00:34,017 WARN L170 areAnnotationChecker]: L441 has no Hoare annotation [2020-07-28 19:00:34,017 WARN L170 areAnnotationChecker]: L300-1 has no Hoare annotation [2020-07-28 19:00:34,018 WARN L170 areAnnotationChecker]: L300-1 has no Hoare annotation [2020-07-28 19:00:34,018 WARN L170 areAnnotationChecker]: L130-4 has no Hoare annotation [2020-07-28 19:00:34,018 WARN L170 areAnnotationChecker]: L130-4 has no Hoare annotation [2020-07-28 19:00:34,018 WARN L170 areAnnotationChecker]: L441-17 has no Hoare annotation [2020-07-28 19:00:34,018 WARN L170 areAnnotationChecker]: L498-4 has no Hoare annotation [2020-07-28 19:00:34,018 WARN L170 areAnnotationChecker]: L498-4 has no Hoare annotation [2020-07-28 19:00:34,018 WARN L170 areAnnotationChecker]: L441-2 has no Hoare annotation [2020-07-28 19:00:34,020 WARN L170 areAnnotationChecker]: L441-12 has no Hoare annotation [2020-07-28 19:00:34,020 WARN L170 areAnnotationChecker]: L300-5 has no Hoare annotation [2020-07-28 19:00:34,021 WARN L170 areAnnotationChecker]: L885-2 has no Hoare annotation [2020-07-28 19:00:34,021 WARN L170 areAnnotationChecker]: L885-2 has no Hoare annotation [2020-07-28 19:00:34,021 WARN L170 areAnnotationChecker]: L300 has no Hoare annotation [2020-07-28 19:00:34,021 WARN L170 areAnnotationChecker]: L358-2 has no Hoare annotation [2020-07-28 19:00:34,021 WARN L170 areAnnotationChecker]: L441-12 has no Hoare annotation [2020-07-28 19:00:34,021 WARN L170 areAnnotationChecker]: L441-12 has no Hoare annotation [2020-07-28 19:00:34,021 WARN L170 areAnnotationChecker]: L300-5 has no Hoare annotation [2020-07-28 19:00:34,021 WARN L170 areAnnotationChecker]: L300-5 has no Hoare annotation [2020-07-28 19:00:34,022 WARN L170 areAnnotationChecker]: L300 has no Hoare annotation [2020-07-28 19:00:34,022 WARN L170 areAnnotationChecker]: L300 has no Hoare annotation [2020-07-28 19:00:34,022 WARN L170 areAnnotationChecker]: L358-2 has no Hoare annotation [2020-07-28 19:00:34,022 WARN L170 areAnnotationChecker]: L358-2 has no Hoare annotation [2020-07-28 19:00:34,022 WARN L170 areAnnotationChecker]: L441-14 has no Hoare annotation [2020-07-28 19:00:34,023 WARN L170 areAnnotationChecker]: L300-4 has no Hoare annotation [2020-07-28 19:00:34,023 WARN L170 areAnnotationChecker]: L358-10 has no Hoare annotation [2020-07-28 19:00:34,023 WARN L170 areAnnotationChecker]: L358 has no Hoare annotation [2020-07-28 19:00:34,024 WARN L170 areAnnotationChecker]: L300-4 has no Hoare annotation [2020-07-28 19:00:34,024 WARN L170 areAnnotationChecker]: L300-4 has no Hoare annotation [2020-07-28 19:00:34,024 WARN L170 areAnnotationChecker]: L358-10 has no Hoare annotation [2020-07-28 19:00:34,024 WARN L170 areAnnotationChecker]: L358-10 has no Hoare annotation [2020-07-28 19:00:34,024 WARN L170 areAnnotationChecker]: L358 has no Hoare annotation [2020-07-28 19:00:34,024 WARN L170 areAnnotationChecker]: L358 has no Hoare annotation [2020-07-28 19:00:34,024 WARN L170 areAnnotationChecker]: L358-8 has no Hoare annotation [2020-07-28 19:00:34,024 WARN L170 areAnnotationChecker]: L358-8 has no Hoare annotation [2020-07-28 19:00:34,024 WARN L170 areAnnotationChecker]: L358-8 has no Hoare annotation [2020-07-28 19:00:34,025 INFO L163 areAnnotationChecker]: CFG has 27 edges. 27 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:00:34,093 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:00:34 BoogieIcfgContainer [2020-07-28 19:00:34,093 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:00:34,093 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:00:34,093 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:00:34,094 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:00:34,094 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:00:01" (3/4) ... [2020-07-28 19:00:34,098 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:00:34,119 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:00:34,120 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:00:34,121 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:00:34,122 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:00:34,123 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:00:34,125 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:00:34,126 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:00:34,158 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && methaneLevelCritical == \result) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive) && 0 == tmp)) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && methaneLevelCritical == \result) && 0 == pumpRunning) && 1 == systemActive)) || ((((((0 == methAndRunningLastTime && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == \result) && 1 == systemActive) && 0 == tmp)) || ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result) && 0 == tmp) [2020-07-28 19:00:34,158 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && methaneLevelCritical == \result) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning) || ((((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && methaneLevelCritical == \result) && 0 == pumpRunning) && 1 == systemActive)) || ((((((0 == methAndRunningLastTime && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == \result) && 1 == systemActive) && 0 == tmp)) || ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result) && 0 == tmp) [2020-07-28 19:00:34,159 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == systemActive) || (1 == methaneLevelCritical && (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == systemActive) && 0 == pumpRunning) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result)))) || ((((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (1 == methaneLevelCritical && (((((0 == methAndRunningLastTime && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 1 == systemActive) || (((0 == methAndRunningLastTime && 0 == splverifierCounter) && 0 == \result) && 1 == systemActive))) [2020-07-28 19:00:34,159 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) || ((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == systemActive)) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (1 == methaneLevelCritical && (((((0 == methAndRunningLastTime && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 1 == systemActive) || (((0 == methAndRunningLastTime && 0 == splverifierCounter) && 0 == \result) && 1 == systemActive))) [2020-07-28 19:00:34,159 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) || ((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == systemActive)) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (1 == methaneLevelCritical && (((((0 == methAndRunningLastTime && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 1 == systemActive) || (((0 == methAndRunningLastTime && 0 == splverifierCounter) && 0 == \result) && 1 == systemActive))) [2020-07-28 19:00:34,160 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning)) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || ((((\result == methaneLevelCritical && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == \result) && 1 == systemActive) [2020-07-28 19:00:34,161 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive) || ((((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result)) || ((((0 == splverifierCounter && 1 == methaneLevelCritical) && methaneLevelCritical == \result) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == splverifierCounter && methaneLevelCritical == \result) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || ((((\result == methaneLevelCritical && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == \result) && 1 == systemActive) [2020-07-28 19:00:34,161 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == splverifierCounter && methaneLevelCritical == \result) && 1 == methaneLevelCritical) && 1 == systemActive) || (((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == \result) && 1 == systemActive) [2020-07-28 19:00:34,162 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == splverifierCounter && methaneLevelCritical == \result) && 1 == methaneLevelCritical) && 1 == \result) && 1 == systemActive) || ((((\result == methaneLevelCritical && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == \result) && 1 == systemActive) [2020-07-28 19:00:34,162 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || ((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && !(0 == \result)) && 1 == systemActive)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:00:34,163 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && methaneLevelCritical == \result) && 1 == methaneLevelCritical) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) || (((((0 == splverifierCounter && 1 == methaneLevelCritical) && methaneLevelCritical == \result) && 0 == systemActive) && 0 == \result) && 0 == pumpRunning) [2020-07-28 19:00:34,164 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((!(0 == tmp) && 0 == splverifierCounter) && 0 == tmp___0) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:00:34,165 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((methaneLevelCritical == tmp && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive [2020-07-28 19:00:34,166 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && methaneLevelCritical == \result) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:00:34,166 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((methaneLevelCritical == tmp && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive [2020-07-28 19:00:34,166 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && methaneLevelCritical == \result) && 1 == methaneLevelCritical) && 1 == \result) && 0 == pumpRunning) && 1 == systemActive) || (((((\result == methaneLevelCritical && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive) [2020-07-28 19:00:34,167 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((methaneLevelCritical == tmp && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive [2020-07-28 19:00:34,167 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((methaneLevelCritical == tmp && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive [2020-07-28 19:00:34,268 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:00:34,268 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:00:34,270 INFO L168 Benchmark]: Toolchain (without parser) took 35722.64 ms. Allocated memory was 1.0 GB in the beginning and 1.7 GB in the end (delta: 625.5 MB). Free memory was 950.8 MB in the beginning and 1.6 GB in the end (delta: -660.2 MB). Peak memory consumption was 708.3 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:34,271 INFO L168 Benchmark]: CDTParser took 0.21 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:00:34,271 INFO L168 Benchmark]: CACSL2BoogieTranslator took 660.80 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 136.3 MB). Free memory was 950.8 MB in the beginning and 1.1 GB in the end (delta: -167.7 MB). Peak memory consumption was 32.0 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:34,271 INFO L168 Benchmark]: Boogie Procedure Inliner took 92.17 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 8.3 MB). Peak memory consumption was 8.3 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:34,272 INFO L168 Benchmark]: Boogie Preprocessor took 58.79 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:34,272 INFO L168 Benchmark]: RCFGBuilder took 1862.43 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 910.8 MB in the end (delta: 192.8 MB). Peak memory consumption was 192.8 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:34,272 INFO L168 Benchmark]: TraceAbstraction took 32865.66 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 434.1 MB). Free memory was 910.8 MB in the beginning and 817.9 MB in the end (delta: 92.9 MB). Peak memory consumption was 527.0 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:34,273 INFO L168 Benchmark]: Witness Printer took 174.78 ms. Allocated memory was 1.6 GB in the beginning and 1.7 GB in the end (delta: 55.1 MB). Free memory was 817.9 MB in the beginning and 1.6 GB in the end (delta: -793.1 MB). Peak memory consumption was 5.0 MB. Max. memory is 11.5 GB. [2020-07-28 19:00:34,276 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 660.80 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 136.3 MB). Free memory was 950.8 MB in the beginning and 1.1 GB in the end (delta: -167.7 MB). Peak memory consumption was 32.0 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 92.17 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 8.3 MB). Peak memory consumption was 8.3 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 58.79 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1862.43 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 910.8 MB in the end (delta: 192.8 MB). Peak memory consumption was 192.8 MB. Max. memory is 11.5 GB. * TraceAbstraction took 32865.66 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 434.1 MB). Free memory was 910.8 MB in the beginning and 817.9 MB in the end (delta: 92.9 MB). Peak memory consumption was 527.0 MB. Max. memory is 11.5 GB. * Witness Printer took 174.78 ms. Allocated memory was 1.6 GB in the beginning and 1.7 GB in the end (delta: 55.1 MB). Free memory was 817.9 MB in the beginning and 1.6 GB in the end (delta: -793.1 MB). Peak memory consumption was 5.0 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 885]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 885]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 885]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || ((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && !(0 == \result)) && 1 == systemActive)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 477]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: (((((methaneLevelCritical == tmp && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && methaneLevelCritical == \result) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive) && 0 == tmp)) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && methaneLevelCritical == \result) && 0 == pumpRunning) && 1 == systemActive)) || ((((((0 == methAndRunningLastTime && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == \result) && 1 == systemActive) && 0 == tmp)) || ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result) && 0 == tmp) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: ((((0 == splverifierCounter && methaneLevelCritical == \result) && 1 == methaneLevelCritical) && 1 == \result) && 1 == systemActive) || ((((\result == methaneLevelCritical && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == \result) && 1 == systemActive) - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 126]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning)) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || ((((\result == methaneLevelCritical && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == \result) && 1 == systemActive) - InvariantResult [Line: 263]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 263]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 264]: Loop Invariant Derived loop invariant: ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) || ((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == systemActive)) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (1 == methaneLevelCritical && (((((0 == methAndRunningLastTime && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 1 == systemActive) || (((0 == methAndRunningLastTime && 0 == splverifierCounter) && 0 == \result) && 1 == systemActive))) - InvariantResult [Line: 973]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 263]: Loop Invariant Derived loop invariant: ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) || ((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == systemActive)) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (1 == methaneLevelCritical && (((((0 == methAndRunningLastTime && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 1 == systemActive) || (((0 == methAndRunningLastTime && 0 == splverifierCounter) && 0 == \result) && 1 == systemActive))) - InvariantResult [Line: 213]: Loop Invariant Derived loop invariant: (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == systemActive) || (1 == methaneLevelCritical && (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == systemActive) && 0 == pumpRunning) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result)))) || ((((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (1 == methaneLevelCritical && (((((0 == methAndRunningLastTime && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 1 == systemActive) || (((0 == methAndRunningLastTime && 0 == splverifierCounter) && 0 == \result) && 1 == systemActive))) - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: (((((((!(0 == tmp) && 0 == splverifierCounter) && 0 == tmp___0) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 387]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && methaneLevelCritical == \result) && 1 == methaneLevelCritical) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) || (((((0 == splverifierCounter && 1 == methaneLevelCritical) && methaneLevelCritical == \result) && 0 == systemActive) && 0 == \result) && 0 == pumpRunning) - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 387]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 387]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 901]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 192]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: (((((methaneLevelCritical == tmp && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) || ((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: (((0 == splverifierCounter && methaneLevelCritical == \result) && 1 == methaneLevelCritical) && 1 == systemActive) || (((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == \result) && 1 == systemActive) - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 963]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 945]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 203]: Loop Invariant Derived loop invariant: ((((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && methaneLevelCritical == \result) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning) || ((((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && methaneLevelCritical == \result) && 0 == pumpRunning) && 1 == systemActive)) || ((((((0 == methAndRunningLastTime && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == \result) && 1 == systemActive) && 0 == tmp)) || ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result) && 0 == tmp) - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: (((((methaneLevelCritical == tmp && \result == methaneLevelCritical) && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && methaneLevelCritical == \result) && 1 == methaneLevelCritical) && 1 == \result) && 0 == pumpRunning) && 1 == systemActive) || (((((\result == methaneLevelCritical && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive) - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: (((((((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive) || ((((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result)) || ((((0 == splverifierCounter && 1 == methaneLevelCritical) && methaneLevelCritical == \result) && 0 == systemActive) && 0 == pumpRunning)) || ((((0 == splverifierCounter && methaneLevelCritical == \result) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || ((((\result == methaneLevelCritical && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == \result) && 1 == systemActive) - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: ((((0 == splverifierCounter && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && methaneLevelCritical == \result) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 376]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 85]: Loop Invariant Derived loop invariant: ((((methaneLevelCritical == tmp && 0 == splverifierCounter) && methaneLevelCritical == \result) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 135 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 25.2s, OverallIterations: 12, TraceHistogramMax: 2, AutomataDifference: 19.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 7.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1384 SDtfs, 2173 SDslu, 2479 SDs, 0 SdLazy, 419 SolverSat, 101 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.7s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 102 GetRequests, 44 SyntacticMatches, 0 SemanticMatches, 58 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 121 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=307occurred in iteration=9, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 3.1s AutomataMinimizationTime, 12 MinimizatonAttempts, 1220 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 57 LocationsWithAnnotation, 57 PreInvPairs, 394 NumberOfFragments, 1142 HoareAnnotationTreeSize, 57 FomulaSimplifications, 1113673 FormulaSimplificationTreeSizeReduction, 2.3s HoareSimplificationTime, 57 FomulaSimplificationsInter, 79813 FormulaSimplificationTreeSizeReductionInter, 4.9s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.2s InterpolantComputationTime, 434 NumberOfCodeBlocks, 434 NumberOfCodeBlocksAsserted, 12 NumberOfCheckSat, 422 ConstructedInterpolants, 0 QuantifiedInterpolants, 26580 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 12 InterpolantComputations, 12 PerfectInterpolantSequences, 61/61 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...