./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 9f9d802e48c20b812c0aeb303e5b9a04b1c7ed3d ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:00:28,669 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:00:28,671 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:00:28,683 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:00:28,683 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:00:28,684 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:00:28,686 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:00:28,687 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:00:28,689 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:00:28,690 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:00:28,691 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:00:28,693 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:00:28,693 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:00:28,694 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:00:28,695 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:00:28,697 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:00:28,697 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:00:28,698 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:00:28,700 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:00:28,702 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:00:28,704 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:00:28,705 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:00:28,706 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:00:28,707 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:00:28,710 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:00:28,710 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:00:28,710 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:00:28,711 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:00:28,712 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:00:28,713 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:00:28,713 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:00:28,714 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:00:28,715 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:00:28,715 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:00:28,716 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:00:28,717 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:00:28,717 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:00:28,718 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:00:28,718 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:00:28,719 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:00:28,719 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:00:28,720 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:00:28,736 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:00:28,736 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:00:28,737 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:00:28,738 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:00:28,738 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:00:28,738 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:00:28,738 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:00:28,738 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:00:28,739 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:00:28,739 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:00:28,739 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:00:28,739 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:00:28,739 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:00:28,740 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:00:28,740 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:00:28,740 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:00:28,740 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:00:28,741 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:00:28,741 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:00:28,741 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:00:28,741 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:00:28,741 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:00:28,742 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:00:28,742 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:00:28,742 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:00:28,742 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:00:28,742 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:00:28,743 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:00:28,743 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:00:28,743 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 9f9d802e48c20b812c0aeb303e5b9a04b1c7ed3d [2020-07-28 19:00:29,060 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:00:29,072 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:00:29,076 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:00:29,077 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:00:29,077 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:00:29,078 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c [2020-07-28 19:00:29,141 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/302b0e88e/7a4a95b69c2d4045820f021b1c0ae706/FLAG2d74cc3a6 [2020-07-28 19:00:29,642 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:00:29,643 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec2_product60.cil.c [2020-07-28 19:00:29,660 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/302b0e88e/7a4a95b69c2d4045820f021b1c0ae706/FLAG2d74cc3a6 [2020-07-28 19:00:29,969 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/302b0e88e/7a4a95b69c2d4045820f021b1c0ae706 [2020-07-28 19:00:29,972 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:00:29,975 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:00:29,976 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:00:29,976 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:00:29,980 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:00:29,981 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:00:29" (1/1) ... [2020-07-28 19:00:29,984 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1caa0db6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:00:29, skipping insertion in model container [2020-07-28 19:00:29,984 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:00:29" (1/1) ... [2020-07-28 19:00:29,992 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:00:30,056 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:00:30,533 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:00:30,554 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:00:30,643 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:00:30,691 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:00:30,692 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:00:30 WrapperNode [2020-07-28 19:00:30,692 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:00:30,692 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:00:30,693 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:00:30,693 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:00:30,700 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:00:30" (1/1) ... [2020-07-28 19:00:30,719 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:00:30" (1/1) ... [2020-07-28 19:00:30,802 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:00:30,804 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:00:30,804 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:00:30,804 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:00:30,814 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:00:30" (1/1) ... [2020-07-28 19:00:30,814 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:00:30" (1/1) ... [2020-07-28 19:00:30,833 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:00:30" (1/1) ... [2020-07-28 19:00:30,838 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:00:30" (1/1) ... [2020-07-28 19:00:30,866 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:00:30" (1/1) ... [2020-07-28 19:00:30,877 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:00:30" (1/1) ... [2020-07-28 19:00:30,881 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:00:30" (1/1) ... [2020-07-28 19:00:30,887 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:00:30,888 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:00:30,888 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:00:30,888 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:00:30,889 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:00:30" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:00:30,957 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:00:30,958 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:00:30,958 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:00:30,959 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:00:32,627 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:00:32,628 INFO L295 CfgBuilder]: Removed 200 assume(true) statements. [2020-07-28 19:00:32,633 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:00:32 BoogieIcfgContainer [2020-07-28 19:00:32,633 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:00:32,634 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:00:32,635 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:00:32,638 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:00:32,638 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:00:29" (1/3) ... [2020-07-28 19:00:32,639 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7c6e7db4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:00:32, skipping insertion in model container [2020-07-28 19:00:32,640 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:00:30" (2/3) ... [2020-07-28 19:00:32,640 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7c6e7db4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:00:32, skipping insertion in model container [2020-07-28 19:00:32,641 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:00:32" (3/3) ... [2020-07-28 19:00:32,643 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec2_product60.cil.c [2020-07-28 19:00:32,655 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:00:32,662 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:00:32,677 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:00:32,703 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:00:32,704 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:00:32,704 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:00:32,704 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:00:32,705 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:00:32,706 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:00:32,706 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:00:32,706 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:00:32,726 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states. [2020-07-28 19:00:32,734 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-28 19:00:32,734 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:32,735 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:32,736 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:32,742 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:32,743 INFO L82 PathProgramCache]: Analyzing trace with hash 1212648512, now seen corresponding path program 1 times [2020-07-28 19:00:32,755 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:32,756 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [835906946] [2020-07-28 19:00:32,756 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:32,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:33,080 INFO L280 TraceCheckUtils]: 0: Hoare triple {144#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {144#true} is VALID [2020-07-28 19:00:33,081 INFO L280 TraceCheckUtils]: 1: Hoare triple {144#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {144#true} is VALID [2020-07-28 19:00:33,082 INFO L280 TraceCheckUtils]: 2: Hoare triple {144#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {144#true} is VALID [2020-07-28 19:00:33,082 INFO L280 TraceCheckUtils]: 3: Hoare triple {144#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {144#true} is VALID [2020-07-28 19:00:33,083 INFO L280 TraceCheckUtils]: 4: Hoare triple {144#true} assume 0 != main_~tmp~0; {144#true} is VALID [2020-07-28 19:00:33,084 INFO L280 TraceCheckUtils]: 5: Hoare triple {144#true} ~methAndRunningLastTime~0 := 0; {144#true} is VALID [2020-07-28 19:00:33,084 INFO L280 TraceCheckUtils]: 6: Hoare triple {144#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {144#true} is VALID [2020-07-28 19:00:33,090 INFO L280 TraceCheckUtils]: 7: Hoare triple {144#true} assume !true; {145#false} is VALID [2020-07-28 19:00:33,090 INFO L280 TraceCheckUtils]: 8: Hoare triple {145#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {145#false} is VALID [2020-07-28 19:00:33,090 INFO L280 TraceCheckUtils]: 9: Hoare triple {145#false} assume !(0 != ~pumpRunning~0); {145#false} is VALID [2020-07-28 19:00:33,091 INFO L280 TraceCheckUtils]: 10: Hoare triple {145#false} assume !(0 != ~systemActive~0); {145#false} is VALID [2020-07-28 19:00:33,091 INFO L280 TraceCheckUtils]: 11: Hoare triple {145#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {145#false} is VALID [2020-07-28 19:00:33,092 INFO L280 TraceCheckUtils]: 12: Hoare triple {145#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {145#false} is VALID [2020-07-28 19:00:33,092 INFO L280 TraceCheckUtils]: 13: Hoare triple {145#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {145#false} is VALID [2020-07-28 19:00:33,096 INFO L280 TraceCheckUtils]: 14: Hoare triple {145#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {145#false} is VALID [2020-07-28 19:00:33,096 INFO L280 TraceCheckUtils]: 15: Hoare triple {145#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {145#false} is VALID [2020-07-28 19:00:33,096 INFO L280 TraceCheckUtils]: 16: Hoare triple {145#false} assume 0 != ~methAndRunningLastTime~0; {145#false} is VALID [2020-07-28 19:00:33,097 INFO L280 TraceCheckUtils]: 17: Hoare triple {145#false} assume !false; {145#false} is VALID [2020-07-28 19:00:33,101 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:33,103 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [835906946] [2020-07-28 19:00:33,106 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:33,106 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:00:33,108 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1449105633] [2020-07-28 19:00:33,116 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:00:33,118 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:33,122 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:00:33,170 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:33,170 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:00:33,170 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:33,179 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:00:33,180 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:00:33,182 INFO L87 Difference]: Start difference. First operand 141 states. Second operand 2 states. [2020-07-28 19:00:33,501 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:33,501 INFO L93 Difference]: Finished difference Result 275 states and 414 transitions. [2020-07-28 19:00:33,502 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:00:33,502 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:00:33,502 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:33,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:00:33,520 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 414 transitions. [2020-07-28 19:00:33,520 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:00:33,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 414 transitions. [2020-07-28 19:00:33,529 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 414 transitions. [2020-07-28 19:00:34,092 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 414 edges. 414 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:34,123 INFO L225 Difference]: With dead ends: 275 [2020-07-28 19:00:34,123 INFO L226 Difference]: Without dead ends: 137 [2020-07-28 19:00:34,130 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:00:34,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2020-07-28 19:00:34,209 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 137. [2020-07-28 19:00:34,210 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:34,211 INFO L82 GeneralOperation]: Start isEquivalent. First operand 137 states. Second operand 137 states. [2020-07-28 19:00:34,211 INFO L74 IsIncluded]: Start isIncluded. First operand 137 states. Second operand 137 states. [2020-07-28 19:00:34,211 INFO L87 Difference]: Start difference. First operand 137 states. Second operand 137 states. [2020-07-28 19:00:34,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:34,220 INFO L93 Difference]: Finished difference Result 137 states and 199 transitions. [2020-07-28 19:00:34,220 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 199 transitions. [2020-07-28 19:00:34,221 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:34,222 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:34,222 INFO L74 IsIncluded]: Start isIncluded. First operand 137 states. Second operand 137 states. [2020-07-28 19:00:34,222 INFO L87 Difference]: Start difference. First operand 137 states. Second operand 137 states. [2020-07-28 19:00:34,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:34,230 INFO L93 Difference]: Finished difference Result 137 states and 199 transitions. [2020-07-28 19:00:34,230 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 199 transitions. [2020-07-28 19:00:34,232 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:34,232 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:34,232 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:34,232 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:34,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 137 states. [2020-07-28 19:00:34,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137 states to 137 states and 199 transitions. [2020-07-28 19:00:34,241 INFO L78 Accepts]: Start accepts. Automaton has 137 states and 199 transitions. Word has length 18 [2020-07-28 19:00:34,241 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:34,241 INFO L479 AbstractCegarLoop]: Abstraction has 137 states and 199 transitions. [2020-07-28 19:00:34,241 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:00:34,241 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 199 transitions. [2020-07-28 19:00:34,242 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 19:00:34,243 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:34,243 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:34,243 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:00:34,243 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:34,244 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:34,244 INFO L82 PathProgramCache]: Analyzing trace with hash 1186120291, now seen corresponding path program 1 times [2020-07-28 19:00:34,244 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:34,244 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1497958923] [2020-07-28 19:00:34,245 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:34,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:34,392 INFO L280 TraceCheckUtils]: 0: Hoare triple {999#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {999#true} is VALID [2020-07-28 19:00:34,392 INFO L280 TraceCheckUtils]: 1: Hoare triple {999#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {999#true} is VALID [2020-07-28 19:00:34,393 INFO L280 TraceCheckUtils]: 2: Hoare triple {999#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {999#true} is VALID [2020-07-28 19:00:34,393 INFO L280 TraceCheckUtils]: 3: Hoare triple {999#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {999#true} is VALID [2020-07-28 19:00:34,394 INFO L280 TraceCheckUtils]: 4: Hoare triple {999#true} assume 0 != main_~tmp~0; {999#true} is VALID [2020-07-28 19:00:34,394 INFO L280 TraceCheckUtils]: 5: Hoare triple {999#true} ~methAndRunningLastTime~0 := 0; {999#true} is VALID [2020-07-28 19:00:34,397 INFO L280 TraceCheckUtils]: 6: Hoare triple {999#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1001#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:00:34,398 INFO L280 TraceCheckUtils]: 7: Hoare triple {1001#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {1001#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:00:34,399 INFO L280 TraceCheckUtils]: 8: Hoare triple {1001#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {1000#false} is VALID [2020-07-28 19:00:34,400 INFO L280 TraceCheckUtils]: 9: Hoare triple {1000#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {1000#false} is VALID [2020-07-28 19:00:34,400 INFO L280 TraceCheckUtils]: 10: Hoare triple {1000#false} assume !(0 != ~pumpRunning~0); {1000#false} is VALID [2020-07-28 19:00:34,400 INFO L280 TraceCheckUtils]: 11: Hoare triple {1000#false} assume !(0 != ~systemActive~0); {1000#false} is VALID [2020-07-28 19:00:34,401 INFO L280 TraceCheckUtils]: 12: Hoare triple {1000#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {1000#false} is VALID [2020-07-28 19:00:34,401 INFO L280 TraceCheckUtils]: 13: Hoare triple {1000#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {1000#false} is VALID [2020-07-28 19:00:34,401 INFO L280 TraceCheckUtils]: 14: Hoare triple {1000#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {1000#false} is VALID [2020-07-28 19:00:34,401 INFO L280 TraceCheckUtils]: 15: Hoare triple {1000#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {1000#false} is VALID [2020-07-28 19:00:34,402 INFO L280 TraceCheckUtils]: 16: Hoare triple {1000#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {1000#false} is VALID [2020-07-28 19:00:34,402 INFO L280 TraceCheckUtils]: 17: Hoare triple {1000#false} assume 0 != ~methAndRunningLastTime~0; {1000#false} is VALID [2020-07-28 19:00:34,402 INFO L280 TraceCheckUtils]: 18: Hoare triple {1000#false} assume !false; {1000#false} is VALID [2020-07-28 19:00:34,404 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:34,404 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1497958923] [2020-07-28 19:00:34,405 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:34,405 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:00:34,405 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1858094037] [2020-07-28 19:00:34,407 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:00:34,407 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:34,407 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:34,438 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:34,438 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:34,439 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:34,439 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:34,439 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:34,440 INFO L87 Difference]: Start difference. First operand 137 states and 199 transitions. Second operand 3 states. [2020-07-28 19:00:34,684 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:34,685 INFO L93 Difference]: Finished difference Result 137 states and 199 transitions. [2020-07-28 19:00:34,685 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:34,685 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:00:34,686 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:34,686 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:34,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 199 transitions. [2020-07-28 19:00:34,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:34,691 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 199 transitions. [2020-07-28 19:00:34,691 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 199 transitions. [2020-07-28 19:00:34,919 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 199 edges. 199 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:34,921 INFO L225 Difference]: With dead ends: 137 [2020-07-28 19:00:34,921 INFO L226 Difference]: Without dead ends: 57 [2020-07-28 19:00:34,923 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:34,923 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57 states. [2020-07-28 19:00:34,944 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57 to 57. [2020-07-28 19:00:34,944 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:34,944 INFO L82 GeneralOperation]: Start isEquivalent. First operand 57 states. Second operand 57 states. [2020-07-28 19:00:34,944 INFO L74 IsIncluded]: Start isIncluded. First operand 57 states. Second operand 57 states. [2020-07-28 19:00:34,944 INFO L87 Difference]: Start difference. First operand 57 states. Second operand 57 states. [2020-07-28 19:00:34,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:34,947 INFO L93 Difference]: Finished difference Result 57 states and 82 transitions. [2020-07-28 19:00:34,948 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 82 transitions. [2020-07-28 19:00:34,948 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:34,948 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:34,949 INFO L74 IsIncluded]: Start isIncluded. First operand 57 states. Second operand 57 states. [2020-07-28 19:00:34,949 INFO L87 Difference]: Start difference. First operand 57 states. Second operand 57 states. [2020-07-28 19:00:34,952 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:34,952 INFO L93 Difference]: Finished difference Result 57 states and 82 transitions. [2020-07-28 19:00:34,952 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 82 transitions. [2020-07-28 19:00:34,953 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:34,953 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:34,953 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:34,954 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:34,954 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 57 states. [2020-07-28 19:00:34,956 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57 states to 57 states and 82 transitions. [2020-07-28 19:00:34,957 INFO L78 Accepts]: Start accepts. Automaton has 57 states and 82 transitions. Word has length 19 [2020-07-28 19:00:34,957 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:34,957 INFO L479 AbstractCegarLoop]: Abstraction has 57 states and 82 transitions. [2020-07-28 19:00:34,958 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:34,958 INFO L276 IsEmpty]: Start isEmpty. Operand 57 states and 82 transitions. [2020-07-28 19:00:34,959 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 19:00:34,959 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:34,959 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:34,960 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:00:34,960 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:34,961 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:34,961 INFO L82 PathProgramCache]: Analyzing trace with hash -1540902592, now seen corresponding path program 1 times [2020-07-28 19:00:34,961 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:34,962 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1460016739] [2020-07-28 19:00:34,962 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:35,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:35,114 INFO L280 TraceCheckUtils]: 0: Hoare triple {1390#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {1390#true} is VALID [2020-07-28 19:00:35,115 INFO L280 TraceCheckUtils]: 1: Hoare triple {1390#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {1390#true} is VALID [2020-07-28 19:00:35,115 INFO L280 TraceCheckUtils]: 2: Hoare triple {1390#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {1390#true} is VALID [2020-07-28 19:00:35,116 INFO L280 TraceCheckUtils]: 3: Hoare triple {1390#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {1390#true} is VALID [2020-07-28 19:00:35,116 INFO L280 TraceCheckUtils]: 4: Hoare triple {1390#true} assume 0 != main_~tmp~0; {1390#true} is VALID [2020-07-28 19:00:35,116 INFO L280 TraceCheckUtils]: 5: Hoare triple {1390#true} ~methAndRunningLastTime~0 := 0; {1390#true} is VALID [2020-07-28 19:00:35,116 INFO L280 TraceCheckUtils]: 6: Hoare triple {1390#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1390#true} is VALID [2020-07-28 19:00:35,117 INFO L280 TraceCheckUtils]: 7: Hoare triple {1390#true} assume !false; {1390#true} is VALID [2020-07-28 19:00:35,117 INFO L280 TraceCheckUtils]: 8: Hoare triple {1390#true} assume test_~splverifierCounter~0 < 4; {1390#true} is VALID [2020-07-28 19:00:35,117 INFO L280 TraceCheckUtils]: 9: Hoare triple {1390#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {1390#true} is VALID [2020-07-28 19:00:35,118 INFO L280 TraceCheckUtils]: 10: Hoare triple {1390#true} assume !(0 != test_~tmp~1); {1390#true} is VALID [2020-07-28 19:00:35,118 INFO L280 TraceCheckUtils]: 11: Hoare triple {1390#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {1390#true} is VALID [2020-07-28 19:00:35,118 INFO L280 TraceCheckUtils]: 12: Hoare triple {1390#true} assume !(0 != test_~tmp___0~0); {1390#true} is VALID [2020-07-28 19:00:35,119 INFO L280 TraceCheckUtils]: 13: Hoare triple {1390#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {1390#true} is VALID [2020-07-28 19:00:35,120 INFO L280 TraceCheckUtils]: 14: Hoare triple {1390#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1392#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:00:35,124 INFO L280 TraceCheckUtils]: 15: Hoare triple {1392#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {1392#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:00:35,124 INFO L280 TraceCheckUtils]: 16: Hoare triple {1392#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {1391#false} is VALID [2020-07-28 19:00:35,125 INFO L280 TraceCheckUtils]: 17: Hoare triple {1391#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {1391#false} is VALID [2020-07-28 19:00:35,125 INFO L280 TraceCheckUtils]: 18: Hoare triple {1391#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {1391#false} is VALID [2020-07-28 19:00:35,125 INFO L280 TraceCheckUtils]: 19: Hoare triple {1391#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {1391#false} is VALID [2020-07-28 19:00:35,126 INFO L280 TraceCheckUtils]: 20: Hoare triple {1391#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {1391#false} is VALID [2020-07-28 19:00:35,126 INFO L280 TraceCheckUtils]: 21: Hoare triple {1391#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {1391#false} is VALID [2020-07-28 19:00:35,126 INFO L280 TraceCheckUtils]: 22: Hoare triple {1391#false} assume 0 != ~methAndRunningLastTime~0; {1391#false} is VALID [2020-07-28 19:00:35,126 INFO L280 TraceCheckUtils]: 23: Hoare triple {1391#false} assume !false; {1391#false} is VALID [2020-07-28 19:00:35,129 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:35,129 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1460016739] [2020-07-28 19:00:35,130 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:35,130 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:00:35,130 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [552840748] [2020-07-28 19:00:35,131 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 19:00:35,131 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:35,131 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:35,161 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:35,161 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:35,161 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:35,162 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:35,162 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:35,163 INFO L87 Difference]: Start difference. First operand 57 states and 82 transitions. Second operand 3 states. [2020-07-28 19:00:35,446 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:35,447 INFO L93 Difference]: Finished difference Result 157 states and 232 transitions. [2020-07-28 19:00:35,447 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:35,447 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 19:00:35,448 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:35,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:35,451 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 232 transitions. [2020-07-28 19:00:35,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:35,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 232 transitions. [2020-07-28 19:00:35,460 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 232 transitions. [2020-07-28 19:00:35,706 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 232 edges. 232 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:35,708 INFO L225 Difference]: With dead ends: 157 [2020-07-28 19:00:35,709 INFO L226 Difference]: Without dead ends: 107 [2020-07-28 19:00:35,709 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:35,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 107 states. [2020-07-28 19:00:35,766 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 107 to 103. [2020-07-28 19:00:35,766 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:35,767 INFO L82 GeneralOperation]: Start isEquivalent. First operand 107 states. Second operand 103 states. [2020-07-28 19:00:35,767 INFO L74 IsIncluded]: Start isIncluded. First operand 107 states. Second operand 103 states. [2020-07-28 19:00:35,767 INFO L87 Difference]: Start difference. First operand 107 states. Second operand 103 states. [2020-07-28 19:00:35,775 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:35,775 INFO L93 Difference]: Finished difference Result 107 states and 156 transitions. [2020-07-28 19:00:35,776 INFO L276 IsEmpty]: Start isEmpty. Operand 107 states and 156 transitions. [2020-07-28 19:00:35,776 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:35,777 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:35,778 INFO L74 IsIncluded]: Start isIncluded. First operand 103 states. Second operand 107 states. [2020-07-28 19:00:35,778 INFO L87 Difference]: Start difference. First operand 103 states. Second operand 107 states. [2020-07-28 19:00:35,782 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:35,782 INFO L93 Difference]: Finished difference Result 107 states and 156 transitions. [2020-07-28 19:00:35,782 INFO L276 IsEmpty]: Start isEmpty. Operand 107 states and 156 transitions. [2020-07-28 19:00:35,783 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:35,783 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:35,783 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:35,783 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:35,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 103 states. [2020-07-28 19:00:35,787 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103 states to 103 states and 152 transitions. [2020-07-28 19:00:35,788 INFO L78 Accepts]: Start accepts. Automaton has 103 states and 152 transitions. Word has length 24 [2020-07-28 19:00:35,788 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:35,788 INFO L479 AbstractCegarLoop]: Abstraction has 103 states and 152 transitions. [2020-07-28 19:00:35,788 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:35,788 INFO L276 IsEmpty]: Start isEmpty. Operand 103 states and 152 transitions. [2020-07-28 19:00:35,789 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2020-07-28 19:00:35,789 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:35,790 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:35,790 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:00:35,791 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:35,791 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:35,791 INFO L82 PathProgramCache]: Analyzing trace with hash 2071903209, now seen corresponding path program 1 times [2020-07-28 19:00:35,792 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:35,792 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1581115110] [2020-07-28 19:00:35,792 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:35,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:35,910 INFO L280 TraceCheckUtils]: 0: Hoare triple {1971#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,911 INFO L280 TraceCheckUtils]: 1: Hoare triple {1973#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,911 INFO L280 TraceCheckUtils]: 2: Hoare triple {1973#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,912 INFO L280 TraceCheckUtils]: 3: Hoare triple {1973#(= 0 ~pumpRunning~0)} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,913 INFO L280 TraceCheckUtils]: 4: Hoare triple {1973#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~0; {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,913 INFO L280 TraceCheckUtils]: 5: Hoare triple {1973#(= 0 ~pumpRunning~0)} ~methAndRunningLastTime~0 := 0; {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,914 INFO L280 TraceCheckUtils]: 6: Hoare triple {1973#(= 0 ~pumpRunning~0)} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,915 INFO L280 TraceCheckUtils]: 7: Hoare triple {1973#(= 0 ~pumpRunning~0)} assume !false; {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,916 INFO L280 TraceCheckUtils]: 8: Hoare triple {1973#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,916 INFO L280 TraceCheckUtils]: 9: Hoare triple {1973#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,917 INFO L280 TraceCheckUtils]: 10: Hoare triple {1973#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~1); {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,918 INFO L280 TraceCheckUtils]: 11: Hoare triple {1973#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,919 INFO L280 TraceCheckUtils]: 12: Hoare triple {1973#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~0); {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,920 INFO L280 TraceCheckUtils]: 13: Hoare triple {1973#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,921 INFO L280 TraceCheckUtils]: 14: Hoare triple {1973#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,922 INFO L280 TraceCheckUtils]: 15: Hoare triple {1973#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,923 INFO L280 TraceCheckUtils]: 16: Hoare triple {1973#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,924 INFO L280 TraceCheckUtils]: 17: Hoare triple {1973#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {1973#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:35,925 INFO L280 TraceCheckUtils]: 18: Hoare triple {1973#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {1972#false} is VALID [2020-07-28 19:00:35,926 INFO L280 TraceCheckUtils]: 19: Hoare triple {1972#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {1972#false} is VALID [2020-07-28 19:00:35,926 INFO L280 TraceCheckUtils]: 20: Hoare triple {1972#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {1972#false} is VALID [2020-07-28 19:00:35,926 INFO L280 TraceCheckUtils]: 21: Hoare triple {1972#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {1972#false} is VALID [2020-07-28 19:00:35,926 INFO L280 TraceCheckUtils]: 22: Hoare triple {1972#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {1972#false} is VALID [2020-07-28 19:00:35,927 INFO L280 TraceCheckUtils]: 23: Hoare triple {1972#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {1972#false} is VALID [2020-07-28 19:00:35,927 INFO L280 TraceCheckUtils]: 24: Hoare triple {1972#false} assume 0 != ~methAndRunningLastTime~0; {1972#false} is VALID [2020-07-28 19:00:35,927 INFO L280 TraceCheckUtils]: 25: Hoare triple {1972#false} assume !false; {1972#false} is VALID [2020-07-28 19:00:35,929 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:35,929 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1581115110] [2020-07-28 19:00:35,929 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:35,930 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:00:35,930 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1084628563] [2020-07-28 19:00:35,930 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:00:35,930 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:35,931 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:35,969 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:35,970 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:35,970 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:35,970 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:35,971 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:35,971 INFO L87 Difference]: Start difference. First operand 103 states and 152 transitions. Second operand 3 states. [2020-07-28 19:00:36,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:36,243 INFO L93 Difference]: Finished difference Result 242 states and 363 transitions. [2020-07-28 19:00:36,243 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:36,243 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:00:36,243 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:36,244 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:36,246 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 192 transitions. [2020-07-28 19:00:36,246 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:36,248 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 192 transitions. [2020-07-28 19:00:36,249 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 192 transitions. [2020-07-28 19:00:36,478 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 192 edges. 192 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:36,481 INFO L225 Difference]: With dead ends: 242 [2020-07-28 19:00:36,482 INFO L226 Difference]: Without dead ends: 146 [2020-07-28 19:00:36,482 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:36,483 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 146 states. [2020-07-28 19:00:36,576 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 146 to 144. [2020-07-28 19:00:36,577 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:36,577 INFO L82 GeneralOperation]: Start isEquivalent. First operand 146 states. Second operand 144 states. [2020-07-28 19:00:36,577 INFO L74 IsIncluded]: Start isIncluded. First operand 146 states. Second operand 144 states. [2020-07-28 19:00:36,578 INFO L87 Difference]: Start difference. First operand 146 states. Second operand 144 states. [2020-07-28 19:00:36,583 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:36,584 INFO L93 Difference]: Finished difference Result 146 states and 211 transitions. [2020-07-28 19:00:36,584 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 211 transitions. [2020-07-28 19:00:36,584 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:36,585 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:36,585 INFO L74 IsIncluded]: Start isIncluded. First operand 144 states. Second operand 146 states. [2020-07-28 19:00:36,585 INFO L87 Difference]: Start difference. First operand 144 states. Second operand 146 states. [2020-07-28 19:00:36,590 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:36,590 INFO L93 Difference]: Finished difference Result 146 states and 211 transitions. [2020-07-28 19:00:36,591 INFO L276 IsEmpty]: Start isEmpty. Operand 146 states and 211 transitions. [2020-07-28 19:00:36,591 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:36,591 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:36,591 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:36,592 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:36,592 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 144 states. [2020-07-28 19:00:36,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 144 states to 144 states and 210 transitions. [2020-07-28 19:00:36,597 INFO L78 Accepts]: Start accepts. Automaton has 144 states and 210 transitions. Word has length 26 [2020-07-28 19:00:36,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:36,597 INFO L479 AbstractCegarLoop]: Abstraction has 144 states and 210 transitions. [2020-07-28 19:00:36,598 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:36,598 INFO L276 IsEmpty]: Start isEmpty. Operand 144 states and 210 transitions. [2020-07-28 19:00:36,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2020-07-28 19:00:36,598 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:36,599 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:36,599 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:00:36,599 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:36,599 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:36,600 INFO L82 PathProgramCache]: Analyzing trace with hash 917787529, now seen corresponding path program 1 times [2020-07-28 19:00:36,600 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:36,600 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1487706242] [2020-07-28 19:00:36,600 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:36,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:36,682 INFO L280 TraceCheckUtils]: 0: Hoare triple {2805#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,683 INFO L280 TraceCheckUtils]: 1: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,683 INFO L280 TraceCheckUtils]: 2: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,685 INFO L280 TraceCheckUtils]: 3: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,687 INFO L280 TraceCheckUtils]: 4: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~0; {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,688 INFO L280 TraceCheckUtils]: 5: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} ~methAndRunningLastTime~0 := 0; {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,689 INFO L280 TraceCheckUtils]: 6: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,691 INFO L280 TraceCheckUtils]: 7: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} assume !false; {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,692 INFO L280 TraceCheckUtils]: 8: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,696 INFO L280 TraceCheckUtils]: 9: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,697 INFO L280 TraceCheckUtils]: 10: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp~1); {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,698 INFO L280 TraceCheckUtils]: 11: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,699 INFO L280 TraceCheckUtils]: 12: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~0); {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,699 INFO L280 TraceCheckUtils]: 13: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,700 INFO L280 TraceCheckUtils]: 14: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet15 && test_#t~nondet15 <= 2147483647;test_~tmp___1~0 := test_#t~nondet15;havoc test_#t~nondet15; {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,701 INFO L280 TraceCheckUtils]: 15: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___1~0; {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,702 INFO L280 TraceCheckUtils]: 16: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,702 INFO L280 TraceCheckUtils]: 17: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} ~systemActive~0 := 0; {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,703 INFO L280 TraceCheckUtils]: 18: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,704 INFO L280 TraceCheckUtils]: 19: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~systemActive~0); {2807#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:36,705 INFO L280 TraceCheckUtils]: 20: Hoare triple {2807#(= 0 ~methaneLevelCritical~0)} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {2808#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:00:36,706 INFO L280 TraceCheckUtils]: 21: Hoare triple {2808#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {2809#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~10)} is VALID [2020-07-28 19:00:36,706 INFO L280 TraceCheckUtils]: 22: Hoare triple {2809#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~10)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {2806#false} is VALID [2020-07-28 19:00:36,707 INFO L280 TraceCheckUtils]: 23: Hoare triple {2806#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {2806#false} is VALID [2020-07-28 19:00:36,707 INFO L280 TraceCheckUtils]: 24: Hoare triple {2806#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {2806#false} is VALID [2020-07-28 19:00:36,707 INFO L280 TraceCheckUtils]: 25: Hoare triple {2806#false} assume 0 != ~methAndRunningLastTime~0; {2806#false} is VALID [2020-07-28 19:00:36,708 INFO L280 TraceCheckUtils]: 26: Hoare triple {2806#false} assume !false; {2806#false} is VALID [2020-07-28 19:00:36,709 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:36,710 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1487706242] [2020-07-28 19:00:36,710 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:36,710 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:00:36,711 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1205677353] [2020-07-28 19:00:36,711 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 27 [2020-07-28 19:00:36,711 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:36,711 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:00:36,748 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 27 edges. 27 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:36,748 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:00:36,748 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:36,749 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:00:36,749 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:00:36,749 INFO L87 Difference]: Start difference. First operand 144 states and 210 transitions. Second operand 5 states. [2020-07-28 19:00:38,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:38,054 INFO L93 Difference]: Finished difference Result 756 states and 1115 transitions. [2020-07-28 19:00:38,054 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 19:00:38,054 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 27 [2020-07-28 19:00:38,056 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:38,057 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:38,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 444 transitions. [2020-07-28 19:00:38,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:38,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 444 transitions. [2020-07-28 19:00:38,078 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 444 transitions. [2020-07-28 19:00:38,569 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 444 edges. 444 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:38,595 INFO L225 Difference]: With dead ends: 756 [2020-07-28 19:00:38,595 INFO L226 Difference]: Without dead ends: 619 [2020-07-28 19:00:38,596 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:00:38,597 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 619 states. [2020-07-28 19:00:38,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 619 to 267. [2020-07-28 19:00:38,866 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:38,866 INFO L82 GeneralOperation]: Start isEquivalent. First operand 619 states. Second operand 267 states. [2020-07-28 19:00:38,866 INFO L74 IsIncluded]: Start isIncluded. First operand 619 states. Second operand 267 states. [2020-07-28 19:00:38,867 INFO L87 Difference]: Start difference. First operand 619 states. Second operand 267 states. [2020-07-28 19:00:38,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:38,895 INFO L93 Difference]: Finished difference Result 619 states and 903 transitions. [2020-07-28 19:00:38,895 INFO L276 IsEmpty]: Start isEmpty. Operand 619 states and 903 transitions. [2020-07-28 19:00:38,896 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:38,896 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:38,896 INFO L74 IsIncluded]: Start isIncluded. First operand 267 states. Second operand 619 states. [2020-07-28 19:00:38,897 INFO L87 Difference]: Start difference. First operand 267 states. Second operand 619 states. [2020-07-28 19:00:38,921 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:38,922 INFO L93 Difference]: Finished difference Result 619 states and 903 transitions. [2020-07-28 19:00:38,922 INFO L276 IsEmpty]: Start isEmpty. Operand 619 states and 903 transitions. [2020-07-28 19:00:38,923 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:38,923 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:38,923 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:38,923 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:38,924 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 267 states. [2020-07-28 19:00:38,931 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 267 states to 267 states and 384 transitions. [2020-07-28 19:00:38,931 INFO L78 Accepts]: Start accepts. Automaton has 267 states and 384 transitions. Word has length 27 [2020-07-28 19:00:38,931 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:38,931 INFO L479 AbstractCegarLoop]: Abstraction has 267 states and 384 transitions. [2020-07-28 19:00:38,932 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:00:38,932 INFO L276 IsEmpty]: Start isEmpty. Operand 267 states and 384 transitions. [2020-07-28 19:00:38,932 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2020-07-28 19:00:38,933 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:38,933 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:38,933 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:00:38,933 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:38,934 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:38,934 INFO L82 PathProgramCache]: Analyzing trace with hash -516357631, now seen corresponding path program 1 times [2020-07-28 19:00:38,934 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:38,934 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1135202945] [2020-07-28 19:00:38,935 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:38,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:39,033 INFO L280 TraceCheckUtils]: 0: Hoare triple {5492#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,034 INFO L280 TraceCheckUtils]: 1: Hoare triple {5494#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,035 INFO L280 TraceCheckUtils]: 2: Hoare triple {5494#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,035 INFO L280 TraceCheckUtils]: 3: Hoare triple {5494#(= 0 ~pumpRunning~0)} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,036 INFO L280 TraceCheckUtils]: 4: Hoare triple {5494#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~0; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,037 INFO L280 TraceCheckUtils]: 5: Hoare triple {5494#(= 0 ~pumpRunning~0)} ~methAndRunningLastTime~0 := 0; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,052 INFO L280 TraceCheckUtils]: 6: Hoare triple {5494#(= 0 ~pumpRunning~0)} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,053 INFO L280 TraceCheckUtils]: 7: Hoare triple {5494#(= 0 ~pumpRunning~0)} assume !false; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,053 INFO L280 TraceCheckUtils]: 8: Hoare triple {5494#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,054 INFO L280 TraceCheckUtils]: 9: Hoare triple {5494#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,055 INFO L280 TraceCheckUtils]: 10: Hoare triple {5494#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~1); {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,055 INFO L280 TraceCheckUtils]: 11: Hoare triple {5494#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,056 INFO L280 TraceCheckUtils]: 12: Hoare triple {5494#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___0~0; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,057 INFO L280 TraceCheckUtils]: 13: Hoare triple {5494#(= 0 ~pumpRunning~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,060 INFO L280 TraceCheckUtils]: 14: Hoare triple {5494#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,061 INFO L280 TraceCheckUtils]: 15: Hoare triple {5494#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet15 && test_#t~nondet15 <= 2147483647;test_~tmp___1~0 := test_#t~nondet15;havoc test_#t~nondet15; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,062 INFO L280 TraceCheckUtils]: 16: Hoare triple {5494#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___1~0; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,062 INFO L280 TraceCheckUtils]: 17: Hoare triple {5494#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,063 INFO L280 TraceCheckUtils]: 18: Hoare triple {5494#(= 0 ~pumpRunning~0)} ~systemActive~0 := 0; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,064 INFO L280 TraceCheckUtils]: 19: Hoare triple {5494#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,064 INFO L280 TraceCheckUtils]: 20: Hoare triple {5494#(= 0 ~pumpRunning~0)} assume !(0 != ~systemActive~0); {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,065 INFO L280 TraceCheckUtils]: 21: Hoare triple {5494#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,066 INFO L280 TraceCheckUtils]: 22: Hoare triple {5494#(= 0 ~pumpRunning~0)} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {5494#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:00:39,066 INFO L280 TraceCheckUtils]: 23: Hoare triple {5494#(= 0 ~pumpRunning~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {5495#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:00:39,067 INFO L280 TraceCheckUtils]: 24: Hoare triple {5495#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {5496#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp___0~3)} is VALID [2020-07-28 19:00:39,068 INFO L280 TraceCheckUtils]: 25: Hoare triple {5496#(= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp___0~3)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {5493#false} is VALID [2020-07-28 19:00:39,068 INFO L280 TraceCheckUtils]: 26: Hoare triple {5493#false} assume 0 != ~methAndRunningLastTime~0; {5493#false} is VALID [2020-07-28 19:00:39,069 INFO L280 TraceCheckUtils]: 27: Hoare triple {5493#false} assume !false; {5493#false} is VALID [2020-07-28 19:00:39,071 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:39,071 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1135202945] [2020-07-28 19:00:39,071 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:39,071 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:00:39,072 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [934616458] [2020-07-28 19:00:39,073 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 28 [2020-07-28 19:00:39,073 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:39,074 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:00:39,111 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:39,111 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:00:39,111 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:39,111 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:00:39,111 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:00:39,112 INFO L87 Difference]: Start difference. First operand 267 states and 384 transitions. Second operand 5 states. [2020-07-28 19:00:40,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:40,986 INFO L93 Difference]: Finished difference Result 1029 states and 1483 transitions. [2020-07-28 19:00:40,987 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 19:00:40,987 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 28 [2020-07-28 19:00:40,987 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:40,988 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:40,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 387 transitions. [2020-07-28 19:00:40,993 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:40,999 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 387 transitions. [2020-07-28 19:00:41,000 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 387 transitions. [2020-07-28 19:00:41,450 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 387 edges. 387 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:41,496 INFO L225 Difference]: With dead ends: 1029 [2020-07-28 19:00:41,497 INFO L226 Difference]: Without dead ends: 769 [2020-07-28 19:00:41,498 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:00:41,499 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 769 states. [2020-07-28 19:00:41,805 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 769 to 265. [2020-07-28 19:00:41,806 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:41,806 INFO L82 GeneralOperation]: Start isEquivalent. First operand 769 states. Second operand 265 states. [2020-07-28 19:00:41,806 INFO L74 IsIncluded]: Start isIncluded. First operand 769 states. Second operand 265 states. [2020-07-28 19:00:41,806 INFO L87 Difference]: Start difference. First operand 769 states. Second operand 265 states. [2020-07-28 19:00:41,841 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:41,842 INFO L93 Difference]: Finished difference Result 769 states and 1104 transitions. [2020-07-28 19:00:41,842 INFO L276 IsEmpty]: Start isEmpty. Operand 769 states and 1104 transitions. [2020-07-28 19:00:41,844 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:41,844 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:41,845 INFO L74 IsIncluded]: Start isIncluded. First operand 265 states. Second operand 769 states. [2020-07-28 19:00:41,845 INFO L87 Difference]: Start difference. First operand 265 states. Second operand 769 states. [2020-07-28 19:00:41,881 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:41,881 INFO L93 Difference]: Finished difference Result 769 states and 1104 transitions. [2020-07-28 19:00:41,881 INFO L276 IsEmpty]: Start isEmpty. Operand 769 states and 1104 transitions. [2020-07-28 19:00:41,883 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:41,883 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:41,884 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:41,884 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:41,884 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 265 states. [2020-07-28 19:00:41,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265 states to 265 states and 378 transitions. [2020-07-28 19:00:41,891 INFO L78 Accepts]: Start accepts. Automaton has 265 states and 378 transitions. Word has length 28 [2020-07-28 19:00:41,892 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:41,892 INFO L479 AbstractCegarLoop]: Abstraction has 265 states and 378 transitions. [2020-07-28 19:00:41,892 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:00:41,892 INFO L276 IsEmpty]: Start isEmpty. Operand 265 states and 378 transitions. [2020-07-28 19:00:41,896 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:00:41,896 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:41,896 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:41,896 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:00:41,897 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:41,897 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:41,897 INFO L82 PathProgramCache]: Analyzing trace with hash 1801944586, now seen corresponding path program 1 times [2020-07-28 19:00:41,898 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:41,898 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1740174430] [2020-07-28 19:00:41,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:41,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:41,989 INFO L280 TraceCheckUtils]: 0: Hoare triple {8865#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {8865#true} is VALID [2020-07-28 19:00:41,989 INFO L280 TraceCheckUtils]: 1: Hoare triple {8865#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {8865#true} is VALID [2020-07-28 19:00:41,990 INFO L280 TraceCheckUtils]: 2: Hoare triple {8865#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {8865#true} is VALID [2020-07-28 19:00:41,990 INFO L280 TraceCheckUtils]: 3: Hoare triple {8865#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {8865#true} is VALID [2020-07-28 19:00:41,990 INFO L280 TraceCheckUtils]: 4: Hoare triple {8865#true} assume 0 != main_~tmp~0; {8865#true} is VALID [2020-07-28 19:00:41,990 INFO L280 TraceCheckUtils]: 5: Hoare triple {8865#true} ~methAndRunningLastTime~0 := 0; {8865#true} is VALID [2020-07-28 19:00:41,990 INFO L280 TraceCheckUtils]: 6: Hoare triple {8865#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {8865#true} is VALID [2020-07-28 19:00:41,991 INFO L280 TraceCheckUtils]: 7: Hoare triple {8865#true} assume !false; {8865#true} is VALID [2020-07-28 19:00:41,991 INFO L280 TraceCheckUtils]: 8: Hoare triple {8865#true} assume test_~splverifierCounter~0 < 4; {8865#true} is VALID [2020-07-28 19:00:41,991 INFO L280 TraceCheckUtils]: 9: Hoare triple {8865#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {8865#true} is VALID [2020-07-28 19:00:41,992 INFO L280 TraceCheckUtils]: 10: Hoare triple {8865#true} assume !(0 != test_~tmp~1); {8865#true} is VALID [2020-07-28 19:00:41,992 INFO L280 TraceCheckUtils]: 11: Hoare triple {8865#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {8865#true} is VALID [2020-07-28 19:00:41,992 INFO L280 TraceCheckUtils]: 12: Hoare triple {8865#true} assume 0 != test_~tmp___0~0; {8865#true} is VALID [2020-07-28 19:00:41,993 INFO L280 TraceCheckUtils]: 13: Hoare triple {8865#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {8865#true} is VALID [2020-07-28 19:00:41,993 INFO L280 TraceCheckUtils]: 14: Hoare triple {8865#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {8865#true} is VALID [2020-07-28 19:00:41,993 INFO L280 TraceCheckUtils]: 15: Hoare triple {8865#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {8865#true} is VALID [2020-07-28 19:00:41,993 INFO L280 TraceCheckUtils]: 16: Hoare triple {8865#true} assume !(0 != ~pumpRunning~0); {8865#true} is VALID [2020-07-28 19:00:41,993 INFO L280 TraceCheckUtils]: 17: Hoare triple {8865#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {8865#true} is VALID [2020-07-28 19:00:41,994 INFO L280 TraceCheckUtils]: 18: Hoare triple {8865#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {8865#true} is VALID [2020-07-28 19:00:41,994 INFO L280 TraceCheckUtils]: 19: Hoare triple {8865#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret71, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {8865#true} is VALID [2020-07-28 19:00:41,995 INFO L280 TraceCheckUtils]: 20: Hoare triple {8865#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {8867#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:00:41,996 INFO L280 TraceCheckUtils]: 21: Hoare triple {8867#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret71 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret71 && isHighWaterLevel_#t~ret71 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret71;havoc isHighWaterLevel_#t~ret71; {8868#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~8)} is VALID [2020-07-28 19:00:41,997 INFO L280 TraceCheckUtils]: 22: Hoare triple {8868#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~8)} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {8866#false} is VALID [2020-07-28 19:00:41,997 INFO L280 TraceCheckUtils]: 23: Hoare triple {8866#false} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {8866#false} is VALID [2020-07-28 19:00:41,997 INFO L280 TraceCheckUtils]: 24: Hoare triple {8866#false} processEnvironment__wrappee__highWaterSensor_#t~ret51 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret51 && processEnvironment__wrappee__highWaterSensor_#t~ret51 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret51;havoc processEnvironment__wrappee__highWaterSensor_#t~ret51; {8866#false} is VALID [2020-07-28 19:00:41,997 INFO L280 TraceCheckUtils]: 25: Hoare triple {8866#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc activatePump_#t~ret53, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret54, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {8866#false} is VALID [2020-07-28 19:00:41,998 INFO L280 TraceCheckUtils]: 26: Hoare triple {8866#false} isMethaneAlarm_#t~ret54 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret54 && isMethaneAlarm_#t~ret54 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret54;havoc isMethaneAlarm_#t~ret54;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {8866#false} is VALID [2020-07-28 19:00:41,998 INFO L280 TraceCheckUtils]: 27: Hoare triple {8866#false} activatePump_#t~ret53 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret53 && activatePump_#t~ret53 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret53;havoc activatePump_#t~ret53; {8866#false} is VALID [2020-07-28 19:00:41,998 INFO L280 TraceCheckUtils]: 28: Hoare triple {8866#false} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {8866#false} is VALID [2020-07-28 19:00:41,998 INFO L280 TraceCheckUtils]: 29: Hoare triple {8866#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {8866#false} is VALID [2020-07-28 19:00:41,998 INFO L280 TraceCheckUtils]: 30: Hoare triple {8866#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {8866#false} is VALID [2020-07-28 19:00:41,999 INFO L280 TraceCheckUtils]: 31: Hoare triple {8866#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {8866#false} is VALID [2020-07-28 19:00:41,999 INFO L280 TraceCheckUtils]: 32: Hoare triple {8866#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {8866#false} is VALID [2020-07-28 19:00:41,999 INFO L280 TraceCheckUtils]: 33: Hoare triple {8866#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {8866#false} is VALID [2020-07-28 19:00:42,001 INFO L280 TraceCheckUtils]: 34: Hoare triple {8866#false} assume 0 != ~methAndRunningLastTime~0; {8866#false} is VALID [2020-07-28 19:00:42,001 INFO L280 TraceCheckUtils]: 35: Hoare triple {8866#false} assume !false; {8866#false} is VALID [2020-07-28 19:00:42,003 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:42,004 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1740174430] [2020-07-28 19:00:42,004 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:42,004 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:00:42,004 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1595284865] [2020-07-28 19:00:42,005 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 36 [2020-07-28 19:00:42,006 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:42,006 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:00:42,047 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:42,047 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:00:42,047 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:42,047 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:00:42,048 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:00:42,048 INFO L87 Difference]: Start difference. First operand 265 states and 378 transitions. Second operand 4 states. [2020-07-28 19:00:43,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:43,418 INFO L93 Difference]: Finished difference Result 773 states and 1104 transitions. [2020-07-28 19:00:43,419 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:00:43,419 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 36 [2020-07-28 19:00:43,419 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:43,419 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:00:43,421 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 225 transitions. [2020-07-28 19:00:43,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:00:43,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 225 transitions. [2020-07-28 19:00:43,422 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 225 transitions. [2020-07-28 19:00:43,652 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 225 edges. 225 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:43,671 INFO L225 Difference]: With dead ends: 773 [2020-07-28 19:00:43,671 INFO L226 Difference]: Without dead ends: 515 [2020-07-28 19:00:43,673 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:00:43,674 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 515 states. [2020-07-28 19:00:44,113 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 515 to 281. [2020-07-28 19:00:44,113 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:44,113 INFO L82 GeneralOperation]: Start isEquivalent. First operand 515 states. Second operand 281 states. [2020-07-28 19:00:44,113 INFO L74 IsIncluded]: Start isIncluded. First operand 515 states. Second operand 281 states. [2020-07-28 19:00:44,113 INFO L87 Difference]: Start difference. First operand 515 states. Second operand 281 states. [2020-07-28 19:00:44,132 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:44,132 INFO L93 Difference]: Finished difference Result 515 states and 725 transitions. [2020-07-28 19:00:44,132 INFO L276 IsEmpty]: Start isEmpty. Operand 515 states and 725 transitions. [2020-07-28 19:00:44,133 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:44,134 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:44,134 INFO L74 IsIncluded]: Start isIncluded. First operand 281 states. Second operand 515 states. [2020-07-28 19:00:44,134 INFO L87 Difference]: Start difference. First operand 281 states. Second operand 515 states. [2020-07-28 19:00:44,151 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:44,151 INFO L93 Difference]: Finished difference Result 515 states and 725 transitions. [2020-07-28 19:00:44,151 INFO L276 IsEmpty]: Start isEmpty. Operand 515 states and 725 transitions. [2020-07-28 19:00:44,153 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:44,153 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:44,153 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:44,153 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:44,154 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 281 states. [2020-07-28 19:00:44,161 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 281 states to 281 states and 394 transitions. [2020-07-28 19:00:44,161 INFO L78 Accepts]: Start accepts. Automaton has 281 states and 394 transitions. Word has length 36 [2020-07-28 19:00:44,161 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:44,162 INFO L479 AbstractCegarLoop]: Abstraction has 281 states and 394 transitions. [2020-07-28 19:00:44,162 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:00:44,162 INFO L276 IsEmpty]: Start isEmpty. Operand 281 states and 394 transitions. [2020-07-28 19:00:44,163 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:00:44,163 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:44,163 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:44,163 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:00:44,164 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:44,164 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:44,164 INFO L82 PathProgramCache]: Analyzing trace with hash -1481905460, now seen corresponding path program 1 times [2020-07-28 19:00:44,165 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:44,166 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2042806105] [2020-07-28 19:00:44,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:44,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:44,250 INFO L280 TraceCheckUtils]: 0: Hoare triple {11382#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {11382#true} is VALID [2020-07-28 19:00:44,250 INFO L280 TraceCheckUtils]: 1: Hoare triple {11382#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {11382#true} is VALID [2020-07-28 19:00:44,250 INFO L280 TraceCheckUtils]: 2: Hoare triple {11382#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {11382#true} is VALID [2020-07-28 19:00:44,251 INFO L280 TraceCheckUtils]: 3: Hoare triple {11382#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {11382#true} is VALID [2020-07-28 19:00:44,252 INFO L280 TraceCheckUtils]: 4: Hoare triple {11382#true} assume 0 != main_~tmp~0; {11382#true} is VALID [2020-07-28 19:00:44,252 INFO L280 TraceCheckUtils]: 5: Hoare triple {11382#true} ~methAndRunningLastTime~0 := 0; {11382#true} is VALID [2020-07-28 19:00:44,252 INFO L280 TraceCheckUtils]: 6: Hoare triple {11382#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11382#true} is VALID [2020-07-28 19:00:44,253 INFO L280 TraceCheckUtils]: 7: Hoare triple {11382#true} assume !false; {11382#true} is VALID [2020-07-28 19:00:44,253 INFO L280 TraceCheckUtils]: 8: Hoare triple {11382#true} assume test_~splverifierCounter~0 < 4; {11382#true} is VALID [2020-07-28 19:00:44,253 INFO L280 TraceCheckUtils]: 9: Hoare triple {11382#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {11382#true} is VALID [2020-07-28 19:00:44,254 INFO L280 TraceCheckUtils]: 10: Hoare triple {11382#true} assume !(0 != test_~tmp~1); {11382#true} is VALID [2020-07-28 19:00:44,254 INFO L280 TraceCheckUtils]: 11: Hoare triple {11382#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {11382#true} is VALID [2020-07-28 19:00:44,255 INFO L280 TraceCheckUtils]: 12: Hoare triple {11382#true} assume 0 != test_~tmp___0~0; {11382#true} is VALID [2020-07-28 19:00:44,256 INFO L280 TraceCheckUtils]: 13: Hoare triple {11382#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {11382#true} is VALID [2020-07-28 19:00:44,258 INFO L280 TraceCheckUtils]: 14: Hoare triple {11382#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {11382#true} is VALID [2020-07-28 19:00:44,258 INFO L280 TraceCheckUtils]: 15: Hoare triple {11382#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {11382#true} is VALID [2020-07-28 19:00:44,259 INFO L280 TraceCheckUtils]: 16: Hoare triple {11382#true} assume !(0 != ~pumpRunning~0); {11382#true} is VALID [2020-07-28 19:00:44,259 INFO L280 TraceCheckUtils]: 17: Hoare triple {11382#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {11382#true} is VALID [2020-07-28 19:00:44,259 INFO L280 TraceCheckUtils]: 18: Hoare triple {11382#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {11382#true} is VALID [2020-07-28 19:00:44,260 INFO L280 TraceCheckUtils]: 19: Hoare triple {11382#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret71, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {11382#true} is VALID [2020-07-28 19:00:44,260 INFO L280 TraceCheckUtils]: 20: Hoare triple {11382#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {11382#true} is VALID [2020-07-28 19:00:44,261 INFO L280 TraceCheckUtils]: 21: Hoare triple {11382#true} isHighWaterLevel_#t~ret71 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret71 && isHighWaterLevel_#t~ret71 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret71;havoc isHighWaterLevel_#t~ret71; {11382#true} is VALID [2020-07-28 19:00:44,262 INFO L280 TraceCheckUtils]: 22: Hoare triple {11382#true} assume 0 != isHighWaterLevel_~tmp~8;isHighWaterLevel_~tmp___0~1 := 0; {11384#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} is VALID [2020-07-28 19:00:44,263 INFO L280 TraceCheckUtils]: 23: Hoare triple {11384#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {11385#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:00:44,264 INFO L280 TraceCheckUtils]: 24: Hoare triple {11385#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__highWaterSensor_#t~ret51 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret51 && processEnvironment__wrappee__highWaterSensor_#t~ret51 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret51;havoc processEnvironment__wrappee__highWaterSensor_#t~ret51; {11386#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~5)} is VALID [2020-07-28 19:00:44,264 INFO L280 TraceCheckUtils]: 25: Hoare triple {11386#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~5)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc activatePump_#t~ret53, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret54, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11383#false} is VALID [2020-07-28 19:00:44,265 INFO L280 TraceCheckUtils]: 26: Hoare triple {11383#false} isMethaneAlarm_#t~ret54 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret54 && isMethaneAlarm_#t~ret54 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret54;havoc isMethaneAlarm_#t~ret54;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {11383#false} is VALID [2020-07-28 19:00:44,265 INFO L280 TraceCheckUtils]: 27: Hoare triple {11383#false} activatePump_#t~ret53 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret53 && activatePump_#t~ret53 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret53;havoc activatePump_#t~ret53; {11383#false} is VALID [2020-07-28 19:00:44,265 INFO L280 TraceCheckUtils]: 28: Hoare triple {11383#false} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {11383#false} is VALID [2020-07-28 19:00:44,265 INFO L280 TraceCheckUtils]: 29: Hoare triple {11383#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11383#false} is VALID [2020-07-28 19:00:44,266 INFO L280 TraceCheckUtils]: 30: Hoare triple {11383#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {11383#false} is VALID [2020-07-28 19:00:44,266 INFO L280 TraceCheckUtils]: 31: Hoare triple {11383#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {11383#false} is VALID [2020-07-28 19:00:44,266 INFO L280 TraceCheckUtils]: 32: Hoare triple {11383#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {11383#false} is VALID [2020-07-28 19:00:44,266 INFO L280 TraceCheckUtils]: 33: Hoare triple {11383#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {11383#false} is VALID [2020-07-28 19:00:44,266 INFO L280 TraceCheckUtils]: 34: Hoare triple {11383#false} assume 0 != ~methAndRunningLastTime~0; {11383#false} is VALID [2020-07-28 19:00:44,266 INFO L280 TraceCheckUtils]: 35: Hoare triple {11383#false} assume !false; {11383#false} is VALID [2020-07-28 19:00:44,273 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:44,275 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2042806105] [2020-07-28 19:00:44,277 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:44,278 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:00:44,278 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1774443378] [2020-07-28 19:00:44,279 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 36 [2020-07-28 19:00:44,279 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:44,280 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:00:44,332 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:44,332 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:00:44,333 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:44,333 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:00:44,333 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:00:44,334 INFO L87 Difference]: Start difference. First operand 281 states and 394 transitions. Second operand 5 states. [2020-07-28 19:00:45,824 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:45,824 INFO L93 Difference]: Finished difference Result 735 states and 1021 transitions. [2020-07-28 19:00:45,825 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:00:45,825 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 36 [2020-07-28 19:00:45,825 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:45,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:45,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 222 transitions. [2020-07-28 19:00:45,827 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:00:45,828 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 222 transitions. [2020-07-28 19:00:45,828 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 222 transitions. [2020-07-28 19:00:46,061 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 222 edges. 222 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:46,078 INFO L225 Difference]: With dead ends: 735 [2020-07-28 19:00:46,079 INFO L226 Difference]: Without dead ends: 461 [2020-07-28 19:00:46,080 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:00:46,081 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 461 states. [2020-07-28 19:00:46,637 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 461 to 305. [2020-07-28 19:00:46,637 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:46,638 INFO L82 GeneralOperation]: Start isEquivalent. First operand 461 states. Second operand 305 states. [2020-07-28 19:00:46,638 INFO L74 IsIncluded]: Start isIncluded. First operand 461 states. Second operand 305 states. [2020-07-28 19:00:46,638 INFO L87 Difference]: Start difference. First operand 461 states. Second operand 305 states. [2020-07-28 19:00:46,649 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:46,649 INFO L93 Difference]: Finished difference Result 461 states and 626 transitions. [2020-07-28 19:00:46,650 INFO L276 IsEmpty]: Start isEmpty. Operand 461 states and 626 transitions. [2020-07-28 19:00:46,651 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:46,651 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:46,651 INFO L74 IsIncluded]: Start isIncluded. First operand 305 states. Second operand 461 states. [2020-07-28 19:00:46,651 INFO L87 Difference]: Start difference. First operand 305 states. Second operand 461 states. [2020-07-28 19:00:46,664 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:46,664 INFO L93 Difference]: Finished difference Result 461 states and 626 transitions. [2020-07-28 19:00:46,665 INFO L276 IsEmpty]: Start isEmpty. Operand 461 states and 626 transitions. [2020-07-28 19:00:46,666 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:46,666 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:46,666 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:46,666 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:46,666 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 305 states. [2020-07-28 19:00:46,673 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 305 states to 305 states and 418 transitions. [2020-07-28 19:00:46,674 INFO L78 Accepts]: Start accepts. Automaton has 305 states and 418 transitions. Word has length 36 [2020-07-28 19:00:46,674 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:46,674 INFO L479 AbstractCegarLoop]: Abstraction has 305 states and 418 transitions. [2020-07-28 19:00:46,674 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:00:46,675 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 418 transitions. [2020-07-28 19:00:46,675 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:00:46,676 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:46,676 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:46,676 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:00:46,676 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:46,677 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:46,677 INFO L82 PathProgramCache]: Analyzing trace with hash 780876232, now seen corresponding path program 1 times [2020-07-28 19:00:46,677 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:46,677 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [260149832] [2020-07-28 19:00:46,678 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:46,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:46,731 INFO L280 TraceCheckUtils]: 0: Hoare triple {13775#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,732 INFO L280 TraceCheckUtils]: 1: Hoare triple {13777#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,733 INFO L280 TraceCheckUtils]: 2: Hoare triple {13777#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,733 INFO L280 TraceCheckUtils]: 3: Hoare triple {13777#(= 1 ~waterLevel~0)} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,734 INFO L280 TraceCheckUtils]: 4: Hoare triple {13777#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~0; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,735 INFO L280 TraceCheckUtils]: 5: Hoare triple {13777#(= 1 ~waterLevel~0)} ~methAndRunningLastTime~0 := 0; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,736 INFO L280 TraceCheckUtils]: 6: Hoare triple {13777#(= 1 ~waterLevel~0)} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,736 INFO L280 TraceCheckUtils]: 7: Hoare triple {13777#(= 1 ~waterLevel~0)} assume !false; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,737 INFO L280 TraceCheckUtils]: 8: Hoare triple {13777#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,737 INFO L280 TraceCheckUtils]: 9: Hoare triple {13777#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,738 INFO L280 TraceCheckUtils]: 10: Hoare triple {13777#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~1); {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,738 INFO L280 TraceCheckUtils]: 11: Hoare triple {13777#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,739 INFO L280 TraceCheckUtils]: 12: Hoare triple {13777#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___0~0; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,739 INFO L280 TraceCheckUtils]: 13: Hoare triple {13777#(= 1 ~waterLevel~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,740 INFO L280 TraceCheckUtils]: 14: Hoare triple {13777#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,741 INFO L280 TraceCheckUtils]: 15: Hoare triple {13777#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,741 INFO L280 TraceCheckUtils]: 16: Hoare triple {13777#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,742 INFO L280 TraceCheckUtils]: 17: Hoare triple {13777#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,742 INFO L280 TraceCheckUtils]: 18: Hoare triple {13777#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,743 INFO L280 TraceCheckUtils]: 19: Hoare triple {13777#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret71, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {13777#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:00:46,744 INFO L280 TraceCheckUtils]: 20: Hoare triple {13777#(= 1 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {13776#false} is VALID [2020-07-28 19:00:46,744 INFO L280 TraceCheckUtils]: 21: Hoare triple {13776#false} isHighWaterLevel_#t~ret71 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret71 && isHighWaterLevel_#t~ret71 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret71;havoc isHighWaterLevel_#t~ret71; {13776#false} is VALID [2020-07-28 19:00:46,744 INFO L280 TraceCheckUtils]: 22: Hoare triple {13776#false} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {13776#false} is VALID [2020-07-28 19:00:46,744 INFO L280 TraceCheckUtils]: 23: Hoare triple {13776#false} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {13776#false} is VALID [2020-07-28 19:00:46,744 INFO L280 TraceCheckUtils]: 24: Hoare triple {13776#false} processEnvironment__wrappee__highWaterSensor_#t~ret51 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret51 && processEnvironment__wrappee__highWaterSensor_#t~ret51 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret51;havoc processEnvironment__wrappee__highWaterSensor_#t~ret51; {13776#false} is VALID [2020-07-28 19:00:46,745 INFO L280 TraceCheckUtils]: 25: Hoare triple {13776#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc activatePump_#t~ret53, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret54, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {13776#false} is VALID [2020-07-28 19:00:46,745 INFO L280 TraceCheckUtils]: 26: Hoare triple {13776#false} isMethaneAlarm_#t~ret54 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret54 && isMethaneAlarm_#t~ret54 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret54;havoc isMethaneAlarm_#t~ret54;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {13776#false} is VALID [2020-07-28 19:00:46,745 INFO L280 TraceCheckUtils]: 27: Hoare triple {13776#false} activatePump_#t~ret53 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret53 && activatePump_#t~ret53 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret53;havoc activatePump_#t~ret53; {13776#false} is VALID [2020-07-28 19:00:46,745 INFO L280 TraceCheckUtils]: 28: Hoare triple {13776#false} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {13776#false} is VALID [2020-07-28 19:00:46,745 INFO L280 TraceCheckUtils]: 29: Hoare triple {13776#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {13776#false} is VALID [2020-07-28 19:00:46,746 INFO L280 TraceCheckUtils]: 30: Hoare triple {13776#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {13776#false} is VALID [2020-07-28 19:00:46,746 INFO L280 TraceCheckUtils]: 31: Hoare triple {13776#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {13776#false} is VALID [2020-07-28 19:00:46,746 INFO L280 TraceCheckUtils]: 32: Hoare triple {13776#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {13776#false} is VALID [2020-07-28 19:00:46,747 INFO L280 TraceCheckUtils]: 33: Hoare triple {13776#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {13776#false} is VALID [2020-07-28 19:00:46,747 INFO L280 TraceCheckUtils]: 34: Hoare triple {13776#false} assume 0 != ~methAndRunningLastTime~0; {13776#false} is VALID [2020-07-28 19:00:46,747 INFO L280 TraceCheckUtils]: 35: Hoare triple {13776#false} assume !false; {13776#false} is VALID [2020-07-28 19:00:46,749 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:46,750 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [260149832] [2020-07-28 19:00:46,750 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:46,750 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:00:46,752 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [594851945] [2020-07-28 19:00:46,753 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 36 [2020-07-28 19:00:46,754 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:46,754 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:46,792 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:46,792 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:46,792 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:46,793 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:46,793 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:46,793 INFO L87 Difference]: Start difference. First operand 305 states and 418 transitions. Second operand 3 states. [2020-07-28 19:00:47,753 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:47,754 INFO L93 Difference]: Finished difference Result 707 states and 963 transitions. [2020-07-28 19:00:47,754 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:47,754 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 36 [2020-07-28 19:00:47,754 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:47,755 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:47,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 192 transitions. [2020-07-28 19:00:47,756 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:47,757 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 192 transitions. [2020-07-28 19:00:47,757 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 192 transitions. [2020-07-28 19:00:47,950 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 192 edges. 192 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:47,963 INFO L225 Difference]: With dead ends: 707 [2020-07-28 19:00:47,963 INFO L226 Difference]: Without dead ends: 409 [2020-07-28 19:00:47,964 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:47,964 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 409 states. [2020-07-28 19:00:48,673 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 409 to 409. [2020-07-28 19:00:48,673 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:48,673 INFO L82 GeneralOperation]: Start isEquivalent. First operand 409 states. Second operand 409 states. [2020-07-28 19:00:48,674 INFO L74 IsIncluded]: Start isIncluded. First operand 409 states. Second operand 409 states. [2020-07-28 19:00:48,674 INFO L87 Difference]: Start difference. First operand 409 states. Second operand 409 states. [2020-07-28 19:00:48,682 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:48,682 INFO L93 Difference]: Finished difference Result 409 states and 544 transitions. [2020-07-28 19:00:48,682 INFO L276 IsEmpty]: Start isEmpty. Operand 409 states and 544 transitions. [2020-07-28 19:00:48,683 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:48,684 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:48,684 INFO L74 IsIncluded]: Start isIncluded. First operand 409 states. Second operand 409 states. [2020-07-28 19:00:48,684 INFO L87 Difference]: Start difference. First operand 409 states. Second operand 409 states. [2020-07-28 19:00:48,696 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:48,696 INFO L93 Difference]: Finished difference Result 409 states and 544 transitions. [2020-07-28 19:00:48,696 INFO L276 IsEmpty]: Start isEmpty. Operand 409 states and 544 transitions. [2020-07-28 19:00:48,697 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:48,698 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:48,698 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:48,698 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:48,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 409 states. [2020-07-28 19:00:48,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 409 states to 409 states and 544 transitions. [2020-07-28 19:00:48,708 INFO L78 Accepts]: Start accepts. Automaton has 409 states and 544 transitions. Word has length 36 [2020-07-28 19:00:48,708 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:48,708 INFO L479 AbstractCegarLoop]: Abstraction has 409 states and 544 transitions. [2020-07-28 19:00:48,708 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:48,708 INFO L276 IsEmpty]: Start isEmpty. Operand 409 states and 544 transitions. [2020-07-28 19:00:48,709 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2020-07-28 19:00:48,709 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:48,710 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:48,710 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:00:48,710 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:48,710 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:48,711 INFO L82 PathProgramCache]: Analyzing trace with hash -693602552, now seen corresponding path program 1 times [2020-07-28 19:00:48,711 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:48,711 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [483852733] [2020-07-28 19:00:48,711 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:48,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:48,804 INFO L280 TraceCheckUtils]: 0: Hoare triple {16156#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {16156#true} is VALID [2020-07-28 19:00:48,804 INFO L280 TraceCheckUtils]: 1: Hoare triple {16156#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {16156#true} is VALID [2020-07-28 19:00:48,805 INFO L280 TraceCheckUtils]: 2: Hoare triple {16156#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {16156#true} is VALID [2020-07-28 19:00:48,805 INFO L280 TraceCheckUtils]: 3: Hoare triple {16156#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {16156#true} is VALID [2020-07-28 19:00:48,806 INFO L280 TraceCheckUtils]: 4: Hoare triple {16156#true} assume 0 != main_~tmp~0; {16156#true} is VALID [2020-07-28 19:00:48,806 INFO L280 TraceCheckUtils]: 5: Hoare triple {16156#true} ~methAndRunningLastTime~0 := 0; {16156#true} is VALID [2020-07-28 19:00:48,806 INFO L280 TraceCheckUtils]: 6: Hoare triple {16156#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {16156#true} is VALID [2020-07-28 19:00:48,807 INFO L280 TraceCheckUtils]: 7: Hoare triple {16156#true} assume !false; {16156#true} is VALID [2020-07-28 19:00:48,807 INFO L280 TraceCheckUtils]: 8: Hoare triple {16156#true} assume test_~splverifierCounter~0 < 4; {16156#true} is VALID [2020-07-28 19:00:48,807 INFO L280 TraceCheckUtils]: 9: Hoare triple {16156#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {16156#true} is VALID [2020-07-28 19:00:48,807 INFO L280 TraceCheckUtils]: 10: Hoare triple {16156#true} assume 0 != test_~tmp~1; {16156#true} is VALID [2020-07-28 19:00:48,807 INFO L280 TraceCheckUtils]: 11: Hoare triple {16156#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16156#true} is VALID [2020-07-28 19:00:48,808 INFO L280 TraceCheckUtils]: 12: Hoare triple {16156#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {16156#true} is VALID [2020-07-28 19:00:48,808 INFO L280 TraceCheckUtils]: 13: Hoare triple {16156#true} assume 0 != test_~tmp___0~0; {16156#true} is VALID [2020-07-28 19:00:48,811 INFO L280 TraceCheckUtils]: 14: Hoare triple {16156#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {16158#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:48,811 INFO L280 TraceCheckUtils]: 15: Hoare triple {16158#(= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {16158#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:00:48,812 INFO L280 TraceCheckUtils]: 16: Hoare triple {16158#(= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {16159#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2020-07-28 19:00:48,812 INFO L280 TraceCheckUtils]: 17: Hoare triple {16159#(= ~methaneLevelCritical~0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {16159#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2020-07-28 19:00:48,813 INFO L280 TraceCheckUtils]: 18: Hoare triple {16159#(= ~methaneLevelCritical~0 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {16160#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:48,813 INFO L280 TraceCheckUtils]: 19: Hoare triple {16160#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {16160#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:48,814 INFO L280 TraceCheckUtils]: 20: Hoare triple {16160#(not (= 0 ~methaneLevelCritical~0))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret71, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {16160#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:48,815 INFO L280 TraceCheckUtils]: 21: Hoare triple {16160#(not (= 0 ~methaneLevelCritical~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {16160#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:48,818 INFO L280 TraceCheckUtils]: 22: Hoare triple {16160#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_#t~ret71 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret71 && isHighWaterLevel_#t~ret71 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret71;havoc isHighWaterLevel_#t~ret71; {16160#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:48,819 INFO L280 TraceCheckUtils]: 23: Hoare triple {16160#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {16160#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:48,820 INFO L280 TraceCheckUtils]: 24: Hoare triple {16160#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {16160#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:48,820 INFO L280 TraceCheckUtils]: 25: Hoare triple {16160#(not (= 0 ~methaneLevelCritical~0))} processEnvironment__wrappee__highWaterSensor_#t~ret51 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret51 && processEnvironment__wrappee__highWaterSensor_#t~ret51 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret51;havoc processEnvironment__wrappee__highWaterSensor_#t~ret51; {16160#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:00:48,821 INFO L280 TraceCheckUtils]: 26: Hoare triple {16160#(not (= 0 ~methaneLevelCritical~0))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc activatePump_#t~ret53, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret54, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {16161#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} is VALID [2020-07-28 19:00:48,821 INFO L280 TraceCheckUtils]: 27: Hoare triple {16161#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} isMethaneAlarm_#t~ret54 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret54 && isMethaneAlarm_#t~ret54 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret54;havoc isMethaneAlarm_#t~ret54;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {16162#(not (= 0 |ULTIMATE.start_isMethaneAlarm_#res|))} is VALID [2020-07-28 19:00:48,822 INFO L280 TraceCheckUtils]: 28: Hoare triple {16162#(not (= 0 |ULTIMATE.start_isMethaneAlarm_#res|))} activatePump_#t~ret53 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret53 && activatePump_#t~ret53 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret53;havoc activatePump_#t~ret53; {16163#(not (= 0 ULTIMATE.start_activatePump_~tmp~7))} is VALID [2020-07-28 19:00:48,822 INFO L280 TraceCheckUtils]: 29: Hoare triple {16163#(not (= 0 ULTIMATE.start_activatePump_~tmp~7))} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {16157#false} is VALID [2020-07-28 19:00:48,823 INFO L280 TraceCheckUtils]: 30: Hoare triple {16157#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {16157#false} is VALID [2020-07-28 19:00:48,823 INFO L280 TraceCheckUtils]: 31: Hoare triple {16157#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {16157#false} is VALID [2020-07-28 19:00:48,823 INFO L280 TraceCheckUtils]: 32: Hoare triple {16157#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {16157#false} is VALID [2020-07-28 19:00:48,823 INFO L280 TraceCheckUtils]: 33: Hoare triple {16157#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {16157#false} is VALID [2020-07-28 19:00:48,823 INFO L280 TraceCheckUtils]: 34: Hoare triple {16157#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {16157#false} is VALID [2020-07-28 19:00:48,824 INFO L280 TraceCheckUtils]: 35: Hoare triple {16157#false} assume 0 != ~methAndRunningLastTime~0; {16157#false} is VALID [2020-07-28 19:00:48,824 INFO L280 TraceCheckUtils]: 36: Hoare triple {16157#false} assume !false; {16157#false} is VALID [2020-07-28 19:00:48,826 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:48,826 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [483852733] [2020-07-28 19:00:48,827 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:48,827 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2020-07-28 19:00:48,827 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [286994867] [2020-07-28 19:00:48,827 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 37 [2020-07-28 19:00:48,827 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:48,828 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2020-07-28 19:00:48,878 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 37 edges. 37 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:48,878 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2020-07-28 19:00:48,878 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:48,878 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2020-07-28 19:00:48,879 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:00:48,879 INFO L87 Difference]: Start difference. First operand 409 states and 544 transitions. Second operand 8 states. [2020-07-28 19:00:53,819 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:53,819 INFO L93 Difference]: Finished difference Result 1716 states and 2260 transitions. [2020-07-28 19:00:53,820 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2020-07-28 19:00:53,820 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 37 [2020-07-28 19:00:53,820 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:53,820 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:00:53,822 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 760 transitions. [2020-07-28 19:00:53,822 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:00:53,824 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 760 transitions. [2020-07-28 19:00:53,824 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 21 states and 760 transitions. [2020-07-28 19:00:54,715 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 760 edges. 760 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:54,791 INFO L225 Difference]: With dead ends: 1716 [2020-07-28 19:00:54,791 INFO L226 Difference]: Without dead ends: 1314 [2020-07-28 19:00:54,792 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 95 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=159, Invalid=393, Unknown=0, NotChecked=0, Total=552 [2020-07-28 19:00:54,793 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1314 states. [2020-07-28 19:00:55,607 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1314 to 409. [2020-07-28 19:00:55,607 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:55,607 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1314 states. Second operand 409 states. [2020-07-28 19:00:55,607 INFO L74 IsIncluded]: Start isIncluded. First operand 1314 states. Second operand 409 states. [2020-07-28 19:00:55,608 INFO L87 Difference]: Start difference. First operand 1314 states. Second operand 409 states. [2020-07-28 19:00:55,662 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:55,663 INFO L93 Difference]: Finished difference Result 1314 states and 1702 transitions. [2020-07-28 19:00:55,663 INFO L276 IsEmpty]: Start isEmpty. Operand 1314 states and 1702 transitions. [2020-07-28 19:00:55,665 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:55,665 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:55,665 INFO L74 IsIncluded]: Start isIncluded. First operand 409 states. Second operand 1314 states. [2020-07-28 19:00:55,665 INFO L87 Difference]: Start difference. First operand 409 states. Second operand 1314 states. [2020-07-28 19:00:55,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:55,744 INFO L93 Difference]: Finished difference Result 1314 states and 1702 transitions. [2020-07-28 19:00:55,744 INFO L276 IsEmpty]: Start isEmpty. Operand 1314 states and 1702 transitions. [2020-07-28 19:00:55,746 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:55,746 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:55,746 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:55,746 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:55,746 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 409 states. [2020-07-28 19:00:55,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 409 states to 409 states and 534 transitions. [2020-07-28 19:00:55,756 INFO L78 Accepts]: Start accepts. Automaton has 409 states and 534 transitions. Word has length 37 [2020-07-28 19:00:55,756 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:55,756 INFO L479 AbstractCegarLoop]: Abstraction has 409 states and 534 transitions. [2020-07-28 19:00:55,756 INFO L480 AbstractCegarLoop]: Interpolant automaton has 8 states. [2020-07-28 19:00:55,756 INFO L276 IsEmpty]: Start isEmpty. Operand 409 states and 534 transitions. [2020-07-28 19:00:55,757 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2020-07-28 19:00:55,757 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:55,757 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:55,758 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-28 19:00:55,758 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:55,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:55,758 INFO L82 PathProgramCache]: Analyzing trace with hash 654995562, now seen corresponding path program 1 times [2020-07-28 19:00:55,759 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:55,759 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [803818781] [2020-07-28 19:00:55,759 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:55,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:55,812 INFO L280 TraceCheckUtils]: 0: Hoare triple {21807#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {21807#true} is VALID [2020-07-28 19:00:55,812 INFO L280 TraceCheckUtils]: 1: Hoare triple {21807#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {21807#true} is VALID [2020-07-28 19:00:55,812 INFO L280 TraceCheckUtils]: 2: Hoare triple {21807#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {21807#true} is VALID [2020-07-28 19:00:55,813 INFO L280 TraceCheckUtils]: 3: Hoare triple {21807#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {21807#true} is VALID [2020-07-28 19:00:55,813 INFO L280 TraceCheckUtils]: 4: Hoare triple {21807#true} assume 0 != main_~tmp~0; {21807#true} is VALID [2020-07-28 19:00:55,813 INFO L280 TraceCheckUtils]: 5: Hoare triple {21807#true} ~methAndRunningLastTime~0 := 0; {21807#true} is VALID [2020-07-28 19:00:55,814 INFO L280 TraceCheckUtils]: 6: Hoare triple {21807#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {21807#true} is VALID [2020-07-28 19:00:55,814 INFO L280 TraceCheckUtils]: 7: Hoare triple {21807#true} assume !false; {21807#true} is VALID [2020-07-28 19:00:55,814 INFO L280 TraceCheckUtils]: 8: Hoare triple {21807#true} assume test_~splverifierCounter~0 < 4; {21807#true} is VALID [2020-07-28 19:00:55,814 INFO L280 TraceCheckUtils]: 9: Hoare triple {21807#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {21807#true} is VALID [2020-07-28 19:00:55,814 INFO L280 TraceCheckUtils]: 10: Hoare triple {21807#true} assume 0 != test_~tmp~1; {21807#true} is VALID [2020-07-28 19:00:55,814 INFO L280 TraceCheckUtils]: 11: Hoare triple {21807#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {21807#true} is VALID [2020-07-28 19:00:55,815 INFO L280 TraceCheckUtils]: 12: Hoare triple {21807#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {21807#true} is VALID [2020-07-28 19:00:55,815 INFO L280 TraceCheckUtils]: 13: Hoare triple {21807#true} assume !(0 != test_~tmp___0~0); {21807#true} is VALID [2020-07-28 19:00:55,815 INFO L280 TraceCheckUtils]: 14: Hoare triple {21807#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {21807#true} is VALID [2020-07-28 19:00:55,815 INFO L280 TraceCheckUtils]: 15: Hoare triple {21807#true} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet15 && test_#t~nondet15 <= 2147483647;test_~tmp___1~0 := test_#t~nondet15;havoc test_#t~nondet15; {21807#true} is VALID [2020-07-28 19:00:55,815 INFO L280 TraceCheckUtils]: 16: Hoare triple {21807#true} assume 0 != test_~tmp___1~0; {21807#true} is VALID [2020-07-28 19:00:55,816 INFO L280 TraceCheckUtils]: 17: Hoare triple {21807#true} assume !(0 != ~pumpRunning~0); {21807#true} is VALID [2020-07-28 19:00:55,817 INFO L280 TraceCheckUtils]: 18: Hoare triple {21807#true} ~systemActive~0 := 0; {21809#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:00:55,817 INFO L280 TraceCheckUtils]: 19: Hoare triple {21809#(= 0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {21809#(= 0 ~systemActive~0)} is VALID [2020-07-28 19:00:55,818 INFO L280 TraceCheckUtils]: 20: Hoare triple {21809#(= 0 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {21808#false} is VALID [2020-07-28 19:00:55,818 INFO L280 TraceCheckUtils]: 21: Hoare triple {21808#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {21808#false} is VALID [2020-07-28 19:00:55,818 INFO L280 TraceCheckUtils]: 22: Hoare triple {21808#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret71, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {21808#false} is VALID [2020-07-28 19:00:55,818 INFO L280 TraceCheckUtils]: 23: Hoare triple {21808#false} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {21808#false} is VALID [2020-07-28 19:00:55,818 INFO L280 TraceCheckUtils]: 24: Hoare triple {21808#false} isHighWaterLevel_#t~ret71 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret71 && isHighWaterLevel_#t~ret71 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret71;havoc isHighWaterLevel_#t~ret71; {21808#false} is VALID [2020-07-28 19:00:55,819 INFO L280 TraceCheckUtils]: 25: Hoare triple {21808#false} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {21808#false} is VALID [2020-07-28 19:00:55,819 INFO L280 TraceCheckUtils]: 26: Hoare triple {21808#false} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {21808#false} is VALID [2020-07-28 19:00:55,819 INFO L280 TraceCheckUtils]: 27: Hoare triple {21808#false} processEnvironment__wrappee__highWaterSensor_#t~ret51 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret51 && processEnvironment__wrappee__highWaterSensor_#t~ret51 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret51;havoc processEnvironment__wrappee__highWaterSensor_#t~ret51; {21808#false} is VALID [2020-07-28 19:00:55,819 INFO L280 TraceCheckUtils]: 28: Hoare triple {21808#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc activatePump_#t~ret53, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret54, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {21808#false} is VALID [2020-07-28 19:00:55,819 INFO L280 TraceCheckUtils]: 29: Hoare triple {21808#false} isMethaneAlarm_#t~ret54 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret54 && isMethaneAlarm_#t~ret54 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret54;havoc isMethaneAlarm_#t~ret54;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {21808#false} is VALID [2020-07-28 19:00:55,820 INFO L280 TraceCheckUtils]: 30: Hoare triple {21808#false} activatePump_#t~ret53 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret53 && activatePump_#t~ret53 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret53;havoc activatePump_#t~ret53; {21808#false} is VALID [2020-07-28 19:00:55,820 INFO L280 TraceCheckUtils]: 31: Hoare triple {21808#false} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {21808#false} is VALID [2020-07-28 19:00:55,820 INFO L280 TraceCheckUtils]: 32: Hoare triple {21808#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {21808#false} is VALID [2020-07-28 19:00:55,821 INFO L280 TraceCheckUtils]: 33: Hoare triple {21808#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {21808#false} is VALID [2020-07-28 19:00:55,821 INFO L280 TraceCheckUtils]: 34: Hoare triple {21808#false} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~10);~methAndRunningLastTime~0 := 0; {21808#false} is VALID [2020-07-28 19:00:55,821 INFO L280 TraceCheckUtils]: 35: Hoare triple {21808#false} assume !false; {21808#false} is VALID [2020-07-28 19:00:55,821 INFO L280 TraceCheckUtils]: 36: Hoare triple {21808#false} assume test_~splverifierCounter~0 < 4; {21808#false} is VALID [2020-07-28 19:00:55,821 INFO L280 TraceCheckUtils]: 37: Hoare triple {21808#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {21808#false} is VALID [2020-07-28 19:00:55,821 INFO L280 TraceCheckUtils]: 38: Hoare triple {21808#false} assume !(0 != test_~tmp~1); {21808#false} is VALID [2020-07-28 19:00:55,822 INFO L280 TraceCheckUtils]: 39: Hoare triple {21808#false} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {21808#false} is VALID [2020-07-28 19:00:55,822 INFO L280 TraceCheckUtils]: 40: Hoare triple {21808#false} assume 0 != test_~tmp___0~0; {21808#false} is VALID [2020-07-28 19:00:55,822 INFO L280 TraceCheckUtils]: 41: Hoare triple {21808#false} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {21808#false} is VALID [2020-07-28 19:00:55,823 INFO L280 TraceCheckUtils]: 42: Hoare triple {21808#false} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {21808#false} is VALID [2020-07-28 19:00:55,823 INFO L280 TraceCheckUtils]: 43: Hoare triple {21808#false} assume !(0 != test_~tmp___2~0);assume -2147483648 <= test_#t~nondet15 && test_#t~nondet15 <= 2147483647;test_~tmp___1~0 := test_#t~nondet15;havoc test_#t~nondet15; {21808#false} is VALID [2020-07-28 19:00:55,823 INFO L280 TraceCheckUtils]: 44: Hoare triple {21808#false} assume !(0 != test_~tmp___1~0); {21808#false} is VALID [2020-07-28 19:00:55,823 INFO L280 TraceCheckUtils]: 45: Hoare triple {21808#false} assume 0 != ~pumpRunning~0; {21808#false} is VALID [2020-07-28 19:00:55,823 INFO L280 TraceCheckUtils]: 46: Hoare triple {21808#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {21808#false} is VALID [2020-07-28 19:00:55,823 INFO L280 TraceCheckUtils]: 47: Hoare triple {21808#false} assume !(0 != ~systemActive~0); {21808#false} is VALID [2020-07-28 19:00:55,824 INFO L280 TraceCheckUtils]: 48: Hoare triple {21808#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {21808#false} is VALID [2020-07-28 19:00:55,824 INFO L280 TraceCheckUtils]: 49: Hoare triple {21808#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {21808#false} is VALID [2020-07-28 19:00:55,824 INFO L280 TraceCheckUtils]: 50: Hoare triple {21808#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {21808#false} is VALID [2020-07-28 19:00:55,825 INFO L280 TraceCheckUtils]: 51: Hoare triple {21808#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {21808#false} is VALID [2020-07-28 19:00:55,825 INFO L280 TraceCheckUtils]: 52: Hoare triple {21808#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {21808#false} is VALID [2020-07-28 19:00:55,825 INFO L280 TraceCheckUtils]: 53: Hoare triple {21808#false} assume 0 != ~methAndRunningLastTime~0; {21808#false} is VALID [2020-07-28 19:00:55,825 INFO L280 TraceCheckUtils]: 54: Hoare triple {21808#false} assume !false; {21808#false} is VALID [2020-07-28 19:00:55,828 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:00:55,828 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [803818781] [2020-07-28 19:00:55,828 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:55,828 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:00:55,829 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2048321202] [2020-07-28 19:00:55,829 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 55 [2020-07-28 19:00:55,829 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:55,830 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:55,886 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:55,887 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:55,887 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:55,887 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:55,887 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:55,888 INFO L87 Difference]: Start difference. First operand 409 states and 534 transitions. Second operand 3 states. [2020-07-28 19:00:56,844 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:56,844 INFO L93 Difference]: Finished difference Result 692 states and 901 transitions. [2020-07-28 19:00:56,844 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:56,844 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 55 [2020-07-28 19:00:56,844 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:56,844 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:56,845 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 182 transitions. [2020-07-28 19:00:56,845 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:56,846 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 182 transitions. [2020-07-28 19:00:56,846 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 182 transitions. [2020-07-28 19:00:57,036 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 182 edges. 182 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:57,043 INFO L225 Difference]: With dead ends: 692 [2020-07-28 19:00:57,043 INFO L226 Difference]: Without dead ends: 290 [2020-07-28 19:00:57,043 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:57,044 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 290 states. [2020-07-28 19:00:57,681 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 290 to 282. [2020-07-28 19:00:57,682 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:00:57,682 INFO L82 GeneralOperation]: Start isEquivalent. First operand 290 states. Second operand 282 states. [2020-07-28 19:00:57,682 INFO L74 IsIncluded]: Start isIncluded. First operand 290 states. Second operand 282 states. [2020-07-28 19:00:57,682 INFO L87 Difference]: Start difference. First operand 290 states. Second operand 282 states. [2020-07-28 19:00:57,688 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:57,688 INFO L93 Difference]: Finished difference Result 290 states and 370 transitions. [2020-07-28 19:00:57,688 INFO L276 IsEmpty]: Start isEmpty. Operand 290 states and 370 transitions. [2020-07-28 19:00:57,689 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:57,689 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:57,694 INFO L74 IsIncluded]: Start isIncluded. First operand 282 states. Second operand 290 states. [2020-07-28 19:00:57,695 INFO L87 Difference]: Start difference. First operand 282 states. Second operand 290 states. [2020-07-28 19:00:57,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:57,700 INFO L93 Difference]: Finished difference Result 290 states and 370 transitions. [2020-07-28 19:00:57,701 INFO L276 IsEmpty]: Start isEmpty. Operand 290 states and 370 transitions. [2020-07-28 19:00:57,701 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:00:57,701 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:00:57,701 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:00:57,701 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:00:57,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 282 states. [2020-07-28 19:00:57,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 282 states to 282 states and 362 transitions. [2020-07-28 19:00:57,706 INFO L78 Accepts]: Start accepts. Automaton has 282 states and 362 transitions. Word has length 55 [2020-07-28 19:00:57,706 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:00:57,706 INFO L479 AbstractCegarLoop]: Abstraction has 282 states and 362 transitions. [2020-07-28 19:00:57,706 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:00:57,706 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 362 transitions. [2020-07-28 19:00:57,707 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2020-07-28 19:00:57,707 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:00:57,707 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:00:57,707 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:00:57,707 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:00:57,708 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:00:57,708 INFO L82 PathProgramCache]: Analyzing trace with hash -805983262, now seen corresponding path program 1 times [2020-07-28 19:00:57,708 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:00:57,709 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1506748417] [2020-07-28 19:00:57,709 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:00:57,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:00:57,780 INFO L280 TraceCheckUtils]: 0: Hoare triple {23758#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {23758#true} is VALID [2020-07-28 19:00:57,780 INFO L280 TraceCheckUtils]: 1: Hoare triple {23758#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {23758#true} is VALID [2020-07-28 19:00:57,781 INFO L280 TraceCheckUtils]: 2: Hoare triple {23758#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {23758#true} is VALID [2020-07-28 19:00:57,781 INFO L280 TraceCheckUtils]: 3: Hoare triple {23758#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {23758#true} is VALID [2020-07-28 19:00:57,781 INFO L280 TraceCheckUtils]: 4: Hoare triple {23758#true} assume 0 != main_~tmp~0; {23758#true} is VALID [2020-07-28 19:00:57,782 INFO L280 TraceCheckUtils]: 5: Hoare triple {23758#true} ~methAndRunningLastTime~0 := 0; {23758#true} is VALID [2020-07-28 19:00:57,782 INFO L280 TraceCheckUtils]: 6: Hoare triple {23758#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {23758#true} is VALID [2020-07-28 19:00:57,782 INFO L280 TraceCheckUtils]: 7: Hoare triple {23758#true} assume !false; {23758#true} is VALID [2020-07-28 19:00:57,782 INFO L280 TraceCheckUtils]: 8: Hoare triple {23758#true} assume test_~splverifierCounter~0 < 4; {23758#true} is VALID [2020-07-28 19:00:57,782 INFO L280 TraceCheckUtils]: 9: Hoare triple {23758#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {23758#true} is VALID [2020-07-28 19:00:57,783 INFO L280 TraceCheckUtils]: 10: Hoare triple {23758#true} assume 0 != test_~tmp~1; {23758#true} is VALID [2020-07-28 19:00:57,783 INFO L280 TraceCheckUtils]: 11: Hoare triple {23758#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {23758#true} is VALID [2020-07-28 19:00:57,783 INFO L280 TraceCheckUtils]: 12: Hoare triple {23758#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {23758#true} is VALID [2020-07-28 19:00:57,783 INFO L280 TraceCheckUtils]: 13: Hoare triple {23758#true} assume !(0 != test_~tmp___0~0); {23758#true} is VALID [2020-07-28 19:00:57,784 INFO L280 TraceCheckUtils]: 14: Hoare triple {23758#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {23758#true} is VALID [2020-07-28 19:00:57,784 INFO L280 TraceCheckUtils]: 15: Hoare triple {23758#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {23758#true} is VALID [2020-07-28 19:00:57,784 INFO L280 TraceCheckUtils]: 16: Hoare triple {23758#true} assume !(0 != ~pumpRunning~0); {23758#true} is VALID [2020-07-28 19:00:57,784 INFO L280 TraceCheckUtils]: 17: Hoare triple {23758#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {23758#true} is VALID [2020-07-28 19:00:57,784 INFO L280 TraceCheckUtils]: 18: Hoare triple {23758#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {23758#true} is VALID [2020-07-28 19:00:57,784 INFO L280 TraceCheckUtils]: 19: Hoare triple {23758#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret71, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {23758#true} is VALID [2020-07-28 19:00:57,785 INFO L280 TraceCheckUtils]: 20: Hoare triple {23758#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {23758#true} is VALID [2020-07-28 19:00:57,785 INFO L280 TraceCheckUtils]: 21: Hoare triple {23758#true} isHighWaterLevel_#t~ret71 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret71 && isHighWaterLevel_#t~ret71 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret71;havoc isHighWaterLevel_#t~ret71; {23758#true} is VALID [2020-07-28 19:00:57,785 INFO L280 TraceCheckUtils]: 22: Hoare triple {23758#true} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {23758#true} is VALID [2020-07-28 19:00:57,785 INFO L280 TraceCheckUtils]: 23: Hoare triple {23758#true} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {23758#true} is VALID [2020-07-28 19:00:57,785 INFO L280 TraceCheckUtils]: 24: Hoare triple {23758#true} processEnvironment__wrappee__highWaterSensor_#t~ret51 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret51 && processEnvironment__wrappee__highWaterSensor_#t~ret51 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret51;havoc processEnvironment__wrappee__highWaterSensor_#t~ret51; {23758#true} is VALID [2020-07-28 19:00:57,785 INFO L280 TraceCheckUtils]: 25: Hoare triple {23758#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc activatePump_#t~ret53, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret54, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {23758#true} is VALID [2020-07-28 19:00:57,786 INFO L280 TraceCheckUtils]: 26: Hoare triple {23758#true} isMethaneAlarm_#t~ret54 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret54 && isMethaneAlarm_#t~ret54 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret54;havoc isMethaneAlarm_#t~ret54;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {23758#true} is VALID [2020-07-28 19:00:57,786 INFO L280 TraceCheckUtils]: 27: Hoare triple {23758#true} activatePump_#t~ret53 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret53 && activatePump_#t~ret53 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret53;havoc activatePump_#t~ret53; {23758#true} is VALID [2020-07-28 19:00:57,786 INFO L280 TraceCheckUtils]: 28: Hoare triple {23758#true} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {23758#true} is VALID [2020-07-28 19:00:57,786 INFO L280 TraceCheckUtils]: 29: Hoare triple {23758#true} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {23758#true} is VALID [2020-07-28 19:00:57,787 INFO L280 TraceCheckUtils]: 30: Hoare triple {23758#true} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {23758#true} is VALID [2020-07-28 19:00:57,788 INFO L280 TraceCheckUtils]: 31: Hoare triple {23758#true} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~10);~methAndRunningLastTime~0 := 0; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,788 INFO L280 TraceCheckUtils]: 32: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume !false; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,789 INFO L280 TraceCheckUtils]: 33: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume test_~splverifierCounter~0 < 4; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,790 INFO L280 TraceCheckUtils]: 34: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,791 INFO L280 TraceCheckUtils]: 35: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume !(0 != test_~tmp~1); {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,793 INFO L280 TraceCheckUtils]: 36: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,795 INFO L280 TraceCheckUtils]: 37: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume 0 != test_~tmp___0~0; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,797 INFO L280 TraceCheckUtils]: 38: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,799 INFO L280 TraceCheckUtils]: 39: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,800 INFO L280 TraceCheckUtils]: 40: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,801 INFO L280 TraceCheckUtils]: 41: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume 0 != ~pumpRunning~0; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,801 INFO L280 TraceCheckUtils]: 42: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,802 INFO L280 TraceCheckUtils]: 43: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,803 INFO L280 TraceCheckUtils]: 44: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret72, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~9, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~9;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,803 INFO L280 TraceCheckUtils]: 45: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} isLowWaterLevel_#t~ret72 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret72 && isLowWaterLevel_#t~ret72 <= 2147483647;isLowWaterLevel_~tmp~9 := isLowWaterLevel_#t~ret72;havoc isLowWaterLevel_#t~ret72; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,804 INFO L280 TraceCheckUtils]: 46: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume 0 != isLowWaterLevel_~tmp~9;isLowWaterLevel_~tmp___0~2 := 0; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,805 INFO L280 TraceCheckUtils]: 47: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,805 INFO L280 TraceCheckUtils]: 48: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} processEnvironment_#t~ret52 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret52 && processEnvironment_#t~ret52 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret52;havoc processEnvironment_#t~ret52; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,806 INFO L280 TraceCheckUtils]: 49: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,807 INFO L280 TraceCheckUtils]: 50: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume !(0 == ~pumpRunning~0); {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,807 INFO L280 TraceCheckUtils]: 51: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,808 INFO L280 TraceCheckUtils]: 52: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,808 INFO L280 TraceCheckUtils]: 53: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,809 INFO L280 TraceCheckUtils]: 54: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,810 INFO L280 TraceCheckUtils]: 55: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {23760#(= 0 ~methAndRunningLastTime~0)} is VALID [2020-07-28 19:00:57,810 INFO L280 TraceCheckUtils]: 56: Hoare triple {23760#(= 0 ~methAndRunningLastTime~0)} assume 0 != ~methAndRunningLastTime~0; {23759#false} is VALID [2020-07-28 19:00:57,811 INFO L280 TraceCheckUtils]: 57: Hoare triple {23759#false} assume !false; {23759#false} is VALID [2020-07-28 19:00:57,813 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:00:57,814 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1506748417] [2020-07-28 19:00:57,814 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:00:57,814 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:00:57,814 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1291400841] [2020-07-28 19:00:57,815 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 58 [2020-07-28 19:00:57,815 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:00:57,815 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:00:57,880 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 58 edges. 58 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:57,880 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:00:57,880 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:00:57,880 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:00:57,881 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:57,881 INFO L87 Difference]: Start difference. First operand 282 states and 362 transitions. Second operand 3 states. [2020-07-28 19:00:59,169 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:00:59,170 INFO L93 Difference]: Finished difference Result 413 states and 532 transitions. [2020-07-28 19:00:59,170 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:00:59,170 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 58 [2020-07-28 19:00:59,170 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:00:59,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:59,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 154 transitions. [2020-07-28 19:00:59,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:00:59,172 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 154 transitions. [2020-07-28 19:00:59,172 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 154 transitions. [2020-07-28 19:00:59,341 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 154 edges. 154 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:00:59,350 INFO L225 Difference]: With dead ends: 413 [2020-07-28 19:00:59,350 INFO L226 Difference]: Without dead ends: 411 [2020-07-28 19:00:59,351 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:00:59,351 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 411 states. [2020-07-28 19:01:00,070 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 411 to 308. [2020-07-28 19:01:00,070 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:00,070 INFO L82 GeneralOperation]: Start isEquivalent. First operand 411 states. Second operand 308 states. [2020-07-28 19:01:00,070 INFO L74 IsIncluded]: Start isIncluded. First operand 411 states. Second operand 308 states. [2020-07-28 19:01:00,070 INFO L87 Difference]: Start difference. First operand 411 states. Second operand 308 states. [2020-07-28 19:01:00,080 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:00,080 INFO L93 Difference]: Finished difference Result 411 states and 530 transitions. [2020-07-28 19:01:00,080 INFO L276 IsEmpty]: Start isEmpty. Operand 411 states and 530 transitions. [2020-07-28 19:01:00,080 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:00,080 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:00,081 INFO L74 IsIncluded]: Start isIncluded. First operand 308 states. Second operand 411 states. [2020-07-28 19:01:00,081 INFO L87 Difference]: Start difference. First operand 308 states. Second operand 411 states. [2020-07-28 19:01:00,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:00,091 INFO L93 Difference]: Finished difference Result 411 states and 530 transitions. [2020-07-28 19:01:00,091 INFO L276 IsEmpty]: Start isEmpty. Operand 411 states and 530 transitions. [2020-07-28 19:01:00,092 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:00,092 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:00,092 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:00,092 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:00,092 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 308 states. [2020-07-28 19:01:00,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 308 states to 308 states and 401 transitions. [2020-07-28 19:01:00,098 INFO L78 Accepts]: Start accepts. Automaton has 308 states and 401 transitions. Word has length 58 [2020-07-28 19:01:00,098 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:00,098 INFO L479 AbstractCegarLoop]: Abstraction has 308 states and 401 transitions. [2020-07-28 19:01:00,098 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:01:00,098 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 401 transitions. [2020-07-28 19:01:00,099 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2020-07-28 19:01:00,099 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:00,099 INFO L422 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:00,099 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-28 19:01:00,099 INFO L427 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:00,099 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:00,100 INFO L82 PathProgramCache]: Analyzing trace with hash 750831267, now seen corresponding path program 1 times [2020-07-28 19:01:00,100 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:00,100 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1207268717] [2020-07-28 19:01:00,100 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:00,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:00,238 INFO L280 TraceCheckUtils]: 0: Hoare triple {25605#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {25607#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,239 INFO L280 TraceCheckUtils]: 1: Hoare triple {25607#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {25607#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,240 INFO L280 TraceCheckUtils]: 2: Hoare triple {25607#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {25607#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,241 INFO L280 TraceCheckUtils]: 3: Hoare triple {25607#(= 1 ~waterLevel~0)} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {25607#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,241 INFO L280 TraceCheckUtils]: 4: Hoare triple {25607#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~0; {25607#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,242 INFO L280 TraceCheckUtils]: 5: Hoare triple {25607#(= 1 ~waterLevel~0)} ~methAndRunningLastTime~0 := 0; {25607#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,242 INFO L280 TraceCheckUtils]: 6: Hoare triple {25607#(= 1 ~waterLevel~0)} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {25607#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,243 INFO L280 TraceCheckUtils]: 7: Hoare triple {25607#(= 1 ~waterLevel~0)} assume !false; {25607#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,243 INFO L280 TraceCheckUtils]: 8: Hoare triple {25607#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {25607#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,244 INFO L280 TraceCheckUtils]: 9: Hoare triple {25607#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {25607#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,245 INFO L280 TraceCheckUtils]: 10: Hoare triple {25607#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~1; {25607#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,248 INFO L280 TraceCheckUtils]: 11: Hoare triple {25607#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,248 INFO L280 TraceCheckUtils]: 12: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,249 INFO L280 TraceCheckUtils]: 13: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,249 INFO L280 TraceCheckUtils]: 14: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,250 INFO L280 TraceCheckUtils]: 15: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,250 INFO L280 TraceCheckUtils]: 16: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,251 INFO L280 TraceCheckUtils]: 17: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,251 INFO L280 TraceCheckUtils]: 18: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,252 INFO L280 TraceCheckUtils]: 19: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret71, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,252 INFO L280 TraceCheckUtils]: 20: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,253 INFO L280 TraceCheckUtils]: 21: Hoare triple {25608#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret71 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret71 && isHighWaterLevel_#t~ret71 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret71;havoc isHighWaterLevel_#t~ret71; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,253 INFO L280 TraceCheckUtils]: 22: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,254 INFO L280 TraceCheckUtils]: 23: Hoare triple {25608#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,254 INFO L280 TraceCheckUtils]: 24: Hoare triple {25608#(<= 2 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret51 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret51 && processEnvironment__wrappee__highWaterSensor_#t~ret51 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret51;havoc processEnvironment__wrappee__highWaterSensor_#t~ret51; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,255 INFO L280 TraceCheckUtils]: 25: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc activatePump_#t~ret53, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret54, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,255 INFO L280 TraceCheckUtils]: 26: Hoare triple {25608#(<= 2 ~waterLevel~0)} isMethaneAlarm_#t~ret54 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret54 && isMethaneAlarm_#t~ret54 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret54;havoc isMethaneAlarm_#t~ret54;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,255 INFO L280 TraceCheckUtils]: 27: Hoare triple {25608#(<= 2 ~waterLevel~0)} activatePump_#t~ret53 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret53 && activatePump_#t~ret53 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret53;havoc activatePump_#t~ret53; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,256 INFO L280 TraceCheckUtils]: 28: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,256 INFO L280 TraceCheckUtils]: 29: Hoare triple {25608#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,257 INFO L280 TraceCheckUtils]: 30: Hoare triple {25608#(<= 2 ~waterLevel~0)} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,257 INFO L280 TraceCheckUtils]: 31: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~10);~methAndRunningLastTime~0 := 0; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,258 INFO L280 TraceCheckUtils]: 32: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume !false; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,258 INFO L280 TraceCheckUtils]: 33: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,259 INFO L280 TraceCheckUtils]: 34: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,259 INFO L280 TraceCheckUtils]: 35: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~1); {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,260 INFO L280 TraceCheckUtils]: 36: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,260 INFO L280 TraceCheckUtils]: 37: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___0~0; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,261 INFO L280 TraceCheckUtils]: 38: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,261 INFO L280 TraceCheckUtils]: 39: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,262 INFO L280 TraceCheckUtils]: 40: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,262 INFO L280 TraceCheckUtils]: 41: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {25608#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,263 INFO L280 TraceCheckUtils]: 42: Hoare triple {25608#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25609#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,263 INFO L280 TraceCheckUtils]: 43: Hoare triple {25609#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {25609#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,264 INFO L280 TraceCheckUtils]: 44: Hoare triple {25609#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret72, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~9, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~9;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {25610#(= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)} is VALID [2020-07-28 19:01:00,264 INFO L280 TraceCheckUtils]: 45: Hoare triple {25610#(= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)} isLowWaterLevel_#t~ret72 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret72 && isLowWaterLevel_#t~ret72 <= 2147483647;isLowWaterLevel_~tmp~9 := isLowWaterLevel_#t~ret72;havoc isLowWaterLevel_#t~ret72; {25611#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp~9)} is VALID [2020-07-28 19:01:00,265 INFO L280 TraceCheckUtils]: 46: Hoare triple {25611#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp~9)} assume 0 != isLowWaterLevel_~tmp~9;isLowWaterLevel_~tmp___0~2 := 0; {25606#false} is VALID [2020-07-28 19:01:00,265 INFO L280 TraceCheckUtils]: 47: Hoare triple {25606#false} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {25606#false} is VALID [2020-07-28 19:01:00,265 INFO L280 TraceCheckUtils]: 48: Hoare triple {25606#false} processEnvironment_#t~ret52 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret52 && processEnvironment_#t~ret52 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret52;havoc processEnvironment_#t~ret52; {25606#false} is VALID [2020-07-28 19:01:00,265 INFO L280 TraceCheckUtils]: 49: Hoare triple {25606#false} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {25606#false} is VALID [2020-07-28 19:01:00,266 INFO L280 TraceCheckUtils]: 50: Hoare triple {25606#false} assume !(0 == ~pumpRunning~0); {25606#false} is VALID [2020-07-28 19:01:00,266 INFO L280 TraceCheckUtils]: 51: Hoare triple {25606#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {25606#false} is VALID [2020-07-28 19:01:00,266 INFO L280 TraceCheckUtils]: 52: Hoare triple {25606#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {25606#false} is VALID [2020-07-28 19:01:00,266 INFO L280 TraceCheckUtils]: 53: Hoare triple {25606#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {25606#false} is VALID [2020-07-28 19:01:00,266 INFO L280 TraceCheckUtils]: 54: Hoare triple {25606#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {25606#false} is VALID [2020-07-28 19:01:00,267 INFO L280 TraceCheckUtils]: 55: Hoare triple {25606#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {25606#false} is VALID [2020-07-28 19:01:00,267 INFO L280 TraceCheckUtils]: 56: Hoare triple {25606#false} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {25606#false} is VALID [2020-07-28 19:01:00,267 INFO L280 TraceCheckUtils]: 57: Hoare triple {25606#false} assume !false; {25606#false} is VALID [2020-07-28 19:01:00,267 INFO L280 TraceCheckUtils]: 58: Hoare triple {25606#false} assume test_~splverifierCounter~0 < 4; {25606#false} is VALID [2020-07-28 19:01:00,267 INFO L280 TraceCheckUtils]: 59: Hoare triple {25606#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {25606#false} is VALID [2020-07-28 19:01:00,267 INFO L280 TraceCheckUtils]: 60: Hoare triple {25606#false} assume !(0 != test_~tmp~1); {25606#false} is VALID [2020-07-28 19:01:00,267 INFO L280 TraceCheckUtils]: 61: Hoare triple {25606#false} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {25606#false} is VALID [2020-07-28 19:01:00,268 INFO L280 TraceCheckUtils]: 62: Hoare triple {25606#false} assume !(0 != test_~tmp___0~0); {25606#false} is VALID [2020-07-28 19:01:00,268 INFO L280 TraceCheckUtils]: 63: Hoare triple {25606#false} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {25606#false} is VALID [2020-07-28 19:01:00,268 INFO L280 TraceCheckUtils]: 64: Hoare triple {25606#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25606#false} is VALID [2020-07-28 19:01:00,268 INFO L280 TraceCheckUtils]: 65: Hoare triple {25606#false} assume 0 != ~pumpRunning~0; {25606#false} is VALID [2020-07-28 19:01:00,268 INFO L280 TraceCheckUtils]: 66: Hoare triple {25606#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25606#false} is VALID [2020-07-28 19:01:00,268 INFO L280 TraceCheckUtils]: 67: Hoare triple {25606#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {25606#false} is VALID [2020-07-28 19:01:00,268 INFO L280 TraceCheckUtils]: 68: Hoare triple {25606#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret72, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~9, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~9;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {25606#false} is VALID [2020-07-28 19:01:00,269 INFO L280 TraceCheckUtils]: 69: Hoare triple {25606#false} isLowWaterLevel_#t~ret72 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret72 && isLowWaterLevel_#t~ret72 <= 2147483647;isLowWaterLevel_~tmp~9 := isLowWaterLevel_#t~ret72;havoc isLowWaterLevel_#t~ret72; {25606#false} is VALID [2020-07-28 19:01:00,269 INFO L280 TraceCheckUtils]: 70: Hoare triple {25606#false} assume 0 != isLowWaterLevel_~tmp~9;isLowWaterLevel_~tmp___0~2 := 0; {25606#false} is VALID [2020-07-28 19:01:00,269 INFO L280 TraceCheckUtils]: 71: Hoare triple {25606#false} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {25606#false} is VALID [2020-07-28 19:01:00,269 INFO L280 TraceCheckUtils]: 72: Hoare triple {25606#false} processEnvironment_#t~ret52 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret52 && processEnvironment_#t~ret52 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret52;havoc processEnvironment_#t~ret52; {25606#false} is VALID [2020-07-28 19:01:00,269 INFO L280 TraceCheckUtils]: 73: Hoare triple {25606#false} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {25606#false} is VALID [2020-07-28 19:01:00,269 INFO L280 TraceCheckUtils]: 74: Hoare triple {25606#false} assume !(0 == ~pumpRunning~0); {25606#false} is VALID [2020-07-28 19:01:00,269 INFO L280 TraceCheckUtils]: 75: Hoare triple {25606#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {25606#false} is VALID [2020-07-28 19:01:00,270 INFO L280 TraceCheckUtils]: 76: Hoare triple {25606#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {25606#false} is VALID [2020-07-28 19:01:00,270 INFO L280 TraceCheckUtils]: 77: Hoare triple {25606#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {25606#false} is VALID [2020-07-28 19:01:00,270 INFO L280 TraceCheckUtils]: 78: Hoare triple {25606#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {25606#false} is VALID [2020-07-28 19:01:00,270 INFO L280 TraceCheckUtils]: 79: Hoare triple {25606#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {25606#false} is VALID [2020-07-28 19:01:00,270 INFO L280 TraceCheckUtils]: 80: Hoare triple {25606#false} assume 0 != ~methAndRunningLastTime~0; {25606#false} is VALID [2020-07-28 19:01:00,271 INFO L280 TraceCheckUtils]: 81: Hoare triple {25606#false} assume !false; {25606#false} is VALID [2020-07-28 19:01:00,277 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 31 proven. 6 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2020-07-28 19:01:00,278 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1207268717] [2020-07-28 19:01:00,278 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1604783947] [2020-07-28 19:01:00,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:01:00,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:00,445 INFO L263 TraceCheckSpWp]: Trace formula consists of 500 conjuncts, 8 conjunts are in the unsatisfiable core [2020-07-28 19:01:00,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:00,481 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:01:00,617 INFO L342 QuantifierPusher]: Applying distributivity to a CONJUNCTION[2, 2, 2, 1] term [2020-07-28 19:01:00,617 INFO L523 QuantifierPusher]: Distributing 2 conjuncts over 2 disjuncts [2020-07-28 19:01:00,668 INFO L280 TraceCheckUtils]: 0: Hoare triple {25605#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {25605#true} is VALID [2020-07-28 19:01:00,668 INFO L280 TraceCheckUtils]: 1: Hoare triple {25605#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {25605#true} is VALID [2020-07-28 19:01:00,668 INFO L280 TraceCheckUtils]: 2: Hoare triple {25605#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {25605#true} is VALID [2020-07-28 19:01:00,669 INFO L280 TraceCheckUtils]: 3: Hoare triple {25605#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {25605#true} is VALID [2020-07-28 19:01:00,669 INFO L280 TraceCheckUtils]: 4: Hoare triple {25605#true} assume 0 != main_~tmp~0; {25605#true} is VALID [2020-07-28 19:01:00,669 INFO L280 TraceCheckUtils]: 5: Hoare triple {25605#true} ~methAndRunningLastTime~0 := 0; {25605#true} is VALID [2020-07-28 19:01:00,670 INFO L280 TraceCheckUtils]: 6: Hoare triple {25605#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {25605#true} is VALID [2020-07-28 19:01:00,670 INFO L280 TraceCheckUtils]: 7: Hoare triple {25605#true} assume !false; {25605#true} is VALID [2020-07-28 19:01:00,670 INFO L280 TraceCheckUtils]: 8: Hoare triple {25605#true} assume test_~splverifierCounter~0 < 4; {25605#true} is VALID [2020-07-28 19:01:00,670 INFO L280 TraceCheckUtils]: 9: Hoare triple {25605#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {25605#true} is VALID [2020-07-28 19:01:00,670 INFO L280 TraceCheckUtils]: 10: Hoare triple {25605#true} assume 0 != test_~tmp~1; {25605#true} is VALID [2020-07-28 19:01:00,670 INFO L280 TraceCheckUtils]: 11: Hoare triple {25605#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {25605#true} is VALID [2020-07-28 19:01:00,671 INFO L280 TraceCheckUtils]: 12: Hoare triple {25605#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {25605#true} is VALID [2020-07-28 19:01:00,671 INFO L280 TraceCheckUtils]: 13: Hoare triple {25605#true} assume !(0 != test_~tmp___0~0); {25605#true} is VALID [2020-07-28 19:01:00,671 INFO L280 TraceCheckUtils]: 14: Hoare triple {25605#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {25605#true} is VALID [2020-07-28 19:01:00,671 INFO L280 TraceCheckUtils]: 15: Hoare triple {25605#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25605#true} is VALID [2020-07-28 19:01:00,671 INFO L280 TraceCheckUtils]: 16: Hoare triple {25605#true} assume !(0 != ~pumpRunning~0); {25605#true} is VALID [2020-07-28 19:01:00,671 INFO L280 TraceCheckUtils]: 17: Hoare triple {25605#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {25605#true} is VALID [2020-07-28 19:01:00,672 INFO L280 TraceCheckUtils]: 18: Hoare triple {25605#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {25605#true} is VALID [2020-07-28 19:01:00,672 INFO L280 TraceCheckUtils]: 19: Hoare triple {25605#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret71, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {25605#true} is VALID [2020-07-28 19:01:00,672 INFO L280 TraceCheckUtils]: 20: Hoare triple {25605#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {25605#true} is VALID [2020-07-28 19:01:00,672 INFO L280 TraceCheckUtils]: 21: Hoare triple {25605#true} isHighWaterLevel_#t~ret71 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret71 && isHighWaterLevel_#t~ret71 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret71;havoc isHighWaterLevel_#t~ret71; {25605#true} is VALID [2020-07-28 19:01:00,673 INFO L280 TraceCheckUtils]: 22: Hoare triple {25605#true} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {25605#true} is VALID [2020-07-28 19:01:00,673 INFO L280 TraceCheckUtils]: 23: Hoare triple {25605#true} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {25605#true} is VALID [2020-07-28 19:01:00,673 INFO L280 TraceCheckUtils]: 24: Hoare triple {25605#true} processEnvironment__wrappee__highWaterSensor_#t~ret51 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret51 && processEnvironment__wrappee__highWaterSensor_#t~ret51 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret51;havoc processEnvironment__wrappee__highWaterSensor_#t~ret51; {25605#true} is VALID [2020-07-28 19:01:00,673 INFO L280 TraceCheckUtils]: 25: Hoare triple {25605#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc activatePump_#t~ret53, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret54, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {25605#true} is VALID [2020-07-28 19:01:00,674 INFO L280 TraceCheckUtils]: 26: Hoare triple {25605#true} isMethaneAlarm_#t~ret54 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret54 && isMethaneAlarm_#t~ret54 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret54;havoc isMethaneAlarm_#t~ret54;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {25605#true} is VALID [2020-07-28 19:01:00,674 INFO L280 TraceCheckUtils]: 27: Hoare triple {25605#true} activatePump_#t~ret53 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret53 && activatePump_#t~ret53 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret53;havoc activatePump_#t~ret53; {25605#true} is VALID [2020-07-28 19:01:00,674 INFO L280 TraceCheckUtils]: 28: Hoare triple {25605#true} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {25605#true} is VALID [2020-07-28 19:01:00,674 INFO L280 TraceCheckUtils]: 29: Hoare triple {25605#true} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {25605#true} is VALID [2020-07-28 19:01:00,674 INFO L280 TraceCheckUtils]: 30: Hoare triple {25605#true} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {25605#true} is VALID [2020-07-28 19:01:00,674 INFO L280 TraceCheckUtils]: 31: Hoare triple {25605#true} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~10);~methAndRunningLastTime~0 := 0; {25605#true} is VALID [2020-07-28 19:01:00,675 INFO L280 TraceCheckUtils]: 32: Hoare triple {25605#true} assume !false; {25605#true} is VALID [2020-07-28 19:01:00,675 INFO L280 TraceCheckUtils]: 33: Hoare triple {25605#true} assume test_~splverifierCounter~0 < 4; {25605#true} is VALID [2020-07-28 19:01:00,675 INFO L280 TraceCheckUtils]: 34: Hoare triple {25605#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {25605#true} is VALID [2020-07-28 19:01:00,676 INFO L280 TraceCheckUtils]: 35: Hoare triple {25605#true} assume !(0 != test_~tmp~1); {25605#true} is VALID [2020-07-28 19:01:00,676 INFO L280 TraceCheckUtils]: 36: Hoare triple {25605#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {25605#true} is VALID [2020-07-28 19:01:00,676 INFO L280 TraceCheckUtils]: 37: Hoare triple {25605#true} assume 0 != test_~tmp___0~0; {25605#true} is VALID [2020-07-28 19:01:00,676 INFO L280 TraceCheckUtils]: 38: Hoare triple {25605#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {25605#true} is VALID [2020-07-28 19:01:00,677 INFO L280 TraceCheckUtils]: 39: Hoare triple {25605#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {25605#true} is VALID [2020-07-28 19:01:00,677 INFO L280 TraceCheckUtils]: 40: Hoare triple {25605#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25605#true} is VALID [2020-07-28 19:01:00,677 INFO L280 TraceCheckUtils]: 41: Hoare triple {25605#true} assume 0 != ~pumpRunning~0; {25605#true} is VALID [2020-07-28 19:01:00,678 INFO L280 TraceCheckUtils]: 42: Hoare triple {25605#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25605#true} is VALID [2020-07-28 19:01:00,678 INFO L280 TraceCheckUtils]: 43: Hoare triple {25605#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {25605#true} is VALID [2020-07-28 19:01:00,679 INFO L280 TraceCheckUtils]: 44: Hoare triple {25605#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret72, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~9, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~9;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {25747#(or (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (not (= 0 ~waterLevel~0))) (and (= 1 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 0 ~waterLevel~0)))} is VALID [2020-07-28 19:01:00,680 INFO L280 TraceCheckUtils]: 45: Hoare triple {25747#(or (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (not (= 0 ~waterLevel~0))) (and (= 1 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 0 ~waterLevel~0)))} isLowWaterLevel_#t~ret72 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret72 && isLowWaterLevel_#t~ret72 <= 2147483647;isLowWaterLevel_~tmp~9 := isLowWaterLevel_#t~ret72;havoc isLowWaterLevel_#t~ret72; {25751#(or (and (= 1 ULTIMATE.start_isLowWaterLevel_~tmp~9) (= 0 ~waterLevel~0)) (and (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~9) (not (= 0 ~waterLevel~0))))} is VALID [2020-07-28 19:01:00,681 INFO L280 TraceCheckUtils]: 46: Hoare triple {25751#(or (and (= 1 ULTIMATE.start_isLowWaterLevel_~tmp~9) (= 0 ~waterLevel~0)) (and (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~9) (not (= 0 ~waterLevel~0))))} assume 0 != isLowWaterLevel_~tmp~9;isLowWaterLevel_~tmp___0~2 := 0; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,681 INFO L280 TraceCheckUtils]: 47: Hoare triple {25755#(= 0 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,682 INFO L280 TraceCheckUtils]: 48: Hoare triple {25755#(= 0 ~waterLevel~0)} processEnvironment_#t~ret52 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret52 && processEnvironment_#t~ret52 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret52;havoc processEnvironment_#t~ret52; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,683 INFO L280 TraceCheckUtils]: 49: Hoare triple {25755#(= 0 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,683 INFO L280 TraceCheckUtils]: 50: Hoare triple {25755#(= 0 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,684 INFO L280 TraceCheckUtils]: 51: Hoare triple {25755#(= 0 ~waterLevel~0)} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,684 INFO L280 TraceCheckUtils]: 52: Hoare triple {25755#(= 0 ~waterLevel~0)} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,685 INFO L280 TraceCheckUtils]: 53: Hoare triple {25755#(= 0 ~waterLevel~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,686 INFO L280 TraceCheckUtils]: 54: Hoare triple {25755#(= 0 ~waterLevel~0)} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,686 INFO L280 TraceCheckUtils]: 55: Hoare triple {25755#(= 0 ~waterLevel~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,687 INFO L280 TraceCheckUtils]: 56: Hoare triple {25755#(= 0 ~waterLevel~0)} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,687 INFO L280 TraceCheckUtils]: 57: Hoare triple {25755#(= 0 ~waterLevel~0)} assume !false; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,688 INFO L280 TraceCheckUtils]: 58: Hoare triple {25755#(= 0 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,689 INFO L280 TraceCheckUtils]: 59: Hoare triple {25755#(= 0 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,689 INFO L280 TraceCheckUtils]: 60: Hoare triple {25755#(= 0 ~waterLevel~0)} assume !(0 != test_~tmp~1); {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,690 INFO L280 TraceCheckUtils]: 61: Hoare triple {25755#(= 0 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,690 INFO L280 TraceCheckUtils]: 62: Hoare triple {25755#(= 0 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,691 INFO L280 TraceCheckUtils]: 63: Hoare triple {25755#(= 0 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,692 INFO L280 TraceCheckUtils]: 64: Hoare triple {25755#(= 0 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,692 INFO L280 TraceCheckUtils]: 65: Hoare triple {25755#(= 0 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {25755#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:01:00,693 INFO L280 TraceCheckUtils]: 66: Hoare triple {25755#(= 0 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25606#false} is VALID [2020-07-28 19:01:00,693 INFO L280 TraceCheckUtils]: 67: Hoare triple {25606#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {25606#false} is VALID [2020-07-28 19:01:00,693 INFO L280 TraceCheckUtils]: 68: Hoare triple {25606#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret72, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~9, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~9;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {25606#false} is VALID [2020-07-28 19:01:00,694 INFO L280 TraceCheckUtils]: 69: Hoare triple {25606#false} isLowWaterLevel_#t~ret72 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret72 && isLowWaterLevel_#t~ret72 <= 2147483647;isLowWaterLevel_~tmp~9 := isLowWaterLevel_#t~ret72;havoc isLowWaterLevel_#t~ret72; {25606#false} is VALID [2020-07-28 19:01:00,694 INFO L280 TraceCheckUtils]: 70: Hoare triple {25606#false} assume 0 != isLowWaterLevel_~tmp~9;isLowWaterLevel_~tmp___0~2 := 0; {25606#false} is VALID [2020-07-28 19:01:00,694 INFO L280 TraceCheckUtils]: 71: Hoare triple {25606#false} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {25606#false} is VALID [2020-07-28 19:01:00,694 INFO L280 TraceCheckUtils]: 72: Hoare triple {25606#false} processEnvironment_#t~ret52 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret52 && processEnvironment_#t~ret52 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret52;havoc processEnvironment_#t~ret52; {25606#false} is VALID [2020-07-28 19:01:00,694 INFO L280 TraceCheckUtils]: 73: Hoare triple {25606#false} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {25606#false} is VALID [2020-07-28 19:01:00,694 INFO L280 TraceCheckUtils]: 74: Hoare triple {25606#false} assume !(0 == ~pumpRunning~0); {25606#false} is VALID [2020-07-28 19:01:00,694 INFO L280 TraceCheckUtils]: 75: Hoare triple {25606#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {25606#false} is VALID [2020-07-28 19:01:00,695 INFO L280 TraceCheckUtils]: 76: Hoare triple {25606#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {25606#false} is VALID [2020-07-28 19:01:00,695 INFO L280 TraceCheckUtils]: 77: Hoare triple {25606#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {25606#false} is VALID [2020-07-28 19:01:00,695 INFO L280 TraceCheckUtils]: 78: Hoare triple {25606#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {25606#false} is VALID [2020-07-28 19:01:00,695 INFO L280 TraceCheckUtils]: 79: Hoare triple {25606#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {25606#false} is VALID [2020-07-28 19:01:00,696 INFO L280 TraceCheckUtils]: 80: Hoare triple {25606#false} assume 0 != ~methAndRunningLastTime~0; {25606#false} is VALID [2020-07-28 19:01:00,696 INFO L280 TraceCheckUtils]: 81: Hoare triple {25606#false} assume !false; {25606#false} is VALID [2020-07-28 19:01:00,705 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 41 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 19:01:00,705 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2020-07-28 19:01:00,705 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6] total 10 [2020-07-28 19:01:00,706 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1598658602] [2020-07-28 19:01:00,706 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 82 [2020-07-28 19:01:00,707 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:00,707 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:01:00,789 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 75 edges. 75 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:00,790 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:01:00,790 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:00,790 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:01:00,790 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2020-07-28 19:01:00,791 INFO L87 Difference]: Start difference. First operand 308 states and 401 transitions. Second operand 5 states. [2020-07-28 19:01:03,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:03,544 INFO L93 Difference]: Finished difference Result 845 states and 1129 transitions. [2020-07-28 19:01:03,544 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:01:03,544 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 82 [2020-07-28 19:01:03,545 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:03,545 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:03,546 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 265 transitions. [2020-07-28 19:01:03,547 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:03,548 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 265 transitions. [2020-07-28 19:01:03,549 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 265 transitions. [2020-07-28 19:01:03,859 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 265 edges. 265 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:03,880 INFO L225 Difference]: With dead ends: 845 [2020-07-28 19:01:03,880 INFO L226 Difference]: Without dead ends: 632 [2020-07-28 19:01:03,881 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 81 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=34, Invalid=122, Unknown=0, NotChecked=0, Total=156 [2020-07-28 19:01:03,882 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 632 states. [2020-07-28 19:01:05,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 632 to 399. [2020-07-28 19:01:05,055 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:05,055 INFO L82 GeneralOperation]: Start isEquivalent. First operand 632 states. Second operand 399 states. [2020-07-28 19:01:05,055 INFO L74 IsIncluded]: Start isIncluded. First operand 632 states. Second operand 399 states. [2020-07-28 19:01:05,055 INFO L87 Difference]: Start difference. First operand 632 states. Second operand 399 states. [2020-07-28 19:01:05,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:05,072 INFO L93 Difference]: Finished difference Result 632 states and 824 transitions. [2020-07-28 19:01:05,072 INFO L276 IsEmpty]: Start isEmpty. Operand 632 states and 824 transitions. [2020-07-28 19:01:05,075 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:05,075 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:05,075 INFO L74 IsIncluded]: Start isIncluded. First operand 399 states. Second operand 632 states. [2020-07-28 19:01:05,075 INFO L87 Difference]: Start difference. First operand 399 states. Second operand 632 states. [2020-07-28 19:01:05,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:05,096 INFO L93 Difference]: Finished difference Result 632 states and 824 transitions. [2020-07-28 19:01:05,096 INFO L276 IsEmpty]: Start isEmpty. Operand 632 states and 824 transitions. [2020-07-28 19:01:05,098 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:05,098 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:05,098 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:05,099 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:05,099 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 399 states. [2020-07-28 19:01:05,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 399 states to 399 states and 523 transitions. [2020-07-28 19:01:05,111 INFO L78 Accepts]: Start accepts. Automaton has 399 states and 523 transitions. Word has length 82 [2020-07-28 19:01:05,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:05,111 INFO L479 AbstractCegarLoop]: Abstraction has 399 states and 523 transitions. [2020-07-28 19:01:05,112 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:01:05,112 INFO L276 IsEmpty]: Start isEmpty. Operand 399 states and 523 transitions. [2020-07-28 19:01:05,114 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2020-07-28 19:01:05,114 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:05,114 INFO L422 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:05,329 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2020-07-28 19:01:05,330 INFO L427 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:05,331 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:05,331 INFO L82 PathProgramCache]: Analyzing trace with hash -270237087, now seen corresponding path program 1 times [2020-07-28 19:01:05,331 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:05,332 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1375503169] [2020-07-28 19:01:05,332 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:05,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:05,437 INFO L280 TraceCheckUtils]: 0: Hoare triple {28872#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {28874#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,438 INFO L280 TraceCheckUtils]: 1: Hoare triple {28874#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {28874#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,438 INFO L280 TraceCheckUtils]: 2: Hoare triple {28874#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {28874#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,439 INFO L280 TraceCheckUtils]: 3: Hoare triple {28874#(= 1 ~waterLevel~0)} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {28874#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,439 INFO L280 TraceCheckUtils]: 4: Hoare triple {28874#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~0; {28874#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,440 INFO L280 TraceCheckUtils]: 5: Hoare triple {28874#(= 1 ~waterLevel~0)} ~methAndRunningLastTime~0 := 0; {28874#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,440 INFO L280 TraceCheckUtils]: 6: Hoare triple {28874#(= 1 ~waterLevel~0)} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {28874#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,441 INFO L280 TraceCheckUtils]: 7: Hoare triple {28874#(= 1 ~waterLevel~0)} assume !false; {28874#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,441 INFO L280 TraceCheckUtils]: 8: Hoare triple {28874#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {28874#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,442 INFO L280 TraceCheckUtils]: 9: Hoare triple {28874#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {28874#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,442 INFO L280 TraceCheckUtils]: 10: Hoare triple {28874#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~1; {28874#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,443 INFO L280 TraceCheckUtils]: 11: Hoare triple {28874#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,444 INFO L280 TraceCheckUtils]: 12: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,444 INFO L280 TraceCheckUtils]: 13: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,445 INFO L280 TraceCheckUtils]: 14: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,445 INFO L280 TraceCheckUtils]: 15: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,446 INFO L280 TraceCheckUtils]: 16: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,447 INFO L280 TraceCheckUtils]: 17: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,448 INFO L280 TraceCheckUtils]: 18: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,448 INFO L280 TraceCheckUtils]: 19: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret71, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,449 INFO L280 TraceCheckUtils]: 20: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,450 INFO L280 TraceCheckUtils]: 21: Hoare triple {28875#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret71 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret71 && isHighWaterLevel_#t~ret71 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret71;havoc isHighWaterLevel_#t~ret71; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,451 INFO L280 TraceCheckUtils]: 22: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,451 INFO L280 TraceCheckUtils]: 23: Hoare triple {28875#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,452 INFO L280 TraceCheckUtils]: 24: Hoare triple {28875#(<= 2 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret51 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret51 && processEnvironment__wrappee__highWaterSensor_#t~ret51 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret51;havoc processEnvironment__wrappee__highWaterSensor_#t~ret51; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,453 INFO L280 TraceCheckUtils]: 25: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc activatePump_#t~ret53, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret54, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,453 INFO L280 TraceCheckUtils]: 26: Hoare triple {28875#(<= 2 ~waterLevel~0)} isMethaneAlarm_#t~ret54 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret54 && isMethaneAlarm_#t~ret54 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret54;havoc isMethaneAlarm_#t~ret54;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,454 INFO L280 TraceCheckUtils]: 27: Hoare triple {28875#(<= 2 ~waterLevel~0)} activatePump_#t~ret53 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret53 && activatePump_#t~ret53 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret53;havoc activatePump_#t~ret53; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,455 INFO L280 TraceCheckUtils]: 28: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,456 INFO L280 TraceCheckUtils]: 29: Hoare triple {28875#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,457 INFO L280 TraceCheckUtils]: 30: Hoare triple {28875#(<= 2 ~waterLevel~0)} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,457 INFO L280 TraceCheckUtils]: 31: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~10);~methAndRunningLastTime~0 := 0; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,458 INFO L280 TraceCheckUtils]: 32: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !false; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,459 INFO L280 TraceCheckUtils]: 33: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,459 INFO L280 TraceCheckUtils]: 34: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,460 INFO L280 TraceCheckUtils]: 35: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~1); {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,460 INFO L280 TraceCheckUtils]: 36: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,461 INFO L280 TraceCheckUtils]: 37: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___0~0; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,461 INFO L280 TraceCheckUtils]: 38: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,462 INFO L280 TraceCheckUtils]: 39: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,462 INFO L280 TraceCheckUtils]: 40: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,463 INFO L280 TraceCheckUtils]: 41: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,464 INFO L280 TraceCheckUtils]: 42: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,465 INFO L280 TraceCheckUtils]: 43: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,466 INFO L280 TraceCheckUtils]: 44: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret72, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~9, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~9;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,466 INFO L280 TraceCheckUtils]: 45: Hoare triple {28876#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret72 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret72 && isLowWaterLevel_#t~ret72 <= 2147483647;isLowWaterLevel_~tmp~9 := isLowWaterLevel_#t~ret72;havoc isLowWaterLevel_#t~ret72; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,467 INFO L280 TraceCheckUtils]: 46: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~9;isLowWaterLevel_~tmp___0~2 := 0; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,468 INFO L280 TraceCheckUtils]: 47: Hoare triple {28876#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,469 INFO L280 TraceCheckUtils]: 48: Hoare triple {28876#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret52 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret52 && processEnvironment_#t~ret52 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret52;havoc processEnvironment_#t~ret52; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,469 INFO L280 TraceCheckUtils]: 49: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,470 INFO L280 TraceCheckUtils]: 50: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,471 INFO L280 TraceCheckUtils]: 51: Hoare triple {28876#(<= 1 ~waterLevel~0)} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,472 INFO L280 TraceCheckUtils]: 52: Hoare triple {28876#(<= 1 ~waterLevel~0)} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,472 INFO L280 TraceCheckUtils]: 53: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,473 INFO L280 TraceCheckUtils]: 54: Hoare triple {28876#(<= 1 ~waterLevel~0)} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,474 INFO L280 TraceCheckUtils]: 55: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,475 INFO L280 TraceCheckUtils]: 56: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,475 INFO L280 TraceCheckUtils]: 57: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume !false; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,476 INFO L280 TraceCheckUtils]: 58: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,476 INFO L280 TraceCheckUtils]: 59: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,477 INFO L280 TraceCheckUtils]: 60: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume !(0 != test_~tmp~1); {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,477 INFO L280 TraceCheckUtils]: 61: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,478 INFO L280 TraceCheckUtils]: 62: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,479 INFO L280 TraceCheckUtils]: 63: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,480 INFO L280 TraceCheckUtils]: 64: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,480 INFO L280 TraceCheckUtils]: 65: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,481 INFO L280 TraceCheckUtils]: 66: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume !(~waterLevel~0 > 0); {28873#false} is VALID [2020-07-28 19:01:05,481 INFO L280 TraceCheckUtils]: 67: Hoare triple {28873#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {28873#false} is VALID [2020-07-28 19:01:05,482 INFO L280 TraceCheckUtils]: 68: Hoare triple {28873#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret72, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~9, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~9;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {28873#false} is VALID [2020-07-28 19:01:05,482 INFO L280 TraceCheckUtils]: 69: Hoare triple {28873#false} isLowWaterLevel_#t~ret72 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret72 && isLowWaterLevel_#t~ret72 <= 2147483647;isLowWaterLevel_~tmp~9 := isLowWaterLevel_#t~ret72;havoc isLowWaterLevel_#t~ret72; {28873#false} is VALID [2020-07-28 19:01:05,482 INFO L280 TraceCheckUtils]: 70: Hoare triple {28873#false} assume 0 != isLowWaterLevel_~tmp~9;isLowWaterLevel_~tmp___0~2 := 0; {28873#false} is VALID [2020-07-28 19:01:05,482 INFO L280 TraceCheckUtils]: 71: Hoare triple {28873#false} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {28873#false} is VALID [2020-07-28 19:01:05,483 INFO L280 TraceCheckUtils]: 72: Hoare triple {28873#false} processEnvironment_#t~ret52 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret52 && processEnvironment_#t~ret52 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret52;havoc processEnvironment_#t~ret52; {28873#false} is VALID [2020-07-28 19:01:05,483 INFO L280 TraceCheckUtils]: 73: Hoare triple {28873#false} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {28873#false} is VALID [2020-07-28 19:01:05,484 INFO L280 TraceCheckUtils]: 74: Hoare triple {28873#false} assume !(0 == ~pumpRunning~0); {28873#false} is VALID [2020-07-28 19:01:05,484 INFO L280 TraceCheckUtils]: 75: Hoare triple {28873#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {28873#false} is VALID [2020-07-28 19:01:05,484 INFO L280 TraceCheckUtils]: 76: Hoare triple {28873#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {28873#false} is VALID [2020-07-28 19:01:05,484 INFO L280 TraceCheckUtils]: 77: Hoare triple {28873#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {28873#false} is VALID [2020-07-28 19:01:05,485 INFO L280 TraceCheckUtils]: 78: Hoare triple {28873#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {28873#false} is VALID [2020-07-28 19:01:05,485 INFO L280 TraceCheckUtils]: 79: Hoare triple {28873#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {28873#false} is VALID [2020-07-28 19:01:05,485 INFO L280 TraceCheckUtils]: 80: Hoare triple {28873#false} assume 0 != ~methAndRunningLastTime~0; {28873#false} is VALID [2020-07-28 19:01:05,485 INFO L280 TraceCheckUtils]: 81: Hoare triple {28873#false} assume !false; {28873#false} is VALID [2020-07-28 19:01:05,494 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 19 proven. 28 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2020-07-28 19:01:05,495 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1375503169] [2020-07-28 19:01:05,495 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [717387214] [2020-07-28 19:01:05,495 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:01:05,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:05,611 INFO L263 TraceCheckSpWp]: Trace formula consists of 498 conjuncts, 3 conjunts are in the unsatisfiable core [2020-07-28 19:01:05,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:05,644 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:01:05,765 INFO L280 TraceCheckUtils]: 0: Hoare triple {28872#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {28872#true} is VALID [2020-07-28 19:01:05,765 INFO L280 TraceCheckUtils]: 1: Hoare triple {28872#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {28872#true} is VALID [2020-07-28 19:01:05,765 INFO L280 TraceCheckUtils]: 2: Hoare triple {28872#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {28872#true} is VALID [2020-07-28 19:01:05,766 INFO L280 TraceCheckUtils]: 3: Hoare triple {28872#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {28872#true} is VALID [2020-07-28 19:01:05,766 INFO L280 TraceCheckUtils]: 4: Hoare triple {28872#true} assume 0 != main_~tmp~0; {28872#true} is VALID [2020-07-28 19:01:05,766 INFO L280 TraceCheckUtils]: 5: Hoare triple {28872#true} ~methAndRunningLastTime~0 := 0; {28872#true} is VALID [2020-07-28 19:01:05,766 INFO L280 TraceCheckUtils]: 6: Hoare triple {28872#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {28872#true} is VALID [2020-07-28 19:01:05,767 INFO L280 TraceCheckUtils]: 7: Hoare triple {28872#true} assume !false; {28872#true} is VALID [2020-07-28 19:01:05,767 INFO L280 TraceCheckUtils]: 8: Hoare triple {28872#true} assume test_~splverifierCounter~0 < 4; {28872#true} is VALID [2020-07-28 19:01:05,767 INFO L280 TraceCheckUtils]: 9: Hoare triple {28872#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {28872#true} is VALID [2020-07-28 19:01:05,767 INFO L280 TraceCheckUtils]: 10: Hoare triple {28872#true} assume 0 != test_~tmp~1; {28872#true} is VALID [2020-07-28 19:01:05,767 INFO L280 TraceCheckUtils]: 11: Hoare triple {28872#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {28872#true} is VALID [2020-07-28 19:01:05,768 INFO L280 TraceCheckUtils]: 12: Hoare triple {28872#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {28872#true} is VALID [2020-07-28 19:01:05,768 INFO L280 TraceCheckUtils]: 13: Hoare triple {28872#true} assume !(0 != test_~tmp___0~0); {28872#true} is VALID [2020-07-28 19:01:05,768 INFO L280 TraceCheckUtils]: 14: Hoare triple {28872#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {28872#true} is VALID [2020-07-28 19:01:05,768 INFO L280 TraceCheckUtils]: 15: Hoare triple {28872#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {28872#true} is VALID [2020-07-28 19:01:05,769 INFO L280 TraceCheckUtils]: 16: Hoare triple {28872#true} assume !(0 != ~pumpRunning~0); {28872#true} is VALID [2020-07-28 19:01:05,769 INFO L280 TraceCheckUtils]: 17: Hoare triple {28872#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {28872#true} is VALID [2020-07-28 19:01:05,769 INFO L280 TraceCheckUtils]: 18: Hoare triple {28872#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {28872#true} is VALID [2020-07-28 19:01:05,769 INFO L280 TraceCheckUtils]: 19: Hoare triple {28872#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret71, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {28872#true} is VALID [2020-07-28 19:01:05,770 INFO L280 TraceCheckUtils]: 20: Hoare triple {28872#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,771 INFO L280 TraceCheckUtils]: 21: Hoare triple {28875#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret71 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret71 && isHighWaterLevel_#t~ret71 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret71;havoc isHighWaterLevel_#t~ret71; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,771 INFO L280 TraceCheckUtils]: 22: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,772 INFO L280 TraceCheckUtils]: 23: Hoare triple {28875#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,773 INFO L280 TraceCheckUtils]: 24: Hoare triple {28875#(<= 2 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret51 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret51 && processEnvironment__wrappee__highWaterSensor_#t~ret51 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret51;havoc processEnvironment__wrappee__highWaterSensor_#t~ret51; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,773 INFO L280 TraceCheckUtils]: 25: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc activatePump_#t~ret53, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret54, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,774 INFO L280 TraceCheckUtils]: 26: Hoare triple {28875#(<= 2 ~waterLevel~0)} isMethaneAlarm_#t~ret54 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret54 && isMethaneAlarm_#t~ret54 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret54;havoc isMethaneAlarm_#t~ret54;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,775 INFO L280 TraceCheckUtils]: 27: Hoare triple {28875#(<= 2 ~waterLevel~0)} activatePump_#t~ret53 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret53 && activatePump_#t~ret53 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret53;havoc activatePump_#t~ret53; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,775 INFO L280 TraceCheckUtils]: 28: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,776 INFO L280 TraceCheckUtils]: 29: Hoare triple {28875#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,777 INFO L280 TraceCheckUtils]: 30: Hoare triple {28875#(<= 2 ~waterLevel~0)} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,777 INFO L280 TraceCheckUtils]: 31: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~10);~methAndRunningLastTime~0 := 0; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,778 INFO L280 TraceCheckUtils]: 32: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !false; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,778 INFO L280 TraceCheckUtils]: 33: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,779 INFO L280 TraceCheckUtils]: 34: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,780 INFO L280 TraceCheckUtils]: 35: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~1); {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,780 INFO L280 TraceCheckUtils]: 36: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,781 INFO L280 TraceCheckUtils]: 37: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___0~0; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,781 INFO L280 TraceCheckUtils]: 38: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,782 INFO L280 TraceCheckUtils]: 39: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,783 INFO L280 TraceCheckUtils]: 40: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,783 INFO L280 TraceCheckUtils]: 41: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {28875#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,784 INFO L280 TraceCheckUtils]: 42: Hoare triple {28875#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,785 INFO L280 TraceCheckUtils]: 43: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,785 INFO L280 TraceCheckUtils]: 44: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret72, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~9, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~9;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,786 INFO L280 TraceCheckUtils]: 45: Hoare triple {28876#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret72 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret72 && isLowWaterLevel_#t~ret72 <= 2147483647;isLowWaterLevel_~tmp~9 := isLowWaterLevel_#t~ret72;havoc isLowWaterLevel_#t~ret72; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,786 INFO L280 TraceCheckUtils]: 46: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~9;isLowWaterLevel_~tmp___0~2 := 0; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,787 INFO L280 TraceCheckUtils]: 47: Hoare triple {28876#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,789 INFO L280 TraceCheckUtils]: 48: Hoare triple {28876#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret52 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret52 && processEnvironment_#t~ret52 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret52;havoc processEnvironment_#t~ret52; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,790 INFO L280 TraceCheckUtils]: 49: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,791 INFO L280 TraceCheckUtils]: 50: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,793 INFO L280 TraceCheckUtils]: 51: Hoare triple {28876#(<= 1 ~waterLevel~0)} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,796 INFO L280 TraceCheckUtils]: 52: Hoare triple {28876#(<= 1 ~waterLevel~0)} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,797 INFO L280 TraceCheckUtils]: 53: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,798 INFO L280 TraceCheckUtils]: 54: Hoare triple {28876#(<= 1 ~waterLevel~0)} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,798 INFO L280 TraceCheckUtils]: 55: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,799 INFO L280 TraceCheckUtils]: 56: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,799 INFO L280 TraceCheckUtils]: 57: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume !false; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,800 INFO L280 TraceCheckUtils]: 58: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,800 INFO L280 TraceCheckUtils]: 59: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,801 INFO L280 TraceCheckUtils]: 60: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume !(0 != test_~tmp~1); {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,802 INFO L280 TraceCheckUtils]: 61: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,802 INFO L280 TraceCheckUtils]: 62: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,803 INFO L280 TraceCheckUtils]: 63: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,803 INFO L280 TraceCheckUtils]: 64: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,804 INFO L280 TraceCheckUtils]: 65: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {28876#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:05,805 INFO L280 TraceCheckUtils]: 66: Hoare triple {28876#(<= 1 ~waterLevel~0)} assume !(~waterLevel~0 > 0); {28873#false} is VALID [2020-07-28 19:01:05,805 INFO L280 TraceCheckUtils]: 67: Hoare triple {28873#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {28873#false} is VALID [2020-07-28 19:01:05,805 INFO L280 TraceCheckUtils]: 68: Hoare triple {28873#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret72, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~9, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~9;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {28873#false} is VALID [2020-07-28 19:01:05,805 INFO L280 TraceCheckUtils]: 69: Hoare triple {28873#false} isLowWaterLevel_#t~ret72 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret72 && isLowWaterLevel_#t~ret72 <= 2147483647;isLowWaterLevel_~tmp~9 := isLowWaterLevel_#t~ret72;havoc isLowWaterLevel_#t~ret72; {28873#false} is VALID [2020-07-28 19:01:05,805 INFO L280 TraceCheckUtils]: 70: Hoare triple {28873#false} assume 0 != isLowWaterLevel_~tmp~9;isLowWaterLevel_~tmp___0~2 := 0; {28873#false} is VALID [2020-07-28 19:01:05,805 INFO L280 TraceCheckUtils]: 71: Hoare triple {28873#false} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {28873#false} is VALID [2020-07-28 19:01:05,806 INFO L280 TraceCheckUtils]: 72: Hoare triple {28873#false} processEnvironment_#t~ret52 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret52 && processEnvironment_#t~ret52 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret52;havoc processEnvironment_#t~ret52; {28873#false} is VALID [2020-07-28 19:01:05,806 INFO L280 TraceCheckUtils]: 73: Hoare triple {28873#false} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {28873#false} is VALID [2020-07-28 19:01:05,806 INFO L280 TraceCheckUtils]: 74: Hoare triple {28873#false} assume !(0 == ~pumpRunning~0); {28873#false} is VALID [2020-07-28 19:01:05,806 INFO L280 TraceCheckUtils]: 75: Hoare triple {28873#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {28873#false} is VALID [2020-07-28 19:01:05,807 INFO L280 TraceCheckUtils]: 76: Hoare triple {28873#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {28873#false} is VALID [2020-07-28 19:01:05,807 INFO L280 TraceCheckUtils]: 77: Hoare triple {28873#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {28873#false} is VALID [2020-07-28 19:01:05,807 INFO L280 TraceCheckUtils]: 78: Hoare triple {28873#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {28873#false} is VALID [2020-07-28 19:01:05,807 INFO L280 TraceCheckUtils]: 79: Hoare triple {28873#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {28873#false} is VALID [2020-07-28 19:01:05,807 INFO L280 TraceCheckUtils]: 80: Hoare triple {28873#false} assume 0 != ~methAndRunningLastTime~0; {28873#false} is VALID [2020-07-28 19:01:05,807 INFO L280 TraceCheckUtils]: 81: Hoare triple {28873#false} assume !false; {28873#false} is VALID [2020-07-28 19:01:05,813 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 39 proven. 13 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:05,813 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:01:05,813 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [4, 4] total 5 [2020-07-28 19:01:05,814 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [273466627] [2020-07-28 19:01:05,814 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 82 [2020-07-28 19:01:05,815 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:05,815 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:01:05,924 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 100 edges. 100 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:05,924 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:01:05,924 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:05,924 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:01:05,925 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:01:05,925 INFO L87 Difference]: Start difference. First operand 399 states and 523 transitions. Second operand 5 states. [2020-07-28 19:01:09,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:09,577 INFO L93 Difference]: Finished difference Result 1418 states and 1862 transitions. [2020-07-28 19:01:09,577 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:01:09,577 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 82 [2020-07-28 19:01:09,577 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:09,577 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:09,578 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 295 transitions. [2020-07-28 19:01:09,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:09,579 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 295 transitions. [2020-07-28 19:01:09,579 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 295 transitions. [2020-07-28 19:01:09,907 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 295 edges. 295 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:09,955 INFO L225 Difference]: With dead ends: 1418 [2020-07-28 19:01:09,955 INFO L226 Difference]: Without dead ends: 1023 [2020-07-28 19:01:09,956 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 85 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:01:09,957 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1023 states. [2020-07-28 19:01:12,635 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1023 to 837. [2020-07-28 19:01:12,636 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:12,636 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1023 states. Second operand 837 states. [2020-07-28 19:01:12,636 INFO L74 IsIncluded]: Start isIncluded. First operand 1023 states. Second operand 837 states. [2020-07-28 19:01:12,636 INFO L87 Difference]: Start difference. First operand 1023 states. Second operand 837 states. [2020-07-28 19:01:12,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:12,671 INFO L93 Difference]: Finished difference Result 1023 states and 1321 transitions. [2020-07-28 19:01:12,671 INFO L276 IsEmpty]: Start isEmpty. Operand 1023 states and 1321 transitions. [2020-07-28 19:01:12,672 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:12,672 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:12,672 INFO L74 IsIncluded]: Start isIncluded. First operand 837 states. Second operand 1023 states. [2020-07-28 19:01:12,672 INFO L87 Difference]: Start difference. First operand 837 states. Second operand 1023 states. [2020-07-28 19:01:12,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:12,723 INFO L93 Difference]: Finished difference Result 1023 states and 1321 transitions. [2020-07-28 19:01:12,724 INFO L276 IsEmpty]: Start isEmpty. Operand 1023 states and 1321 transitions. [2020-07-28 19:01:12,725 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:12,725 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:12,725 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:12,726 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:12,726 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 837 states. [2020-07-28 19:01:12,757 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 837 states to 837 states and 1097 transitions. [2020-07-28 19:01:12,757 INFO L78 Accepts]: Start accepts. Automaton has 837 states and 1097 transitions. Word has length 82 [2020-07-28 19:01:12,757 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:12,757 INFO L479 AbstractCegarLoop]: Abstraction has 837 states and 1097 transitions. [2020-07-28 19:01:12,757 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:01:12,757 INFO L276 IsEmpty]: Start isEmpty. Operand 837 states and 1097 transitions. [2020-07-28 19:01:12,758 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2020-07-28 19:01:12,758 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:12,759 INFO L422 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:12,959 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2020-07-28 19:01:12,960 INFO L427 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:12,960 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:12,961 INFO L82 PathProgramCache]: Analyzing trace with hash 356464481, now seen corresponding path program 1 times [2020-07-28 19:01:12,962 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:12,962 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [698698423] [2020-07-28 19:01:12,963 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:12,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:13,053 INFO L280 TraceCheckUtils]: 0: Hoare triple {34304#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {34304#true} is VALID [2020-07-28 19:01:13,053 INFO L280 TraceCheckUtils]: 1: Hoare triple {34304#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {34304#true} is VALID [2020-07-28 19:01:13,053 INFO L280 TraceCheckUtils]: 2: Hoare triple {34304#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {34304#true} is VALID [2020-07-28 19:01:13,054 INFO L280 TraceCheckUtils]: 3: Hoare triple {34304#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {34304#true} is VALID [2020-07-28 19:01:13,054 INFO L280 TraceCheckUtils]: 4: Hoare triple {34304#true} assume 0 != main_~tmp~0; {34304#true} is VALID [2020-07-28 19:01:13,054 INFO L280 TraceCheckUtils]: 5: Hoare triple {34304#true} ~methAndRunningLastTime~0 := 0; {34304#true} is VALID [2020-07-28 19:01:13,054 INFO L280 TraceCheckUtils]: 6: Hoare triple {34304#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {34304#true} is VALID [2020-07-28 19:01:13,054 INFO L280 TraceCheckUtils]: 7: Hoare triple {34304#true} assume !false; {34304#true} is VALID [2020-07-28 19:01:13,054 INFO L280 TraceCheckUtils]: 8: Hoare triple {34304#true} assume test_~splverifierCounter~0 < 4; {34304#true} is VALID [2020-07-28 19:01:13,055 INFO L280 TraceCheckUtils]: 9: Hoare triple {34304#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {34304#true} is VALID [2020-07-28 19:01:13,055 INFO L280 TraceCheckUtils]: 10: Hoare triple {34304#true} assume 0 != test_~tmp~1; {34304#true} is VALID [2020-07-28 19:01:13,055 INFO L280 TraceCheckUtils]: 11: Hoare triple {34304#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {34304#true} is VALID [2020-07-28 19:01:13,055 INFO L280 TraceCheckUtils]: 12: Hoare triple {34304#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {34304#true} is VALID [2020-07-28 19:01:13,055 INFO L280 TraceCheckUtils]: 13: Hoare triple {34304#true} assume !(0 != test_~tmp___0~0); {34304#true} is VALID [2020-07-28 19:01:13,055 INFO L280 TraceCheckUtils]: 14: Hoare triple {34304#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {34304#true} is VALID [2020-07-28 19:01:13,056 INFO L280 TraceCheckUtils]: 15: Hoare triple {34304#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {34304#true} is VALID [2020-07-28 19:01:13,056 INFO L280 TraceCheckUtils]: 16: Hoare triple {34304#true} assume !(0 != ~pumpRunning~0); {34304#true} is VALID [2020-07-28 19:01:13,056 INFO L280 TraceCheckUtils]: 17: Hoare triple {34304#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {34304#true} is VALID [2020-07-28 19:01:13,056 INFO L280 TraceCheckUtils]: 18: Hoare triple {34304#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {34304#true} is VALID [2020-07-28 19:01:13,057 INFO L280 TraceCheckUtils]: 19: Hoare triple {34304#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret71, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {34304#true} is VALID [2020-07-28 19:01:13,057 INFO L280 TraceCheckUtils]: 20: Hoare triple {34304#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {34304#true} is VALID [2020-07-28 19:01:13,057 INFO L280 TraceCheckUtils]: 21: Hoare triple {34304#true} isHighWaterLevel_#t~ret71 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret71 && isHighWaterLevel_#t~ret71 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret71;havoc isHighWaterLevel_#t~ret71; {34304#true} is VALID [2020-07-28 19:01:13,057 INFO L280 TraceCheckUtils]: 22: Hoare triple {34304#true} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {34304#true} is VALID [2020-07-28 19:01:13,057 INFO L280 TraceCheckUtils]: 23: Hoare triple {34304#true} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {34304#true} is VALID [2020-07-28 19:01:13,058 INFO L280 TraceCheckUtils]: 24: Hoare triple {34304#true} processEnvironment__wrappee__highWaterSensor_#t~ret51 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret51 && processEnvironment__wrappee__highWaterSensor_#t~ret51 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret51;havoc processEnvironment__wrappee__highWaterSensor_#t~ret51; {34304#true} is VALID [2020-07-28 19:01:13,058 INFO L280 TraceCheckUtils]: 25: Hoare triple {34304#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc activatePump_#t~ret53, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret54, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {34304#true} is VALID [2020-07-28 19:01:13,058 INFO L280 TraceCheckUtils]: 26: Hoare triple {34304#true} isMethaneAlarm_#t~ret54 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret54 && isMethaneAlarm_#t~ret54 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret54;havoc isMethaneAlarm_#t~ret54;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {34304#true} is VALID [2020-07-28 19:01:13,058 INFO L280 TraceCheckUtils]: 27: Hoare triple {34304#true} activatePump_#t~ret53 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret53 && activatePump_#t~ret53 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret53;havoc activatePump_#t~ret53; {34304#true} is VALID [2020-07-28 19:01:13,058 INFO L280 TraceCheckUtils]: 28: Hoare triple {34304#true} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {34304#true} is VALID [2020-07-28 19:01:13,058 INFO L280 TraceCheckUtils]: 29: Hoare triple {34304#true} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {34304#true} is VALID [2020-07-28 19:01:13,059 INFO L280 TraceCheckUtils]: 30: Hoare triple {34304#true} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {34304#true} is VALID [2020-07-28 19:01:13,059 INFO L280 TraceCheckUtils]: 31: Hoare triple {34304#true} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~10);~methAndRunningLastTime~0 := 0; {34304#true} is VALID [2020-07-28 19:01:13,059 INFO L280 TraceCheckUtils]: 32: Hoare triple {34304#true} assume !false; {34304#true} is VALID [2020-07-28 19:01:13,059 INFO L280 TraceCheckUtils]: 33: Hoare triple {34304#true} assume test_~splverifierCounter~0 < 4; {34304#true} is VALID [2020-07-28 19:01:13,060 INFO L280 TraceCheckUtils]: 34: Hoare triple {34304#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {34304#true} is VALID [2020-07-28 19:01:13,060 INFO L280 TraceCheckUtils]: 35: Hoare triple {34304#true} assume !(0 != test_~tmp~1); {34304#true} is VALID [2020-07-28 19:01:13,060 INFO L280 TraceCheckUtils]: 36: Hoare triple {34304#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {34304#true} is VALID [2020-07-28 19:01:13,060 INFO L280 TraceCheckUtils]: 37: Hoare triple {34304#true} assume 0 != test_~tmp___0~0; {34304#true} is VALID [2020-07-28 19:01:13,061 INFO L280 TraceCheckUtils]: 38: Hoare triple {34304#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {34304#true} is VALID [2020-07-28 19:01:13,061 INFO L280 TraceCheckUtils]: 39: Hoare triple {34304#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {34304#true} is VALID [2020-07-28 19:01:13,061 INFO L280 TraceCheckUtils]: 40: Hoare triple {34304#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {34304#true} is VALID [2020-07-28 19:01:13,061 INFO L280 TraceCheckUtils]: 41: Hoare triple {34304#true} assume 0 != ~pumpRunning~0; {34304#true} is VALID [2020-07-28 19:01:13,062 INFO L280 TraceCheckUtils]: 42: Hoare triple {34304#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {34304#true} is VALID [2020-07-28 19:01:13,062 INFO L280 TraceCheckUtils]: 43: Hoare triple {34304#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {34304#true} is VALID [2020-07-28 19:01:13,062 INFO L280 TraceCheckUtils]: 44: Hoare triple {34304#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret72, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~9, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~9;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {34304#true} is VALID [2020-07-28 19:01:13,062 INFO L280 TraceCheckUtils]: 45: Hoare triple {34304#true} isLowWaterLevel_#t~ret72 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret72 && isLowWaterLevel_#t~ret72 <= 2147483647;isLowWaterLevel_~tmp~9 := isLowWaterLevel_#t~ret72;havoc isLowWaterLevel_#t~ret72; {34304#true} is VALID [2020-07-28 19:01:13,063 INFO L280 TraceCheckUtils]: 46: Hoare triple {34304#true} assume !(0 != isLowWaterLevel_~tmp~9);isLowWaterLevel_~tmp___0~2 := 1; {34306#(= 1 ULTIMATE.start_isLowWaterLevel_~tmp___0~2)} is VALID [2020-07-28 19:01:13,064 INFO L280 TraceCheckUtils]: 47: Hoare triple {34306#(= 1 ULTIMATE.start_isLowWaterLevel_~tmp___0~2)} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {34307#(= 1 |ULTIMATE.start_isLowWaterLevel_#res|)} is VALID [2020-07-28 19:01:13,065 INFO L280 TraceCheckUtils]: 48: Hoare triple {34307#(= 1 |ULTIMATE.start_isLowWaterLevel_#res|)} processEnvironment_#t~ret52 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret52 && processEnvironment_#t~ret52 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret52;havoc processEnvironment_#t~ret52; {34308#(= 1 ULTIMATE.start_processEnvironment_~tmp~6)} is VALID [2020-07-28 19:01:13,066 INFO L280 TraceCheckUtils]: 49: Hoare triple {34308#(= 1 ULTIMATE.start_processEnvironment_~tmp~6)} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {34305#false} is VALID [2020-07-28 19:01:13,066 INFO L280 TraceCheckUtils]: 50: Hoare triple {34305#false} assume !(0 == ~pumpRunning~0); {34305#false} is VALID [2020-07-28 19:01:13,066 INFO L280 TraceCheckUtils]: 51: Hoare triple {34305#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {34305#false} is VALID [2020-07-28 19:01:13,066 INFO L280 TraceCheckUtils]: 52: Hoare triple {34305#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {34305#false} is VALID [2020-07-28 19:01:13,066 INFO L280 TraceCheckUtils]: 53: Hoare triple {34305#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {34305#false} is VALID [2020-07-28 19:01:13,067 INFO L280 TraceCheckUtils]: 54: Hoare triple {34305#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {34305#false} is VALID [2020-07-28 19:01:13,067 INFO L280 TraceCheckUtils]: 55: Hoare triple {34305#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {34305#false} is VALID [2020-07-28 19:01:13,067 INFO L280 TraceCheckUtils]: 56: Hoare triple {34305#false} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {34305#false} is VALID [2020-07-28 19:01:13,067 INFO L280 TraceCheckUtils]: 57: Hoare triple {34305#false} assume !false; {34305#false} is VALID [2020-07-28 19:01:13,067 INFO L280 TraceCheckUtils]: 58: Hoare triple {34305#false} assume test_~splverifierCounter~0 < 4; {34305#false} is VALID [2020-07-28 19:01:13,067 INFO L280 TraceCheckUtils]: 59: Hoare triple {34305#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {34305#false} is VALID [2020-07-28 19:01:13,067 INFO L280 TraceCheckUtils]: 60: Hoare triple {34305#false} assume !(0 != test_~tmp~1); {34305#false} is VALID [2020-07-28 19:01:13,068 INFO L280 TraceCheckUtils]: 61: Hoare triple {34305#false} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {34305#false} is VALID [2020-07-28 19:01:13,068 INFO L280 TraceCheckUtils]: 62: Hoare triple {34305#false} assume !(0 != test_~tmp___0~0); {34305#false} is VALID [2020-07-28 19:01:13,068 INFO L280 TraceCheckUtils]: 63: Hoare triple {34305#false} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {34305#false} is VALID [2020-07-28 19:01:13,068 INFO L280 TraceCheckUtils]: 64: Hoare triple {34305#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {34305#false} is VALID [2020-07-28 19:01:13,068 INFO L280 TraceCheckUtils]: 65: Hoare triple {34305#false} assume 0 != ~pumpRunning~0; {34305#false} is VALID [2020-07-28 19:01:13,068 INFO L280 TraceCheckUtils]: 66: Hoare triple {34305#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {34305#false} is VALID [2020-07-28 19:01:13,069 INFO L280 TraceCheckUtils]: 67: Hoare triple {34305#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {34305#false} is VALID [2020-07-28 19:01:13,069 INFO L280 TraceCheckUtils]: 68: Hoare triple {34305#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret72, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~9, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~9;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {34305#false} is VALID [2020-07-28 19:01:13,069 INFO L280 TraceCheckUtils]: 69: Hoare triple {34305#false} isLowWaterLevel_#t~ret72 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret72 && isLowWaterLevel_#t~ret72 <= 2147483647;isLowWaterLevel_~tmp~9 := isLowWaterLevel_#t~ret72;havoc isLowWaterLevel_#t~ret72; {34305#false} is VALID [2020-07-28 19:01:13,070 INFO L280 TraceCheckUtils]: 70: Hoare triple {34305#false} assume 0 != isLowWaterLevel_~tmp~9;isLowWaterLevel_~tmp___0~2 := 0; {34305#false} is VALID [2020-07-28 19:01:13,070 INFO L280 TraceCheckUtils]: 71: Hoare triple {34305#false} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {34305#false} is VALID [2020-07-28 19:01:13,070 INFO L280 TraceCheckUtils]: 72: Hoare triple {34305#false} processEnvironment_#t~ret52 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret52 && processEnvironment_#t~ret52 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret52;havoc processEnvironment_#t~ret52; {34305#false} is VALID [2020-07-28 19:01:13,070 INFO L280 TraceCheckUtils]: 73: Hoare triple {34305#false} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {34305#false} is VALID [2020-07-28 19:01:13,071 INFO L280 TraceCheckUtils]: 74: Hoare triple {34305#false} assume !(0 == ~pumpRunning~0); {34305#false} is VALID [2020-07-28 19:01:13,071 INFO L280 TraceCheckUtils]: 75: Hoare triple {34305#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {34305#false} is VALID [2020-07-28 19:01:13,071 INFO L280 TraceCheckUtils]: 76: Hoare triple {34305#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {34305#false} is VALID [2020-07-28 19:01:13,071 INFO L280 TraceCheckUtils]: 77: Hoare triple {34305#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {34305#false} is VALID [2020-07-28 19:01:13,072 INFO L280 TraceCheckUtils]: 78: Hoare triple {34305#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {34305#false} is VALID [2020-07-28 19:01:13,072 INFO L280 TraceCheckUtils]: 79: Hoare triple {34305#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {34305#false} is VALID [2020-07-28 19:01:13,072 INFO L280 TraceCheckUtils]: 80: Hoare triple {34305#false} assume 0 != ~methAndRunningLastTime~0; {34305#false} is VALID [2020-07-28 19:01:13,072 INFO L280 TraceCheckUtils]: 81: Hoare triple {34305#false} assume !false; {34305#false} is VALID [2020-07-28 19:01:13,076 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 18 trivial. 0 not checked. [2020-07-28 19:01:13,076 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [698698423] [2020-07-28 19:01:13,076 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:13,076 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:01:13,077 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [969624787] [2020-07-28 19:01:13,077 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 82 [2020-07-28 19:01:13,078 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:13,078 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:01:13,159 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 69 edges. 69 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:13,159 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:01:13,159 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:13,160 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:01:13,160 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:01:13,160 INFO L87 Difference]: Start difference. First operand 837 states and 1097 transitions. Second operand 5 states. [2020-07-28 19:01:16,107 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:16,107 INFO L93 Difference]: Finished difference Result 1500 states and 1940 transitions. [2020-07-28 19:01:16,107 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:01:16,107 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 82 [2020-07-28 19:01:16,108 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:16,108 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:16,109 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 226 transitions. [2020-07-28 19:01:16,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:16,109 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 226 transitions. [2020-07-28 19:01:16,110 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 226 transitions. [2020-07-28 19:01:16,419 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 226 edges. 226 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:16,464 INFO L225 Difference]: With dead ends: 1500 [2020-07-28 19:01:16,464 INFO L226 Difference]: Without dead ends: 670 [2020-07-28 19:01:16,469 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:01:16,471 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 670 states. [2020-07-28 19:01:17,859 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 670 to 394. [2020-07-28 19:01:17,859 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:17,859 INFO L82 GeneralOperation]: Start isEquivalent. First operand 670 states. Second operand 394 states. [2020-07-28 19:01:17,860 INFO L74 IsIncluded]: Start isIncluded. First operand 670 states. Second operand 394 states. [2020-07-28 19:01:17,860 INFO L87 Difference]: Start difference. First operand 670 states. Second operand 394 states. [2020-07-28 19:01:17,878 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:17,878 INFO L93 Difference]: Finished difference Result 670 states and 847 transitions. [2020-07-28 19:01:17,879 INFO L276 IsEmpty]: Start isEmpty. Operand 670 states and 847 transitions. [2020-07-28 19:01:17,879 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:17,879 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:17,879 INFO L74 IsIncluded]: Start isIncluded. First operand 394 states. Second operand 670 states. [2020-07-28 19:01:17,880 INFO L87 Difference]: Start difference. First operand 394 states. Second operand 670 states. [2020-07-28 19:01:17,903 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:17,903 INFO L93 Difference]: Finished difference Result 670 states and 847 transitions. [2020-07-28 19:01:17,903 INFO L276 IsEmpty]: Start isEmpty. Operand 670 states and 847 transitions. [2020-07-28 19:01:17,904 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:17,904 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:17,904 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:17,904 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:17,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 394 states. [2020-07-28 19:01:17,911 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 394 states to 394 states and 501 transitions. [2020-07-28 19:01:17,912 INFO L78 Accepts]: Start accepts. Automaton has 394 states and 501 transitions. Word has length 82 [2020-07-28 19:01:17,912 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:17,912 INFO L479 AbstractCegarLoop]: Abstraction has 394 states and 501 transitions. [2020-07-28 19:01:17,912 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:01:17,912 INFO L276 IsEmpty]: Start isEmpty. Operand 394 states and 501 transitions. [2020-07-28 19:01:17,913 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 84 [2020-07-28 19:01:17,913 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:17,913 INFO L422 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:17,913 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2020-07-28 19:01:17,914 INFO L427 AbstractCegarLoop]: === Iteration 16 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:17,914 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:17,914 INFO L82 PathProgramCache]: Analyzing trace with hash 1612420545, now seen corresponding path program 2 times [2020-07-28 19:01:17,914 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:17,915 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1307757406] [2020-07-28 19:01:17,915 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:17,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:18,031 INFO L280 TraceCheckUtils]: 0: Hoare triple {38298#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {38300#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,033 INFO L280 TraceCheckUtils]: 1: Hoare triple {38300#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {38300#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,033 INFO L280 TraceCheckUtils]: 2: Hoare triple {38300#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {38300#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,034 INFO L280 TraceCheckUtils]: 3: Hoare triple {38300#(= 1 ~waterLevel~0)} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {38300#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,034 INFO L280 TraceCheckUtils]: 4: Hoare triple {38300#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~0; {38300#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,035 INFO L280 TraceCheckUtils]: 5: Hoare triple {38300#(= 1 ~waterLevel~0)} ~methAndRunningLastTime~0 := 0; {38300#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,035 INFO L280 TraceCheckUtils]: 6: Hoare triple {38300#(= 1 ~waterLevel~0)} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {38300#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,035 INFO L280 TraceCheckUtils]: 7: Hoare triple {38300#(= 1 ~waterLevel~0)} assume !false; {38300#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,036 INFO L280 TraceCheckUtils]: 8: Hoare triple {38300#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {38300#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,036 INFO L280 TraceCheckUtils]: 9: Hoare triple {38300#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {38300#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,037 INFO L280 TraceCheckUtils]: 10: Hoare triple {38300#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~1; {38300#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,037 INFO L280 TraceCheckUtils]: 11: Hoare triple {38300#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,038 INFO L280 TraceCheckUtils]: 12: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,038 INFO L280 TraceCheckUtils]: 13: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,039 INFO L280 TraceCheckUtils]: 14: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,039 INFO L280 TraceCheckUtils]: 15: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,039 INFO L280 TraceCheckUtils]: 16: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,040 INFO L280 TraceCheckUtils]: 17: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,040 INFO L280 TraceCheckUtils]: 18: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,040 INFO L280 TraceCheckUtils]: 19: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret71, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,041 INFO L280 TraceCheckUtils]: 20: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,041 INFO L280 TraceCheckUtils]: 21: Hoare triple {38301#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret71 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret71 && isHighWaterLevel_#t~ret71 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret71;havoc isHighWaterLevel_#t~ret71; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,042 INFO L280 TraceCheckUtils]: 22: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,042 INFO L280 TraceCheckUtils]: 23: Hoare triple {38301#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,042 INFO L280 TraceCheckUtils]: 24: Hoare triple {38301#(<= 2 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret51 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret51 && processEnvironment__wrappee__highWaterSensor_#t~ret51 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret51;havoc processEnvironment__wrappee__highWaterSensor_#t~ret51; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,043 INFO L280 TraceCheckUtils]: 25: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc activatePump_#t~ret53, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret54, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,043 INFO L280 TraceCheckUtils]: 26: Hoare triple {38301#(<= 2 ~waterLevel~0)} isMethaneAlarm_#t~ret54 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret54 && isMethaneAlarm_#t~ret54 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret54;havoc isMethaneAlarm_#t~ret54;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,044 INFO L280 TraceCheckUtils]: 27: Hoare triple {38301#(<= 2 ~waterLevel~0)} activatePump_#t~ret53 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret53 && activatePump_#t~ret53 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret53;havoc activatePump_#t~ret53; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,044 INFO L280 TraceCheckUtils]: 28: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,045 INFO L280 TraceCheckUtils]: 29: Hoare triple {38301#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,045 INFO L280 TraceCheckUtils]: 30: Hoare triple {38301#(<= 2 ~waterLevel~0)} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,046 INFO L280 TraceCheckUtils]: 31: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~10);~methAndRunningLastTime~0 := 0; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,046 INFO L280 TraceCheckUtils]: 32: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !false; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,046 INFO L280 TraceCheckUtils]: 33: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,047 INFO L280 TraceCheckUtils]: 34: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,047 INFO L280 TraceCheckUtils]: 35: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~1); {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,048 INFO L280 TraceCheckUtils]: 36: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,048 INFO L280 TraceCheckUtils]: 37: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___0~0; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,048 INFO L280 TraceCheckUtils]: 38: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,049 INFO L280 TraceCheckUtils]: 39: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,049 INFO L280 TraceCheckUtils]: 40: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,049 INFO L280 TraceCheckUtils]: 41: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,050 INFO L280 TraceCheckUtils]: 42: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,051 INFO L280 TraceCheckUtils]: 43: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,051 INFO L280 TraceCheckUtils]: 44: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret72, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~9, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~9;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {38303#(= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)} is VALID [2020-07-28 19:01:18,057 INFO L280 TraceCheckUtils]: 45: Hoare triple {38303#(= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)} isLowWaterLevel_#t~ret72 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret72 && isLowWaterLevel_#t~ret72 <= 2147483647;isLowWaterLevel_~tmp~9 := isLowWaterLevel_#t~ret72;havoc isLowWaterLevel_#t~ret72; {38304#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp~9)} is VALID [2020-07-28 19:01:18,058 INFO L280 TraceCheckUtils]: 46: Hoare triple {38304#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp~9)} assume 0 != isLowWaterLevel_~tmp~9;isLowWaterLevel_~tmp___0~2 := 0; {38299#false} is VALID [2020-07-28 19:01:18,058 INFO L280 TraceCheckUtils]: 47: Hoare triple {38299#false} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {38299#false} is VALID [2020-07-28 19:01:18,058 INFO L280 TraceCheckUtils]: 48: Hoare triple {38299#false} processEnvironment_#t~ret52 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret52 && processEnvironment_#t~ret52 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret52;havoc processEnvironment_#t~ret52; {38299#false} is VALID [2020-07-28 19:01:18,058 INFO L280 TraceCheckUtils]: 49: Hoare triple {38299#false} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {38299#false} is VALID [2020-07-28 19:01:18,058 INFO L280 TraceCheckUtils]: 50: Hoare triple {38299#false} assume !(0 == ~pumpRunning~0); {38299#false} is VALID [2020-07-28 19:01:18,058 INFO L280 TraceCheckUtils]: 51: Hoare triple {38299#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {38299#false} is VALID [2020-07-28 19:01:18,058 INFO L280 TraceCheckUtils]: 52: Hoare triple {38299#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {38299#false} is VALID [2020-07-28 19:01:18,059 INFO L280 TraceCheckUtils]: 53: Hoare triple {38299#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {38299#false} is VALID [2020-07-28 19:01:18,059 INFO L280 TraceCheckUtils]: 54: Hoare triple {38299#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {38299#false} is VALID [2020-07-28 19:01:18,059 INFO L280 TraceCheckUtils]: 55: Hoare triple {38299#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {38299#false} is VALID [2020-07-28 19:01:18,059 INFO L280 TraceCheckUtils]: 56: Hoare triple {38299#false} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {38299#false} is VALID [2020-07-28 19:01:18,059 INFO L280 TraceCheckUtils]: 57: Hoare triple {38299#false} assume !false; {38299#false} is VALID [2020-07-28 19:01:18,059 INFO L280 TraceCheckUtils]: 58: Hoare triple {38299#false} assume test_~splverifierCounter~0 < 4; {38299#false} is VALID [2020-07-28 19:01:18,060 INFO L280 TraceCheckUtils]: 59: Hoare triple {38299#false} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {38299#false} is VALID [2020-07-28 19:01:18,060 INFO L280 TraceCheckUtils]: 60: Hoare triple {38299#false} assume 0 != test_~tmp~1; {38299#false} is VALID [2020-07-28 19:01:18,060 INFO L280 TraceCheckUtils]: 61: Hoare triple {38299#false} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {38299#false} is VALID [2020-07-28 19:01:18,060 INFO L280 TraceCheckUtils]: 62: Hoare triple {38299#false} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {38299#false} is VALID [2020-07-28 19:01:18,060 INFO L280 TraceCheckUtils]: 63: Hoare triple {38299#false} assume !(0 != test_~tmp___0~0); {38299#false} is VALID [2020-07-28 19:01:18,060 INFO L280 TraceCheckUtils]: 64: Hoare triple {38299#false} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {38299#false} is VALID [2020-07-28 19:01:18,061 INFO L280 TraceCheckUtils]: 65: Hoare triple {38299#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {38299#false} is VALID [2020-07-28 19:01:18,061 INFO L280 TraceCheckUtils]: 66: Hoare triple {38299#false} assume 0 != ~pumpRunning~0; {38299#false} is VALID [2020-07-28 19:01:18,061 INFO L280 TraceCheckUtils]: 67: Hoare triple {38299#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {38299#false} is VALID [2020-07-28 19:01:18,061 INFO L280 TraceCheckUtils]: 68: Hoare triple {38299#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {38299#false} is VALID [2020-07-28 19:01:18,061 INFO L280 TraceCheckUtils]: 69: Hoare triple {38299#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret72, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~9, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~9;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {38299#false} is VALID [2020-07-28 19:01:18,061 INFO L280 TraceCheckUtils]: 70: Hoare triple {38299#false} isLowWaterLevel_#t~ret72 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret72 && isLowWaterLevel_#t~ret72 <= 2147483647;isLowWaterLevel_~tmp~9 := isLowWaterLevel_#t~ret72;havoc isLowWaterLevel_#t~ret72; {38299#false} is VALID [2020-07-28 19:01:18,061 INFO L280 TraceCheckUtils]: 71: Hoare triple {38299#false} assume 0 != isLowWaterLevel_~tmp~9;isLowWaterLevel_~tmp___0~2 := 0; {38299#false} is VALID [2020-07-28 19:01:18,062 INFO L280 TraceCheckUtils]: 72: Hoare triple {38299#false} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {38299#false} is VALID [2020-07-28 19:01:18,062 INFO L280 TraceCheckUtils]: 73: Hoare triple {38299#false} processEnvironment_#t~ret52 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret52 && processEnvironment_#t~ret52 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret52;havoc processEnvironment_#t~ret52; {38299#false} is VALID [2020-07-28 19:01:18,062 INFO L280 TraceCheckUtils]: 74: Hoare triple {38299#false} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {38299#false} is VALID [2020-07-28 19:01:18,062 INFO L280 TraceCheckUtils]: 75: Hoare triple {38299#false} assume !(0 == ~pumpRunning~0); {38299#false} is VALID [2020-07-28 19:01:18,063 INFO L280 TraceCheckUtils]: 76: Hoare triple {38299#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {38299#false} is VALID [2020-07-28 19:01:18,063 INFO L280 TraceCheckUtils]: 77: Hoare triple {38299#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {38299#false} is VALID [2020-07-28 19:01:18,063 INFO L280 TraceCheckUtils]: 78: Hoare triple {38299#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {38299#false} is VALID [2020-07-28 19:01:18,063 INFO L280 TraceCheckUtils]: 79: Hoare triple {38299#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {38299#false} is VALID [2020-07-28 19:01:18,063 INFO L280 TraceCheckUtils]: 80: Hoare triple {38299#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {38299#false} is VALID [2020-07-28 19:01:18,063 INFO L280 TraceCheckUtils]: 81: Hoare triple {38299#false} assume 0 != ~methAndRunningLastTime~0; {38299#false} is VALID [2020-07-28 19:01:18,064 INFO L280 TraceCheckUtils]: 82: Hoare triple {38299#false} assume !false; {38299#false} is VALID [2020-07-28 19:01:18,069 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 32 proven. 6 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2020-07-28 19:01:18,069 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1307757406] [2020-07-28 19:01:18,069 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1369762975] [2020-07-28 19:01:18,070 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:01:18,220 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2020-07-28 19:01:18,220 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2020-07-28 19:01:18,222 INFO L263 TraceCheckSpWp]: Trace formula consists of 502 conjuncts, 11 conjunts are in the unsatisfiable core [2020-07-28 19:01:18,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:18,251 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:01:18,415 INFO L523 QuantifierPusher]: Distributing 2 conjuncts over 2 disjuncts [2020-07-28 19:01:18,435 INFO L280 TraceCheckUtils]: 0: Hoare triple {38298#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(21);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(30);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(9);call #t~string39.base, #t~string39.offset := #Ultimate.allocOnStack(21);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(30);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(9);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(25);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(30);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(9);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(25);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(13);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(110, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 2 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string60.base, #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(102, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 3 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string62.base, #t~string62.offset, 1);call write~init~int(80, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(117, #t~string62.base, 2 + #t~string62.offset, 1);call write~init~int(109, #t~string62.base, 3 + #t~string62.offset, 1);call write~init~int(112, #t~string62.base, 4 + #t~string62.offset, 1);call write~init~int(58, #t~string62.base, 5 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 6 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(110, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 2 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string66.base, #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(102, #t~string66.base, 2 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 3 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string68.base, #t~string68.offset, 1);call write~init~int(32, #t~string68.base, 1 + #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 2 + #t~string68.offset, 1);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string70.base, #t~string70.offset, 1);call write~init~int(0, #t~string70.base, 1 + #t~string70.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~methAndRunningLastTime~0 := 0; {38298#true} is VALID [2020-07-28 19:01:18,436 INFO L280 TraceCheckUtils]: 1: Hoare triple {38298#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {38298#true} is VALID [2020-07-28 19:01:18,436 INFO L280 TraceCheckUtils]: 2: Hoare triple {38298#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {38298#true} is VALID [2020-07-28 19:01:18,436 INFO L280 TraceCheckUtils]: 3: Hoare triple {38298#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {38298#true} is VALID [2020-07-28 19:01:18,436 INFO L280 TraceCheckUtils]: 4: Hoare triple {38298#true} assume 0 != main_~tmp~0; {38298#true} is VALID [2020-07-28 19:01:18,436 INFO L280 TraceCheckUtils]: 5: Hoare triple {38298#true} ~methAndRunningLastTime~0 := 0; {38298#true} is VALID [2020-07-28 19:01:18,437 INFO L280 TraceCheckUtils]: 6: Hoare triple {38298#true} havoc test_#t~nondet12, test_#t~nondet13, test_#t~nondet14, test_#t~nondet15, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {38298#true} is VALID [2020-07-28 19:01:18,437 INFO L280 TraceCheckUtils]: 7: Hoare triple {38298#true} assume !false; {38298#true} is VALID [2020-07-28 19:01:18,437 INFO L280 TraceCheckUtils]: 8: Hoare triple {38298#true} assume test_~splverifierCounter~0 < 4; {38298#true} is VALID [2020-07-28 19:01:18,437 INFO L280 TraceCheckUtils]: 9: Hoare triple {38298#true} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {38298#true} is VALID [2020-07-28 19:01:18,437 INFO L280 TraceCheckUtils]: 10: Hoare triple {38298#true} assume 0 != test_~tmp~1; {38298#true} is VALID [2020-07-28 19:01:18,438 INFO L280 TraceCheckUtils]: 11: Hoare triple {38298#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {38298#true} is VALID [2020-07-28 19:01:18,438 INFO L280 TraceCheckUtils]: 12: Hoare triple {38298#true} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {38298#true} is VALID [2020-07-28 19:01:18,438 INFO L280 TraceCheckUtils]: 13: Hoare triple {38298#true} assume !(0 != test_~tmp___0~0); {38298#true} is VALID [2020-07-28 19:01:18,438 INFO L280 TraceCheckUtils]: 14: Hoare triple {38298#true} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {38298#true} is VALID [2020-07-28 19:01:18,439 INFO L280 TraceCheckUtils]: 15: Hoare triple {38298#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {38298#true} is VALID [2020-07-28 19:01:18,439 INFO L280 TraceCheckUtils]: 16: Hoare triple {38298#true} assume !(0 != ~pumpRunning~0); {38298#true} is VALID [2020-07-28 19:01:18,439 INFO L280 TraceCheckUtils]: 17: Hoare triple {38298#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {38298#true} is VALID [2020-07-28 19:01:18,439 INFO L280 TraceCheckUtils]: 18: Hoare triple {38298#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {38298#true} is VALID [2020-07-28 19:01:18,439 INFO L280 TraceCheckUtils]: 19: Hoare triple {38298#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret71, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {38298#true} is VALID [2020-07-28 19:01:18,440 INFO L280 TraceCheckUtils]: 20: Hoare triple {38298#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,441 INFO L280 TraceCheckUtils]: 21: Hoare triple {38301#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret71 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret71 && isHighWaterLevel_#t~ret71 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret71;havoc isHighWaterLevel_#t~ret71; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,441 INFO L280 TraceCheckUtils]: 22: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,442 INFO L280 TraceCheckUtils]: 23: Hoare triple {38301#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,442 INFO L280 TraceCheckUtils]: 24: Hoare triple {38301#(<= 2 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret51 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret51 && processEnvironment__wrappee__highWaterSensor_#t~ret51 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret51;havoc processEnvironment__wrappee__highWaterSensor_#t~ret51; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,443 INFO L280 TraceCheckUtils]: 25: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc activatePump_#t~ret53, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret54, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,443 INFO L280 TraceCheckUtils]: 26: Hoare triple {38301#(<= 2 ~waterLevel~0)} isMethaneAlarm_#t~ret54 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret54 && isMethaneAlarm_#t~ret54 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret54;havoc isMethaneAlarm_#t~ret54;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,444 INFO L280 TraceCheckUtils]: 27: Hoare triple {38301#(<= 2 ~waterLevel~0)} activatePump_#t~ret53 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret53 && activatePump_#t~ret53 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret53;havoc activatePump_#t~ret53; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,445 INFO L280 TraceCheckUtils]: 28: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,445 INFO L280 TraceCheckUtils]: 29: Hoare triple {38301#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,446 INFO L280 TraceCheckUtils]: 30: Hoare triple {38301#(<= 2 ~waterLevel~0)} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,446 INFO L280 TraceCheckUtils]: 31: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !(0 != __utac_acc__Specification2_spec__2_~tmp~10);~methAndRunningLastTime~0 := 0; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,447 INFO L280 TraceCheckUtils]: 32: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !false; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,447 INFO L280 TraceCheckUtils]: 33: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,448 INFO L280 TraceCheckUtils]: 34: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,448 INFO L280 TraceCheckUtils]: 35: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~1); {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,449 INFO L280 TraceCheckUtils]: 36: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,450 INFO L280 TraceCheckUtils]: 37: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___0~0; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,450 INFO L280 TraceCheckUtils]: 38: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,451 INFO L280 TraceCheckUtils]: 39: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,451 INFO L280 TraceCheckUtils]: 40: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,452 INFO L280 TraceCheckUtils]: 41: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,453 INFO L280 TraceCheckUtils]: 42: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,453 INFO L280 TraceCheckUtils]: 43: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,454 INFO L280 TraceCheckUtils]: 44: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret72, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~9, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~9;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,454 INFO L280 TraceCheckUtils]: 45: Hoare triple {38302#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret72 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret72 && isLowWaterLevel_#t~ret72 <= 2147483647;isLowWaterLevel_~tmp~9 := isLowWaterLevel_#t~ret72;havoc isLowWaterLevel_#t~ret72; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,455 INFO L280 TraceCheckUtils]: 46: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~9;isLowWaterLevel_~tmp___0~2 := 0; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,455 INFO L280 TraceCheckUtils]: 47: Hoare triple {38302#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,456 INFO L280 TraceCheckUtils]: 48: Hoare triple {38302#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret52 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret52 && processEnvironment_#t~ret52 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret52;havoc processEnvironment_#t~ret52; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,456 INFO L280 TraceCheckUtils]: 49: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,457 INFO L280 TraceCheckUtils]: 50: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,457 INFO L280 TraceCheckUtils]: 51: Hoare triple {38302#(<= 1 ~waterLevel~0)} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,458 INFO L280 TraceCheckUtils]: 52: Hoare triple {38302#(<= 1 ~waterLevel~0)} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,459 INFO L280 TraceCheckUtils]: 53: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,459 INFO L280 TraceCheckUtils]: 54: Hoare triple {38302#(<= 1 ~waterLevel~0)} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,460 INFO L280 TraceCheckUtils]: 55: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,460 INFO L280 TraceCheckUtils]: 56: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume !(0 != ~methAndRunningLastTime~0);~methAndRunningLastTime~0 := 1; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,461 INFO L280 TraceCheckUtils]: 57: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume !false; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,461 INFO L280 TraceCheckUtils]: 58: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,462 INFO L280 TraceCheckUtils]: 59: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet12 && test_#t~nondet12 <= 2147483647;test_~tmp~1 := test_#t~nondet12;havoc test_#t~nondet12; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,462 INFO L280 TraceCheckUtils]: 60: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume 0 != test_~tmp~1; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,463 INFO L280 TraceCheckUtils]: 61: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,464 INFO L280 TraceCheckUtils]: 62: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet13 && test_#t~nondet13 <= 2147483647;test_~tmp___0~0 := test_#t~nondet13;havoc test_#t~nondet13; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,464 INFO L280 TraceCheckUtils]: 63: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,465 INFO L280 TraceCheckUtils]: 64: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet14 && test_#t~nondet14 <= 2147483647;test_~tmp___2~0 := test_#t~nondet14;havoc test_#t~nondet14; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,465 INFO L280 TraceCheckUtils]: 65: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,466 INFO L280 TraceCheckUtils]: 66: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {38301#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,467 INFO L280 TraceCheckUtils]: 67: Hoare triple {38301#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,467 INFO L280 TraceCheckUtils]: 68: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret52, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {38302#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:18,468 INFO L280 TraceCheckUtils]: 69: Hoare triple {38302#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret72, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~9, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~9;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~3;havoc isLowWaterSensorDry_~retValue_acc~3;isLowWaterSensorDry_~retValue_acc~3 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~3; {38303#(= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)} is VALID [2020-07-28 19:01:18,469 INFO L280 TraceCheckUtils]: 70: Hoare triple {38303#(= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)} isLowWaterLevel_#t~ret72 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret72 && isLowWaterLevel_#t~ret72 <= 2147483647;isLowWaterLevel_~tmp~9 := isLowWaterLevel_#t~ret72;havoc isLowWaterLevel_#t~ret72; {38304#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp~9)} is VALID [2020-07-28 19:01:18,469 INFO L280 TraceCheckUtils]: 71: Hoare triple {38304#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp~9)} assume 0 != isLowWaterLevel_~tmp~9;isLowWaterLevel_~tmp___0~2 := 0; {38299#false} is VALID [2020-07-28 19:01:18,469 INFO L280 TraceCheckUtils]: 72: Hoare triple {38299#false} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {38299#false} is VALID [2020-07-28 19:01:18,470 INFO L280 TraceCheckUtils]: 73: Hoare triple {38299#false} processEnvironment_#t~ret52 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret52 && processEnvironment_#t~ret52 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret52;havoc processEnvironment_#t~ret52; {38299#false} is VALID [2020-07-28 19:01:18,470 INFO L280 TraceCheckUtils]: 74: Hoare triple {38299#false} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret51, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {38299#false} is VALID [2020-07-28 19:01:18,470 INFO L280 TraceCheckUtils]: 75: Hoare triple {38299#false} assume !(0 == ~pumpRunning~0); {38299#false} is VALID [2020-07-28 19:01:18,470 INFO L280 TraceCheckUtils]: 76: Hoare triple {38299#false} havoc __utac_acc__Specification2_spec__2_#t~ret73, __utac_acc__Specification2_spec__2_#t~ret74, __utac_acc__Specification2_spec__2_~tmp~10, __utac_acc__Specification2_spec__2_~tmp___0~3;havoc __utac_acc__Specification2_spec__2_~tmp~10;havoc __utac_acc__Specification2_spec__2_~tmp___0~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {38299#false} is VALID [2020-07-28 19:01:18,470 INFO L280 TraceCheckUtils]: 77: Hoare triple {38299#false} __utac_acc__Specification2_spec__2_#t~ret73 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret73 && __utac_acc__Specification2_spec__2_#t~ret73 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp~10 := __utac_acc__Specification2_spec__2_#t~ret73;havoc __utac_acc__Specification2_spec__2_#t~ret73; {38299#false} is VALID [2020-07-28 19:01:18,471 INFO L280 TraceCheckUtils]: 78: Hoare triple {38299#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp~10;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {38299#false} is VALID [2020-07-28 19:01:18,471 INFO L280 TraceCheckUtils]: 79: Hoare triple {38299#false} __utac_acc__Specification2_spec__2_#t~ret74 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification2_spec__2_#t~ret74 && __utac_acc__Specification2_spec__2_#t~ret74 <= 2147483647;__utac_acc__Specification2_spec__2_~tmp___0~3 := __utac_acc__Specification2_spec__2_#t~ret74;havoc __utac_acc__Specification2_spec__2_#t~ret74; {38299#false} is VALID [2020-07-28 19:01:18,471 INFO L280 TraceCheckUtils]: 80: Hoare triple {38299#false} assume 0 != __utac_acc__Specification2_spec__2_~tmp___0~3; {38299#false} is VALID [2020-07-28 19:01:18,471 INFO L280 TraceCheckUtils]: 81: Hoare triple {38299#false} assume 0 != ~methAndRunningLastTime~0; {38299#false} is VALID [2020-07-28 19:01:18,471 INFO L280 TraceCheckUtils]: 82: Hoare triple {38299#false} assume !false; {38299#false} is VALID [2020-07-28 19:01:18,477 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 36 proven. 9 refuted. 0 times theorem prover too weak. 8 trivial. 0 not checked. [2020-07-28 19:01:18,477 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:01:18,477 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6] total 7 [2020-07-28 19:01:18,478 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [103575749] [2020-07-28 19:01:18,479 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 83 [2020-07-28 19:01:18,479 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:18,479 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:01:18,611 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 110 edges. 110 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:18,611 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:01:18,612 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:18,612 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:01:18,612 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:01:18,612 INFO L87 Difference]: Start difference. First operand 394 states and 501 transitions. Second operand 7 states. [2020-07-28 19:01:21,478 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:21,478 INFO L93 Difference]: Finished difference Result 916 states and 1157 transitions. [2020-07-28 19:01:21,478 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 19:01:21,478 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 83 [2020-07-28 19:01:21,478 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:21,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:01:21,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 276 transitions. [2020-07-28 19:01:21,480 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:01:21,480 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 276 transitions. [2020-07-28 19:01:21,481 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 276 transitions. [2020-07-28 19:01:21,810 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 276 edges. 276 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:21,811 INFO L225 Difference]: With dead ends: 916 [2020-07-28 19:01:21,811 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:01:21,813 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 95 GetRequests, 86 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2020-07-28 19:01:21,813 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:01:21,813 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:01:21,814 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:21,814 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:01:21,814 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:01:21,814 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:01:21,814 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:21,814 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:01:21,814 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:01:21,815 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:21,815 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:21,815 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:01:21,815 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:01:21,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:21,816 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:01:21,816 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:01:21,816 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:21,817 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:21,817 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:21,817 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:21,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:01:21,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:01:21,818 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 83 [2020-07-28 19:01:21,818 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:21,818 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:01:21,818 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:01:21,818 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:01:21,818 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:22,028 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2020-07-28 19:01:22,032 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:01:22,589 WARN L193 SmtUtils]: Spent 403.00 ms on a formula simplification. DAG size of input: 226 DAG size of output: 165 [2020-07-28 19:01:22,958 WARN L193 SmtUtils]: Spent 361.00 ms on a formula simplification. DAG size of input: 171 DAG size of output: 139 [2020-07-28 19:01:23,274 WARN L193 SmtUtils]: Spent 306.00 ms on a formula simplification. DAG size of input: 216 DAG size of output: 176 [2020-07-28 19:01:23,550 WARN L193 SmtUtils]: Spent 232.00 ms on a formula simplification. DAG size of input: 224 DAG size of output: 163 [2020-07-28 19:01:23,726 WARN L193 SmtUtils]: Spent 174.00 ms on a formula simplification. DAG size of input: 165 DAG size of output: 138 [2020-07-28 19:01:24,122 WARN L193 SmtUtils]: Spent 387.00 ms on a formula simplification. DAG size of input: 280 DAG size of output: 212 [2020-07-28 19:01:24,566 WARN L193 SmtUtils]: Spent 428.00 ms on a formula simplification. DAG size of input: 300 DAG size of output: 227 [2020-07-28 19:01:24,884 WARN L193 SmtUtils]: Spent 310.00 ms on a formula simplification. DAG size of input: 299 DAG size of output: 228 [2020-07-28 19:01:25,059 WARN L193 SmtUtils]: Spent 171.00 ms on a formula simplification. DAG size of input: 185 DAG size of output: 162 [2020-07-28 19:01:25,419 WARN L193 SmtUtils]: Spent 295.00 ms on a formula simplification. DAG size of input: 285 DAG size of output: 223 [2020-07-28 19:01:25,664 WARN L193 SmtUtils]: Spent 230.00 ms on a formula simplification. DAG size of input: 76 DAG size of output: 23 [2020-07-28 19:01:25,810 WARN L193 SmtUtils]: Spent 136.00 ms on a formula simplification. DAG size of input: 46 DAG size of output: 20 [2020-07-28 19:01:26,004 WARN L193 SmtUtils]: Spent 189.00 ms on a formula simplification. DAG size of input: 61 DAG size of output: 24 [2020-07-28 19:01:27,028 WARN L193 SmtUtils]: Spent 1.02 s on a formula simplification. DAG size of input: 160 DAG size of output: 45 [2020-07-28 19:01:27,936 WARN L193 SmtUtils]: Spent 893.00 ms on a formula simplification. DAG size of input: 139 DAG size of output: 21 [2020-07-28 19:01:29,188 WARN L193 SmtUtils]: Spent 1.24 s on a formula simplification. DAG size of input: 173 DAG size of output: 35 [2020-07-28 19:01:29,442 WARN L193 SmtUtils]: Spent 233.00 ms on a formula simplification. DAG size of input: 79 DAG size of output: 26 [2020-07-28 19:01:30,409 WARN L193 SmtUtils]: Spent 961.00 ms on a formula simplification. DAG size of input: 158 DAG size of output: 45 [2020-07-28 19:01:31,136 WARN L193 SmtUtils]: Spent 719.00 ms on a formula simplification. DAG size of input: 131 DAG size of output: 26 [2020-07-28 19:01:32,803 WARN L193 SmtUtils]: Spent 1.63 s on a formula simplification. DAG size of input: 207 DAG size of output: 32 [2020-07-28 19:01:34,709 WARN L193 SmtUtils]: Spent 1.87 s on a formula simplification. DAG size of input: 222 DAG size of output: 36 [2020-07-28 19:01:36,426 WARN L193 SmtUtils]: Spent 1.71 s on a formula simplification. DAG size of input: 223 DAG size of output: 38 [2020-07-28 19:01:37,632 WARN L193 SmtUtils]: Spent 1.19 s on a formula simplification. DAG size of input: 159 DAG size of output: 29 [2020-07-28 19:01:38,048 WARN L193 SmtUtils]: Spent 412.00 ms on a formula simplification. DAG size of input: 104 DAG size of output: 29 [2020-07-28 19:01:39,620 WARN L193 SmtUtils]: Spent 1.55 s on a formula simplification. DAG size of input: 221 DAG size of output: 41 [2020-07-28 19:01:39,633 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 155) no Hoare annotation was computed. [2020-07-28 19:01:39,633 INFO L264 CegarLoopResult]: At program point L136(lines 127 140) the Hoare annotation is: false [2020-07-28 19:01:39,634 INFO L264 CegarLoopResult]: At program point L136-1(lines 127 140) the Hoare annotation is: (let ((.cse0 (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse4 (= 1 ~waterLevel~0)) (.cse6 (= 0 ~methaneLevelCritical~0)) (.cse7 (<= 2 ~waterLevel~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 0 ~pumpRunning~0)) (.cse3 (= ~methaneLevelCritical~0 ~systemActive~0)) (.cse5 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse1 .cse2 .cse4 .cse5) (and .cse7 .cse6 .cse1 .cse2 .cse5) (and .cse7 .cse1 .cse2 .cse3 .cse5))) [2020-07-28 19:01:39,634 INFO L264 CegarLoopResult]: At program point L136-2(lines 127 140) the Hoare annotation is: false [2020-07-28 19:01:39,634 INFO L264 CegarLoopResult]: At program point L136-3(lines 127 140) the Hoare annotation is: false [2020-07-28 19:01:39,634 INFO L264 CegarLoopResult]: At program point L136-4(lines 127 140) the Hoare annotation is: false [2020-07-28 19:01:39,634 INFO L268 CegarLoopResult]: For program point L995(lines 995 1012) no Hoare annotation was computed. [2020-07-28 19:01:39,634 INFO L264 CegarLoopResult]: At program point L136-5(lines 127 140) the Hoare annotation is: false [2020-07-28 19:01:39,634 INFO L264 CegarLoopResult]: At program point L995-1(lines 1 1015) the Hoare annotation is: (let ((.cse9 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (let ((.cse7 (= 0 ~methaneLevelCritical~0)) (.cse5 (= 0 ~systemActive~0)) (.cse8 (= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~10)) (.cse11 (= 1 ~waterLevel~0)) (.cse0 (<= 2 ~waterLevel~0)) (.cse1 (= 0 ~methAndRunningLastTime~0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= 1 ~methaneLevelCritical~0)) (.cse4 (not .cse9)) (.cse6 (= 0 ~pumpRunning~0)) (.cse10 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse7 .cse2 .cse8 .cse9 .cse10) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse11) (and .cse0 .cse7 .cse1 .cse2 .cse6 .cse10) (and .cse0 .cse1 .cse7 .cse2 .cse5 .cse6 .cse8 .cse9) (and .cse1 .cse7 .cse2 .cse6 .cse11 .cse10) (and .cse1 .cse7 .cse2 .cse5 .cse6 .cse8 .cse11 .cse9) (and .cse1 .cse2 .cse4 .cse6 (= ~methaneLevelCritical~0 ~systemActive~0) .cse11 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse6 .cse10)))) [2020-07-28 19:01:39,635 INFO L268 CegarLoopResult]: For program point L995-2(lines 995 1012) no Hoare annotation was computed. [2020-07-28 19:01:39,635 INFO L264 CegarLoopResult]: At program point L995-3(lines 1 1015) the Hoare annotation is: false [2020-07-28 19:01:39,635 INFO L268 CegarLoopResult]: For program point L995-4(lines 995 1012) no Hoare annotation was computed. [2020-07-28 19:01:39,635 INFO L264 CegarLoopResult]: At program point L995-5(lines 1 1015) the Hoare annotation is: false [2020-07-28 19:01:39,635 INFO L264 CegarLoopResult]: At program point L931(lines 916 934) the Hoare annotation is: false [2020-07-28 19:01:39,635 INFO L264 CegarLoopResult]: At program point L931-1(lines 916 934) the Hoare annotation is: (let ((.cse2 (= 1 ~methaneLevelCritical~0)) (.cse0 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse3 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse5 (= 1 ~waterLevel~0)) (.cse7 (<= 2 ~waterLevel~0)) (.cse8 (= 0 ~methaneLevelCritical~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (= 0 ~pumpRunning~0)) (.cse6 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse2 .cse4 .cse6) (and .cse8 .cse0 .cse1 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse1 .cse4 .cse6))) [2020-07-28 19:01:39,636 INFO L264 CegarLoopResult]: At program point L931-2(lines 916 934) the Hoare annotation is: false [2020-07-28 19:01:39,636 INFO L264 CegarLoopResult]: At program point L931-3(lines 916 934) the Hoare annotation is: false [2020-07-28 19:01:39,636 INFO L264 CegarLoopResult]: At program point L931-4(lines 916 934) the Hoare annotation is: false [2020-07-28 19:01:39,636 INFO L264 CegarLoopResult]: At program point L931-5(lines 916 934) the Hoare annotation is: false [2020-07-28 19:01:39,637 INFO L264 CegarLoopResult]: At program point L172-2(lines 172 186) the Hoare annotation is: false [2020-07-28 19:01:39,637 INFO L268 CegarLoopResult]: For program point L173(line 173) no Hoare annotation was computed. [2020-07-28 19:01:39,637 INFO L268 CegarLoopResult]: For program point L999(lines 999 1009) no Hoare annotation was computed. [2020-07-28 19:01:39,638 INFO L268 CegarLoopResult]: For program point L999-2(lines 999 1009) no Hoare annotation was computed. [2020-07-28 19:01:39,638 INFO L264 CegarLoopResult]: At program point L867(lines 860 870) the Hoare annotation is: false [2020-07-28 19:01:39,638 INFO L268 CegarLoopResult]: For program point L999-4(lines 999 1009) no Hoare annotation was computed. [2020-07-28 19:01:39,638 INFO L264 CegarLoopResult]: At program point L867-1(lines 860 870) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse2 (= 0 ~pumpRunning~0)) (.cse4 (= 1 ~systemActive~0))) (or (and .cse0 (= 0 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (= 1 ~methaneLevelCritical~0) (not .cse3) .cse2 (not (= 0 |ULTIMATE.start_isMethaneAlarm_#res|)) .cse4))) [2020-07-28 19:01:39,639 INFO L264 CegarLoopResult]: At program point L867-2(lines 860 870) the Hoare annotation is: false [2020-07-28 19:01:39,639 INFO L264 CegarLoopResult]: At program point L867-3(lines 860 870) the Hoare annotation is: false [2020-07-28 19:01:39,639 INFO L264 CegarLoopResult]: At program point L867-4(lines 860 870) the Hoare annotation is: false [2020-07-28 19:01:39,639 INFO L264 CegarLoopResult]: At program point L867-5(lines 860 870) the Hoare annotation is: false [2020-07-28 19:01:39,639 INFO L268 CegarLoopResult]: For program point L1000(lines 1000 1006) no Hoare annotation was computed. [2020-07-28 19:01:39,639 INFO L268 CegarLoopResult]: For program point L1000-2(lines 1000 1006) no Hoare annotation was computed. [2020-07-28 19:01:39,639 INFO L268 CegarLoopResult]: For program point L1000-4(lines 1000 1006) no Hoare annotation was computed. [2020-07-28 19:01:39,640 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 155) no Hoare annotation was computed. [2020-07-28 19:01:39,640 INFO L268 CegarLoopResult]: For program point L341(lines 341 356) no Hoare annotation was computed. [2020-07-28 19:01:39,640 INFO L268 CegarLoopResult]: For program point L176(lines 176 180) no Hoare annotation was computed. [2020-07-28 19:01:39,640 INFO L268 CegarLoopResult]: For program point L176-1(lines 747 753) no Hoare annotation was computed. [2020-07-28 19:01:39,640 INFO L268 CegarLoopResult]: For program point L78(lines 78 82) no Hoare annotation was computed. [2020-07-28 19:01:39,640 INFO L268 CegarLoopResult]: For program point L805(lines 805 822) no Hoare annotation was computed. [2020-07-28 19:01:39,640 INFO L268 CegarLoopResult]: For program point L805-1(lines 805 822) no Hoare annotation was computed. [2020-07-28 19:01:39,640 INFO L268 CegarLoopResult]: For program point L805-2(lines 805 822) no Hoare annotation was computed. [2020-07-28 19:01:39,640 INFO L264 CegarLoopResult]: At program point L146(lines 141 149) the Hoare annotation is: (let ((.cse0 (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (<= 1 ~waterLevel~0)) (.cse3 (= 1 ~systemActive~0))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (= 0 ~methAndRunningLastTime~0) .cse0 .cse1 (= 1 ~methaneLevelCritical~0) .cse2 .cse3))) [2020-07-28 19:01:39,640 INFO L264 CegarLoopResult]: At program point L146-1(lines 141 149) the Hoare annotation is: false [2020-07-28 19:01:39,640 INFO L264 CegarLoopResult]: At program point L146-2(lines 141 149) the Hoare annotation is: false [2020-07-28 19:01:39,641 INFO L268 CegarLoopResult]: For program point L312(lines 311 360) no Hoare annotation was computed. [2020-07-28 19:01:39,641 INFO L268 CegarLoopResult]: For program point L313(lines 313 317) no Hoare annotation was computed. [2020-07-28 19:01:39,641 INFO L268 CegarLoopResult]: For program point L842(lines 842 848) no Hoare annotation was computed. [2020-07-28 19:01:39,641 INFO L268 CegarLoopResult]: For program point L809(lines 809 817) no Hoare annotation was computed. [2020-07-28 19:01:39,641 INFO L268 CegarLoopResult]: For program point L842-2(lines 842 848) no Hoare annotation was computed. [2020-07-28 19:01:39,641 INFO L268 CegarLoopResult]: For program point L809-1(lines 809 817) no Hoare annotation was computed. [2020-07-28 19:01:39,641 INFO L268 CegarLoopResult]: For program point L809-2(lines 809 817) no Hoare annotation was computed. [2020-07-28 19:01:39,642 INFO L268 CegarLoopResult]: For program point L842-4(lines 842 848) no Hoare annotation was computed. [2020-07-28 19:01:39,642 INFO L268 CegarLoopResult]: For program point L842-6(lines 842 848) no Hoare annotation was computed. [2020-07-28 19:01:39,642 INFO L268 CegarLoopResult]: For program point L842-8(lines 842 848) no Hoare annotation was computed. [2020-07-28 19:01:39,642 INFO L268 CegarLoopResult]: For program point L842-10(lines 842 848) no Hoare annotation was computed. [2020-07-28 19:01:39,642 INFO L264 CegarLoopResult]: At program point L876(lines 871 879) the Hoare annotation is: (let ((.cse5 (= 1 ~waterLevel~0)) (.cse6 (= 1 ~systemActive~0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 ~methaneLevelCritical~0)) (.cse7 (= 0 ~systemActive~0)) (.cse2 (not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (.cse3 (= 0 |ULTIMATE.start_isPumpRunning_#res|)) (.cse4 (= 0 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse7 .cse2 .cse3 .cse4 .cse5) (and .cse8 .cse0 .cse1 .cse2 .cse3 .cse4 .cse6) (and .cse8 .cse0 .cse1 .cse7 .cse2 .cse3 .cse4))) [2020-07-28 19:01:39,642 INFO L264 CegarLoopResult]: At program point L876-1(lines 871 879) the Hoare annotation is: false [2020-07-28 19:01:39,642 INFO L264 CegarLoopResult]: At program point L876-2(lines 871 879) the Hoare annotation is: false [2020-07-28 19:01:39,642 INFO L268 CegarLoopResult]: For program point L349(lines 349 355) no Hoare annotation was computed. [2020-07-28 19:01:39,642 INFO L264 CegarLoopResult]: At program point L349-1(lines 747 753) the Hoare annotation is: (let ((.cse2 (= 0 ~systemActive~0)) (.cse1 (= 1 ~methaneLevelCritical~0)) (.cse5 (<= 2 ~waterLevel~0)) (.cse7 (= 0 ~methAndRunningLastTime~0)) (.cse6 (= 0 ~methaneLevelCritical~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= 0 ~pumpRunning~0)) (.cse4 (= 1 ~waterLevel~0)) (.cse8 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse1 .cse2 .cse3) (and .cse5 .cse6 .cse0 .cse2 .cse3) (and .cse5 .cse7 .cse0 .cse1 .cse8) (and .cse6 .cse0 .cse2 .cse3 .cse4) (and .cse7 .cse0 .cse1 .cse3 .cse4 .cse8) (and .cse5 .cse6 .cse0 .cse8) (and .cse7 .cse6 .cse0 .cse3 .cse4 .cse8))) [2020-07-28 19:01:39,643 INFO L268 CegarLoopResult]: For program point L250(lines 250 257) no Hoare annotation was computed. [2020-07-28 19:01:39,643 INFO L271 CegarLoopResult]: At program point L250-1(lines 250 257) the Hoare annotation is: true [2020-07-28 19:01:39,643 INFO L268 CegarLoopResult]: For program point L944(lines 944 948) no Hoare annotation was computed. [2020-07-28 19:01:39,643 INFO L268 CegarLoopResult]: For program point L944-2(lines 944 948) no Hoare annotation was computed. [2020-07-28 19:01:39,643 INFO L268 CegarLoopResult]: For program point L944-3(lines 944 948) no Hoare annotation was computed. [2020-07-28 19:01:39,643 INFO L268 CegarLoopResult]: For program point L779(lines 779 796) no Hoare annotation was computed. [2020-07-28 19:01:39,643 INFO L268 CegarLoopResult]: For program point L944-5(lines 944 948) no Hoare annotation was computed. [2020-07-28 19:01:39,643 INFO L268 CegarLoopResult]: For program point L779-1(lines 779 796) no Hoare annotation was computed. [2020-07-28 19:01:39,644 INFO L268 CegarLoopResult]: For program point L944-6(lines 944 948) no Hoare annotation was computed. [2020-07-28 19:01:39,644 INFO L268 CegarLoopResult]: For program point L779-2(lines 779 796) no Hoare annotation was computed. [2020-07-28 19:01:39,644 INFO L268 CegarLoopResult]: For program point L779-3(lines 779 796) no Hoare annotation was computed. [2020-07-28 19:01:39,644 INFO L268 CegarLoopResult]: For program point L944-8(lines 944 948) no Hoare annotation was computed. [2020-07-28 19:01:39,644 INFO L268 CegarLoopResult]: For program point L779-4(lines 779 796) no Hoare annotation was computed. [2020-07-28 19:01:39,644 INFO L268 CegarLoopResult]: For program point L779-5(lines 779 796) no Hoare annotation was computed. [2020-07-28 19:01:39,645 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:01:39,645 INFO L264 CegarLoopResult]: At program point L747(lines 746 765) the Hoare annotation is: (let ((.cse6 (<= 2 ~waterLevel~0)) (.cse7 (= 0 ~methaneLevelCritical~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (= 0 ~pumpRunning~0)) (.cse4 (= 1 ~waterLevel~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 ~methaneLevelCritical~0)) (.cse8 (<= 1 ~waterLevel~0)) (.cse5 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse3) (and .cse6 .cse7 .cse0 .cse2 .cse3) (and .cse6 .cse0 .cse1 .cse3 .cse5) (and .cse7 .cse0 .cse8 .cse5) (and .cse7 .cse0 .cse2 .cse3 .cse4) (and (= 0 ~methAndRunningLastTime~0) .cse0 .cse1 .cse8 .cse5))) [2020-07-28 19:01:39,645 INFO L268 CegarLoopResult]: For program point L747-1(lines 747 753) no Hoare annotation was computed. [2020-07-28 19:01:39,645 INFO L264 CegarLoopResult]: At program point L747-2(lines 746 765) the Hoare annotation is: false [2020-07-28 19:01:39,645 INFO L264 CegarLoopResult]: At program point L747-3(lines 746 765) the Hoare annotation is: false [2020-07-28 19:01:39,646 INFO L268 CegarLoopResult]: For program point L54(lines 54 58) no Hoare annotation was computed. [2020-07-28 19:01:39,646 INFO L268 CegarLoopResult]: For program point L54-3(lines 54 58) no Hoare annotation was computed. [2020-07-28 19:01:39,646 INFO L268 CegarLoopResult]: For program point L54-6(lines 54 58) no Hoare annotation was computed. [2020-07-28 19:01:39,646 INFO L264 CegarLoopResult]: At program point L286(lines 1 1015) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~methAndRunningLastTime~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:01:39,646 INFO L264 CegarLoopResult]: At program point L221(lines 217 223) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~methAndRunningLastTime~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:01:39,646 INFO L268 CegarLoopResult]: For program point L155(line 155) no Hoare annotation was computed. [2020-07-28 19:01:39,647 INFO L268 CegarLoopResult]: For program point L155-1(line 155) no Hoare annotation was computed. [2020-07-28 19:01:39,647 INFO L268 CegarLoopResult]: For program point L155-2(line 155) no Hoare annotation was computed. [2020-07-28 19:01:39,647 INFO L268 CegarLoopResult]: For program point L783(lines 783 791) no Hoare annotation was computed. [2020-07-28 19:01:39,647 INFO L268 CegarLoopResult]: For program point L783-1(lines 783 791) no Hoare annotation was computed. [2020-07-28 19:01:39,647 INFO L268 CegarLoopResult]: For program point L783-2(lines 783 791) no Hoare annotation was computed. [2020-07-28 19:01:39,647 INFO L268 CegarLoopResult]: For program point L783-3(lines 783 791) no Hoare annotation was computed. [2020-07-28 19:01:39,648 INFO L268 CegarLoopResult]: For program point L783-4(lines 783 791) no Hoare annotation was computed. [2020-07-28 19:01:39,648 INFO L268 CegarLoopResult]: For program point L783-5(lines 783 791) no Hoare annotation was computed. [2020-07-28 19:01:39,648 INFO L268 CegarLoopResult]: For program point L321(lines 321 327) no Hoare annotation was computed. [2020-07-28 19:01:39,648 INFO L264 CegarLoopResult]: At program point L321-1(lines 321 327) the Hoare annotation is: (let ((.cse9 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (let ((.cse7 (= 0 ~methaneLevelCritical~0)) (.cse5 (= 0 ~systemActive~0)) (.cse8 (= 0 ULTIMATE.start___utac_acc__Specification2_spec__2_~tmp~10)) (.cse11 (= 1 ~waterLevel~0)) (.cse0 (<= 2 ~waterLevel~0)) (.cse1 (= 0 ~methAndRunningLastTime~0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= 1 ~methaneLevelCritical~0)) (.cse4 (not .cse9)) (.cse6 (= 0 ~pumpRunning~0)) (.cse10 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse7 .cse2 .cse8 .cse9 .cse10) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse11) (and .cse0 .cse7 .cse1 .cse2 .cse6 .cse10) (and .cse0 .cse1 .cse7 .cse2 .cse5 .cse6 .cse8 .cse9) (and .cse1 .cse7 .cse2 .cse6 .cse11 .cse10) (and .cse1 .cse7 .cse2 .cse5 .cse6 .cse8 .cse11 .cse9) (and .cse1 .cse2 .cse4 .cse6 (= ~methaneLevelCritical~0 ~systemActive~0) .cse11 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse6 .cse10)))) [2020-07-28 19:01:39,649 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:01:39,649 INFO L264 CegarLoopResult]: At program point L91(lines 86 94) the Hoare annotation is: false [2020-07-28 19:01:39,649 INFO L264 CegarLoopResult]: At program point L91-1(lines 86 94) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse2 (= 0 ~pumpRunning~0)) (.cse4 (= 1 ~systemActive~0))) (or (and .cse0 (= 0 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 (= 1 ~methaneLevelCritical~0) (not .cse3) .cse2 .cse4))) [2020-07-28 19:01:39,649 INFO L264 CegarLoopResult]: At program point L91-2(lines 86 94) the Hoare annotation is: (let ((.cse9 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (let ((.cse6 (<= 2 ~waterLevel~0)) (.cse7 (= 0 ~methaneLevelCritical~0)) (.cse5 (= 1 ~systemActive~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 ~methaneLevelCritical~0)) (.cse8 (= 0 ~systemActive~0)) (.cse2 (not .cse9)) (.cse3 (= 0 ~pumpRunning~0)) (.cse4 (= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse0 .cse8 .cse3 .cse9) (and .cse7 .cse0 .cse8 .cse3 .cse4 .cse9) (and .cse6 .cse0 .cse1 .cse8 .cse2 .cse3) (and .cse6 .cse7 .cse0 .cse9 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse3 .cse5) (and .cse7 .cse0 .cse3 .cse4 .cse9 .cse5) (and .cse0 .cse1 .cse8 .cse2 .cse3 .cse4)))) [2020-07-28 19:01:39,650 INFO L264 CegarLoopResult]: At program point L91-3(lines 86 94) the Hoare annotation is: false [2020-07-28 19:01:39,650 INFO L264 CegarLoopResult]: At program point L91-4(lines 86 94) the Hoare annotation is: false [2020-07-28 19:01:39,650 INFO L264 CegarLoopResult]: At program point L950(lines 935 953) the Hoare annotation is: (let ((.cse0 (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_isLowWaterLevel_#res|)) (.cse3 (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~9)) (.cse4 (<= 1 ~waterLevel~0)) (.cse5 (= 1 ULTIMATE.start_isLowWaterLevel_~tmp___0~2)) (.cse6 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 (= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 .cse5 .cse6) (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2020-07-28 19:01:39,650 INFO L264 CegarLoopResult]: At program point L91-5(lines 86 94) the Hoare annotation is: false [2020-07-28 19:01:39,650 INFO L264 CegarLoopResult]: At program point L950-1(lines 935 953) the Hoare annotation is: false [2020-07-28 19:01:39,650 INFO L264 CegarLoopResult]: At program point L91-6(lines 86 94) the Hoare annotation is: false [2020-07-28 19:01:39,650 INFO L264 CegarLoopResult]: At program point L950-2(lines 935 953) the Hoare annotation is: false [2020-07-28 19:01:39,650 INFO L264 CegarLoopResult]: At program point L91-7(lines 86 94) the Hoare annotation is: false [2020-07-28 19:01:39,650 INFO L264 CegarLoopResult]: At program point L91-8(lines 86 94) the Hoare annotation is: false [2020-07-28 19:01:39,651 INFO L264 CegarLoopResult]: At program point L984(lines 979 986) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~methAndRunningLastTime~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:01:39,651 INFO L264 CegarLoopResult]: At program point L754(lines 754 760) the Hoare annotation is: (let ((.cse1 (= 1 ~methaneLevelCritical~0)) (.cse2 (= 0 ~systemActive~0)) (.cse3 (= 0 ~pumpRunning~0)) (.cse4 (= 1 ~waterLevel~0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse7 (= 0 ~methaneLevelCritical~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse5 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse3) (and .cse6 .cse7 .cse0 .cse2 .cse3) (and .cse6 .cse0 .cse1 .cse3 .cse5) (and .cse7 .cse0 .cse2 .cse3 .cse4) (and .cse7 .cse0 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse0 .cse5))) [2020-07-28 19:01:39,651 INFO L264 CegarLoopResult]: At program point L754-1(lines 754 760) the Hoare annotation is: false [2020-07-28 19:01:39,651 INFO L264 CegarLoopResult]: At program point L754-2(lines 754 760) the Hoare annotation is: false [2020-07-28 19:01:39,651 INFO L271 CegarLoopResult]: At program point L259(lines 240 262) the Hoare annotation is: true [2020-07-28 19:01:39,651 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:01:39,651 INFO L264 CegarLoopResult]: At program point L294(lines 289 297) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~methAndRunningLastTime~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:01:39,651 INFO L264 CegarLoopResult]: At program point L361(lines 310 362) the Hoare annotation is: false [2020-07-28 19:01:39,651 INFO L268 CegarLoopResult]: For program point L131(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:01:39,651 INFO L268 CegarLoopResult]: For program point L131-1(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:01:39,652 INFO L268 CegarLoopResult]: For program point L131-2(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:01:39,652 INFO L268 CegarLoopResult]: For program point L131-3(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:01:39,652 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:01:39,652 INFO L268 CegarLoopResult]: For program point L131-4(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:01:39,652 INFO L268 CegarLoopResult]: For program point L131-5(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:01:39,652 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 155) no Hoare annotation was computed. [2020-07-28 19:01:39,652 INFO L268 CegarLoopResult]: For program point L66(lines 66 70) no Hoare annotation was computed. [2020-07-28 19:01:39,652 INFO L268 CegarLoopResult]: For program point L958(lines 958 964) no Hoare annotation was computed. [2020-07-28 19:01:39,652 INFO L264 CegarLoopResult]: At program point L958-1(lines 958 964) the Hoare annotation is: (let ((.cse3 (= 1 ~waterLevel~0)) (.cse4 (= 1 ~methaneLevelCritical~0)) (.cse5 (<= 2 ~waterLevel~0)) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 0 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3) (and .cse1 .cse4 .cse2 .cse3) (and .cse5 .cse1 .cse4 .cse2) (and .cse5 .cse0 .cse1 .cse2))) [2020-07-28 19:01:39,652 INFO L268 CegarLoopResult]: For program point L925(lines 925 929) no Hoare annotation was computed. [2020-07-28 19:01:39,652 INFO L268 CegarLoopResult]: For program point L925-2(lines 925 929) no Hoare annotation was computed. [2020-07-28 19:01:39,653 INFO L268 CegarLoopResult]: For program point L925-3(lines 925 929) no Hoare annotation was computed. [2020-07-28 19:01:39,653 INFO L268 CegarLoopResult]: For program point L925-5(lines 925 929) no Hoare annotation was computed. [2020-07-28 19:01:39,653 INFO L268 CegarLoopResult]: For program point L925-6(lines 925 929) no Hoare annotation was computed. [2020-07-28 19:01:39,653 INFO L268 CegarLoopResult]: For program point L925-8(lines 925 929) no Hoare annotation was computed. [2020-07-28 19:01:39,653 INFO L268 CegarLoopResult]: For program point L925-9(lines 925 929) no Hoare annotation was computed. [2020-07-28 19:01:39,653 INFO L268 CegarLoopResult]: For program point L925-11(lines 925 929) no Hoare annotation was computed. [2020-07-28 19:01:39,653 INFO L268 CegarLoopResult]: For program point L925-12(lines 925 929) no Hoare annotation was computed. [2020-07-28 19:01:39,653 INFO L268 CegarLoopResult]: For program point L925-14(lines 925 929) no Hoare annotation was computed. [2020-07-28 19:01:39,653 INFO L268 CegarLoopResult]: For program point L925-15(lines 925 929) no Hoare annotation was computed. [2020-07-28 19:01:39,653 INFO L268 CegarLoopResult]: For program point L925-17(lines 925 929) no Hoare annotation was computed. [2020-07-28 19:01:39,653 INFO L268 CegarLoopResult]: For program point L331(lines 331 337) no Hoare annotation was computed. [2020-07-28 19:01:39,654 INFO L264 CegarLoopResult]: At program point L331-1(lines 331 337) the Hoare annotation is: (let ((.cse6 (<= 2 ~waterLevel~0)) (.cse1 (= 0 ~methaneLevelCritical~0)) (.cse8 (= 1 ~systemActive~0)) (.cse0 (= 0 ~methAndRunningLastTime~0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse7 (= 1 ~methaneLevelCritical~0)) (.cse3 (= 0 ~systemActive~0)) (.cse4 (= 0 ~pumpRunning~0)) (.cse5 (= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse2 .cse7 .cse8) (and .cse0 .cse2 .cse7 .cse4 .cse5 .cse8) (and .cse6 .cse0 .cse2 .cse7 .cse3 .cse4) (and .cse6 .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse6 .cse1 .cse2 .cse8) (and .cse0 .cse1 .cse2 .cse4 .cse5 .cse8) (and .cse0 .cse2 .cse7 .cse3 .cse4 .cse5))) [2020-07-28 19:01:39,658 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:01:39,658 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:01:39,663 WARN L170 areAnnotationChecker]: L250 has no Hoare annotation [2020-07-28 19:01:39,663 WARN L170 areAnnotationChecker]: L250 has no Hoare annotation [2020-07-28 19:01:39,664 WARN L170 areAnnotationChecker]: L250 has no Hoare annotation [2020-07-28 19:01:39,667 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:01:39,668 WARN L170 areAnnotationChecker]: L312 has no Hoare annotation [2020-07-28 19:01:39,668 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:01:39,668 WARN L170 areAnnotationChecker]: L747-1 has no Hoare annotation [2020-07-28 19:01:39,668 WARN L170 areAnnotationChecker]: L312 has no Hoare annotation [2020-07-28 19:01:39,668 WARN L170 areAnnotationChecker]: L312 has no Hoare annotation [2020-07-28 19:01:39,668 WARN L170 areAnnotationChecker]: L747-1 has no Hoare annotation [2020-07-28 19:01:39,668 WARN L170 areAnnotationChecker]: L747-1 has no Hoare annotation [2020-07-28 19:01:39,668 WARN L170 areAnnotationChecker]: L313 has no Hoare annotation [2020-07-28 19:01:39,669 WARN L170 areAnnotationChecker]: L54-3 has no Hoare annotation [2020-07-28 19:01:39,669 WARN L170 areAnnotationChecker]: L54-3 has no Hoare annotation [2020-07-28 19:01:39,669 WARN L170 areAnnotationChecker]: L805-1 has no Hoare annotation [2020-07-28 19:01:39,669 WARN L170 areAnnotationChecker]: L321 has no Hoare annotation [2020-07-28 19:01:39,669 WARN L170 areAnnotationChecker]: L321 has no Hoare annotation [2020-07-28 19:01:39,669 WARN L170 areAnnotationChecker]: L805-1 has no Hoare annotation [2020-07-28 19:01:39,669 WARN L170 areAnnotationChecker]: L805-1 has no Hoare annotation [2020-07-28 19:01:39,669 WARN L170 areAnnotationChecker]: L66 has no Hoare annotation [2020-07-28 19:01:39,669 WARN L170 areAnnotationChecker]: L66 has no Hoare annotation [2020-07-28 19:01:39,669 WARN L170 areAnnotationChecker]: L331 has no Hoare annotation [2020-07-28 19:01:39,669 WARN L170 areAnnotationChecker]: L944-3 has no Hoare annotation [2020-07-28 19:01:39,670 WARN L170 areAnnotationChecker]: L779-3 has no Hoare annotation [2020-07-28 19:01:39,670 WARN L170 areAnnotationChecker]: L779-3 has no Hoare annotation [2020-07-28 19:01:39,670 WARN L170 areAnnotationChecker]: L995-2 has no Hoare annotation [2020-07-28 19:01:39,670 WARN L170 areAnnotationChecker]: L331 has no Hoare annotation [2020-07-28 19:01:39,670 WARN L170 areAnnotationChecker]: L331 has no Hoare annotation [2020-07-28 19:01:39,670 WARN L170 areAnnotationChecker]: L944-3 has no Hoare annotation [2020-07-28 19:01:39,670 WARN L170 areAnnotationChecker]: L944-3 has no Hoare annotation [2020-07-28 19:01:39,670 WARN L170 areAnnotationChecker]: L131-3 has no Hoare annotation [2020-07-28 19:01:39,670 WARN L170 areAnnotationChecker]: L131-3 has no Hoare annotation [2020-07-28 19:01:39,670 WARN L170 areAnnotationChecker]: L995-2 has no Hoare annotation [2020-07-28 19:01:39,670 WARN L170 areAnnotationChecker]: L995-2 has no Hoare annotation [2020-07-28 19:01:39,670 WARN L170 areAnnotationChecker]: L78 has no Hoare annotation [2020-07-28 19:01:39,671 WARN L170 areAnnotationChecker]: L78 has no Hoare annotation [2020-07-28 19:01:39,671 WARN L170 areAnnotationChecker]: L341 has no Hoare annotation [2020-07-28 19:01:39,671 WARN L170 areAnnotationChecker]: L944-5 has no Hoare annotation [2020-07-28 19:01:39,671 WARN L170 areAnnotationChecker]: L925-9 has no Hoare annotation [2020-07-28 19:01:39,671 WARN L170 areAnnotationChecker]: L999-2 has no Hoare annotation [2020-07-28 19:01:39,671 WARN L170 areAnnotationChecker]: L341 has no Hoare annotation [2020-07-28 19:01:39,671 WARN L170 areAnnotationChecker]: L341 has no Hoare annotation [2020-07-28 19:01:39,671 WARN L170 areAnnotationChecker]: L809-1 has no Hoare annotation [2020-07-28 19:01:39,671 WARN L170 areAnnotationChecker]: L925-9 has no Hoare annotation [2020-07-28 19:01:39,671 WARN L170 areAnnotationChecker]: L925-9 has no Hoare annotation [2020-07-28 19:01:39,671 WARN L170 areAnnotationChecker]: L999-2 has no Hoare annotation [2020-07-28 19:01:39,672 WARN L170 areAnnotationChecker]: L999-2 has no Hoare annotation [2020-07-28 19:01:39,672 WARN L170 areAnnotationChecker]: L173 has no Hoare annotation [2020-07-28 19:01:39,672 WARN L170 areAnnotationChecker]: L54 has no Hoare annotation [2020-07-28 19:01:39,675 WARN L170 areAnnotationChecker]: L349 has no Hoare annotation [2020-07-28 19:01:39,675 WARN L170 areAnnotationChecker]: L349 has no Hoare annotation [2020-07-28 19:01:39,675 WARN L170 areAnnotationChecker]: L809-1 has no Hoare annotation [2020-07-28 19:01:39,675 WARN L170 areAnnotationChecker]: L809-1 has no Hoare annotation [2020-07-28 19:01:39,675 WARN L170 areAnnotationChecker]: L925-11 has no Hoare annotation [2020-07-28 19:01:39,676 WARN L170 areAnnotationChecker]: L1000-2 has no Hoare annotation [2020-07-28 19:01:39,676 WARN L170 areAnnotationChecker]: L1000-2 has no Hoare annotation [2020-07-28 19:01:39,676 WARN L170 areAnnotationChecker]: L173 has no Hoare annotation [2020-07-28 19:01:39,676 WARN L170 areAnnotationChecker]: L54 has no Hoare annotation [2020-07-28 19:01:39,676 WARN L170 areAnnotationChecker]: L54 has no Hoare annotation [2020-07-28 19:01:39,676 WARN L170 areAnnotationChecker]: L805 has no Hoare annotation [2020-07-28 19:01:39,677 WARN L170 areAnnotationChecker]: L958 has no Hoare annotation [2020-07-28 19:01:39,678 WARN L170 areAnnotationChecker]: L958 has no Hoare annotation [2020-07-28 19:01:39,678 WARN L170 areAnnotationChecker]: L779-2 has no Hoare annotation [2020-07-28 19:01:39,678 WARN L170 areAnnotationChecker]: L779-2 has no Hoare annotation [2020-07-28 19:01:39,678 WARN L170 areAnnotationChecker]: L783-3 has no Hoare annotation [2020-07-28 19:01:39,678 WARN L170 areAnnotationChecker]: L155-1 has no Hoare annotation [2020-07-28 19:01:39,678 WARN L170 areAnnotationChecker]: L155-1 has no Hoare annotation [2020-07-28 19:01:39,678 WARN L170 areAnnotationChecker]: L176 has no Hoare annotation [2020-07-28 19:01:39,678 WARN L170 areAnnotationChecker]: L176 has no Hoare annotation [2020-07-28 19:01:39,678 WARN L170 areAnnotationChecker]: L805 has no Hoare annotation [2020-07-28 19:01:39,678 WARN L170 areAnnotationChecker]: L805 has no Hoare annotation [2020-07-28 19:01:39,681 WARN L170 areAnnotationChecker]: L131-2 has no Hoare annotation [2020-07-28 19:01:39,681 WARN L170 areAnnotationChecker]: L131-2 has no Hoare annotation [2020-07-28 19:01:39,682 WARN L170 areAnnotationChecker]: L783-3 has no Hoare annotation [2020-07-28 19:01:39,682 WARN L170 areAnnotationChecker]: L783-3 has no Hoare annotation [2020-07-28 19:01:39,682 WARN L170 areAnnotationChecker]: L176-1 has no Hoare annotation [2020-07-28 19:01:39,682 WARN L170 areAnnotationChecker]: L176-1 has no Hoare annotation [2020-07-28 19:01:39,682 WARN L170 areAnnotationChecker]: L944 has no Hoare annotation [2020-07-28 19:01:39,682 WARN L170 areAnnotationChecker]: L779-1 has no Hoare annotation [2020-07-28 19:01:39,682 WARN L170 areAnnotationChecker]: L779-1 has no Hoare annotation [2020-07-28 19:01:39,683 WARN L170 areAnnotationChecker]: L995 has no Hoare annotation [2020-07-28 19:01:39,683 WARN L170 areAnnotationChecker]: L925-6 has no Hoare annotation [2020-07-28 19:01:39,683 WARN L170 areAnnotationChecker]: L54-6 has no Hoare annotation [2020-07-28 19:01:39,683 WARN L170 areAnnotationChecker]: L54-6 has no Hoare annotation [2020-07-28 19:01:39,683 WARN L170 areAnnotationChecker]: L805-2 has no Hoare annotation [2020-07-28 19:01:39,683 WARN L170 areAnnotationChecker]: L944 has no Hoare annotation [2020-07-28 19:01:39,683 WARN L170 areAnnotationChecker]: L944 has no Hoare annotation [2020-07-28 19:01:39,683 WARN L170 areAnnotationChecker]: L131-1 has no Hoare annotation [2020-07-28 19:01:39,683 WARN L170 areAnnotationChecker]: L131-1 has no Hoare annotation [2020-07-28 19:01:39,683 WARN L170 areAnnotationChecker]: L995 has no Hoare annotation [2020-07-28 19:01:39,683 WARN L170 areAnnotationChecker]: L995 has no Hoare annotation [2020-07-28 19:01:39,683 WARN L170 areAnnotationChecker]: L925-6 has no Hoare annotation [2020-07-28 19:01:39,684 WARN L170 areAnnotationChecker]: L925-6 has no Hoare annotation [2020-07-28 19:01:39,684 WARN L170 areAnnotationChecker]: L842-6 has no Hoare annotation [2020-07-28 19:01:39,684 WARN L170 areAnnotationChecker]: L805-2 has no Hoare annotation [2020-07-28 19:01:39,684 WARN L170 areAnnotationChecker]: L805-2 has no Hoare annotation [2020-07-28 19:01:39,684 WARN L170 areAnnotationChecker]: L944-2 has no Hoare annotation [2020-07-28 19:01:39,684 WARN L170 areAnnotationChecker]: L925-3 has no Hoare annotation [2020-07-28 19:01:39,684 WARN L170 areAnnotationChecker]: L999 has no Hoare annotation [2020-07-28 19:01:39,685 WARN L170 areAnnotationChecker]: L925-8 has no Hoare annotation [2020-07-28 19:01:39,685 WARN L170 areAnnotationChecker]: L842-6 has no Hoare annotation [2020-07-28 19:01:39,685 WARN L170 areAnnotationChecker]: L842-6 has no Hoare annotation [2020-07-28 19:01:39,685 WARN L170 areAnnotationChecker]: L944-6 has no Hoare annotation [2020-07-28 19:01:39,685 WARN L170 areAnnotationChecker]: L779-5 has no Hoare annotation [2020-07-28 19:01:39,685 WARN L170 areAnnotationChecker]: L779-5 has no Hoare annotation [2020-07-28 19:01:39,685 WARN L170 areAnnotationChecker]: L995-4 has no Hoare annotation [2020-07-28 19:01:39,685 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2020-07-28 19:01:39,686 WARN L170 areAnnotationChecker]: L925-3 has no Hoare annotation [2020-07-28 19:01:39,686 WARN L170 areAnnotationChecker]: L925-3 has no Hoare annotation [2020-07-28 19:01:39,686 WARN L170 areAnnotationChecker]: L999 has no Hoare annotation [2020-07-28 19:01:39,686 WARN L170 areAnnotationChecker]: L999 has no Hoare annotation [2020-07-28 19:01:39,686 WARN L170 areAnnotationChecker]: L783-2 has no Hoare annotation [2020-07-28 19:01:39,686 WARN L170 areAnnotationChecker]: L944-6 has no Hoare annotation [2020-07-28 19:01:39,686 WARN L170 areAnnotationChecker]: L944-6 has no Hoare annotation [2020-07-28 19:01:39,686 WARN L170 areAnnotationChecker]: L131-5 has no Hoare annotation [2020-07-28 19:01:39,686 WARN L170 areAnnotationChecker]: L131-5 has no Hoare annotation [2020-07-28 19:01:39,686 WARN L170 areAnnotationChecker]: L995-4 has no Hoare annotation [2020-07-28 19:01:39,686 WARN L170 areAnnotationChecker]: L995-4 has no Hoare annotation [2020-07-28 19:01:39,686 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2020-07-28 19:01:39,687 WARN L170 areAnnotationChecker]: L809 has no Hoare annotation [2020-07-28 19:01:39,687 WARN L170 areAnnotationChecker]: L925-5 has no Hoare annotation [2020-07-28 19:01:39,687 WARN L170 areAnnotationChecker]: L1000 has no Hoare annotation [2020-07-28 19:01:39,687 WARN L170 areAnnotationChecker]: L1000 has no Hoare annotation [2020-07-28 19:01:39,687 WARN L170 areAnnotationChecker]: L783-2 has no Hoare annotation [2020-07-28 19:01:39,687 WARN L170 areAnnotationChecker]: L783-2 has no Hoare annotation [2020-07-28 19:01:39,687 WARN L170 areAnnotationChecker]: L944-8 has no Hoare annotation [2020-07-28 19:01:39,688 WARN L170 areAnnotationChecker]: L925-15 has no Hoare annotation [2020-07-28 19:01:39,688 WARN L170 areAnnotationChecker]: L999-4 has no Hoare annotation [2020-07-28 19:01:39,688 WARN L170 areAnnotationChecker]: L779 has no Hoare annotation [2020-07-28 19:01:39,688 WARN L170 areAnnotationChecker]: L779 has no Hoare annotation [2020-07-28 19:01:39,688 WARN L170 areAnnotationChecker]: L783-1 has no Hoare annotation [2020-07-28 19:01:39,689 WARN L170 areAnnotationChecker]: L155 has no Hoare annotation [2020-07-28 19:01:39,689 WARN L170 areAnnotationChecker]: L155 has no Hoare annotation [2020-07-28 19:01:39,689 WARN L170 areAnnotationChecker]: L809-2 has no Hoare annotation [2020-07-28 19:01:39,689 WARN L170 areAnnotationChecker]: L925-15 has no Hoare annotation [2020-07-28 19:01:39,689 WARN L170 areAnnotationChecker]: L925-15 has no Hoare annotation [2020-07-28 19:01:39,689 WARN L170 areAnnotationChecker]: L999-4 has no Hoare annotation [2020-07-28 19:01:39,689 WARN L170 areAnnotationChecker]: L999-4 has no Hoare annotation [2020-07-28 19:01:39,690 WARN L170 areAnnotationChecker]: L131 has no Hoare annotation [2020-07-28 19:01:39,690 WARN L170 areAnnotationChecker]: L131 has no Hoare annotation [2020-07-28 19:01:39,690 WARN L170 areAnnotationChecker]: L783-1 has no Hoare annotation [2020-07-28 19:01:39,690 WARN L170 areAnnotationChecker]: L783-1 has no Hoare annotation [2020-07-28 19:01:39,690 WARN L170 areAnnotationChecker]: L842-4 has no Hoare annotation [2020-07-28 19:01:39,690 WARN L170 areAnnotationChecker]: L809-2 has no Hoare annotation [2020-07-28 19:01:39,690 WARN L170 areAnnotationChecker]: L809-2 has no Hoare annotation [2020-07-28 19:01:39,690 WARN L170 areAnnotationChecker]: L925-17 has no Hoare annotation [2020-07-28 19:01:39,690 WARN L170 areAnnotationChecker]: L1000-4 has no Hoare annotation [2020-07-28 19:01:39,690 WARN L170 areAnnotationChecker]: L1000-4 has no Hoare annotation [2020-07-28 19:01:39,690 WARN L170 areAnnotationChecker]: L925 has no Hoare annotation [2020-07-28 19:01:39,692 WARN L170 areAnnotationChecker]: L842-4 has no Hoare annotation [2020-07-28 19:01:39,692 WARN L170 areAnnotationChecker]: L842-4 has no Hoare annotation [2020-07-28 19:01:39,692 WARN L170 areAnnotationChecker]: L779-4 has no Hoare annotation [2020-07-28 19:01:39,692 WARN L170 areAnnotationChecker]: L779-4 has no Hoare annotation [2020-07-28 19:01:39,692 WARN L170 areAnnotationChecker]: L783-5 has no Hoare annotation [2020-07-28 19:01:39,692 WARN L170 areAnnotationChecker]: L155-2 has no Hoare annotation [2020-07-28 19:01:39,693 WARN L170 areAnnotationChecker]: L155-2 has no Hoare annotation [2020-07-28 19:01:39,693 WARN L170 areAnnotationChecker]: L925 has no Hoare annotation [2020-07-28 19:01:39,693 WARN L170 areAnnotationChecker]: L925 has no Hoare annotation [2020-07-28 19:01:39,693 WARN L170 areAnnotationChecker]: L842-2 has no Hoare annotation [2020-07-28 19:01:39,693 WARN L170 areAnnotationChecker]: L131-4 has no Hoare annotation [2020-07-28 19:01:39,693 WARN L170 areAnnotationChecker]: L131-4 has no Hoare annotation [2020-07-28 19:01:39,693 WARN L170 areAnnotationChecker]: L783-5 has no Hoare annotation [2020-07-28 19:01:39,693 WARN L170 areAnnotationChecker]: L783-5 has no Hoare annotation [2020-07-28 19:01:39,693 WARN L170 areAnnotationChecker]: L925-2 has no Hoare annotation [2020-07-28 19:01:39,693 WARN L170 areAnnotationChecker]: L842-2 has no Hoare annotation [2020-07-28 19:01:39,693 WARN L170 areAnnotationChecker]: L842-2 has no Hoare annotation [2020-07-28 19:01:39,693 WARN L170 areAnnotationChecker]: L925-12 has no Hoare annotation [2020-07-28 19:01:39,694 WARN L170 areAnnotationChecker]: L783 has no Hoare annotation [2020-07-28 19:01:39,694 WARN L170 areAnnotationChecker]: L925-12 has no Hoare annotation [2020-07-28 19:01:39,694 WARN L170 areAnnotationChecker]: L925-12 has no Hoare annotation [2020-07-28 19:01:39,694 WARN L170 areAnnotationChecker]: L842-10 has no Hoare annotation [2020-07-28 19:01:39,694 WARN L170 areAnnotationChecker]: L783 has no Hoare annotation [2020-07-28 19:01:39,694 WARN L170 areAnnotationChecker]: L783 has no Hoare annotation [2020-07-28 19:01:39,694 WARN L170 areAnnotationChecker]: L925-14 has no Hoare annotation [2020-07-28 19:01:39,695 WARN L170 areAnnotationChecker]: L842-10 has no Hoare annotation [2020-07-28 19:01:39,695 WARN L170 areAnnotationChecker]: L842-10 has no Hoare annotation [2020-07-28 19:01:39,695 WARN L170 areAnnotationChecker]: L783-4 has no Hoare annotation [2020-07-28 19:01:39,695 WARN L170 areAnnotationChecker]: L842 has no Hoare annotation [2020-07-28 19:01:39,695 WARN L170 areAnnotationChecker]: L783-4 has no Hoare annotation [2020-07-28 19:01:39,695 WARN L170 areAnnotationChecker]: L783-4 has no Hoare annotation [2020-07-28 19:01:39,696 WARN L170 areAnnotationChecker]: L842 has no Hoare annotation [2020-07-28 19:01:39,696 WARN L170 areAnnotationChecker]: L842 has no Hoare annotation [2020-07-28 19:01:39,696 WARN L170 areAnnotationChecker]: L842-8 has no Hoare annotation [2020-07-28 19:01:39,696 WARN L170 areAnnotationChecker]: L842-8 has no Hoare annotation [2020-07-28 19:01:39,696 WARN L170 areAnnotationChecker]: L842-8 has no Hoare annotation [2020-07-28 19:01:39,696 INFO L163 areAnnotationChecker]: CFG has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:01:39,770 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:01:39 BoogieIcfgContainer [2020-07-28 19:01:39,770 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:01:39,771 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:01:39,771 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:01:39,771 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:01:39,772 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:00:32" (3/4) ... [2020-07-28 19:01:39,776 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:01:39,814 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:01:39,816 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:01:39,817 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:01:39,818 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:01:39,820 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:01:39,822 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:01:39,824 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:01:39,869 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == systemActive) && 0 == pumpRunning) || ((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == \result) && 1 == systemActive)) || ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == systemActive) && 0 == pumpRunning) && 1 == waterLevel)) || (((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || (((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 0 == tmp) && 0 == \result)) || (((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || (((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 0 == tmp) && 1 == waterLevel) && 0 == \result)) || ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive)) || ((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:01:39,870 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == systemActive) && 0 == pumpRunning) || ((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == \result) && 1 == systemActive)) || ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == systemActive) && 0 == pumpRunning) && 1 == waterLevel)) || (((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || (((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 0 == tmp) && 0 == \result)) || (((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || (((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 0 == tmp) && 1 == waterLevel) && 0 == \result)) || ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive)) || ((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:01:39,875 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || (((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result)) || (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result)) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && !(0 == \result)) && 0 == pumpRunning)) || ((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == \result) && 1 == systemActive)) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == pumpRunning) && 1 == systemActive)) || (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result) && 1 == systemActive)) || (((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && !(0 == \result)) && 0 == pumpRunning) && 1 == waterLevel) [2020-07-28 19:01:39,875 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == methaneLevelCritical && 0 == \result) && 0 == splverifierCounter) && 1 <= waterLevel) && 1 == systemActive) || (((((0 == methAndRunningLastTime && 0 == \result) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 <= waterLevel) && 1 == systemActive) [2020-07-28 19:01:39,879 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 == \result && 0 == splverifierCounter) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive) || (((((1 == \result && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || ((((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == systemActive) [2020-07-28 19:01:39,881 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive)) || ((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) [2020-07-28 19:01:39,882 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && 0 == tmp) && 1 <= waterLevel) && 1 == tmp___0) && 1 == systemActive) || (((((((0 == methaneLevelCritical && 0 == \result) && 0 == splverifierCounter) && 1 == \result) && 0 == tmp) && 1 <= waterLevel) && 1 == tmp___0) && 1 == systemActive) [2020-07-28 19:01:39,883 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == tmp___0 && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == tmp___0) && 0 == splverifierCounter) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:01:39,887 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:01:39,887 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive) || ((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == pumpRunning) && !(0 == \result)) && 1 == systemActive) [2020-07-28 19:01:39,975 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:01:39,975 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:01:39,977 INFO L168 Benchmark]: Toolchain (without parser) took 70004.10 ms. Allocated memory was 1.0 GB in the beginning and 2.0 GB in the end (delta: 921.7 MB). Free memory was 960.2 MB in the beginning and 1.0 GB in the end (delta: -68.2 MB). Peak memory consumption was 853.5 MB. Max. memory is 11.5 GB. [2020-07-28 19:01:39,978 INFO L168 Benchmark]: CDTParser took 0.20 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:01:39,978 INFO L168 Benchmark]: CACSL2BoogieTranslator took 715.74 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 105.4 MB). Free memory was 954.9 MB in the beginning and 1.1 GB in the end (delta: -124.1 MB). Peak memory consumption was 20.6 MB. Max. memory is 11.5 GB. [2020-07-28 19:01:39,978 INFO L168 Benchmark]: Boogie Procedure Inliner took 110.77 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. [2020-07-28 19:01:39,979 INFO L168 Benchmark]: Boogie Preprocessor took 83.78 ms. Allocated memory is still 1.1 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:01:39,979 INFO L168 Benchmark]: RCFGBuilder took 1745.57 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 873.7 MB in the end (delta: 198.4 MB). Peak memory consumption was 198.4 MB. Max. memory is 11.5 GB. [2020-07-28 19:01:39,979 INFO L168 Benchmark]: TraceAbstraction took 67136.00 ms. Allocated memory was 1.1 GB in the beginning and 2.0 GB in the end (delta: 816.3 MB). Free memory was 873.7 MB in the beginning and 1.1 GB in the end (delta: -177.4 MB). Peak memory consumption was 638.9 MB. Max. memory is 11.5 GB. [2020-07-28 19:01:39,980 INFO L168 Benchmark]: Witness Printer took 204.41 ms. Allocated memory is still 2.0 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 22.7 MB). Peak memory consumption was 22.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:01:39,983 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 715.74 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 105.4 MB). Free memory was 954.9 MB in the beginning and 1.1 GB in the end (delta: -124.1 MB). Peak memory consumption was 20.6 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 110.77 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.8 MB). Peak memory consumption was 6.8 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 83.78 ms. Allocated memory is still 1.1 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 1745.57 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 873.7 MB in the end (delta: 198.4 MB). Peak memory consumption was 198.4 MB. Max. memory is 11.5 GB. * TraceAbstraction took 67136.00 ms. Allocated memory was 1.1 GB in the beginning and 2.0 GB in the end (delta: 816.3 MB). Free memory was 873.7 MB in the beginning and 1.1 GB in the end (delta: -177.4 MB). Peak memory consumption was 638.9 MB. Max. memory is 11.5 GB. * Witness Printer took 204.41 ms. Allocated memory is still 2.0 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 22.7 MB). Peak memory consumption was 22.7 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 155]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 155]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 155]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: ((((0 == methaneLevelCritical && 0 == \result) && 0 == splverifierCounter) && 1 <= waterLevel) && 1 == systemActive) || (((((0 == methAndRunningLastTime && 0 == \result) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 <= waterLevel) && 1 == systemActive) - InvariantResult [Line: 935]: Loop Invariant Derived loop invariant: (((((((0 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && 0 == tmp) && 1 <= waterLevel) && 1 == tmp___0) && 1 == systemActive) || (((((((0 == methaneLevelCritical && 0 == \result) && 0 == splverifierCounter) && 1 == \result) && 0 == tmp) && 1 <= waterLevel) && 1 == tmp___0) && 1 == systemActive) - InvariantResult [Line: 321]: Loop Invariant Derived loop invariant: (((((((((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == systemActive) && 0 == pumpRunning) || ((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == \result) && 1 == systemActive)) || ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == systemActive) && 0 == pumpRunning) && 1 == waterLevel)) || (((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || (((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 0 == tmp) && 0 == \result)) || (((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || (((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 0 == tmp) && 1 == waterLevel) && 0 == \result)) || ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive)) || ((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 935]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 958]: Loop Invariant Derived loop invariant: (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) || (((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == waterLevel)) || (((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning)) || (((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 240]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: (((((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || (((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 0 == \result)) || (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result)) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && !(0 == \result)) && 0 == pumpRunning)) || ((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == \result) && 1 == systemActive)) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == pumpRunning) && 1 == systemActive)) || (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result) && 1 == systemActive)) || (((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && !(0 == \result)) && 0 == pumpRunning) && 1 == waterLevel) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 979]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && 1 == systemActive) || ((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == pumpRunning) && !(0 == \result)) && 1 == systemActive) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == systemActive) && 0 == pumpRunning) || ((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == \result) && 1 == systemActive)) || ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == systemActive) && 0 == pumpRunning) && 1 == waterLevel)) || (((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || (((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 0 == tmp) && 0 == \result)) || (((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || (((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 0 == tmp) && 1 == waterLevel) && 0 == \result)) || ((((((0 == methAndRunningLastTime && 0 == splverifierCounter) && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive)) || ((((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: (((((((1 == \result && 0 == splverifierCounter) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive) || (((((1 == \result && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || ((((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == systemActive) - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 860]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 746]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 746]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 754]: Loop Invariant Derived loop invariant: ((((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning) && 1 == waterLevel) || ((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning)) || ((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 1 == waterLevel)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || (((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 1 == systemActive) - InvariantResult [Line: 754]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 754]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 289]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 217]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 0 == methAndRunningLastTime) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 746]: Loop Invariant Derived loop invariant: ((((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning) && 1 == waterLevel) || ((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning)) || ((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || (((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 <= waterLevel) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 1 == waterLevel)) || ((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 <= waterLevel) && 1 == systemActive) - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 747]: Loop Invariant Derived loop invariant: ((((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning) && 1 == waterLevel) || ((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || ((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning)) || ((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 1 == waterLevel)) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || (((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 1 == systemActive)) || (((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) - InvariantResult [Line: 250]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: ((((((((0 == tmp___0 && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == tmp___0) && 0 == splverifierCounter) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 871]: Loop Invariant Derived loop invariant: ((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == systemActive) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive)) || ((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 871]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 331]: Loop Invariant Derived loop invariant: (((((((((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning) && 1 == waterLevel) || ((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == systemActive)) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || (((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning)) || (((((2 <= waterLevel && 0 == methAndRunningLastTime) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == systemActive) && 0 == pumpRunning)) || (((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 1 == systemActive)) || (((((0 == methAndRunningLastTime && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || (((((0 == methAndRunningLastTime && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == systemActive) && 0 == pumpRunning) && 1 == waterLevel) - InvariantResult [Line: 871]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 935]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 310]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 141 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 49.3s, OverallIterations: 16, TraceHistogramMax: 3, AutomataDifference: 33.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 17.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1985 SDtfs, 2480 SDslu, 3662 SDs, 0 SdLazy, 502 SolverSat, 93 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.8s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 361 GetRequests, 283 SyntacticMatches, 0 SemanticMatches, 78 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 115 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=837occurred in iteration=14, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 10.7s AutomataMinimizationTime, 16 MinimizatonAttempts, 2963 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 57 LocationsWithAnnotation, 57 PreInvPairs, 271 NumberOfFragments, 1655 HoareAnnotationTreeSize, 57 FomulaSimplifications, 9625352 FormulaSimplificationTreeSizeReduction, 3.3s HoareSimplificationTime, 57 FomulaSimplificationsInter, 1515546 FormulaSimplificationTreeSizeReductionInter, 14.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.7s SatisfiabilityAnalysisTime, 2.1s InterpolantComputationTime, 976 NumberOfCodeBlocks, 976 NumberOfCodeBlocksAsserted, 20 NumberOfCheckSat, 957 ConstructedInterpolants, 0 QuantifiedInterpolants, 118071 SizeOfPredicates, 7 NumberOfNonLiveVariables, 1500 ConjunctsInSsa, 22 ConjunctsInUnsatCore, 19 InterpolantComputations, 14 PerfectInterpolantSequences, 332/394 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...