./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f25a9f8800d2b9b6ef21419533be8e4411f52f7f ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:01:42,044 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:01:42,047 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:01:42,063 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:01:42,063 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:01:42,066 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:01:42,068 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:01:42,079 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:01:42,083 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:01:42,085 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:01:42,086 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:01:42,089 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:01:42,090 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:01:42,093 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:01:42,094 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:01:42,097 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:01:42,100 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:01:42,101 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:01:42,103 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:01:42,108 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:01:42,113 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:01:42,117 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:01:42,119 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:01:42,120 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:01:42,123 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:01:42,124 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:01:42,124 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:01:42,126 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:01:42,127 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:01:42,127 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:01:42,128 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:01:42,129 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:01:42,130 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:01:42,130 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:01:42,132 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:01:42,132 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:01:42,133 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:01:42,133 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:01:42,133 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:01:42,134 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:01:42,135 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:01:42,136 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:01:42,175 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:01:42,176 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:01:42,180 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:01:42,181 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:01:42,181 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:01:42,181 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:01:42,181 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:01:42,182 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:01:42,182 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:01:42,182 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:01:42,185 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:01:42,186 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:01:42,186 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:01:42,186 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:01:42,186 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:01:42,186 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:01:42,187 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:01:42,187 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:01:42,187 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:01:42,187 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:01:42,188 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:01:42,188 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:01:42,188 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:01:42,188 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:01:42,189 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:01:42,189 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:01:42,189 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:01:42,189 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:01:42,189 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:01:42,190 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f25a9f8800d2b9b6ef21419533be8e4411f52f7f [2020-07-28 19:01:42,575 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:01:42,592 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:01:42,596 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:01:42,598 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:01:42,599 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:01:42,599 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c [2020-07-28 19:01:42,668 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/aab6e3b50/4a0260e472f44aeaa3a5349e8f965864/FLAG34f32340f [2020-07-28 19:01:43,207 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:01:43,208 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product41.cil.c [2020-07-28 19:01:43,223 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/aab6e3b50/4a0260e472f44aeaa3a5349e8f965864/FLAG34f32340f [2020-07-28 19:01:43,552 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/aab6e3b50/4a0260e472f44aeaa3a5349e8f965864 [2020-07-28 19:01:43,556 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:01:43,559 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:01:43,561 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:01:43,561 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:01:43,565 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:01:43,567 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:01:43" (1/1) ... [2020-07-28 19:01:43,570 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@62886f96 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:43, skipping insertion in model container [2020-07-28 19:01:43,570 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:01:43" (1/1) ... [2020-07-28 19:01:43,579 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:01:43,646 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:01:44,103 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:01:44,117 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:01:44,248 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:01:44,291 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:01:44,291 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44 WrapperNode [2020-07-28 19:01:44,292 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:01:44,293 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:01:44,293 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:01:44,293 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:01:44,303 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,324 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,392 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:01:44,392 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:01:44,392 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:01:44,393 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:01:44,404 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,404 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,414 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,415 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,431 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,441 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,445 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,450 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:01:44,451 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:01:44,451 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:01:44,451 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:01:44,453 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:01:44,524 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:01:44,524 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:01:44,524 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:01:44,525 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:01:46,001 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:01:46,001 INFO L295 CfgBuilder]: Removed 120 assume(true) statements. [2020-07-28 19:01:46,007 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:01:46 BoogieIcfgContainer [2020-07-28 19:01:46,007 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:01:46,009 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:01:46,009 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:01:46,013 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:01:46,013 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:01:43" (1/3) ... [2020-07-28 19:01:46,015 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1dcf519e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:01:46, skipping insertion in model container [2020-07-28 19:01:46,015 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (2/3) ... [2020-07-28 19:01:46,015 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1dcf519e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:01:46, skipping insertion in model container [2020-07-28 19:01:46,016 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:01:46" (3/3) ... [2020-07-28 19:01:46,018 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product41.cil.c [2020-07-28 19:01:46,029 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:01:46,038 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:01:46,053 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:01:46,081 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:01:46,081 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:01:46,081 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:01:46,082 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:01:46,082 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:01:46,082 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:01:46,083 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:01:46,083 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:01:46,104 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states. [2020-07-28 19:01:46,112 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-28 19:01:46,113 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:46,114 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:46,115 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:46,121 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:46,122 INFO L82 PathProgramCache]: Analyzing trace with hash -611333278, now seen corresponding path program 1 times [2020-07-28 19:01:46,133 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:46,134 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1426081187] [2020-07-28 19:01:46,134 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:46,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:46,489 INFO L280 TraceCheckUtils]: 0: Hoare triple {96#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(13);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(110, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 2 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 3 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string11.base, #t~string11.offset, 1);call write~init~int(80, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(117, #t~string11.base, 2 + #t~string11.offset, 1);call write~init~int(109, #t~string11.base, 3 + #t~string11.offset, 1);call write~init~int(112, #t~string11.base, 4 + #t~string11.offset, 1);call write~init~int(58, #t~string11.base, 5 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 6 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(110, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 2 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string15.base, #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 3 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string17.base, #t~string17.offset, 1);call write~init~int(32, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string19.base, #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 1 + #t~string19.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {96#true} is VALID [2020-07-28 19:01:46,490 INFO L280 TraceCheckUtils]: 1: Hoare triple {96#true} havoc main_#res;havoc main_#t~ret38, main_~retValue_acc~8, main_~tmp~5;havoc main_~retValue_acc~8;havoc main_~tmp~5; {96#true} is VALID [2020-07-28 19:01:46,490 INFO L280 TraceCheckUtils]: 2: Hoare triple {96#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {96#true} is VALID [2020-07-28 19:01:46,491 INFO L280 TraceCheckUtils]: 3: Hoare triple {96#true} main_#t~ret38 := valid_product_#res;assume -2147483648 <= main_#t~ret38 && main_#t~ret38 <= 2147483647;main_~tmp~5 := main_#t~ret38;havoc main_#t~ret38; {96#true} is VALID [2020-07-28 19:01:46,491 INFO L280 TraceCheckUtils]: 4: Hoare triple {96#true} assume 0 != main_~tmp~5; {96#true} is VALID [2020-07-28 19:01:46,492 INFO L280 TraceCheckUtils]: 5: Hoare triple {96#true} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {96#true} is VALID [2020-07-28 19:01:46,493 INFO L280 TraceCheckUtils]: 6: Hoare triple {96#true} assume !true; {97#false} is VALID [2020-07-28 19:01:46,493 INFO L280 TraceCheckUtils]: 7: Hoare triple {97#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {97#false} is VALID [2020-07-28 19:01:46,494 INFO L280 TraceCheckUtils]: 8: Hoare triple {97#false} assume !(0 != ~pumpRunning~0); {97#false} is VALID [2020-07-28 19:01:46,494 INFO L280 TraceCheckUtils]: 9: Hoare triple {97#false} assume !(0 != ~systemActive~0); {97#false} is VALID [2020-07-28 19:01:46,494 INFO L280 TraceCheckUtils]: 10: Hoare triple {97#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~5;havoc isMethaneLevelCritical_~retValue_acc~5;isMethaneLevelCritical_~retValue_acc~5 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~5; {97#false} is VALID [2020-07-28 19:01:46,495 INFO L280 TraceCheckUtils]: 11: Hoare triple {97#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {97#false} is VALID [2020-07-28 19:01:46,495 INFO L280 TraceCheckUtils]: 12: Hoare triple {97#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~6;havoc getWaterLevel_~retValue_acc~6;getWaterLevel_~retValue_acc~6 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~6; {97#false} is VALID [2020-07-28 19:01:46,496 INFO L280 TraceCheckUtils]: 13: Hoare triple {97#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {97#false} is VALID [2020-07-28 19:01:46,496 INFO L280 TraceCheckUtils]: 14: Hoare triple {97#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {97#false} is VALID [2020-07-28 19:01:46,496 INFO L280 TraceCheckUtils]: 15: Hoare triple {97#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {97#false} is VALID [2020-07-28 19:01:46,497 INFO L280 TraceCheckUtils]: 16: Hoare triple {97#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {97#false} is VALID [2020-07-28 19:01:46,497 INFO L280 TraceCheckUtils]: 17: Hoare triple {97#false} assume !false; {97#false} is VALID [2020-07-28 19:01:46,502 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:46,503 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1426081187] [2020-07-28 19:01:46,504 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:46,504 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:01:46,505 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [905199979] [2020-07-28 19:01:46,512 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:01:46,514 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:46,518 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:01:46,560 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:46,561 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:01:46,561 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:46,570 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:01:46,572 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:01:46,574 INFO L87 Difference]: Start difference. First operand 93 states. Second operand 2 states. [2020-07-28 19:01:46,877 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:46,878 INFO L93 Difference]: Finished difference Result 180 states and 269 transitions. [2020-07-28 19:01:46,878 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:01:46,879 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:01:46,879 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:46,880 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:01:46,896 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 269 transitions. [2020-07-28 19:01:46,896 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:01:46,902 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 269 transitions. [2020-07-28 19:01:46,903 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 269 transitions. [2020-07-28 19:01:47,280 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 269 edges. 269 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:47,308 INFO L225 Difference]: With dead ends: 180 [2020-07-28 19:01:47,308 INFO L226 Difference]: Without dead ends: 89 [2020-07-28 19:01:47,313 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:01:47,334 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2020-07-28 19:01:47,379 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 89. [2020-07-28 19:01:47,379 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:47,380 INFO L82 GeneralOperation]: Start isEquivalent. First operand 89 states. Second operand 89 states. [2020-07-28 19:01:47,381 INFO L74 IsIncluded]: Start isIncluded. First operand 89 states. Second operand 89 states. [2020-07-28 19:01:47,381 INFO L87 Difference]: Start difference. First operand 89 states. Second operand 89 states. [2020-07-28 19:01:47,388 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:47,389 INFO L93 Difference]: Finished difference Result 89 states and 126 transitions. [2020-07-28 19:01:47,389 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 126 transitions. [2020-07-28 19:01:47,390 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:47,391 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:47,391 INFO L74 IsIncluded]: Start isIncluded. First operand 89 states. Second operand 89 states. [2020-07-28 19:01:47,391 INFO L87 Difference]: Start difference. First operand 89 states. Second operand 89 states. [2020-07-28 19:01:47,398 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:47,399 INFO L93 Difference]: Finished difference Result 89 states and 126 transitions. [2020-07-28 19:01:47,399 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 126 transitions. [2020-07-28 19:01:47,400 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:47,401 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:47,401 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:47,402 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:47,402 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 89 states. [2020-07-28 19:01:47,407 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 126 transitions. [2020-07-28 19:01:47,409 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 126 transitions. Word has length 18 [2020-07-28 19:01:47,410 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:47,410 INFO L479 AbstractCegarLoop]: Abstraction has 89 states and 126 transitions. [2020-07-28 19:01:47,411 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:01:47,411 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 126 transitions. [2020-07-28 19:01:47,412 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 19:01:47,412 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:47,413 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:47,413 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:01:47,414 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:47,414 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:47,414 INFO L82 PathProgramCache]: Analyzing trace with hash 1493643632, now seen corresponding path program 1 times [2020-07-28 19:01:47,415 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:47,415 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1502451144] [2020-07-28 19:01:47,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:47,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:47,575 INFO L280 TraceCheckUtils]: 0: Hoare triple {659#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(13);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(110, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 2 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 3 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string11.base, #t~string11.offset, 1);call write~init~int(80, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(117, #t~string11.base, 2 + #t~string11.offset, 1);call write~init~int(109, #t~string11.base, 3 + #t~string11.offset, 1);call write~init~int(112, #t~string11.base, 4 + #t~string11.offset, 1);call write~init~int(58, #t~string11.base, 5 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 6 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(110, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 2 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string15.base, #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 3 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string17.base, #t~string17.offset, 1);call write~init~int(32, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string19.base, #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 1 + #t~string19.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {659#true} is VALID [2020-07-28 19:01:47,575 INFO L280 TraceCheckUtils]: 1: Hoare triple {659#true} havoc main_#res;havoc main_#t~ret38, main_~retValue_acc~8, main_~tmp~5;havoc main_~retValue_acc~8;havoc main_~tmp~5; {659#true} is VALID [2020-07-28 19:01:47,576 INFO L280 TraceCheckUtils]: 2: Hoare triple {659#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {659#true} is VALID [2020-07-28 19:01:47,576 INFO L280 TraceCheckUtils]: 3: Hoare triple {659#true} main_#t~ret38 := valid_product_#res;assume -2147483648 <= main_#t~ret38 && main_#t~ret38 <= 2147483647;main_~tmp~5 := main_#t~ret38;havoc main_#t~ret38; {659#true} is VALID [2020-07-28 19:01:47,577 INFO L280 TraceCheckUtils]: 4: Hoare triple {659#true} assume 0 != main_~tmp~5; {659#true} is VALID [2020-07-28 19:01:47,578 INFO L280 TraceCheckUtils]: 5: Hoare triple {659#true} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {661#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:01:47,578 INFO L280 TraceCheckUtils]: 6: Hoare triple {661#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {661#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:01:47,579 INFO L280 TraceCheckUtils]: 7: Hoare triple {661#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {660#false} is VALID [2020-07-28 19:01:47,580 INFO L280 TraceCheckUtils]: 8: Hoare triple {660#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {660#false} is VALID [2020-07-28 19:01:47,580 INFO L280 TraceCheckUtils]: 9: Hoare triple {660#false} assume !(0 != ~pumpRunning~0); {660#false} is VALID [2020-07-28 19:01:47,580 INFO L280 TraceCheckUtils]: 10: Hoare triple {660#false} assume !(0 != ~systemActive~0); {660#false} is VALID [2020-07-28 19:01:47,581 INFO L280 TraceCheckUtils]: 11: Hoare triple {660#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~5;havoc isMethaneLevelCritical_~retValue_acc~5;isMethaneLevelCritical_~retValue_acc~5 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~5; {660#false} is VALID [2020-07-28 19:01:47,581 INFO L280 TraceCheckUtils]: 12: Hoare triple {660#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {660#false} is VALID [2020-07-28 19:01:47,581 INFO L280 TraceCheckUtils]: 13: Hoare triple {660#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~6;havoc getWaterLevel_~retValue_acc~6;getWaterLevel_~retValue_acc~6 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~6; {660#false} is VALID [2020-07-28 19:01:47,582 INFO L280 TraceCheckUtils]: 14: Hoare triple {660#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {660#false} is VALID [2020-07-28 19:01:47,582 INFO L280 TraceCheckUtils]: 15: Hoare triple {660#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {660#false} is VALID [2020-07-28 19:01:47,582 INFO L280 TraceCheckUtils]: 16: Hoare triple {660#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {660#false} is VALID [2020-07-28 19:01:47,583 INFO L280 TraceCheckUtils]: 17: Hoare triple {660#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {660#false} is VALID [2020-07-28 19:01:47,583 INFO L280 TraceCheckUtils]: 18: Hoare triple {660#false} assume !false; {660#false} is VALID [2020-07-28 19:01:47,585 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:47,585 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1502451144] [2020-07-28 19:01:47,586 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:47,586 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:01:47,586 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1717279998] [2020-07-28 19:01:47,588 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:01:47,588 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:47,588 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:01:47,630 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:47,631 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:01:47,631 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:47,631 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:01:47,632 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:47,632 INFO L87 Difference]: Start difference. First operand 89 states and 126 transitions. Second operand 3 states. [2020-07-28 19:01:47,876 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:47,876 INFO L93 Difference]: Finished difference Result 89 states and 126 transitions. [2020-07-28 19:01:47,876 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:01:47,876 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:01:47,877 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:47,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:47,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 126 transitions. [2020-07-28 19:01:47,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:47,883 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 126 transitions. [2020-07-28 19:01:47,883 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 126 transitions. [2020-07-28 19:01:48,043 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 126 edges. 126 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:48,045 INFO L225 Difference]: With dead ends: 89 [2020-07-28 19:01:48,045 INFO L226 Difference]: Without dead ends: 39 [2020-07-28 19:01:48,047 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:48,048 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2020-07-28 19:01:48,066 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 39. [2020-07-28 19:01:48,066 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:48,066 INFO L82 GeneralOperation]: Start isEquivalent. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:48,066 INFO L74 IsIncluded]: Start isIncluded. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:48,066 INFO L87 Difference]: Start difference. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:48,068 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:48,069 INFO L93 Difference]: Finished difference Result 39 states and 55 transitions. [2020-07-28 19:01:48,069 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 55 transitions. [2020-07-28 19:01:48,069 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:48,070 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:48,070 INFO L74 IsIncluded]: Start isIncluded. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:48,070 INFO L87 Difference]: Start difference. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:48,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:48,072 INFO L93 Difference]: Finished difference Result 39 states and 55 transitions. [2020-07-28 19:01:48,072 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 55 transitions. [2020-07-28 19:01:48,073 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:48,073 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:48,073 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:48,073 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:48,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 39 states. [2020-07-28 19:01:48,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 55 transitions. [2020-07-28 19:01:48,075 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 55 transitions. Word has length 19 [2020-07-28 19:01:48,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:48,076 INFO L479 AbstractCegarLoop]: Abstraction has 39 states and 55 transitions. [2020-07-28 19:01:48,076 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:01:48,076 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 55 transitions. [2020-07-28 19:01:48,077 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 19:01:48,077 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:48,077 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:48,077 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:01:48,078 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:48,078 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:48,078 INFO L82 PathProgramCache]: Analyzing trace with hash 590350463, now seen corresponding path program 1 times [2020-07-28 19:01:48,078 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:48,079 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [681833569] [2020-07-28 19:01:48,079 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:48,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:48,229 INFO L280 TraceCheckUtils]: 0: Hoare triple {922#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(13);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(110, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 2 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 3 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string11.base, #t~string11.offset, 1);call write~init~int(80, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(117, #t~string11.base, 2 + #t~string11.offset, 1);call write~init~int(109, #t~string11.base, 3 + #t~string11.offset, 1);call write~init~int(112, #t~string11.base, 4 + #t~string11.offset, 1);call write~init~int(58, #t~string11.base, 5 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 6 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(110, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 2 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string15.base, #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 3 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string17.base, #t~string17.offset, 1);call write~init~int(32, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string19.base, #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 1 + #t~string19.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {924#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:48,230 INFO L280 TraceCheckUtils]: 1: Hoare triple {924#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret38, main_~retValue_acc~8, main_~tmp~5;havoc main_~retValue_acc~8;havoc main_~tmp~5; {924#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:48,230 INFO L280 TraceCheckUtils]: 2: Hoare triple {924#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {924#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:48,231 INFO L280 TraceCheckUtils]: 3: Hoare triple {924#(= 1 ~systemActive~0)} main_#t~ret38 := valid_product_#res;assume -2147483648 <= main_#t~ret38 && main_#t~ret38 <= 2147483647;main_~tmp~5 := main_#t~ret38;havoc main_#t~ret38; {924#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:48,232 INFO L280 TraceCheckUtils]: 4: Hoare triple {924#(= 1 ~systemActive~0)} assume 0 != main_~tmp~5; {924#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:48,232 INFO L280 TraceCheckUtils]: 5: Hoare triple {924#(= 1 ~systemActive~0)} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {924#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:48,233 INFO L280 TraceCheckUtils]: 6: Hoare triple {924#(= 1 ~systemActive~0)} assume !false; {924#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:48,234 INFO L280 TraceCheckUtils]: 7: Hoare triple {924#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0 < 4; {924#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:48,234 INFO L280 TraceCheckUtils]: 8: Hoare triple {924#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~3 := test_#t~nondet21;havoc test_#t~nondet21; {924#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:48,235 INFO L280 TraceCheckUtils]: 9: Hoare triple {924#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~3); {924#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:48,236 INFO L280 TraceCheckUtils]: 10: Hoare triple {924#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~1 := test_#t~nondet22;havoc test_#t~nondet22; {924#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:48,236 INFO L280 TraceCheckUtils]: 11: Hoare triple {924#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~1); {924#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:48,243 INFO L280 TraceCheckUtils]: 12: Hoare triple {924#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {924#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:48,244 INFO L280 TraceCheckUtils]: 13: Hoare triple {924#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0; {924#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:48,245 INFO L280 TraceCheckUtils]: 14: Hoare triple {924#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {924#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:48,250 INFO L280 TraceCheckUtils]: 15: Hoare triple {924#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {923#false} is VALID [2020-07-28 19:01:48,251 INFO L280 TraceCheckUtils]: 16: Hoare triple {923#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~5;havoc isMethaneLevelCritical_~retValue_acc~5;isMethaneLevelCritical_~retValue_acc~5 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~5; {923#false} is VALID [2020-07-28 19:01:48,251 INFO L280 TraceCheckUtils]: 17: Hoare triple {923#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {923#false} is VALID [2020-07-28 19:01:48,251 INFO L280 TraceCheckUtils]: 18: Hoare triple {923#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~6;havoc getWaterLevel_~retValue_acc~6;getWaterLevel_~retValue_acc~6 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~6; {923#false} is VALID [2020-07-28 19:01:48,252 INFO L280 TraceCheckUtils]: 19: Hoare triple {923#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {923#false} is VALID [2020-07-28 19:01:48,252 INFO L280 TraceCheckUtils]: 20: Hoare triple {923#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {923#false} is VALID [2020-07-28 19:01:48,253 INFO L280 TraceCheckUtils]: 21: Hoare triple {923#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {923#false} is VALID [2020-07-28 19:01:48,253 INFO L280 TraceCheckUtils]: 22: Hoare triple {923#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {923#false} is VALID [2020-07-28 19:01:48,253 INFO L280 TraceCheckUtils]: 23: Hoare triple {923#false} assume !false; {923#false} is VALID [2020-07-28 19:01:48,255 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:48,255 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [681833569] [2020-07-28 19:01:48,257 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:48,257 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:01:48,258 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [477292439] [2020-07-28 19:01:48,258 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 19:01:48,259 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:48,259 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:01:48,295 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:48,296 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:01:48,296 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:48,296 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:01:48,296 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:48,297 INFO L87 Difference]: Start difference. First operand 39 states and 55 transitions. Second operand 3 states. [2020-07-28 19:01:48,456 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:48,457 INFO L93 Difference]: Finished difference Result 72 states and 104 transitions. [2020-07-28 19:01:48,457 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:01:48,457 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 19:01:48,457 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:48,457 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:48,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 104 transitions. [2020-07-28 19:01:48,462 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:48,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 104 transitions. [2020-07-28 19:01:48,466 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 104 transitions. [2020-07-28 19:01:48,575 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 104 edges. 104 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:48,576 INFO L225 Difference]: With dead ends: 72 [2020-07-28 19:01:48,576 INFO L226 Difference]: Without dead ends: 39 [2020-07-28 19:01:48,577 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:48,577 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2020-07-28 19:01:48,601 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 39. [2020-07-28 19:01:48,602 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:48,602 INFO L82 GeneralOperation]: Start isEquivalent. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:48,602 INFO L74 IsIncluded]: Start isIncluded. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:48,602 INFO L87 Difference]: Start difference. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:48,604 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:48,604 INFO L93 Difference]: Finished difference Result 39 states and 54 transitions. [2020-07-28 19:01:48,604 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 54 transitions. [2020-07-28 19:01:48,610 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:48,610 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:48,610 INFO L74 IsIncluded]: Start isIncluded. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:48,610 INFO L87 Difference]: Start difference. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:48,612 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:48,612 INFO L93 Difference]: Finished difference Result 39 states and 54 transitions. [2020-07-28 19:01:48,612 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 54 transitions. [2020-07-28 19:01:48,613 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:48,613 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:48,613 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:48,613 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:48,614 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 39 states. [2020-07-28 19:01:48,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 54 transitions. [2020-07-28 19:01:48,619 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 54 transitions. Word has length 24 [2020-07-28 19:01:48,619 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:48,619 INFO L479 AbstractCegarLoop]: Abstraction has 39 states and 54 transitions. [2020-07-28 19:01:48,619 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:01:48,620 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 54 transitions. [2020-07-28 19:01:48,620 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2020-07-28 19:01:48,621 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:48,621 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:48,621 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:01:48,621 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:48,621 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:48,622 INFO L82 PathProgramCache]: Analyzing trace with hash 1748150010, now seen corresponding path program 1 times [2020-07-28 19:01:48,622 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:48,622 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1028344509] [2020-07-28 19:01:48,625 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:48,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:48,697 INFO L280 TraceCheckUtils]: 0: Hoare triple {1158#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(13);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(110, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 2 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 3 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string11.base, #t~string11.offset, 1);call write~init~int(80, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(117, #t~string11.base, 2 + #t~string11.offset, 1);call write~init~int(109, #t~string11.base, 3 + #t~string11.offset, 1);call write~init~int(112, #t~string11.base, 4 + #t~string11.offset, 1);call write~init~int(58, #t~string11.base, 5 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 6 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(110, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 2 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string15.base, #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 3 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string17.base, #t~string17.offset, 1);call write~init~int(32, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string19.base, #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 1 + #t~string19.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,698 INFO L280 TraceCheckUtils]: 1: Hoare triple {1160#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret38, main_~retValue_acc~8, main_~tmp~5;havoc main_~retValue_acc~8;havoc main_~tmp~5; {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,698 INFO L280 TraceCheckUtils]: 2: Hoare triple {1160#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,699 INFO L280 TraceCheckUtils]: 3: Hoare triple {1160#(= 0 ~pumpRunning~0)} main_#t~ret38 := valid_product_#res;assume -2147483648 <= main_#t~ret38 && main_#t~ret38 <= 2147483647;main_~tmp~5 := main_#t~ret38;havoc main_#t~ret38; {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,700 INFO L280 TraceCheckUtils]: 4: Hoare triple {1160#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~5; {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,700 INFO L280 TraceCheckUtils]: 5: Hoare triple {1160#(= 0 ~pumpRunning~0)} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,701 INFO L280 TraceCheckUtils]: 6: Hoare triple {1160#(= 0 ~pumpRunning~0)} assume !false; {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,701 INFO L280 TraceCheckUtils]: 7: Hoare triple {1160#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,702 INFO L280 TraceCheckUtils]: 8: Hoare triple {1160#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~3 := test_#t~nondet21;havoc test_#t~nondet21; {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,702 INFO L280 TraceCheckUtils]: 9: Hoare triple {1160#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~3); {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,703 INFO L280 TraceCheckUtils]: 10: Hoare triple {1160#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~1 := test_#t~nondet22;havoc test_#t~nondet22; {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,704 INFO L280 TraceCheckUtils]: 11: Hoare triple {1160#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~1); {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,704 INFO L280 TraceCheckUtils]: 12: Hoare triple {1160#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,705 INFO L280 TraceCheckUtils]: 13: Hoare triple {1160#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,705 INFO L280 TraceCheckUtils]: 14: Hoare triple {1160#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,706 INFO L280 TraceCheckUtils]: 15: Hoare triple {1160#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~0;havoc processEnvironment_~tmp~0; {1160#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,707 INFO L280 TraceCheckUtils]: 16: Hoare triple {1160#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {1159#false} is VALID [2020-07-28 19:01:48,707 INFO L280 TraceCheckUtils]: 17: Hoare triple {1159#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~5;havoc isMethaneLevelCritical_~retValue_acc~5;isMethaneLevelCritical_~retValue_acc~5 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~5; {1159#false} is VALID [2020-07-28 19:01:48,707 INFO L280 TraceCheckUtils]: 18: Hoare triple {1159#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {1159#false} is VALID [2020-07-28 19:01:48,707 INFO L280 TraceCheckUtils]: 19: Hoare triple {1159#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~6;havoc getWaterLevel_~retValue_acc~6;getWaterLevel_~retValue_acc~6 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~6; {1159#false} is VALID [2020-07-28 19:01:48,708 INFO L280 TraceCheckUtils]: 20: Hoare triple {1159#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {1159#false} is VALID [2020-07-28 19:01:48,708 INFO L280 TraceCheckUtils]: 21: Hoare triple {1159#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {1159#false} is VALID [2020-07-28 19:01:48,708 INFO L280 TraceCheckUtils]: 22: Hoare triple {1159#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {1159#false} is VALID [2020-07-28 19:01:48,709 INFO L280 TraceCheckUtils]: 23: Hoare triple {1159#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {1159#false} is VALID [2020-07-28 19:01:48,709 INFO L280 TraceCheckUtils]: 24: Hoare triple {1159#false} assume !false; {1159#false} is VALID [2020-07-28 19:01:48,710 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:48,710 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1028344509] [2020-07-28 19:01:48,711 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:48,711 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:01:48,711 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1830449287] [2020-07-28 19:01:48,711 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 25 [2020-07-28 19:01:48,712 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:48,712 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:01:48,742 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:48,743 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:01:48,743 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:48,743 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:01:48,743 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:48,744 INFO L87 Difference]: Start difference. First operand 39 states and 54 transitions. Second operand 3 states. [2020-07-28 19:01:48,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:48,949 INFO L93 Difference]: Finished difference Result 95 states and 135 transitions. [2020-07-28 19:01:48,949 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:01:48,949 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 25 [2020-07-28 19:01:48,949 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:48,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:48,951 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 135 transitions. [2020-07-28 19:01:48,952 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:48,953 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 135 transitions. [2020-07-28 19:01:48,954 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 135 transitions. [2020-07-28 19:01:49,120 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 135 edges. 135 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:49,123 INFO L225 Difference]: With dead ends: 95 [2020-07-28 19:01:49,123 INFO L226 Difference]: Without dead ends: 62 [2020-07-28 19:01:49,124 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:49,124 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2020-07-28 19:01:49,171 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 60. [2020-07-28 19:01:49,171 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:49,171 INFO L82 GeneralOperation]: Start isEquivalent. First operand 62 states. Second operand 60 states. [2020-07-28 19:01:49,171 INFO L74 IsIncluded]: Start isIncluded. First operand 62 states. Second operand 60 states. [2020-07-28 19:01:49,172 INFO L87 Difference]: Start difference. First operand 62 states. Second operand 60 states. [2020-07-28 19:01:49,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:49,176 INFO L93 Difference]: Finished difference Result 62 states and 85 transitions. [2020-07-28 19:01:49,176 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 85 transitions. [2020-07-28 19:01:49,176 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:49,176 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:49,176 INFO L74 IsIncluded]: Start isIncluded. First operand 60 states. Second operand 62 states. [2020-07-28 19:01:49,177 INFO L87 Difference]: Start difference. First operand 60 states. Second operand 62 states. [2020-07-28 19:01:49,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:49,181 INFO L93 Difference]: Finished difference Result 62 states and 85 transitions. [2020-07-28 19:01:49,182 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 85 transitions. [2020-07-28 19:01:49,183 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:49,184 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:49,185 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:49,185 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:49,185 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 60 states. [2020-07-28 19:01:49,188 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 84 transitions. [2020-07-28 19:01:49,190 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 84 transitions. Word has length 25 [2020-07-28 19:01:49,191 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:49,191 INFO L479 AbstractCegarLoop]: Abstraction has 60 states and 84 transitions. [2020-07-28 19:01:49,191 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:01:49,191 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 84 transitions. [2020-07-28 19:01:49,192 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2020-07-28 19:01:49,193 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:49,193 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:49,195 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:01:49,199 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:49,199 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:49,201 INFO L82 PathProgramCache]: Analyzing trace with hash 787955310, now seen corresponding path program 1 times [2020-07-28 19:01:49,202 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:49,202 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [109134036] [2020-07-28 19:01:49,202 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:49,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:49,356 INFO L280 TraceCheckUtils]: 0: Hoare triple {1500#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(13);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(110, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 2 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 3 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string11.base, #t~string11.offset, 1);call write~init~int(80, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(117, #t~string11.base, 2 + #t~string11.offset, 1);call write~init~int(109, #t~string11.base, 3 + #t~string11.offset, 1);call write~init~int(112, #t~string11.base, 4 + #t~string11.offset, 1);call write~init~int(58, #t~string11.base, 5 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 6 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(110, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 2 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string15.base, #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 3 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string17.base, #t~string17.offset, 1);call write~init~int(32, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string19.base, #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 1 + #t~string19.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,357 INFO L280 TraceCheckUtils]: 1: Hoare triple {1502#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret38, main_~retValue_acc~8, main_~tmp~5;havoc main_~retValue_acc~8;havoc main_~tmp~5; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,358 INFO L280 TraceCheckUtils]: 2: Hoare triple {1502#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,358 INFO L280 TraceCheckUtils]: 3: Hoare triple {1502#(= 1 ~waterLevel~0)} main_#t~ret38 := valid_product_#res;assume -2147483648 <= main_#t~ret38 && main_#t~ret38 <= 2147483647;main_~tmp~5 := main_#t~ret38;havoc main_#t~ret38; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,361 INFO L280 TraceCheckUtils]: 4: Hoare triple {1502#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~5; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,362 INFO L280 TraceCheckUtils]: 5: Hoare triple {1502#(= 1 ~waterLevel~0)} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,363 INFO L280 TraceCheckUtils]: 6: Hoare triple {1502#(= 1 ~waterLevel~0)} assume !false; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,363 INFO L280 TraceCheckUtils]: 7: Hoare triple {1502#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,364 INFO L280 TraceCheckUtils]: 8: Hoare triple {1502#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~3 := test_#t~nondet21;havoc test_#t~nondet21; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,364 INFO L280 TraceCheckUtils]: 9: Hoare triple {1502#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~3); {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,365 INFO L280 TraceCheckUtils]: 10: Hoare triple {1502#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~1 := test_#t~nondet22;havoc test_#t~nondet22; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,366 INFO L280 TraceCheckUtils]: 11: Hoare triple {1502#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~1); {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,367 INFO L280 TraceCheckUtils]: 12: Hoare triple {1502#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,367 INFO L280 TraceCheckUtils]: 13: Hoare triple {1502#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,368 INFO L280 TraceCheckUtils]: 14: Hoare triple {1502#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,368 INFO L280 TraceCheckUtils]: 15: Hoare triple {1502#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~0;havoc processEnvironment_~tmp~0; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,369 INFO L280 TraceCheckUtils]: 16: Hoare triple {1502#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret20, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~7;havoc isHighWaterSensorDry_~retValue_acc~7; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,369 INFO L280 TraceCheckUtils]: 17: Hoare triple {1502#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~7 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~7; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,369 INFO L280 TraceCheckUtils]: 18: Hoare triple {1502#(= 1 ~waterLevel~0)} isHighWaterLevel_#t~ret20 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret20 && isHighWaterLevel_#t~ret20 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret20;havoc isHighWaterLevel_#t~ret20; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,370 INFO L280 TraceCheckUtils]: 19: Hoare triple {1502#(= 1 ~waterLevel~0)} assume 0 != isHighWaterLevel_~tmp~2;isHighWaterLevel_~tmp___0~0 := 0; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,371 INFO L280 TraceCheckUtils]: 20: Hoare triple {1502#(= 1 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,371 INFO L280 TraceCheckUtils]: 21: Hoare triple {1502#(= 1 ~waterLevel~0)} processEnvironment_#t~ret1 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret1 && processEnvironment_#t~ret1 <= 2147483647;processEnvironment_~tmp~0 := processEnvironment_#t~ret1;havoc processEnvironment_#t~ret1; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,373 INFO L280 TraceCheckUtils]: 22: Hoare triple {1502#(= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~0); {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,374 INFO L280 TraceCheckUtils]: 23: Hoare triple {1502#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~5;havoc isMethaneLevelCritical_~retValue_acc~5;isMethaneLevelCritical_~retValue_acc~5 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~5; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,375 INFO L280 TraceCheckUtils]: 24: Hoare triple {1502#(= 1 ~waterLevel~0)} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {1502#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,376 INFO L280 TraceCheckUtils]: 25: Hoare triple {1502#(= 1 ~waterLevel~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~6;havoc getWaterLevel_~retValue_acc~6;getWaterLevel_~retValue_acc~6 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~6; {1503#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:01:49,376 INFO L280 TraceCheckUtils]: 26: Hoare triple {1503#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {1504#(= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~2 1)} is VALID [2020-07-28 19:01:49,377 INFO L280 TraceCheckUtils]: 27: Hoare triple {1504#(= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~2 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {1501#false} is VALID [2020-07-28 19:01:49,377 INFO L280 TraceCheckUtils]: 28: Hoare triple {1501#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {1501#false} is VALID [2020-07-28 19:01:49,377 INFO L280 TraceCheckUtils]: 29: Hoare triple {1501#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {1501#false} is VALID [2020-07-28 19:01:49,378 INFO L280 TraceCheckUtils]: 30: Hoare triple {1501#false} assume !false; {1501#false} is VALID [2020-07-28 19:01:49,379 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:49,380 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [109134036] [2020-07-28 19:01:49,380 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:49,380 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:01:49,380 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1184824866] [2020-07-28 19:01:49,381 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 31 [2020-07-28 19:01:49,381 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:49,381 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:01:49,425 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:49,425 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:01:49,426 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:49,426 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:01:49,426 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:01:49,426 INFO L87 Difference]: Start difference. First operand 60 states and 84 transitions. Second operand 5 states. [2020-07-28 19:01:50,326 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:50,327 INFO L93 Difference]: Finished difference Result 314 states and 458 transitions. [2020-07-28 19:01:50,327 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:01:50,328 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 31 [2020-07-28 19:01:50,330 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:50,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:50,339 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 294 transitions. [2020-07-28 19:01:50,339 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:50,344 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 294 transitions. [2020-07-28 19:01:50,345 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 294 transitions. [2020-07-28 19:01:50,732 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 294 edges. 294 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:50,741 INFO L225 Difference]: With dead ends: 314 [2020-07-28 19:01:50,741 INFO L226 Difference]: Without dead ends: 260 [2020-07-28 19:01:50,742 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:01:50,743 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 260 states. [2020-07-28 19:01:50,890 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 260 to 106. [2020-07-28 19:01:50,890 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:50,890 INFO L82 GeneralOperation]: Start isEquivalent. First operand 260 states. Second operand 106 states. [2020-07-28 19:01:50,891 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 106 states. [2020-07-28 19:01:50,891 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 106 states. [2020-07-28 19:01:50,900 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:50,900 INFO L93 Difference]: Finished difference Result 260 states and 366 transitions. [2020-07-28 19:01:50,901 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 366 transitions. [2020-07-28 19:01:50,901 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:50,902 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:50,902 INFO L74 IsIncluded]: Start isIncluded. First operand 106 states. Second operand 260 states. [2020-07-28 19:01:50,902 INFO L87 Difference]: Start difference. First operand 106 states. Second operand 260 states. [2020-07-28 19:01:50,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:50,912 INFO L93 Difference]: Finished difference Result 260 states and 366 transitions. [2020-07-28 19:01:50,913 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 366 transitions. [2020-07-28 19:01:50,913 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:50,913 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:50,914 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:50,914 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:50,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 106 states. [2020-07-28 19:01:50,917 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 146 transitions. [2020-07-28 19:01:50,918 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 146 transitions. Word has length 31 [2020-07-28 19:01:50,918 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:50,918 INFO L479 AbstractCegarLoop]: Abstraction has 106 states and 146 transitions. [2020-07-28 19:01:50,918 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:01:50,918 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 146 transitions. [2020-07-28 19:01:50,919 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2020-07-28 19:01:50,919 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:50,919 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:50,919 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:01:50,920 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:50,920 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:50,920 INFO L82 PathProgramCache]: Analyzing trace with hash -1324804560, now seen corresponding path program 1 times [2020-07-28 19:01:50,920 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:50,920 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1824061415] [2020-07-28 19:01:50,921 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:50,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:50,999 INFO L280 TraceCheckUtils]: 0: Hoare triple {2609#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(13);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(110, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 2 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 3 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string11.base, #t~string11.offset, 1);call write~init~int(80, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(117, #t~string11.base, 2 + #t~string11.offset, 1);call write~init~int(109, #t~string11.base, 3 + #t~string11.offset, 1);call write~init~int(112, #t~string11.base, 4 + #t~string11.offset, 1);call write~init~int(58, #t~string11.base, 5 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 6 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(110, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 2 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string15.base, #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 3 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string17.base, #t~string17.offset, 1);call write~init~int(32, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string19.base, #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 1 + #t~string19.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {2611#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:50,999 INFO L280 TraceCheckUtils]: 1: Hoare triple {2611#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret38, main_~retValue_acc~8, main_~tmp~5;havoc main_~retValue_acc~8;havoc main_~tmp~5; {2611#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,000 INFO L280 TraceCheckUtils]: 2: Hoare triple {2611#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {2611#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,003 INFO L280 TraceCheckUtils]: 3: Hoare triple {2611#(= 1 ~waterLevel~0)} main_#t~ret38 := valid_product_#res;assume -2147483648 <= main_#t~ret38 && main_#t~ret38 <= 2147483647;main_~tmp~5 := main_#t~ret38;havoc main_#t~ret38; {2611#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,004 INFO L280 TraceCheckUtils]: 4: Hoare triple {2611#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~5; {2611#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,005 INFO L280 TraceCheckUtils]: 5: Hoare triple {2611#(= 1 ~waterLevel~0)} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2611#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,006 INFO L280 TraceCheckUtils]: 6: Hoare triple {2611#(= 1 ~waterLevel~0)} assume !false; {2611#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,006 INFO L280 TraceCheckUtils]: 7: Hoare triple {2611#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {2611#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,007 INFO L280 TraceCheckUtils]: 8: Hoare triple {2611#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~3 := test_#t~nondet21;havoc test_#t~nondet21; {2611#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,008 INFO L280 TraceCheckUtils]: 9: Hoare triple {2611#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~3; {2611#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,009 INFO L280 TraceCheckUtils]: 10: Hoare triple {2611#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {2612#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,010 INFO L280 TraceCheckUtils]: 11: Hoare triple {2612#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~1 := test_#t~nondet22;havoc test_#t~nondet22; {2612#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,011 INFO L280 TraceCheckUtils]: 12: Hoare triple {2612#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~1); {2612#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,012 INFO L280 TraceCheckUtils]: 13: Hoare triple {2612#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {2612#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,013 INFO L280 TraceCheckUtils]: 14: Hoare triple {2612#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {2612#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,014 INFO L280 TraceCheckUtils]: 15: Hoare triple {2612#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {2612#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,015 INFO L280 TraceCheckUtils]: 16: Hoare triple {2612#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~0;havoc processEnvironment_~tmp~0; {2612#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,016 INFO L280 TraceCheckUtils]: 17: Hoare triple {2612#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret20, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~7;havoc isHighWaterSensorDry_~retValue_acc~7; {2612#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,017 INFO L280 TraceCheckUtils]: 18: Hoare triple {2612#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~7 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~7; {2610#false} is VALID [2020-07-28 19:01:51,017 INFO L280 TraceCheckUtils]: 19: Hoare triple {2610#false} isHighWaterLevel_#t~ret20 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret20 && isHighWaterLevel_#t~ret20 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret20;havoc isHighWaterLevel_#t~ret20; {2610#false} is VALID [2020-07-28 19:01:51,017 INFO L280 TraceCheckUtils]: 20: Hoare triple {2610#false} assume 0 != isHighWaterLevel_~tmp~2;isHighWaterLevel_~tmp___0~0 := 0; {2610#false} is VALID [2020-07-28 19:01:51,017 INFO L280 TraceCheckUtils]: 21: Hoare triple {2610#false} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {2610#false} is VALID [2020-07-28 19:01:51,017 INFO L280 TraceCheckUtils]: 22: Hoare triple {2610#false} processEnvironment_#t~ret1 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret1 && processEnvironment_#t~ret1 <= 2147483647;processEnvironment_~tmp~0 := processEnvironment_#t~ret1;havoc processEnvironment_#t~ret1; {2610#false} is VALID [2020-07-28 19:01:51,017 INFO L280 TraceCheckUtils]: 23: Hoare triple {2610#false} assume !(0 != processEnvironment_~tmp~0); {2610#false} is VALID [2020-07-28 19:01:51,018 INFO L280 TraceCheckUtils]: 24: Hoare triple {2610#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~5;havoc isMethaneLevelCritical_~retValue_acc~5;isMethaneLevelCritical_~retValue_acc~5 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~5; {2610#false} is VALID [2020-07-28 19:01:51,018 INFO L280 TraceCheckUtils]: 25: Hoare triple {2610#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {2610#false} is VALID [2020-07-28 19:01:51,018 INFO L280 TraceCheckUtils]: 26: Hoare triple {2610#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~6;havoc getWaterLevel_~retValue_acc~6;getWaterLevel_~retValue_acc~6 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~6; {2610#false} is VALID [2020-07-28 19:01:51,018 INFO L280 TraceCheckUtils]: 27: Hoare triple {2610#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {2610#false} is VALID [2020-07-28 19:01:51,018 INFO L280 TraceCheckUtils]: 28: Hoare triple {2610#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {2610#false} is VALID [2020-07-28 19:01:51,019 INFO L280 TraceCheckUtils]: 29: Hoare triple {2610#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {2610#false} is VALID [2020-07-28 19:01:51,019 INFO L280 TraceCheckUtils]: 30: Hoare triple {2610#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {2610#false} is VALID [2020-07-28 19:01:51,019 INFO L280 TraceCheckUtils]: 31: Hoare triple {2610#false} assume !false; {2610#false} is VALID [2020-07-28 19:01:51,021 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:51,021 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1824061415] [2020-07-28 19:01:51,021 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:51,021 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:01:51,022 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1375212680] [2020-07-28 19:01:51,022 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 32 [2020-07-28 19:01:51,022 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:51,022 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:01:51,066 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:51,066 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:01:51,066 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:51,067 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:01:51,067 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:01:51,067 INFO L87 Difference]: Start difference. First operand 106 states and 146 transitions. Second operand 4 states. [2020-07-28 19:01:51,553 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:51,553 INFO L93 Difference]: Finished difference Result 212 states and 299 transitions. [2020-07-28 19:01:51,554 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:01:51,554 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 32 [2020-07-28 19:01:51,554 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:51,554 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:01:51,557 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 188 transitions. [2020-07-28 19:01:51,557 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:01:51,561 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 188 transitions. [2020-07-28 19:01:51,561 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 188 transitions. [2020-07-28 19:01:51,786 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 188 edges. 188 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:51,790 INFO L225 Difference]: With dead ends: 212 [2020-07-28 19:01:51,790 INFO L226 Difference]: Without dead ends: 158 [2020-07-28 19:01:51,791 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:01:51,793 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 158 states. [2020-07-28 19:01:51,965 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 158 to 155. [2020-07-28 19:01:51,965 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:51,965 INFO L82 GeneralOperation]: Start isEquivalent. First operand 158 states. Second operand 155 states. [2020-07-28 19:01:51,965 INFO L74 IsIncluded]: Start isIncluded. First operand 158 states. Second operand 155 states. [2020-07-28 19:01:51,965 INFO L87 Difference]: Start difference. First operand 158 states. Second operand 155 states. [2020-07-28 19:01:51,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:51,970 INFO L93 Difference]: Finished difference Result 158 states and 217 transitions. [2020-07-28 19:01:51,970 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 217 transitions. [2020-07-28 19:01:51,971 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:51,971 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:51,971 INFO L74 IsIncluded]: Start isIncluded. First operand 155 states. Second operand 158 states. [2020-07-28 19:01:51,971 INFO L87 Difference]: Start difference. First operand 155 states. Second operand 158 states. [2020-07-28 19:01:51,976 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:51,977 INFO L93 Difference]: Finished difference Result 158 states and 217 transitions. [2020-07-28 19:01:51,977 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 217 transitions. [2020-07-28 19:01:51,977 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:51,977 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:51,977 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:51,978 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:51,978 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 155 states. [2020-07-28 19:01:51,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 155 states to 155 states and 215 transitions. [2020-07-28 19:01:51,983 INFO L78 Accepts]: Start accepts. Automaton has 155 states and 215 transitions. Word has length 32 [2020-07-28 19:01:51,983 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:51,984 INFO L479 AbstractCegarLoop]: Abstraction has 155 states and 215 transitions. [2020-07-28 19:01:51,984 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:01:51,984 INFO L276 IsEmpty]: Start isEmpty. Operand 155 states and 215 transitions. [2020-07-28 19:01:51,984 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2020-07-28 19:01:51,984 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:51,985 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:51,985 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:01:51,985 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:51,985 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:51,986 INFO L82 PathProgramCache]: Analyzing trace with hash 1959045486, now seen corresponding path program 1 times [2020-07-28 19:01:51,992 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:51,992 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [726688778] [2020-07-28 19:01:51,992 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:52,012 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:52,056 INFO L280 TraceCheckUtils]: 0: Hoare triple {3436#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(13);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(110, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 2 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 3 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string11.base, #t~string11.offset, 1);call write~init~int(80, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(117, #t~string11.base, 2 + #t~string11.offset, 1);call write~init~int(109, #t~string11.base, 3 + #t~string11.offset, 1);call write~init~int(112, #t~string11.base, 4 + #t~string11.offset, 1);call write~init~int(58, #t~string11.base, 5 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 6 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(110, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 2 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string15.base, #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 3 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string17.base, #t~string17.offset, 1);call write~init~int(32, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string19.base, #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 1 + #t~string19.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {3436#true} is VALID [2020-07-28 19:01:52,057 INFO L280 TraceCheckUtils]: 1: Hoare triple {3436#true} havoc main_#res;havoc main_#t~ret38, main_~retValue_acc~8, main_~tmp~5;havoc main_~retValue_acc~8;havoc main_~tmp~5; {3436#true} is VALID [2020-07-28 19:01:52,057 INFO L280 TraceCheckUtils]: 2: Hoare triple {3436#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {3436#true} is VALID [2020-07-28 19:01:52,057 INFO L280 TraceCheckUtils]: 3: Hoare triple {3436#true} main_#t~ret38 := valid_product_#res;assume -2147483648 <= main_#t~ret38 && main_#t~ret38 <= 2147483647;main_~tmp~5 := main_#t~ret38;havoc main_#t~ret38; {3436#true} is VALID [2020-07-28 19:01:52,057 INFO L280 TraceCheckUtils]: 4: Hoare triple {3436#true} assume 0 != main_~tmp~5; {3436#true} is VALID [2020-07-28 19:01:52,058 INFO L280 TraceCheckUtils]: 5: Hoare triple {3436#true} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3436#true} is VALID [2020-07-28 19:01:52,058 INFO L280 TraceCheckUtils]: 6: Hoare triple {3436#true} assume !false; {3436#true} is VALID [2020-07-28 19:01:52,058 INFO L280 TraceCheckUtils]: 7: Hoare triple {3436#true} assume test_~splverifierCounter~0 < 4; {3436#true} is VALID [2020-07-28 19:01:52,058 INFO L280 TraceCheckUtils]: 8: Hoare triple {3436#true} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~3 := test_#t~nondet21;havoc test_#t~nondet21; {3436#true} is VALID [2020-07-28 19:01:52,059 INFO L280 TraceCheckUtils]: 9: Hoare triple {3436#true} assume 0 != test_~tmp~3; {3436#true} is VALID [2020-07-28 19:01:52,059 INFO L280 TraceCheckUtils]: 10: Hoare triple {3436#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {3436#true} is VALID [2020-07-28 19:01:52,059 INFO L280 TraceCheckUtils]: 11: Hoare triple {3436#true} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~1 := test_#t~nondet22;havoc test_#t~nondet22; {3436#true} is VALID [2020-07-28 19:01:52,059 INFO L280 TraceCheckUtils]: 12: Hoare triple {3436#true} assume !(0 != test_~tmp___0~1); {3436#true} is VALID [2020-07-28 19:01:52,060 INFO L280 TraceCheckUtils]: 13: Hoare triple {3436#true} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {3436#true} is VALID [2020-07-28 19:01:52,060 INFO L280 TraceCheckUtils]: 14: Hoare triple {3436#true} assume 0 != test_~tmp___2~0; {3436#true} is VALID [2020-07-28 19:01:52,060 INFO L280 TraceCheckUtils]: 15: Hoare triple {3436#true} assume !(0 != ~pumpRunning~0); {3436#true} is VALID [2020-07-28 19:01:52,060 INFO L280 TraceCheckUtils]: 16: Hoare triple {3436#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~0;havoc processEnvironment_~tmp~0; {3436#true} is VALID [2020-07-28 19:01:52,060 INFO L280 TraceCheckUtils]: 17: Hoare triple {3436#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret20, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~7;havoc isHighWaterSensorDry_~retValue_acc~7; {3436#true} is VALID [2020-07-28 19:01:52,061 INFO L280 TraceCheckUtils]: 18: Hoare triple {3436#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~7 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~7; {3438#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:01:52,062 INFO L280 TraceCheckUtils]: 19: Hoare triple {3438#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret20 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret20 && isHighWaterLevel_#t~ret20 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret20;havoc isHighWaterLevel_#t~ret20; {3439#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)} is VALID [2020-07-28 19:01:52,063 INFO L280 TraceCheckUtils]: 20: Hoare triple {3439#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)} assume 0 != isHighWaterLevel_~tmp~2;isHighWaterLevel_~tmp___0~0 := 0; {3437#false} is VALID [2020-07-28 19:01:52,064 INFO L280 TraceCheckUtils]: 21: Hoare triple {3437#false} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {3437#false} is VALID [2020-07-28 19:01:52,064 INFO L280 TraceCheckUtils]: 22: Hoare triple {3437#false} processEnvironment_#t~ret1 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret1 && processEnvironment_#t~ret1 <= 2147483647;processEnvironment_~tmp~0 := processEnvironment_#t~ret1;havoc processEnvironment_#t~ret1; {3437#false} is VALID [2020-07-28 19:01:52,064 INFO L280 TraceCheckUtils]: 23: Hoare triple {3437#false} assume !(0 != processEnvironment_~tmp~0); {3437#false} is VALID [2020-07-28 19:01:52,064 INFO L280 TraceCheckUtils]: 24: Hoare triple {3437#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~5;havoc isMethaneLevelCritical_~retValue_acc~5;isMethaneLevelCritical_~retValue_acc~5 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~5; {3437#false} is VALID [2020-07-28 19:01:52,064 INFO L280 TraceCheckUtils]: 25: Hoare triple {3437#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {3437#false} is VALID [2020-07-28 19:01:52,065 INFO L280 TraceCheckUtils]: 26: Hoare triple {3437#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~6;havoc getWaterLevel_~retValue_acc~6;getWaterLevel_~retValue_acc~6 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~6; {3437#false} is VALID [2020-07-28 19:01:52,065 INFO L280 TraceCheckUtils]: 27: Hoare triple {3437#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {3437#false} is VALID [2020-07-28 19:01:52,065 INFO L280 TraceCheckUtils]: 28: Hoare triple {3437#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {3437#false} is VALID [2020-07-28 19:01:52,065 INFO L280 TraceCheckUtils]: 29: Hoare triple {3437#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {3437#false} is VALID [2020-07-28 19:01:52,066 INFO L280 TraceCheckUtils]: 30: Hoare triple {3437#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {3437#false} is VALID [2020-07-28 19:01:52,066 INFO L280 TraceCheckUtils]: 31: Hoare triple {3437#false} assume !false; {3437#false} is VALID [2020-07-28 19:01:52,067 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:52,067 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [726688778] [2020-07-28 19:01:52,068 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:52,068 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:01:52,068 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [823294638] [2020-07-28 19:01:52,068 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 32 [2020-07-28 19:01:52,069 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:52,069 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:01:52,118 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:52,118 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:01:52,118 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:52,119 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:01:52,119 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:01:52,119 INFO L87 Difference]: Start difference. First operand 155 states and 215 transitions. Second operand 4 states. [2020-07-28 19:01:52,942 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:52,942 INFO L93 Difference]: Finished difference Result 412 states and 582 transitions. [2020-07-28 19:01:52,943 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:01:52,943 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 32 [2020-07-28 19:01:52,943 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:52,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:01:52,956 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 191 transitions. [2020-07-28 19:01:52,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:01:52,958 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 191 transitions. [2020-07-28 19:01:52,958 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 191 transitions. [2020-07-28 19:01:53,156 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 191 edges. 191 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:53,165 INFO L225 Difference]: With dead ends: 412 [2020-07-28 19:01:53,165 INFO L226 Difference]: Without dead ends: 308 [2020-07-28 19:01:53,166 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:01:53,167 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2020-07-28 19:01:53,438 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 155. [2020-07-28 19:01:53,438 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:53,439 INFO L82 GeneralOperation]: Start isEquivalent. First operand 308 states. Second operand 155 states. [2020-07-28 19:01:53,439 INFO L74 IsIncluded]: Start isIncluded. First operand 308 states. Second operand 155 states. [2020-07-28 19:01:53,439 INFO L87 Difference]: Start difference. First operand 308 states. Second operand 155 states. [2020-07-28 19:01:53,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:53,449 INFO L93 Difference]: Finished difference Result 308 states and 433 transitions. [2020-07-28 19:01:53,449 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 433 transitions. [2020-07-28 19:01:53,450 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:53,451 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:53,451 INFO L74 IsIncluded]: Start isIncluded. First operand 155 states. Second operand 308 states. [2020-07-28 19:01:53,451 INFO L87 Difference]: Start difference. First operand 155 states. Second operand 308 states. [2020-07-28 19:01:53,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:53,461 INFO L93 Difference]: Finished difference Result 308 states and 433 transitions. [2020-07-28 19:01:53,461 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 433 transitions. [2020-07-28 19:01:53,462 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:53,462 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:53,462 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:53,463 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:53,463 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 155 states. [2020-07-28 19:01:53,467 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 155 states to 155 states and 214 transitions. [2020-07-28 19:01:53,467 INFO L78 Accepts]: Start accepts. Automaton has 155 states and 214 transitions. Word has length 32 [2020-07-28 19:01:53,468 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:53,468 INFO L479 AbstractCegarLoop]: Abstraction has 155 states and 214 transitions. [2020-07-28 19:01:53,468 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:01:53,468 INFO L276 IsEmpty]: Start isEmpty. Operand 155 states and 214 transitions. [2020-07-28 19:01:53,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2020-07-28 19:01:53,469 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:53,469 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:53,469 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:01:53,470 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:53,470 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:53,470 INFO L82 PathProgramCache]: Analyzing trace with hash -2077756372, now seen corresponding path program 1 times [2020-07-28 19:01:53,470 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:53,471 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1241677838] [2020-07-28 19:01:53,471 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:53,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:53,560 INFO L280 TraceCheckUtils]: 0: Hoare triple {4839#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(13);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(110, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 2 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 3 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string11.base, #t~string11.offset, 1);call write~init~int(80, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(117, #t~string11.base, 2 + #t~string11.offset, 1);call write~init~int(109, #t~string11.base, 3 + #t~string11.offset, 1);call write~init~int(112, #t~string11.base, 4 + #t~string11.offset, 1);call write~init~int(58, #t~string11.base, 5 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 6 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(110, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 2 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string15.base, #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 3 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string17.base, #t~string17.offset, 1);call write~init~int(32, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string19.base, #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 1 + #t~string19.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,561 INFO L280 TraceCheckUtils]: 1: Hoare triple {4841#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret38, main_~retValue_acc~8, main_~tmp~5;havoc main_~retValue_acc~8;havoc main_~tmp~5; {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,561 INFO L280 TraceCheckUtils]: 2: Hoare triple {4841#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,562 INFO L280 TraceCheckUtils]: 3: Hoare triple {4841#(= 1 ~systemActive~0)} main_#t~ret38 := valid_product_#res;assume -2147483648 <= main_#t~ret38 && main_#t~ret38 <= 2147483647;main_~tmp~5 := main_#t~ret38;havoc main_#t~ret38; {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,563 INFO L280 TraceCheckUtils]: 4: Hoare triple {4841#(= 1 ~systemActive~0)} assume 0 != main_~tmp~5; {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,564 INFO L280 TraceCheckUtils]: 5: Hoare triple {4841#(= 1 ~systemActive~0)} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,564 INFO L280 TraceCheckUtils]: 6: Hoare triple {4841#(= 1 ~systemActive~0)} assume !false; {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,565 INFO L280 TraceCheckUtils]: 7: Hoare triple {4841#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0 < 4; {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,566 INFO L280 TraceCheckUtils]: 8: Hoare triple {4841#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~3 := test_#t~nondet21;havoc test_#t~nondet21; {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,566 INFO L280 TraceCheckUtils]: 9: Hoare triple {4841#(= 1 ~systemActive~0)} assume 0 != test_~tmp~3; {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,567 INFO L280 TraceCheckUtils]: 10: Hoare triple {4841#(= 1 ~systemActive~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,568 INFO L280 TraceCheckUtils]: 11: Hoare triple {4841#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~1 := test_#t~nondet22;havoc test_#t~nondet22; {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,569 INFO L280 TraceCheckUtils]: 12: Hoare triple {4841#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~1); {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,570 INFO L280 TraceCheckUtils]: 13: Hoare triple {4841#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,572 INFO L280 TraceCheckUtils]: 14: Hoare triple {4841#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0; {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,574 INFO L280 TraceCheckUtils]: 15: Hoare triple {4841#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {4841#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:53,575 INFO L280 TraceCheckUtils]: 16: Hoare triple {4841#(= 1 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~0;havoc processEnvironment_~tmp~0; {4839#true} is VALID [2020-07-28 19:01:53,575 INFO L280 TraceCheckUtils]: 17: Hoare triple {4839#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret20, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~7;havoc isHighWaterSensorDry_~retValue_acc~7; {4839#true} is VALID [2020-07-28 19:01:53,575 INFO L280 TraceCheckUtils]: 18: Hoare triple {4839#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~7 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~7; {4839#true} is VALID [2020-07-28 19:01:53,576 INFO L280 TraceCheckUtils]: 19: Hoare triple {4839#true} isHighWaterLevel_#t~ret20 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret20 && isHighWaterLevel_#t~ret20 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret20;havoc isHighWaterLevel_#t~ret20; {4839#true} is VALID [2020-07-28 19:01:53,577 INFO L280 TraceCheckUtils]: 20: Hoare triple {4839#true} assume !(0 != isHighWaterLevel_~tmp~2);isHighWaterLevel_~tmp___0~0 := 1; {4842#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))} is VALID [2020-07-28 19:01:53,578 INFO L280 TraceCheckUtils]: 21: Hoare triple {4842#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {4843#(not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))} is VALID [2020-07-28 19:01:53,580 INFO L280 TraceCheckUtils]: 22: Hoare triple {4843#(not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))} processEnvironment_#t~ret1 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret1 && processEnvironment_#t~ret1 <= 2147483647;processEnvironment_~tmp~0 := processEnvironment_#t~ret1;havoc processEnvironment_#t~ret1; {4844#(not (= 0 ULTIMATE.start_processEnvironment_~tmp~0))} is VALID [2020-07-28 19:01:53,581 INFO L280 TraceCheckUtils]: 23: Hoare triple {4844#(not (= 0 ULTIMATE.start_processEnvironment_~tmp~0))} assume !(0 != processEnvironment_~tmp~0); {4840#false} is VALID [2020-07-28 19:01:53,581 INFO L280 TraceCheckUtils]: 24: Hoare triple {4840#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~5;havoc isMethaneLevelCritical_~retValue_acc~5;isMethaneLevelCritical_~retValue_acc~5 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~5; {4840#false} is VALID [2020-07-28 19:01:53,581 INFO L280 TraceCheckUtils]: 25: Hoare triple {4840#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {4840#false} is VALID [2020-07-28 19:01:53,582 INFO L280 TraceCheckUtils]: 26: Hoare triple {4840#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~6;havoc getWaterLevel_~retValue_acc~6;getWaterLevel_~retValue_acc~6 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~6; {4840#false} is VALID [2020-07-28 19:01:53,582 INFO L280 TraceCheckUtils]: 27: Hoare triple {4840#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {4840#false} is VALID [2020-07-28 19:01:53,583 INFO L280 TraceCheckUtils]: 28: Hoare triple {4840#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {4840#false} is VALID [2020-07-28 19:01:53,583 INFO L280 TraceCheckUtils]: 29: Hoare triple {4840#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {4840#false} is VALID [2020-07-28 19:01:53,583 INFO L280 TraceCheckUtils]: 30: Hoare triple {4840#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {4840#false} is VALID [2020-07-28 19:01:53,583 INFO L280 TraceCheckUtils]: 31: Hoare triple {4840#false} assume !false; {4840#false} is VALID [2020-07-28 19:01:53,586 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:53,586 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1241677838] [2020-07-28 19:01:53,586 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:53,586 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-28 19:01:53,587 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1262327873] [2020-07-28 19:01:53,588 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 32 [2020-07-28 19:01:53,588 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:53,588 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:01:53,635 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:53,635 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:01:53,635 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:53,636 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:01:53,636 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:01:53,636 INFO L87 Difference]: Start difference. First operand 155 states and 214 transitions. Second operand 6 states. [2020-07-28 19:01:54,931 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:54,932 INFO L93 Difference]: Finished difference Result 524 states and 737 transitions. [2020-07-28 19:01:54,932 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:01:54,932 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 32 [2020-07-28 19:01:54,932 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:54,932 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:01:54,935 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 211 transitions. [2020-07-28 19:01:54,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:01:54,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 211 transitions. [2020-07-28 19:01:54,938 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 211 transitions. [2020-07-28 19:01:55,202 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 211 edges. 211 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:55,214 INFO L225 Difference]: With dead ends: 524 [2020-07-28 19:01:55,214 INFO L226 Difference]: Without dead ends: 375 [2020-07-28 19:01:55,215 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2020-07-28 19:01:55,216 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 375 states. [2020-07-28 19:01:55,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 375 to 161. [2020-07-28 19:01:55,489 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:55,489 INFO L82 GeneralOperation]: Start isEquivalent. First operand 375 states. Second operand 161 states. [2020-07-28 19:01:55,490 INFO L74 IsIncluded]: Start isIncluded. First operand 375 states. Second operand 161 states. [2020-07-28 19:01:55,490 INFO L87 Difference]: Start difference. First operand 375 states. Second operand 161 states. [2020-07-28 19:01:55,504 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:55,505 INFO L93 Difference]: Finished difference Result 375 states and 526 transitions. [2020-07-28 19:01:55,505 INFO L276 IsEmpty]: Start isEmpty. Operand 375 states and 526 transitions. [2020-07-28 19:01:55,506 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:55,506 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:55,507 INFO L74 IsIncluded]: Start isIncluded. First operand 161 states. Second operand 375 states. [2020-07-28 19:01:55,507 INFO L87 Difference]: Start difference. First operand 161 states. Second operand 375 states. [2020-07-28 19:01:55,519 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:55,520 INFO L93 Difference]: Finished difference Result 375 states and 526 transitions. [2020-07-28 19:01:55,520 INFO L276 IsEmpty]: Start isEmpty. Operand 375 states and 526 transitions. [2020-07-28 19:01:55,521 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:55,521 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:55,521 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:55,521 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:55,522 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 161 states. [2020-07-28 19:01:55,526 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 161 states to 161 states and 219 transitions. [2020-07-28 19:01:55,527 INFO L78 Accepts]: Start accepts. Automaton has 161 states and 219 transitions. Word has length 32 [2020-07-28 19:01:55,527 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:55,528 INFO L479 AbstractCegarLoop]: Abstraction has 161 states and 219 transitions. [2020-07-28 19:01:55,528 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:01:55,529 INFO L276 IsEmpty]: Start isEmpty. Operand 161 states and 219 transitions. [2020-07-28 19:01:55,529 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 19:01:55,530 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:55,530 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:55,530 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:01:55,530 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:55,531 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:55,531 INFO L82 PathProgramCache]: Analyzing trace with hash 662884577, now seen corresponding path program 1 times [2020-07-28 19:01:55,531 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:55,532 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1135819120] [2020-07-28 19:01:55,533 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:55,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:55,638 INFO L280 TraceCheckUtils]: 0: Hoare triple {6547#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(13);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(110, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 2 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 3 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string11.base, #t~string11.offset, 1);call write~init~int(80, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(117, #t~string11.base, 2 + #t~string11.offset, 1);call write~init~int(109, #t~string11.base, 3 + #t~string11.offset, 1);call write~init~int(112, #t~string11.base, 4 + #t~string11.offset, 1);call write~init~int(58, #t~string11.base, 5 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 6 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(110, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 2 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string15.base, #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 3 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string17.base, #t~string17.offset, 1);call write~init~int(32, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string19.base, #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 1 + #t~string19.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,639 INFO L280 TraceCheckUtils]: 1: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret38, main_~retValue_acc~8, main_~tmp~5;havoc main_~retValue_acc~8;havoc main_~tmp~5; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,640 INFO L280 TraceCheckUtils]: 2: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,640 INFO L280 TraceCheckUtils]: 3: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} main_#t~ret38 := valid_product_#res;assume -2147483648 <= main_#t~ret38 && main_#t~ret38 <= 2147483647;main_~tmp~5 := main_#t~ret38;havoc main_#t~ret38; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,641 INFO L280 TraceCheckUtils]: 4: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~5; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,642 INFO L280 TraceCheckUtils]: 5: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,643 INFO L280 TraceCheckUtils]: 6: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume !false; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,644 INFO L280 TraceCheckUtils]: 7: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,645 INFO L280 TraceCheckUtils]: 8: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~3 := test_#t~nondet21;havoc test_#t~nondet21; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,645 INFO L280 TraceCheckUtils]: 9: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp~3; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,646 INFO L280 TraceCheckUtils]: 10: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,647 INFO L280 TraceCheckUtils]: 11: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~1 := test_#t~nondet22;havoc test_#t~nondet22; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,647 INFO L280 TraceCheckUtils]: 12: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~1); {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,648 INFO L280 TraceCheckUtils]: 13: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,649 INFO L280 TraceCheckUtils]: 14: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,650 INFO L280 TraceCheckUtils]: 15: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,650 INFO L280 TraceCheckUtils]: 16: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~0;havoc processEnvironment_~tmp~0; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,651 INFO L280 TraceCheckUtils]: 17: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret20, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~7;havoc isHighWaterSensorDry_~retValue_acc~7; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,652 INFO L280 TraceCheckUtils]: 18: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~7 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~7; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,652 INFO L280 TraceCheckUtils]: 19: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret20 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret20 && isHighWaterLevel_#t~ret20 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret20;havoc isHighWaterLevel_#t~ret20; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,653 INFO L280 TraceCheckUtils]: 20: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~2);isHighWaterLevel_~tmp___0~0 := 1; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,654 INFO L280 TraceCheckUtils]: 21: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,654 INFO L280 TraceCheckUtils]: 22: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} processEnvironment_#t~ret1 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret1 && processEnvironment_#t~ret1 <= 2147483647;processEnvironment_~tmp~0 := processEnvironment_#t~ret1;havoc processEnvironment_#t~ret1; {6549#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,655 INFO L280 TraceCheckUtils]: 23: Hoare triple {6549#(= 0 ~methaneLevelCritical~0)} assume 0 != processEnvironment_~tmp~0;havoc activatePump_#t~ret2, activatePump_~tmp~1;havoc activatePump_~tmp~1;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret3, isMethaneAlarm_~retValue_acc~2;havoc isMethaneAlarm_~retValue_acc~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~5;havoc isMethaneLevelCritical_~retValue_acc~5;isMethaneLevelCritical_~retValue_acc~5 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~5; {6550#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:01:55,656 INFO L280 TraceCheckUtils]: 24: Hoare triple {6550#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} isMethaneAlarm_#t~ret3 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret3 && isMethaneAlarm_#t~ret3 <= 2147483647;isMethaneAlarm_~retValue_acc~2 := isMethaneAlarm_#t~ret3;havoc isMethaneAlarm_#t~ret3;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~2; {6551#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} is VALID [2020-07-28 19:01:55,657 INFO L280 TraceCheckUtils]: 25: Hoare triple {6551#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} activatePump_#t~ret2 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret2 && activatePump_#t~ret2 <= 2147483647;activatePump_~tmp~1 := activatePump_#t~ret2;havoc activatePump_#t~ret2; {6552#(= 0 ULTIMATE.start_activatePump_~tmp~1)} is VALID [2020-07-28 19:01:55,658 INFO L280 TraceCheckUtils]: 26: Hoare triple {6552#(= 0 ULTIMATE.start_activatePump_~tmp~1)} assume 0 != activatePump_~tmp~1; {6548#false} is VALID [2020-07-28 19:01:55,658 INFO L280 TraceCheckUtils]: 27: Hoare triple {6548#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~5;havoc isMethaneLevelCritical_~retValue_acc~5;isMethaneLevelCritical_~retValue_acc~5 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~5; {6548#false} is VALID [2020-07-28 19:01:55,659 INFO L280 TraceCheckUtils]: 28: Hoare triple {6548#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {6548#false} is VALID [2020-07-28 19:01:55,659 INFO L280 TraceCheckUtils]: 29: Hoare triple {6548#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~6;havoc getWaterLevel_~retValue_acc~6;getWaterLevel_~retValue_acc~6 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~6; {6548#false} is VALID [2020-07-28 19:01:55,659 INFO L280 TraceCheckUtils]: 30: Hoare triple {6548#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {6548#false} is VALID [2020-07-28 19:01:55,660 INFO L280 TraceCheckUtils]: 31: Hoare triple {6548#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {6548#false} is VALID [2020-07-28 19:01:55,660 INFO L280 TraceCheckUtils]: 32: Hoare triple {6548#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {6548#false} is VALID [2020-07-28 19:01:55,660 INFO L280 TraceCheckUtils]: 33: Hoare triple {6548#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {6548#false} is VALID [2020-07-28 19:01:55,660 INFO L280 TraceCheckUtils]: 34: Hoare triple {6548#false} assume !false; {6548#false} is VALID [2020-07-28 19:01:55,662 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:55,662 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1135819120] [2020-07-28 19:01:55,662 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:55,662 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:01:55,663 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1642610895] [2020-07-28 19:01:55,663 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 35 [2020-07-28 19:01:55,665 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:55,665 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:01:55,716 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:55,717 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:01:55,717 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:55,717 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:01:55,718 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:01:55,718 INFO L87 Difference]: Start difference. First operand 161 states and 219 transitions. Second operand 6 states. [2020-07-28 19:01:58,843 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:58,843 INFO L93 Difference]: Finished difference Result 1154 states and 1559 transitions. [2020-07-28 19:01:58,843 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2020-07-28 19:01:58,843 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 35 [2020-07-28 19:01:58,843 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:58,844 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:01:58,847 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 453 transitions. [2020-07-28 19:01:58,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:01:58,850 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 453 transitions. [2020-07-28 19:01:58,850 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 14 states and 453 transitions. [2020-07-28 19:01:59,387 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 453 edges. 453 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:59,437 INFO L225 Difference]: With dead ends: 1154 [2020-07-28 19:01:59,437 INFO L226 Difference]: Without dead ends: 999 [2020-07-28 19:01:59,438 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2020-07-28 19:01:59,440 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 999 states. [2020-07-28 19:02:00,173 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 999 to 302. [2020-07-28 19:02:00,174 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:00,174 INFO L82 GeneralOperation]: Start isEquivalent. First operand 999 states. Second operand 302 states. [2020-07-28 19:02:00,174 INFO L74 IsIncluded]: Start isIncluded. First operand 999 states. Second operand 302 states. [2020-07-28 19:02:00,174 INFO L87 Difference]: Start difference. First operand 999 states. Second operand 302 states. [2020-07-28 19:02:00,228 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:00,228 INFO L93 Difference]: Finished difference Result 999 states and 1327 transitions. [2020-07-28 19:02:00,229 INFO L276 IsEmpty]: Start isEmpty. Operand 999 states and 1327 transitions. [2020-07-28 19:02:00,231 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:00,231 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:00,231 INFO L74 IsIncluded]: Start isIncluded. First operand 302 states. Second operand 999 states. [2020-07-28 19:02:00,231 INFO L87 Difference]: Start difference. First operand 302 states. Second operand 999 states. [2020-07-28 19:02:00,285 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:00,285 INFO L93 Difference]: Finished difference Result 999 states and 1327 transitions. [2020-07-28 19:02:00,286 INFO L276 IsEmpty]: Start isEmpty. Operand 999 states and 1327 transitions. [2020-07-28 19:02:00,288 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:00,288 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:00,288 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:00,288 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:00,289 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 302 states. [2020-07-28 19:02:00,297 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 302 states to 302 states and 406 transitions. [2020-07-28 19:02:00,298 INFO L78 Accepts]: Start accepts. Automaton has 302 states and 406 transitions. Word has length 35 [2020-07-28 19:02:00,298 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:00,299 INFO L479 AbstractCegarLoop]: Abstraction has 302 states and 406 transitions. [2020-07-28 19:02:00,299 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:00,299 INFO L276 IsEmpty]: Start isEmpty. Operand 302 states and 406 transitions. [2020-07-28 19:02:00,302 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 19:02:00,302 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:00,303 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:00,304 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:02:00,304 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:00,304 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:00,304 INFO L82 PathProgramCache]: Analyzing trace with hash 1342942947, now seen corresponding path program 1 times [2020-07-28 19:02:00,305 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:00,305 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1445236681] [2020-07-28 19:02:00,305 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:00,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:00,422 INFO L280 TraceCheckUtils]: 0: Hoare triple {10554#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(13);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(110, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 2 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 3 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string11.base, #t~string11.offset, 1);call write~init~int(80, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(117, #t~string11.base, 2 + #t~string11.offset, 1);call write~init~int(109, #t~string11.base, 3 + #t~string11.offset, 1);call write~init~int(112, #t~string11.base, 4 + #t~string11.offset, 1);call write~init~int(58, #t~string11.base, 5 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 6 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(110, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 2 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string15.base, #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 3 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string17.base, #t~string17.offset, 1);call write~init~int(32, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string19.base, #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 1 + #t~string19.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,424 INFO L280 TraceCheckUtils]: 1: Hoare triple {10556#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret38, main_~retValue_acc~8, main_~tmp~5;havoc main_~retValue_acc~8;havoc main_~tmp~5; {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,424 INFO L280 TraceCheckUtils]: 2: Hoare triple {10556#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,426 INFO L280 TraceCheckUtils]: 3: Hoare triple {10556#(= 1 ~systemActive~0)} main_#t~ret38 := valid_product_#res;assume -2147483648 <= main_#t~ret38 && main_#t~ret38 <= 2147483647;main_~tmp~5 := main_#t~ret38;havoc main_#t~ret38; {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,427 INFO L280 TraceCheckUtils]: 4: Hoare triple {10556#(= 1 ~systemActive~0)} assume 0 != main_~tmp~5; {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,429 INFO L280 TraceCheckUtils]: 5: Hoare triple {10556#(= 1 ~systemActive~0)} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,430 INFO L280 TraceCheckUtils]: 6: Hoare triple {10556#(= 1 ~systemActive~0)} assume !false; {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,434 INFO L280 TraceCheckUtils]: 7: Hoare triple {10556#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0 < 4; {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,437 INFO L280 TraceCheckUtils]: 8: Hoare triple {10556#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~3 := test_#t~nondet21;havoc test_#t~nondet21; {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,437 INFO L280 TraceCheckUtils]: 9: Hoare triple {10556#(= 1 ~systemActive~0)} assume 0 != test_~tmp~3; {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,438 INFO L280 TraceCheckUtils]: 10: Hoare triple {10556#(= 1 ~systemActive~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,439 INFO L280 TraceCheckUtils]: 11: Hoare triple {10556#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~1 := test_#t~nondet22;havoc test_#t~nondet22; {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,439 INFO L280 TraceCheckUtils]: 12: Hoare triple {10556#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~1); {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,440 INFO L280 TraceCheckUtils]: 13: Hoare triple {10556#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,441 INFO L280 TraceCheckUtils]: 14: Hoare triple {10556#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0; {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,441 INFO L280 TraceCheckUtils]: 15: Hoare triple {10556#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {10556#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:00,442 INFO L280 TraceCheckUtils]: 16: Hoare triple {10556#(= 1 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~0;havoc processEnvironment_~tmp~0; {10554#true} is VALID [2020-07-28 19:02:00,442 INFO L280 TraceCheckUtils]: 17: Hoare triple {10554#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret20, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~7;havoc isHighWaterSensorDry_~retValue_acc~7; {10554#true} is VALID [2020-07-28 19:02:00,442 INFO L280 TraceCheckUtils]: 18: Hoare triple {10554#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~7 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~7; {10554#true} is VALID [2020-07-28 19:02:00,442 INFO L280 TraceCheckUtils]: 19: Hoare triple {10554#true} isHighWaterLevel_#t~ret20 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret20 && isHighWaterLevel_#t~ret20 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret20;havoc isHighWaterLevel_#t~ret20; {10554#true} is VALID [2020-07-28 19:02:00,442 INFO L280 TraceCheckUtils]: 20: Hoare triple {10554#true} assume !(0 != isHighWaterLevel_~tmp~2);isHighWaterLevel_~tmp___0~0 := 1; {10554#true} is VALID [2020-07-28 19:02:00,443 INFO L280 TraceCheckUtils]: 21: Hoare triple {10554#true} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {10554#true} is VALID [2020-07-28 19:02:00,443 INFO L280 TraceCheckUtils]: 22: Hoare triple {10554#true} processEnvironment_#t~ret1 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret1 && processEnvironment_#t~ret1 <= 2147483647;processEnvironment_~tmp~0 := processEnvironment_#t~ret1;havoc processEnvironment_#t~ret1; {10554#true} is VALID [2020-07-28 19:02:00,443 INFO L280 TraceCheckUtils]: 23: Hoare triple {10554#true} assume 0 != processEnvironment_~tmp~0;havoc activatePump_#t~ret2, activatePump_~tmp~1;havoc activatePump_~tmp~1;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret3, isMethaneAlarm_~retValue_acc~2;havoc isMethaneAlarm_~retValue_acc~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~5;havoc isMethaneLevelCritical_~retValue_acc~5;isMethaneLevelCritical_~retValue_acc~5 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~5; {10554#true} is VALID [2020-07-28 19:02:00,443 INFO L280 TraceCheckUtils]: 24: Hoare triple {10554#true} isMethaneAlarm_#t~ret3 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret3 && isMethaneAlarm_#t~ret3 <= 2147483647;isMethaneAlarm_~retValue_acc~2 := isMethaneAlarm_#t~ret3;havoc isMethaneAlarm_#t~ret3;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~2; {10554#true} is VALID [2020-07-28 19:02:00,443 INFO L280 TraceCheckUtils]: 25: Hoare triple {10554#true} activatePump_#t~ret2 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret2 && activatePump_#t~ret2 <= 2147483647;activatePump_~tmp~1 := activatePump_#t~ret2;havoc activatePump_#t~ret2; {10554#true} is VALID [2020-07-28 19:02:00,454 INFO L280 TraceCheckUtils]: 26: Hoare triple {10554#true} assume !(0 != activatePump_~tmp~1);~pumpRunning~0 := 1; {10557#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:02:00,456 INFO L280 TraceCheckUtils]: 27: Hoare triple {10557#(not (= 0 ~pumpRunning~0))} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~5;havoc isMethaneLevelCritical_~retValue_acc~5;isMethaneLevelCritical_~retValue_acc~5 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~5; {10557#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:02:00,456 INFO L280 TraceCheckUtils]: 28: Hoare triple {10557#(not (= 0 ~pumpRunning~0))} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {10557#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:02:00,457 INFO L280 TraceCheckUtils]: 29: Hoare triple {10557#(not (= 0 ~pumpRunning~0))} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~6;havoc getWaterLevel_~retValue_acc~6;getWaterLevel_~retValue_acc~6 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~6; {10557#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:02:00,458 INFO L280 TraceCheckUtils]: 30: Hoare triple {10557#(not (= 0 ~pumpRunning~0))} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {10557#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:02:00,459 INFO L280 TraceCheckUtils]: 31: Hoare triple {10557#(not (= 0 ~pumpRunning~0))} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {10558#(not (= 0 |ULTIMATE.start_isPumpRunning_#res|))} is VALID [2020-07-28 19:02:00,459 INFO L280 TraceCheckUtils]: 32: Hoare triple {10558#(not (= 0 |ULTIMATE.start_isPumpRunning_#res|))} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {10559#(not (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~1 0))} is VALID [2020-07-28 19:02:00,460 INFO L280 TraceCheckUtils]: 33: Hoare triple {10559#(not (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~1 0))} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {10555#false} is VALID [2020-07-28 19:02:00,460 INFO L280 TraceCheckUtils]: 34: Hoare triple {10555#false} assume !false; {10555#false} is VALID [2020-07-28 19:02:00,462 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:00,462 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1445236681] [2020-07-28 19:02:00,463 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:00,463 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-28 19:02:00,463 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1699160283] [2020-07-28 19:02:00,463 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 35 [2020-07-28 19:02:00,464 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:00,464 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:02:00,513 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:00,514 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:02:00,514 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:00,514 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:02:00,514 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:02:00,514 INFO L87 Difference]: Start difference. First operand 302 states and 406 transitions. Second operand 6 states. [2020-07-28 19:02:02,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:02,035 INFO L93 Difference]: Finished difference Result 687 states and 937 transitions. [2020-07-28 19:02:02,035 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 19:02:02,035 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 35 [2020-07-28 19:02:02,035 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:02,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:02,037 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 219 transitions. [2020-07-28 19:02:02,037 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:02,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 219 transitions. [2020-07-28 19:02:02,038 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 219 transitions. [2020-07-28 19:02:02,311 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 219 edges. 219 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:02,313 INFO L225 Difference]: With dead ends: 687 [2020-07-28 19:02:02,313 INFO L226 Difference]: Without dead ends: 121 [2020-07-28 19:02:02,314 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=40, Invalid=70, Unknown=0, NotChecked=0, Total=110 [2020-07-28 19:02:02,315 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121 states. [2020-07-28 19:02:02,517 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121 to 96. [2020-07-28 19:02:02,517 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:02,517 INFO L82 GeneralOperation]: Start isEquivalent. First operand 121 states. Second operand 96 states. [2020-07-28 19:02:02,517 INFO L74 IsIncluded]: Start isIncluded. First operand 121 states. Second operand 96 states. [2020-07-28 19:02:02,517 INFO L87 Difference]: Start difference. First operand 121 states. Second operand 96 states. [2020-07-28 19:02:02,519 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:02,520 INFO L93 Difference]: Finished difference Result 121 states and 144 transitions. [2020-07-28 19:02:02,520 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 144 transitions. [2020-07-28 19:02:02,520 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:02,521 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:02,521 INFO L74 IsIncluded]: Start isIncluded. First operand 96 states. Second operand 121 states. [2020-07-28 19:02:02,521 INFO L87 Difference]: Start difference. First operand 96 states. Second operand 121 states. [2020-07-28 19:02:02,523 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:02,523 INFO L93 Difference]: Finished difference Result 121 states and 144 transitions. [2020-07-28 19:02:02,523 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 144 transitions. [2020-07-28 19:02:02,524 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:02,524 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:02,524 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:02,524 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:02,524 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 96 states. [2020-07-28 19:02:02,525 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 115 transitions. [2020-07-28 19:02:02,526 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 115 transitions. Word has length 35 [2020-07-28 19:02:02,526 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:02,526 INFO L479 AbstractCegarLoop]: Abstraction has 96 states and 115 transitions. [2020-07-28 19:02:02,526 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:02,526 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 115 transitions. [2020-07-28 19:02:02,527 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:02:02,527 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:02,527 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:02,527 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-28 19:02:02,527 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:02,527 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:02,528 INFO L82 PathProgramCache]: Analyzing trace with hash 384013147, now seen corresponding path program 1 times [2020-07-28 19:02:02,528 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:02,528 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [732151648] [2020-07-28 19:02:02,528 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:02,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:02,632 INFO L280 TraceCheckUtils]: 0: Hoare triple {11888#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(13);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(110, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string9.base, #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 1 + #t~string9.offset, 1);call write~init~int(102, #t~string9.base, 2 + #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 3 + #t~string9.offset, 1);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string11.base, #t~string11.offset, 1);call write~init~int(80, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(117, #t~string11.base, 2 + #t~string11.offset, 1);call write~init~int(109, #t~string11.base, 3 + #t~string11.offset, 1);call write~init~int(112, #t~string11.base, 4 + #t~string11.offset, 1);call write~init~int(58, #t~string11.base, 5 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 6 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(110, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 2 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string15.base, #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(102, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 3 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string17.base, #t~string17.offset, 1);call write~init~int(32, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string19.base, #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 1 + #t~string19.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0; {11890#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:02,634 INFO L280 TraceCheckUtils]: 1: Hoare triple {11890#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret38, main_~retValue_acc~8, main_~tmp~5;havoc main_~retValue_acc~8;havoc main_~tmp~5; {11890#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:02,634 INFO L280 TraceCheckUtils]: 2: Hoare triple {11890#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {11890#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:02,635 INFO L280 TraceCheckUtils]: 3: Hoare triple {11890#(= 1 ~systemActive~0)} main_#t~ret38 := valid_product_#res;assume -2147483648 <= main_#t~ret38 && main_#t~ret38 <= 2147483647;main_~tmp~5 := main_#t~ret38;havoc main_#t~ret38; {11890#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:02,636 INFO L280 TraceCheckUtils]: 4: Hoare triple {11890#(= 1 ~systemActive~0)} assume 0 != main_~tmp~5; {11890#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:02,636 INFO L280 TraceCheckUtils]: 5: Hoare triple {11890#(= 1 ~systemActive~0)} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~1, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~1;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11890#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:02,637 INFO L280 TraceCheckUtils]: 6: Hoare triple {11890#(= 1 ~systemActive~0)} assume !false; {11890#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:02,637 INFO L280 TraceCheckUtils]: 7: Hoare triple {11890#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0 < 4; {11890#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:02,638 INFO L280 TraceCheckUtils]: 8: Hoare triple {11890#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~3 := test_#t~nondet21;havoc test_#t~nondet21; {11890#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:02,639 INFO L280 TraceCheckUtils]: 9: Hoare triple {11890#(= 1 ~systemActive~0)} assume 0 != test_~tmp~3; {11890#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:02,639 INFO L280 TraceCheckUtils]: 10: Hoare triple {11890#(= 1 ~systemActive~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11890#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:02,640 INFO L280 TraceCheckUtils]: 11: Hoare triple {11890#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~1 := test_#t~nondet22;havoc test_#t~nondet22; {11890#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:02,640 INFO L280 TraceCheckUtils]: 12: Hoare triple {11890#(= 1 ~systemActive~0)} assume 0 != test_~tmp___0~1; {11890#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:02,641 INFO L280 TraceCheckUtils]: 13: Hoare triple {11890#(= 1 ~systemActive~0)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {11891#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2020-07-28 19:02:02,642 INFO L280 TraceCheckUtils]: 14: Hoare triple {11891#(= ~methaneLevelCritical~0 ~systemActive~0)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {11891#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2020-07-28 19:02:02,642 INFO L280 TraceCheckUtils]: 15: Hoare triple {11891#(= ~methaneLevelCritical~0 ~systemActive~0)} assume 0 != test_~tmp___2~0; {11891#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2020-07-28 19:02:02,643 INFO L280 TraceCheckUtils]: 16: Hoare triple {11891#(= ~methaneLevelCritical~0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {11891#(= ~methaneLevelCritical~0 ~systemActive~0)} is VALID [2020-07-28 19:02:02,644 INFO L280 TraceCheckUtils]: 17: Hoare triple {11891#(= ~methaneLevelCritical~0 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~0;havoc processEnvironment_~tmp~0; {11892#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,645 INFO L280 TraceCheckUtils]: 18: Hoare triple {11892#(not (= 0 ~methaneLevelCritical~0))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret20, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~7;havoc isHighWaterSensorDry_~retValue_acc~7; {11892#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,645 INFO L280 TraceCheckUtils]: 19: Hoare triple {11892#(not (= 0 ~methaneLevelCritical~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~7 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~7; {11892#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,646 INFO L280 TraceCheckUtils]: 20: Hoare triple {11892#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_#t~ret20 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret20 && isHighWaterLevel_#t~ret20 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret20;havoc isHighWaterLevel_#t~ret20; {11892#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,646 INFO L280 TraceCheckUtils]: 21: Hoare triple {11892#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != isHighWaterLevel_~tmp~2);isHighWaterLevel_~tmp___0~0 := 1; {11892#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,647 INFO L280 TraceCheckUtils]: 22: Hoare triple {11892#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {11892#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,648 INFO L280 TraceCheckUtils]: 23: Hoare triple {11892#(not (= 0 ~methaneLevelCritical~0))} processEnvironment_#t~ret1 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret1 && processEnvironment_#t~ret1 <= 2147483647;processEnvironment_~tmp~0 := processEnvironment_#t~ret1;havoc processEnvironment_#t~ret1; {11892#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,648 INFO L280 TraceCheckUtils]: 24: Hoare triple {11892#(not (= 0 ~methaneLevelCritical~0))} assume 0 != processEnvironment_~tmp~0;havoc activatePump_#t~ret2, activatePump_~tmp~1;havoc activatePump_~tmp~1;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret3, isMethaneAlarm_~retValue_acc~2;havoc isMethaneAlarm_~retValue_acc~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~5;havoc isMethaneLevelCritical_~retValue_acc~5;isMethaneLevelCritical_~retValue_acc~5 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~5; {11892#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,650 INFO L280 TraceCheckUtils]: 25: Hoare triple {11892#(not (= 0 ~methaneLevelCritical~0))} isMethaneAlarm_#t~ret3 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret3 && isMethaneAlarm_#t~ret3 <= 2147483647;isMethaneAlarm_~retValue_acc~2 := isMethaneAlarm_#t~ret3;havoc isMethaneAlarm_#t~ret3;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~2; {11892#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,651 INFO L280 TraceCheckUtils]: 26: Hoare triple {11892#(not (= 0 ~methaneLevelCritical~0))} activatePump_#t~ret2 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret2 && activatePump_#t~ret2 <= 2147483647;activatePump_~tmp~1 := activatePump_#t~ret2;havoc activatePump_#t~ret2; {11892#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,652 INFO L280 TraceCheckUtils]: 27: Hoare triple {11892#(not (= 0 ~methaneLevelCritical~0))} assume 0 != activatePump_~tmp~1; {11892#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,653 INFO L280 TraceCheckUtils]: 28: Hoare triple {11892#(not (= 0 ~methaneLevelCritical~0))} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~5;havoc isMethaneLevelCritical_~retValue_acc~5;isMethaneLevelCritical_~retValue_acc~5 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~5; {11893#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} is VALID [2020-07-28 19:02:02,653 INFO L280 TraceCheckUtils]: 29: Hoare triple {11893#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {11894#(not (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4))} is VALID [2020-07-28 19:02:02,654 INFO L280 TraceCheckUtils]: 30: Hoare triple {11894#(not (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4))} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~6;havoc getWaterLevel_~retValue_acc~6;getWaterLevel_~retValue_acc~6 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~6; {11889#false} is VALID [2020-07-28 19:02:02,654 INFO L280 TraceCheckUtils]: 31: Hoare triple {11889#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {11889#false} is VALID [2020-07-28 19:02:02,654 INFO L280 TraceCheckUtils]: 32: Hoare triple {11889#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {11889#false} is VALID [2020-07-28 19:02:02,655 INFO L280 TraceCheckUtils]: 33: Hoare triple {11889#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {11889#false} is VALID [2020-07-28 19:02:02,655 INFO L280 TraceCheckUtils]: 34: Hoare triple {11889#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {11889#false} is VALID [2020-07-28 19:02:02,655 INFO L280 TraceCheckUtils]: 35: Hoare triple {11889#false} assume !false; {11889#false} is VALID [2020-07-28 19:02:02,657 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:02,658 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [732151648] [2020-07-28 19:02:02,658 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:02,658 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-28 19:02:02,658 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1837657743] [2020-07-28 19:02:02,659 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 36 [2020-07-28 19:02:02,659 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:02,659 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:02,707 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:02,707 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:02,708 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:02,708 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:02,708 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:02,708 INFO L87 Difference]: Start difference. First operand 96 states and 115 transitions. Second operand 7 states. [2020-07-28 19:02:04,075 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:04,075 INFO L93 Difference]: Finished difference Result 280 states and 335 transitions. [2020-07-28 19:02:04,076 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 19:02:04,076 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 36 [2020-07-28 19:02:04,076 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:04,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:04,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 195 transitions. [2020-07-28 19:02:04,078 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:04,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 195 transitions. [2020-07-28 19:02:04,079 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 195 transitions. [2020-07-28 19:02:04,334 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 195 edges. 195 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:04,334 INFO L225 Difference]: With dead ends: 280 [2020-07-28 19:02:04,334 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:02:04,335 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=103, Unknown=0, NotChecked=0, Total=156 [2020-07-28 19:02:04,336 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:02:04,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:02:04,336 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:04,336 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:04,336 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:04,336 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:04,337 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:04,337 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:04,337 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:04,337 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:04,337 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:04,337 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:04,337 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:04,337 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:04,338 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:04,338 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:04,338 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:04,338 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:04,338 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:04,338 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:04,338 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:02:04,338 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:02:04,339 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 36 [2020-07-28 19:02:04,339 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:04,339 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:02:04,339 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:04,339 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:04,339 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:04,339 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:02:04,341 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:02:04,502 WARN L193 SmtUtils]: Spent 149.00 ms on a formula simplification. DAG size of input: 134 DAG size of output: 64 [2020-07-28 19:02:04,706 WARN L193 SmtUtils]: Spent 121.00 ms on a formula simplification. DAG size of input: 155 DAG size of output: 76 [2020-07-28 19:02:05,124 WARN L193 SmtUtils]: Spent 110.00 ms on a formula simplification. DAG size of input: 184 DAG size of output: 89 [2020-07-28 19:02:05,333 WARN L193 SmtUtils]: Spent 191.00 ms on a formula simplification. DAG size of input: 61 DAG size of output: 41 [2020-07-28 19:02:05,536 WARN L193 SmtUtils]: Spent 196.00 ms on a formula simplification. DAG size of input: 55 DAG size of output: 44 [2020-07-28 19:02:05,657 WARN L193 SmtUtils]: Spent 102.00 ms on a formula simplification that was a NOOP. DAG size: 36 [2020-07-28 19:02:05,978 WARN L193 SmtUtils]: Spent 285.00 ms on a formula simplification. DAG size of input: 74 DAG size of output: 34 [2020-07-28 19:02:06,211 WARN L193 SmtUtils]: Spent 205.00 ms on a formula simplification. DAG size of input: 53 DAG size of output: 24 [2020-07-28 19:02:06,403 WARN L193 SmtUtils]: Spent 177.00 ms on a formula simplification. DAG size of input: 40 DAG size of output: 31 [2020-07-28 19:02:06,529 WARN L193 SmtUtils]: Spent 122.00 ms on a formula simplification that was a NOOP. DAG size: 38 [2020-07-28 19:02:06,917 WARN L193 SmtUtils]: Spent 345.00 ms on a formula simplification. DAG size of input: 81 DAG size of output: 28 [2020-07-28 19:02:07,094 WARN L193 SmtUtils]: Spent 173.00 ms on a formula simplification. DAG size of input: 51 DAG size of output: 41 [2020-07-28 19:02:07,426 WARN L193 SmtUtils]: Spent 313.00 ms on a formula simplification. DAG size of input: 87 DAG size of output: 29 [2020-07-28 19:02:07,438 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 922) no Hoare annotation was computed. [2020-07-28 19:02:07,438 INFO L264 CegarLoopResult]: At program point L102(lines 102 108) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse3 (= ~methaneLevelCritical~0 ~systemActive~0)) (.cse4 (= 1 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 (= 0 ULTIMATE.start_activatePump_~tmp~1) (not .cse1) .cse2) (and (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0)) (<= 2 ~waterLevel~0) .cse0 (not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse1 .cse3 (not (= 0 ULTIMATE.start_processEnvironment_~tmp~0)) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2) .cse2) (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse4 .cse2) (and .cse0 .cse1 .cse3 .cse4 .cse2))) [2020-07-28 19:02:07,438 INFO L264 CegarLoopResult]: At program point L102-1(lines 102 108) the Hoare annotation is: false [2020-07-28 19:02:07,439 INFO L264 CegarLoopResult]: At program point L102-2(lines 102 108) the Hoare annotation is: false [2020-07-28 19:02:07,439 INFO L264 CegarLoopResult]: At program point L515(lines 511 517) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:02:07,439 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:02:07,439 INFO L264 CegarLoopResult]: At program point L317(lines 270 318) the Hoare annotation is: false [2020-07-28 19:02:07,439 INFO L268 CegarLoopResult]: For program point L301(lines 301 312) no Hoare annotation was computed. [2020-07-28 19:02:07,440 INFO L264 CegarLoopResult]: At program point L450(lines 441 454) the Hoare annotation is: (let ((.cse0 (= 0 ~methaneLevelCritical~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse3 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (= 0 ~pumpRunning~0)) (.cse7 (= ~methaneLevelCritical~0 ~systemActive~0)) (.cse6 (= 1 ~waterLevel~0)) (.cse5 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse2 .cse4 .cse6 .cse5) (and .cse1 .cse2 .cse3 .cse4 .cse7 .cse5) (and .cse2 .cse4 .cse7 .cse6 .cse5))) [2020-07-28 19:02:07,440 INFO L264 CegarLoopResult]: At program point L450-1(lines 441 454) the Hoare annotation is: false [2020-07-28 19:02:07,440 INFO L264 CegarLoopResult]: At program point L450-2(lines 441 454) the Hoare annotation is: false [2020-07-28 19:02:07,440 INFO L264 CegarLoopResult]: At program point L467-2(lines 467 481) the Hoare annotation is: false [2020-07-28 19:02:07,440 INFO L268 CegarLoopResult]: For program point L368(lines 368 372) no Hoare annotation was computed. [2020-07-28 19:02:07,440 INFO L268 CegarLoopResult]: For program point L368-3(lines 368 372) no Hoare annotation was computed. [2020-07-28 19:02:07,440 INFO L268 CegarLoopResult]: For program point L368-6(lines 368 372) no Hoare annotation was computed. [2020-07-28 19:02:07,441 INFO L264 CegarLoopResult]: At program point L253(lines 238 256) the Hoare annotation is: (let ((.cse5 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse6 (<= 2 ~waterLevel~0)) (.cse7 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse8 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse10 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 0 ~pumpRunning~0)) (.cse9 (= ~methaneLevelCritical~0 ~systemActive~0)) (.cse3 (= 1 ~waterLevel~0)) (.cse4 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse6 .cse1 .cse7 .cse8 .cse2 .cse9 .cse10 .cse4) (and .cse5 .cse0 .cse6 .cse1 .cse7 .cse8 .cse2 .cse10 .cse4) (and .cse1 .cse2 .cse9 .cse3 .cse4))) [2020-07-28 19:02:07,441 INFO L264 CegarLoopResult]: At program point L253-1(lines 238 256) the Hoare annotation is: false [2020-07-28 19:02:07,441 INFO L264 CegarLoopResult]: At program point L253-2(lines 238 256) the Hoare annotation is: false [2020-07-28 19:02:07,441 INFO L268 CegarLoopResult]: For program point L468(line 468) no Hoare annotation was computed. [2020-07-28 19:02:07,441 INFO L268 CegarLoopResult]: For program point L337(lines 337 357) no Hoare annotation was computed. [2020-07-28 19:02:07,441 INFO L268 CegarLoopResult]: For program point L337-2(lines 337 357) no Hoare annotation was computed. [2020-07-28 19:02:07,441 INFO L268 CegarLoopResult]: For program point L337-4(lines 337 357) no Hoare annotation was computed. [2020-07-28 19:02:07,441 INFO L264 CegarLoopResult]: At program point L73(lines 68 76) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:02:07,442 INFO L264 CegarLoopResult]: At program point L189(lines 182 192) the Hoare annotation is: (let ((.cse14 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (let ((.cse0 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))) (.cse11 (= 0 ~methaneLevelCritical~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse12 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|)) (.cse4 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse5 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse9 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (not .cse14)) (.cse6 (= 0 ~pumpRunning~0)) (.cse7 (= ~methaneLevelCritical~0 ~systemActive~0)) (.cse13 (= 1 ~waterLevel~0)) (.cse8 (not (= 0 ULTIMATE.start_processEnvironment_~tmp~0))) (.cse10 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse11 .cse2 .cse12 .cse6 .cse13 .cse14 .cse8 .cse10) (and .cse0 .cse11 .cse1 .cse2 .cse12 .cse4 .cse5 .cse6 .cse14 .cse8 .cse9 .cse10) (and .cse2 .cse3 .cse6 .cse7 .cse13 .cse8 .cse10)))) [2020-07-28 19:02:07,442 INFO L264 CegarLoopResult]: At program point L189-1(lines 182 192) the Hoare annotation is: false [2020-07-28 19:02:07,442 INFO L264 CegarLoopResult]: At program point L189-2(lines 182 192) the Hoare annotation is: false [2020-07-28 19:02:07,442 INFO L264 CegarLoopResult]: At program point L437(lines 432 440) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 (= 0 ULTIMATE.start_activatePump_~tmp~1) (not .cse1) .cse2) (and (= 0 ~methaneLevelCritical~0) (= 1 |ULTIMATE.start_getWaterLevel_#res|) .cse0 .cse1 (= 1 ~waterLevel~0) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse2))) [2020-07-28 19:02:07,442 INFO L264 CegarLoopResult]: At program point L437-1(lines 432 440) the Hoare annotation is: false [2020-07-28 19:02:07,442 INFO L264 CegarLoopResult]: At program point L437-2(lines 432 440) the Hoare annotation is: false [2020-07-28 19:02:07,443 INFO L268 CegarLoopResult]: For program point L272(lines 271 316) no Hoare annotation was computed. [2020-07-28 19:02:07,443 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:02:07,443 INFO L268 CegarLoopResult]: For program point L471(lines 471 475) no Hoare annotation was computed. [2020-07-28 19:02:07,443 INFO L268 CegarLoopResult]: For program point L471-1(lines 95 101) no Hoare annotation was computed. [2020-07-28 19:02:07,443 INFO L264 CegarLoopResult]: At program point L405(lines 400 408) the Hoare annotation is: (let ((.cse4 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (let ((.cse9 (not .cse4)) (.cse12 (= ~methaneLevelCritical~0 ~systemActive~0)) (.cse3 (= 1 ~waterLevel~0)) (.cse7 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse10 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse11 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse2 (= 0 ~pumpRunning~0)) (.cse5 (not (= 0 ULTIMATE.start_processEnvironment_~tmp~0))) (.cse13 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)) (.cse6 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse1 .cse9 .cse10 .cse11 .cse2 .cse12 .cse5 .cse13 .cse6) (and .cse1 .cse9 .cse2 .cse12 .cse3 .cse5 .cse6) (and .cse7 .cse0 .cse8 .cse1 .cse10 .cse11 .cse2 .cse4 .cse5 .cse13 .cse6)))) [2020-07-28 19:02:07,443 INFO L264 CegarLoopResult]: At program point L405-1(lines 400 408) the Hoare annotation is: (let ((.cse6 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (let ((.cse3 (not .cse6)) (.cse4 (= ~methaneLevelCritical~0 ~systemActive~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse5 (= 1 ~waterLevel~0)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 (= 0 ULTIMATE.start_activatePump_~tmp~1) (not .cse1) .cse2) (and (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0)) (<= 2 ~waterLevel~0) .cse0 .cse3 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse1 .cse4 (not (= 0 ULTIMATE.start_processEnvironment_~tmp~0)) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2) .cse2) (and .cse0 .cse3 .cse1 .cse4 .cse5 .cse2) (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse5 .cse6 .cse2)))) [2020-07-28 19:02:07,444 INFO L264 CegarLoopResult]: At program point L405-2(lines 400 408) the Hoare annotation is: false [2020-07-28 19:02:07,444 INFO L264 CegarLoopResult]: At program point L405-3(lines 400 408) the Hoare annotation is: false [2020-07-28 19:02:07,444 INFO L268 CegarLoopResult]: For program point L273(lines 273 277) no Hoare annotation was computed. [2020-07-28 19:02:07,444 INFO L264 CegarLoopResult]: At program point L405-4(lines 400 408) the Hoare annotation is: false [2020-07-28 19:02:07,444 INFO L264 CegarLoopResult]: At program point L405-5(lines 400 408) the Hoare annotation is: false [2020-07-28 19:02:07,444 INFO L268 CegarLoopResult]: For program point L538(lines 538 545) no Hoare annotation was computed. [2020-07-28 19:02:07,444 INFO L271 CegarLoopResult]: At program point L538-1(lines 538 545) the Hoare annotation is: true [2020-07-28 19:02:07,444 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 922) no Hoare annotation was computed. [2020-07-28 19:02:07,445 INFO L268 CegarLoopResult]: For program point L307(lines 307 311) no Hoare annotation was computed. [2020-07-28 19:02:07,445 INFO L268 CegarLoopResult]: For program point L307-2(lines 95 101) no Hoare annotation was computed. [2020-07-28 19:02:07,445 INFO L268 CegarLoopResult]: For program point L291(lines 291 297) no Hoare annotation was computed. [2020-07-28 19:02:07,445 INFO L264 CegarLoopResult]: At program point L291-1(lines 291 297) the Hoare annotation is: (let ((.cse3 (= 0 ~methaneLevelCritical~0)) (.cse5 (= 1 ~waterLevel~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 ~systemActive~0)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 (= 0 ULTIMATE.start_activatePump_~tmp~1) (not .cse1) .cse2) (and .cse3 .cse4 .cse0 .cse1 .cse2) (and .cse3 .cse0 .cse1 .cse5 .cse2) (and .cse0 .cse1 .cse6 .cse5 .cse2) (and .cse4 .cse0 .cse1 .cse6 .cse2))) [2020-07-28 19:02:07,445 INFO L268 CegarLoopResult]: For program point L127(lines 127 144) no Hoare annotation was computed. [2020-07-28 19:02:07,445 INFO L268 CegarLoopResult]: For program point L127-1(lines 127 144) no Hoare annotation was computed. [2020-07-28 19:02:07,445 INFO L268 CegarLoopResult]: For program point L127-2(lines 127 144) no Hoare annotation was computed. [2020-07-28 19:02:07,445 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:02:07,446 INFO L268 CegarLoopResult]: For program point L392(lines 392 396) no Hoare annotation was computed. [2020-07-28 19:02:07,446 INFO L264 CegarLoopResult]: At program point L95(lines 94 113) the Hoare annotation is: (let ((.cse3 (= 0 ~methaneLevelCritical~0)) (.cse5 (= 1 ~waterLevel~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse6 (= ~methaneLevelCritical~0 ~systemActive~0)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 (= 0 ULTIMATE.start_activatePump_~tmp~1) (not .cse1) .cse2) (and .cse3 .cse4 .cse0 .cse1 .cse2) (and .cse3 .cse0 .cse1 .cse5 .cse2) (and .cse0 .cse1 .cse6 .cse5 .cse2) (and .cse4 .cse0 .cse1 .cse6 .cse2))) [2020-07-28 19:02:07,446 INFO L268 CegarLoopResult]: For program point L95-1(lines 95 101) no Hoare annotation was computed. [2020-07-28 19:02:07,446 INFO L264 CegarLoopResult]: At program point L95-2(lines 94 113) the Hoare annotation is: false [2020-07-28 19:02:07,446 INFO L264 CegarLoopResult]: At program point L95-3(lines 94 113) the Hoare annotation is: false [2020-07-28 19:02:07,446 INFO L268 CegarLoopResult]: For program point L343(lines 343 356) no Hoare annotation was computed. [2020-07-28 19:02:07,446 INFO L264 CegarLoopResult]: At program point L343-1(lines 1 925) the Hoare annotation is: (let ((.cse3 (= 1 ~waterLevel~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (.cse1 (= 0 ~pumpRunning~0)) (.cse5 (= ~methaneLevelCritical~0 ~systemActive~0)) (.cse6 (not (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4))) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 (= 0 ULTIMATE.start_activatePump_~tmp~1) (not .cse1) .cse2) (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse3 .cse2) (and .cse0 .cse4 .cse1 .cse5 .cse3 .cse6 .cse2) (and (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0)) (<= 2 ~waterLevel~0) .cse0 .cse4 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse1 .cse5 .cse6 (not (= 0 ULTIMATE.start_processEnvironment_~tmp~0)) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2) .cse2))) [2020-07-28 19:02:07,447 INFO L268 CegarLoopResult]: For program point L343-2(lines 343 356) no Hoare annotation was computed. [2020-07-28 19:02:07,447 INFO L264 CegarLoopResult]: At program point L343-3(lines 1 925) the Hoare annotation is: false [2020-07-28 19:02:07,447 INFO L268 CegarLoopResult]: For program point L343-4(lines 343 356) no Hoare annotation was computed. [2020-07-28 19:02:07,447 INFO L264 CegarLoopResult]: At program point L343-5(lines 1 925) the Hoare annotation is: false [2020-07-28 19:02:07,447 INFO L268 CegarLoopResult]: For program point L922(line 922) no Hoare annotation was computed. [2020-07-28 19:02:07,447 INFO L268 CegarLoopResult]: For program point L922-1(line 922) no Hoare annotation was computed. [2020-07-28 19:02:07,447 INFO L268 CegarLoopResult]: For program point L922-2(line 922) no Hoare annotation was computed. [2020-07-28 19:02:07,447 INFO L268 CegarLoopResult]: For program point L164(lines 164 170) no Hoare annotation was computed. [2020-07-28 19:02:07,447 INFO L268 CegarLoopResult]: For program point L131(lines 131 139) no Hoare annotation was computed. [2020-07-28 19:02:07,447 INFO L268 CegarLoopResult]: For program point L131-1(lines 131 139) no Hoare annotation was computed. [2020-07-28 19:02:07,448 INFO L268 CegarLoopResult]: For program point L164-2(lines 164 170) no Hoare annotation was computed. [2020-07-28 19:02:07,448 INFO L264 CegarLoopResult]: At program point L65(lines 1 925) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:02:07,448 INFO L268 CegarLoopResult]: For program point L131-2(lines 131 139) no Hoare annotation was computed. [2020-07-28 19:02:07,448 INFO L268 CegarLoopResult]: For program point L164-4(lines 164 170) no Hoare annotation was computed. [2020-07-28 19:02:07,448 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:02:07,448 INFO L268 CegarLoopResult]: For program point L445(lines 445 451) no Hoare annotation was computed. [2020-07-28 19:02:07,448 INFO L268 CegarLoopResult]: For program point L445-1(lines 445 451) no Hoare annotation was computed. [2020-07-28 19:02:07,448 INFO L268 CegarLoopResult]: For program point L445-2(lines 445 451) no Hoare annotation was computed. [2020-07-28 19:02:07,448 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 922) no Hoare annotation was computed. [2020-07-28 19:02:07,449 INFO L268 CegarLoopResult]: For program point L247(lines 247 251) no Hoare annotation was computed. [2020-07-28 19:02:07,449 INFO L268 CegarLoopResult]: For program point L247-2(lines 247 251) no Hoare annotation was computed. [2020-07-28 19:02:07,449 INFO L268 CegarLoopResult]: For program point L247-3(lines 247 251) no Hoare annotation was computed. [2020-07-28 19:02:07,449 INFO L268 CegarLoopResult]: For program point L247-5(lines 247 251) no Hoare annotation was computed. [2020-07-28 19:02:07,449 INFO L268 CegarLoopResult]: For program point L247-6(lines 247 251) no Hoare annotation was computed. [2020-07-28 19:02:07,449 INFO L268 CegarLoopResult]: For program point L247-8(lines 247 251) no Hoare annotation was computed. [2020-07-28 19:02:07,449 INFO L264 CegarLoopResult]: At program point L198(lines 193 201) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (not (= 0 |ULTIMATE.start_isPumpRunning_#res|)) (= 0 ULTIMATE.start_activatePump_~tmp~1) (not (= 0 ~pumpRunning~0)) (= 1 ~systemActive~0)) [2020-07-28 19:02:07,449 INFO L264 CegarLoopResult]: At program point L198-1(lines 193 201) the Hoare annotation is: false [2020-07-28 19:02:07,449 INFO L264 CegarLoopResult]: At program point L198-2(lines 193 201) the Hoare annotation is: false [2020-07-28 19:02:07,450 INFO L268 CegarLoopResult]: For program point L380(lines 380 384) no Hoare annotation was computed. [2020-07-28 19:02:07,450 INFO L268 CegarLoopResult]: For program point L347(lines 347 353) no Hoare annotation was computed. [2020-07-28 19:02:07,450 INFO L268 CegarLoopResult]: For program point L281(lines 281 287) no Hoare annotation was computed. [2020-07-28 19:02:07,450 INFO L268 CegarLoopResult]: For program point L347-2(lines 347 353) no Hoare annotation was computed. [2020-07-28 19:02:07,450 INFO L264 CegarLoopResult]: At program point L281-1(lines 281 287) the Hoare annotation is: (let ((.cse3 (= 0 ~methaneLevelCritical~0)) (.cse5 (= 1 ~waterLevel~0)) (.cse4 (<= 2 ~waterLevel~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse6 (not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (.cse1 (= 0 ~pumpRunning~0)) (.cse7 (= ~methaneLevelCritical~0 ~systemActive~0)) (.cse8 (not (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4))) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 (= 0 ULTIMATE.start_activatePump_~tmp~1) (not .cse1) .cse2) (and .cse3 .cse4 .cse0 .cse1 .cse2) (and .cse3 .cse0 .cse1 .cse5 .cse2) (and .cse0 .cse6 .cse1 .cse7 .cse5 .cse8 .cse2) (and .cse4 .cse0 .cse6 .cse1 .cse7 .cse8 .cse2))) [2020-07-28 19:02:07,450 INFO L268 CegarLoopResult]: For program point L347-4(lines 347 353) no Hoare annotation was computed. [2020-07-28 19:02:07,450 INFO L271 CegarLoopResult]: At program point L547(lines 528 550) the Hoare annotation is: true [2020-07-28 19:02:07,454 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:02:07,454 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:02:07,455 WARN L170 areAnnotationChecker]: L538 has no Hoare annotation [2020-07-28 19:02:07,455 WARN L170 areAnnotationChecker]: L538 has no Hoare annotation [2020-07-28 19:02:07,455 WARN L170 areAnnotationChecker]: L538 has no Hoare annotation [2020-07-28 19:02:07,467 WARN L170 areAnnotationChecker]: L272 has no Hoare annotation [2020-07-28 19:02:07,467 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:02:07,468 WARN L170 areAnnotationChecker]: L95-1 has no Hoare annotation [2020-07-28 19:02:07,468 WARN L170 areAnnotationChecker]: L272 has no Hoare annotation [2020-07-28 19:02:07,468 WARN L170 areAnnotationChecker]: L272 has no Hoare annotation [2020-07-28 19:02:07,468 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:02:07,468 WARN L170 areAnnotationChecker]: L95-1 has no Hoare annotation [2020-07-28 19:02:07,468 WARN L170 areAnnotationChecker]: L95-1 has no Hoare annotation [2020-07-28 19:02:07,468 WARN L170 areAnnotationChecker]: L273 has no Hoare annotation [2020-07-28 19:02:07,468 WARN L170 areAnnotationChecker]: L368-3 has no Hoare annotation [2020-07-28 19:02:07,468 WARN L170 areAnnotationChecker]: L368-3 has no Hoare annotation [2020-07-28 19:02:07,468 WARN L170 areAnnotationChecker]: L127-1 has no Hoare annotation [2020-07-28 19:02:07,469 WARN L170 areAnnotationChecker]: L281 has no Hoare annotation [2020-07-28 19:02:07,469 WARN L170 areAnnotationChecker]: L281 has no Hoare annotation [2020-07-28 19:02:07,469 WARN L170 areAnnotationChecker]: L127-1 has no Hoare annotation [2020-07-28 19:02:07,469 WARN L170 areAnnotationChecker]: L127-1 has no Hoare annotation [2020-07-28 19:02:07,469 WARN L170 areAnnotationChecker]: L380 has no Hoare annotation [2020-07-28 19:02:07,469 WARN L170 areAnnotationChecker]: L380 has no Hoare annotation [2020-07-28 19:02:07,469 WARN L170 areAnnotationChecker]: L291 has no Hoare annotation [2020-07-28 19:02:07,469 WARN L170 areAnnotationChecker]: L445-1 has no Hoare annotation [2020-07-28 19:02:07,469 WARN L170 areAnnotationChecker]: L445-1 has no Hoare annotation [2020-07-28 19:02:07,470 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2020-07-28 19:02:07,470 WARN L170 areAnnotationChecker]: L291 has no Hoare annotation [2020-07-28 19:02:07,470 WARN L170 areAnnotationChecker]: L291 has no Hoare annotation [2020-07-28 19:02:07,470 WARN L170 areAnnotationChecker]: L247-3 has no Hoare annotation [2020-07-28 19:02:07,470 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2020-07-28 19:02:07,470 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2020-07-28 19:02:07,470 WARN L170 areAnnotationChecker]: L392 has no Hoare annotation [2020-07-28 19:02:07,471 WARN L170 areAnnotationChecker]: L392 has no Hoare annotation [2020-07-28 19:02:07,471 WARN L170 areAnnotationChecker]: L301 has no Hoare annotation [2020-07-28 19:02:07,471 WARN L170 areAnnotationChecker]: L247-3 has no Hoare annotation [2020-07-28 19:02:07,472 WARN L170 areAnnotationChecker]: L247-3 has no Hoare annotation [2020-07-28 19:02:07,472 WARN L170 areAnnotationChecker]: L343-2 has no Hoare annotation [2020-07-28 19:02:07,472 WARN L170 areAnnotationChecker]: L301 has no Hoare annotation [2020-07-28 19:02:07,472 WARN L170 areAnnotationChecker]: L301 has no Hoare annotation [2020-07-28 19:02:07,472 WARN L170 areAnnotationChecker]: L247-5 has no Hoare annotation [2020-07-28 19:02:07,472 WARN L170 areAnnotationChecker]: L468 has no Hoare annotation [2020-07-28 19:02:07,472 WARN L170 areAnnotationChecker]: L343-2 has no Hoare annotation [2020-07-28 19:02:07,472 WARN L170 areAnnotationChecker]: L343-2 has no Hoare annotation [2020-07-28 19:02:07,472 WARN L170 areAnnotationChecker]: L307-2 has no Hoare annotation [2020-07-28 19:02:07,472 WARN L170 areAnnotationChecker]: L307-2 has no Hoare annotation [2020-07-28 19:02:07,473 WARN L170 areAnnotationChecker]: L307 has no Hoare annotation [2020-07-28 19:02:07,473 WARN L170 areAnnotationChecker]: L307 has no Hoare annotation [2020-07-28 19:02:07,473 WARN L170 areAnnotationChecker]: L131-1 has no Hoare annotation [2020-07-28 19:02:07,473 WARN L170 areAnnotationChecker]: L468 has no Hoare annotation [2020-07-28 19:02:07,473 WARN L170 areAnnotationChecker]: L347-2 has no Hoare annotation [2020-07-28 19:02:07,473 WARN L170 areAnnotationChecker]: L368 has no Hoare annotation [2020-07-28 19:02:07,473 WARN L170 areAnnotationChecker]: L368 has no Hoare annotation [2020-07-28 19:02:07,474 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2020-07-28 19:02:07,478 WARN L170 areAnnotationChecker]: L131-1 has no Hoare annotation [2020-07-28 19:02:07,479 WARN L170 areAnnotationChecker]: L131-1 has no Hoare annotation [2020-07-28 19:02:07,479 WARN L170 areAnnotationChecker]: L471 has no Hoare annotation [2020-07-28 19:02:07,479 WARN L170 areAnnotationChecker]: L471 has no Hoare annotation [2020-07-28 19:02:07,479 WARN L170 areAnnotationChecker]: L347-2 has no Hoare annotation [2020-07-28 19:02:07,479 WARN L170 areAnnotationChecker]: L347-2 has no Hoare annotation [2020-07-28 19:02:07,479 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2020-07-28 19:02:07,479 WARN L170 areAnnotationChecker]: L127 has no Hoare annotation [2020-07-28 19:02:07,481 WARN L170 areAnnotationChecker]: L471-1 has no Hoare annotation [2020-07-28 19:02:07,482 WARN L170 areAnnotationChecker]: L471-1 has no Hoare annotation [2020-07-28 19:02:07,482 WARN L170 areAnnotationChecker]: L922-1 has no Hoare annotation [2020-07-28 19:02:07,482 WARN L170 areAnnotationChecker]: L922-1 has no Hoare annotation [2020-07-28 19:02:07,482 WARN L170 areAnnotationChecker]: L445 has no Hoare annotation [2020-07-28 19:02:07,482 WARN L170 areAnnotationChecker]: L445 has no Hoare annotation [2020-07-28 19:02:07,482 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2020-07-28 19:02:07,482 WARN L170 areAnnotationChecker]: L164-2 has no Hoare annotation [2020-07-28 19:02:07,482 WARN L170 areAnnotationChecker]: L368-6 has no Hoare annotation [2020-07-28 19:02:07,482 WARN L170 areAnnotationChecker]: L368-6 has no Hoare annotation [2020-07-28 19:02:07,482 WARN L170 areAnnotationChecker]: L127-2 has no Hoare annotation [2020-07-28 19:02:07,483 WARN L170 areAnnotationChecker]: L247 has no Hoare annotation [2020-07-28 19:02:07,483 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2020-07-28 19:02:07,483 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2020-07-28 19:02:07,483 WARN L170 areAnnotationChecker]: L164-2 has no Hoare annotation [2020-07-28 19:02:07,484 WARN L170 areAnnotationChecker]: L164-2 has no Hoare annotation [2020-07-28 19:02:07,484 WARN L170 areAnnotationChecker]: L127-2 has no Hoare annotation [2020-07-28 19:02:07,484 WARN L170 areAnnotationChecker]: L127-2 has no Hoare annotation [2020-07-28 19:02:07,484 WARN L170 areAnnotationChecker]: L247 has no Hoare annotation [2020-07-28 19:02:07,484 WARN L170 areAnnotationChecker]: L247 has no Hoare annotation [2020-07-28 19:02:07,484 WARN L170 areAnnotationChecker]: L343 has no Hoare annotation [2020-07-28 19:02:07,484 WARN L170 areAnnotationChecker]: L445-2 has no Hoare annotation [2020-07-28 19:02:07,484 WARN L170 areAnnotationChecker]: L445-2 has no Hoare annotation [2020-07-28 19:02:07,484 WARN L170 areAnnotationChecker]: L337-4 has no Hoare annotation [2020-07-28 19:02:07,484 WARN L170 areAnnotationChecker]: L247-2 has no Hoare annotation [2020-07-28 19:02:07,485 WARN L170 areAnnotationChecker]: L343 has no Hoare annotation [2020-07-28 19:02:07,485 WARN L170 areAnnotationChecker]: L343 has no Hoare annotation [2020-07-28 19:02:07,485 WARN L170 areAnnotationChecker]: L247-6 has no Hoare annotation [2020-07-28 19:02:07,485 WARN L170 areAnnotationChecker]: L337-4 has no Hoare annotation [2020-07-28 19:02:07,485 WARN L170 areAnnotationChecker]: L337-4 has no Hoare annotation [2020-07-28 19:02:07,485 WARN L170 areAnnotationChecker]: L131 has no Hoare annotation [2020-07-28 19:02:07,485 WARN L170 areAnnotationChecker]: L347 has no Hoare annotation [2020-07-28 19:02:07,487 WARN L170 areAnnotationChecker]: L247-6 has no Hoare annotation [2020-07-28 19:02:07,487 WARN L170 areAnnotationChecker]: L247-6 has no Hoare annotation [2020-07-28 19:02:07,487 WARN L170 areAnnotationChecker]: L343-4 has no Hoare annotation [2020-07-28 19:02:07,487 WARN L170 areAnnotationChecker]: L131 has no Hoare annotation [2020-07-28 19:02:07,487 WARN L170 areAnnotationChecker]: L131 has no Hoare annotation [2020-07-28 19:02:07,487 WARN L170 areAnnotationChecker]: L347 has no Hoare annotation [2020-07-28 19:02:07,487 WARN L170 areAnnotationChecker]: L347 has no Hoare annotation [2020-07-28 19:02:07,488 WARN L170 areAnnotationChecker]: L247-8 has no Hoare annotation [2020-07-28 19:02:07,488 WARN L170 areAnnotationChecker]: L343-4 has no Hoare annotation [2020-07-28 19:02:07,488 WARN L170 areAnnotationChecker]: L343-4 has no Hoare annotation [2020-07-28 19:02:07,491 WARN L170 areAnnotationChecker]: L922 has no Hoare annotation [2020-07-28 19:02:07,492 WARN L170 areAnnotationChecker]: L922 has no Hoare annotation [2020-07-28 19:02:07,492 WARN L170 areAnnotationChecker]: L131-2 has no Hoare annotation [2020-07-28 19:02:07,492 WARN L170 areAnnotationChecker]: L347-4 has no Hoare annotation [2020-07-28 19:02:07,492 WARN L170 areAnnotationChecker]: L164 has no Hoare annotation [2020-07-28 19:02:07,492 WARN L170 areAnnotationChecker]: L131-2 has no Hoare annotation [2020-07-28 19:02:07,492 WARN L170 areAnnotationChecker]: L131-2 has no Hoare annotation [2020-07-28 19:02:07,492 WARN L170 areAnnotationChecker]: L347-4 has no Hoare annotation [2020-07-28 19:02:07,492 WARN L170 areAnnotationChecker]: L347-4 has no Hoare annotation [2020-07-28 19:02:07,492 WARN L170 areAnnotationChecker]: L164 has no Hoare annotation [2020-07-28 19:02:07,492 WARN L170 areAnnotationChecker]: L164 has no Hoare annotation [2020-07-28 19:02:07,493 WARN L170 areAnnotationChecker]: L922-2 has no Hoare annotation [2020-07-28 19:02:07,493 WARN L170 areAnnotationChecker]: L922-2 has no Hoare annotation [2020-07-28 19:02:07,493 WARN L170 areAnnotationChecker]: L164-4 has no Hoare annotation [2020-07-28 19:02:07,493 WARN L170 areAnnotationChecker]: L164-4 has no Hoare annotation [2020-07-28 19:02:07,493 WARN L170 areAnnotationChecker]: L164-4 has no Hoare annotation [2020-07-28 19:02:07,493 INFO L163 areAnnotationChecker]: CFG has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:02:07,543 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:02:07 BoogieIcfgContainer [2020-07-28 19:02:07,544 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:02:07,544 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:02:07,545 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:02:07,545 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:02:07,546 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:01:46" (3/4) ... [2020-07-28 19:02:07,550 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:02:07,568 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:02:07,569 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:02:07,570 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:02:07,571 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:02:07,572 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:02:07,573 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:02:07,573 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:02:07,603 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 0 == tmp) && !(0 == pumpRunning)) && 1 == systemActive) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((((0 == splverifierCounter && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && !(0 == tmp)) && 1 == systemActive)) || (((((((((((!(0 == tmp___0) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && !(0 == tmp)) && !(0 == tmp)) && 0 == tmp) && 1 == systemActive) [2020-07-28 19:02:07,604 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == splverifierCounter && 0 == tmp) && !(0 == pumpRunning)) && 1 == systemActive) || ((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((((0 == splverifierCounter && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && !(0 == tmp)) && 1 == systemActive)) || ((((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && !(0 == tmp)) && 1 == systemActive) [2020-07-28 19:02:07,605 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 0 == tmp) && !(0 == pumpRunning)) && 1 == systemActive) || ((((((((((!(0 == tmp___0) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && !(0 == tmp)) && 0 == tmp) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((0 == splverifierCounter && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive) [2020-07-28 19:02:07,606 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 0 == tmp) && !(0 == pumpRunning)) && 1 == systemActive) || ((((((((((!(0 == tmp___0) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && !(0 == tmp)) && 0 == tmp) && 1 == systemActive)) || (((((0 == splverifierCounter && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive)) || (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result) && 1 == systemActive) [2020-07-28 19:02:07,607 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || (((((2 <= waterLevel && 0 == splverifierCounter) && 0 == \result) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == systemActive)) || ((((0 == splverifierCounter && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive) [2020-07-28 19:02:07,608 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == splverifierCounter && 0 == tmp) && !(0 == pumpRunning)) && 1 == systemActive) || ((((((0 == methaneLevelCritical && 1 == \result) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result) && 1 == systemActive) [2020-07-28 19:02:07,608 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || ((((((((!(0 == tmp___0) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 0 == tmp) && 1 == systemActive)) || ((((((((!(0 == tmp___0) && 0 == methaneLevelCritical) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == systemActive)) || ((((0 == splverifierCounter && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive) [2020-07-28 19:02:07,609 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == splverifierCounter && !(0 == \result)) && 0 == tmp) && !(0 == pumpRunning)) && 1 == systemActive [2020-07-28 19:02:07,610 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result) && !(0 == tmp)) && 1 == systemActive) || ((((((((((!(0 == tmp___0) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && !(0 == tmp)) && 0 == tmp) && 1 == systemActive)) || ((((((0 == splverifierCounter && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && !(0 == tmp)) && 1 == systemActive)) || ((((((((((!(0 == tmp___0) && 0 == methaneLevelCritical) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && 0 == \result) && !(0 == tmp)) && 0 == tmp) && 1 == systemActive) [2020-07-28 19:02:07,611 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((!(0 == tmp___0) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && !(0 == tmp)) && 0 == tmp) && 1 == systemActive) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result) && !(0 == tmp)) && 1 == systemActive)) || (((((((((((!(0 == tmp___0) && 0 == methaneLevelCritical) && 2 <= waterLevel) && 0 == splverifierCounter) && 0 == \result) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && 0 == \result) && !(0 == tmp)) && 0 == tmp) && 1 == systemActive)) || ((((((0 == splverifierCounter && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && !(0 == tmp)) && 1 == systemActive) [2020-07-28 19:02:07,687 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:02:07,687 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:02:07,689 INFO L168 Benchmark]: Toolchain (without parser) took 24131.91 ms. Allocated memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: 454.6 MB). Free memory was 961.6 MB in the beginning and 1.3 GB in the end (delta: -367.5 MB). Peak memory consumption was 87.0 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:07,689 INFO L168 Benchmark]: CDTParser took 0.31 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:02:07,690 INFO L168 Benchmark]: CACSL2BoogieTranslator took 731.62 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 129.5 MB). Free memory was 956.2 MB in the beginning and 1.1 GB in the end (delta: -148.3 MB). Peak memory consumption was 21.9 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:07,690 INFO L168 Benchmark]: Boogie Procedure Inliner took 99.18 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:02:07,690 INFO L168 Benchmark]: Boogie Preprocessor took 58.02 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:07,690 INFO L168 Benchmark]: RCFGBuilder took 1556.87 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 939.7 MB in the end (delta: 158.2 MB). Peak memory consumption was 158.2 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:07,691 INFO L168 Benchmark]: TraceAbstraction took 21535.11 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 325.1 MB). Free memory was 939.7 MB in the beginning and 1.3 GB in the end (delta: -402.0 MB). There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:02:07,691 INFO L168 Benchmark]: Witness Printer took 142.35 ms. Allocated memory is still 1.5 GB. Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: 12.7 MB). Peak memory consumption was 12.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:07,693 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.31 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 731.62 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 129.5 MB). Free memory was 956.2 MB in the beginning and 1.1 GB in the end (delta: -148.3 MB). Peak memory consumption was 21.9 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 99.18 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Boogie Preprocessor took 58.02 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1556.87 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 939.7 MB in the end (delta: 158.2 MB). Peak memory consumption was 158.2 MB. Max. memory is 11.5 GB. * TraceAbstraction took 21535.11 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 325.1 MB). Free memory was 939.7 MB in the beginning and 1.3 GB in the end (delta: -402.0 MB). There was no memory consumed. Max. memory is 11.5 GB. * Witness Printer took 142.35 ms. Allocated memory is still 1.5 GB. Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: 12.7 MB). Peak memory consumption was 12.7 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 922]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 922]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 922]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 511]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 0 == tmp) && !(0 == pumpRunning)) && 1 == systemActive) || ((((((((((!(0 == tmp___0) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && !(0 == tmp)) && 0 == tmp) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((0 == splverifierCounter && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive) - InvariantResult [Line: 94]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 94]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 0 == tmp) && !(0 == pumpRunning)) && 1 == systemActive) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((((0 == splverifierCounter && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && !(0 == tmp)) && 1 == systemActive)) || (((((((((((!(0 == tmp___0) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && !(0 == tmp)) && !(0 == tmp)) && 0 == tmp) && 1 == systemActive) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result) && !(0 == tmp)) && 1 == systemActive) || ((((((((((!(0 == tmp___0) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && !(0 == tmp)) && 0 == tmp) && 1 == systemActive)) || ((((((0 == splverifierCounter && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && !(0 == tmp)) && 1 == systemActive)) || ((((((((((!(0 == tmp___0) && 0 == methaneLevelCritical) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && 0 == \result) && !(0 == tmp)) && 0 == tmp) && 1 == systemActive) - InvariantResult [Line: 68]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && 0 == tmp) && !(0 == pumpRunning)) && 1 == systemActive) || ((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((((0 == splverifierCounter && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && !(0 == tmp)) && 1 == systemActive)) || ((((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && !(0 == tmp)) && 1 == systemActive) - InvariantResult [Line: 102]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 538]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 528]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 238]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 182]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: (((0 == splverifierCounter && !(0 == \result)) && 0 == tmp) && !(0 == pumpRunning)) && 1 == systemActive - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || (((((2 <= waterLevel && 0 == splverifierCounter) && 0 == \result) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == systemActive)) || ((((0 == splverifierCounter && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive) - InvariantResult [Line: 238]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 182]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 238]: Loop Invariant Derived loop invariant: ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || ((((((((!(0 == tmp___0) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 0 == tmp) && 1 == systemActive)) || ((((((((!(0 == tmp___0) && 0 == methaneLevelCritical) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == systemActive)) || ((((0 == splverifierCounter && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive) - InvariantResult [Line: 182]: Loop Invariant Derived loop invariant: ((((((((((((!(0 == tmp___0) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && !(0 == tmp)) && 0 == tmp) && 1 == systemActive) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result) && !(0 == tmp)) && 1 == systemActive)) || (((((((((((!(0 == tmp___0) && 0 == methaneLevelCritical) && 2 <= waterLevel) && 0 == splverifierCounter) && 0 == \result) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && 0 == \result) && !(0 == tmp)) && 0 == tmp) && 1 == systemActive)) || ((((((0 == splverifierCounter && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && !(0 == tmp)) && 1 == systemActive) - InvariantResult [Line: 441]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 432]: Loop Invariant Derived loop invariant: (((0 == splverifierCounter && 0 == tmp) && !(0 == pumpRunning)) && 1 == systemActive) || ((((((0 == methaneLevelCritical && 1 == \result) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result) && 1 == systemActive) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 94]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && 0 == tmp) && !(0 == pumpRunning)) && 1 == systemActive) || ((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((0 == splverifierCounter && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive)) || ((((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == systemActive) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 0 == tmp) && !(0 == pumpRunning)) && 1 == systemActive) || ((((((((((!(0 == tmp___0) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == \result)) && !(0 == \result)) && 0 == \result) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && !(0 == tmp)) && 0 == tmp) && 1 == systemActive)) || (((((0 == splverifierCounter && !(0 == \result)) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive)) || (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result) && 1 == systemActive) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 270]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 291]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && 0 == tmp) && !(0 == pumpRunning)) && 1 == systemActive) || ((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((0 == splverifierCounter && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == waterLevel) && 1 == systemActive)) || ((((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && methaneLevelCritical == systemActive) && 1 == systemActive) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 467]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 193]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 93 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 18.2s, OverallIterations: 11, TraceHistogramMax: 1, AutomataDifference: 13.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1028 SDtfs, 1366 SDslu, 1800 SDs, 0 SdLazy, 263 SolverSat, 37 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.4s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 77 GetRequests, 22 SyntacticMatches, 0 SemanticMatches, 55 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 47 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=302occurred in iteration=9, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 2.2s AutomataMinimizationTime, 11 MinimizatonAttempts, 1248 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 39 LocationsWithAnnotation, 39 PreInvPairs, 204 NumberOfFragments, 1061 HoareAnnotationTreeSize, 39 FomulaSimplifications, 183582 FormulaSimplificationTreeSizeReduction, 0.7s HoareSimplificationTime, 39 FomulaSimplificationsInter, 14363 FormulaSimplificationTreeSizeReductionInter, 2.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 1.0s InterpolantComputationTime, 319 NumberOfCodeBlocks, 319 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 308 ConstructedInterpolants, 0 QuantifiedInterpolants, 20824 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 11 InterpolantComputations, 11 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...