./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 284d5750b565b650dea59fef4c61eb2e70211282 ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:01:42,178 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:01:42,181 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:01:42,200 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:01:42,201 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:01:42,202 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:01:42,203 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:01:42,205 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:01:42,207 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:01:42,208 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:01:42,209 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:01:42,210 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:01:42,210 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:01:42,211 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:01:42,212 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:01:42,213 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:01:42,214 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:01:42,215 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:01:42,217 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:01:42,219 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:01:42,220 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:01:42,221 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:01:42,222 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:01:42,223 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:01:42,226 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:01:42,226 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:01:42,227 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:01:42,227 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:01:42,228 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:01:42,229 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:01:42,229 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:01:42,230 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:01:42,231 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:01:42,231 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:01:42,233 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:01:42,233 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:01:42,233 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:01:42,234 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:01:42,234 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:01:42,235 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:01:42,235 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:01:42,236 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:01:42,251 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:01:42,251 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:01:42,253 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:01:42,253 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:01:42,253 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:01:42,253 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:01:42,253 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:01:42,254 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:01:42,254 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:01:42,254 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:01:42,254 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:01:42,255 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:01:42,255 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:01:42,255 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:01:42,255 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:01:42,255 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:01:42,256 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:01:42,256 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:01:42,256 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:01:42,256 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:01:42,256 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:01:42,257 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:01:42,257 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:01:42,257 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:01:42,257 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:01:42,258 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:01:42,258 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:01:42,258 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:01:42,258 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:01:42,258 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 284d5750b565b650dea59fef4c61eb2e70211282 [2020-07-28 19:01:42,559 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:01:42,582 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:01:42,587 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:01:42,589 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:01:42,593 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:01:42,594 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c [2020-07-28 19:01:42,667 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/51c4c1557/b3df8a818fa54a23b1d6e286e066e287/FLAGdf530fe25 [2020-07-28 19:01:43,124 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:01:43,125 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product42.cil.c [2020-07-28 19:01:43,138 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/51c4c1557/b3df8a818fa54a23b1d6e286e066e287/FLAGdf530fe25 [2020-07-28 19:01:43,430 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/51c4c1557/b3df8a818fa54a23b1d6e286e066e287 [2020-07-28 19:01:43,434 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:01:43,436 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:01:43,437 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:01:43,437 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:01:43,440 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:01:43,442 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:01:43" (1/1) ... [2020-07-28 19:01:43,444 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@27ade0a6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:43, skipping insertion in model container [2020-07-28 19:01:43,445 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:01:43" (1/1) ... [2020-07-28 19:01:43,452 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:01:43,517 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:01:43,974 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:01:43,987 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:01:44,064 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:01:44,099 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:01:44,099 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44 WrapperNode [2020-07-28 19:01:44,099 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:01:44,100 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:01:44,100 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:01:44,101 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:01:44,110 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,129 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,186 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:01:44,187 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:01:44,187 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:01:44,187 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:01:44,198 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,198 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,208 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,213 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,237 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,255 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,260 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... [2020-07-28 19:01:44,270 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:01:44,270 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:01:44,270 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:01:44,270 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:01:44,272 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:01:44,349 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:01:44,350 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:01:44,350 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:01:44,351 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:01:45,787 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:01:45,788 INFO L295 CfgBuilder]: Removed 122 assume(true) statements. [2020-07-28 19:01:45,793 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:01:45 BoogieIcfgContainer [2020-07-28 19:01:45,793 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:01:45,795 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:01:45,795 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:01:45,798 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:01:45,799 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:01:43" (1/3) ... [2020-07-28 19:01:45,800 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6747f2ea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:01:45, skipping insertion in model container [2020-07-28 19:01:45,800 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:44" (2/3) ... [2020-07-28 19:01:45,800 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6747f2ea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:01:45, skipping insertion in model container [2020-07-28 19:01:45,801 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:01:45" (3/3) ... [2020-07-28 19:01:45,802 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product42.cil.c [2020-07-28 19:01:45,813 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:01:45,820 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:01:45,834 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:01:45,858 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:01:45,858 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:01:45,858 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:01:45,859 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:01:45,859 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:01:45,859 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:01:45,860 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:01:45,860 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:01:45,878 INFO L276 IsEmpty]: Start isEmpty. Operand 93 states. [2020-07-28 19:01:45,885 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-28 19:01:45,885 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:45,886 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:45,887 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:45,893 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:45,893 INFO L82 PathProgramCache]: Analyzing trace with hash -1623272414, now seen corresponding path program 1 times [2020-07-28 19:01:45,902 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:45,903 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [913883598] [2020-07-28 19:01:45,903 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:46,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:46,229 INFO L280 TraceCheckUtils]: 0: Hoare triple {96#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(13);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string28.base, #t~string28.offset, 1);call write~init~int(77, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(101, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(116, #t~string28.base, 3 + #t~string28.offset, 1);call write~init~int(104, #t~string28.base, 4 + #t~string28.offset, 1);call write~init~int(58, #t~string28.base, 5 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 6 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string30.base, #t~string30.offset, 1);call write~init~int(82, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(73, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(84, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 4 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string32.base, #t~string32.offset, 1);call write~init~int(75, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {96#true} is VALID [2020-07-28 19:01:46,230 INFO L280 TraceCheckUtils]: 1: Hoare triple {96#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {96#true} is VALID [2020-07-28 19:01:46,230 INFO L280 TraceCheckUtils]: 2: Hoare triple {96#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {96#true} is VALID [2020-07-28 19:01:46,231 INFO L280 TraceCheckUtils]: 3: Hoare triple {96#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {96#true} is VALID [2020-07-28 19:01:46,231 INFO L280 TraceCheckUtils]: 4: Hoare triple {96#true} assume 0 != main_~tmp~0; {96#true} is VALID [2020-07-28 19:01:46,232 INFO L280 TraceCheckUtils]: 5: Hoare triple {96#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {96#true} is VALID [2020-07-28 19:01:46,233 INFO L280 TraceCheckUtils]: 6: Hoare triple {96#true} assume !true; {97#false} is VALID [2020-07-28 19:01:46,234 INFO L280 TraceCheckUtils]: 7: Hoare triple {97#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {97#false} is VALID [2020-07-28 19:01:46,234 INFO L280 TraceCheckUtils]: 8: Hoare triple {97#false} assume !(0 != ~pumpRunning~0); {97#false} is VALID [2020-07-28 19:01:46,235 INFO L280 TraceCheckUtils]: 9: Hoare triple {97#false} assume !(0 != ~systemActive~0); {97#false} is VALID [2020-07-28 19:01:46,235 INFO L280 TraceCheckUtils]: 10: Hoare triple {97#false} havoc __utac_acc__Specification3_spec__1_#t~ret71, __utac_acc__Specification3_spec__1_#t~ret72, __utac_acc__Specification3_spec__1_#t~ret73, __utac_acc__Specification3_spec__1_~tmp~8, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~8;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {97#false} is VALID [2020-07-28 19:01:46,235 INFO L280 TraceCheckUtils]: 11: Hoare triple {97#false} __utac_acc__Specification3_spec__1_#t~ret71 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret71 && __utac_acc__Specification3_spec__1_#t~ret71 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~8 := __utac_acc__Specification3_spec__1_#t~ret71;havoc __utac_acc__Specification3_spec__1_#t~ret71; {97#false} is VALID [2020-07-28 19:01:46,236 INFO L280 TraceCheckUtils]: 12: Hoare triple {97#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~8);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {97#false} is VALID [2020-07-28 19:01:46,236 INFO L280 TraceCheckUtils]: 13: Hoare triple {97#false} __utac_acc__Specification3_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret72 && __utac_acc__Specification3_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret72;havoc __utac_acc__Specification3_spec__1_#t~ret72; {97#false} is VALID [2020-07-28 19:01:46,237 INFO L280 TraceCheckUtils]: 14: Hoare triple {97#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {97#false} is VALID [2020-07-28 19:01:46,237 INFO L280 TraceCheckUtils]: 15: Hoare triple {97#false} __utac_acc__Specification3_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret73 && __utac_acc__Specification3_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret73;havoc __utac_acc__Specification3_spec__1_#t~ret73; {97#false} is VALID [2020-07-28 19:01:46,239 INFO L280 TraceCheckUtils]: 16: Hoare triple {97#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {97#false} is VALID [2020-07-28 19:01:46,240 INFO L280 TraceCheckUtils]: 17: Hoare triple {97#false} assume !false; {97#false} is VALID [2020-07-28 19:01:46,247 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:46,248 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [913883598] [2020-07-28 19:01:46,250 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:46,250 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:01:46,251 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1711987784] [2020-07-28 19:01:46,258 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:01:46,260 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:46,263 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:01:46,311 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:46,312 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:01:46,312 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:46,321 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:01:46,322 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:01:46,324 INFO L87 Difference]: Start difference. First operand 93 states. Second operand 2 states. [2020-07-28 19:01:46,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:46,735 INFO L93 Difference]: Finished difference Result 180 states and 269 transitions. [2020-07-28 19:01:46,736 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:01:46,737 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:01:46,737 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:46,739 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:01:46,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 269 transitions. [2020-07-28 19:01:46,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:01:46,765 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 269 transitions. [2020-07-28 19:01:46,766 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 269 transitions. [2020-07-28 19:01:47,125 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 269 edges. 269 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:47,145 INFO L225 Difference]: With dead ends: 180 [2020-07-28 19:01:47,145 INFO L226 Difference]: Without dead ends: 89 [2020-07-28 19:01:47,153 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:01:47,180 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2020-07-28 19:01:47,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 89. [2020-07-28 19:01:47,229 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:47,230 INFO L82 GeneralOperation]: Start isEquivalent. First operand 89 states. Second operand 89 states. [2020-07-28 19:01:47,231 INFO L74 IsIncluded]: Start isIncluded. First operand 89 states. Second operand 89 states. [2020-07-28 19:01:47,231 INFO L87 Difference]: Start difference. First operand 89 states. Second operand 89 states. [2020-07-28 19:01:47,241 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:47,242 INFO L93 Difference]: Finished difference Result 89 states and 126 transitions. [2020-07-28 19:01:47,242 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 126 transitions. [2020-07-28 19:01:47,244 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:47,244 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:47,244 INFO L74 IsIncluded]: Start isIncluded. First operand 89 states. Second operand 89 states. [2020-07-28 19:01:47,244 INFO L87 Difference]: Start difference. First operand 89 states. Second operand 89 states. [2020-07-28 19:01:47,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:47,262 INFO L93 Difference]: Finished difference Result 89 states and 126 transitions. [2020-07-28 19:01:47,262 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 126 transitions. [2020-07-28 19:01:47,263 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:47,264 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:47,264 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:47,264 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:47,264 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 89 states. [2020-07-28 19:01:47,272 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 89 states to 89 states and 126 transitions. [2020-07-28 19:01:47,273 INFO L78 Accepts]: Start accepts. Automaton has 89 states and 126 transitions. Word has length 18 [2020-07-28 19:01:47,274 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:47,274 INFO L479 AbstractCegarLoop]: Abstraction has 89 states and 126 transitions. [2020-07-28 19:01:47,274 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:01:47,275 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 126 transitions. [2020-07-28 19:01:47,281 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 19:01:47,282 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:47,282 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:47,283 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:01:47,284 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:47,285 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:47,285 INFO L82 PathProgramCache]: Analyzing trace with hash 352621777, now seen corresponding path program 1 times [2020-07-28 19:01:47,285 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:47,286 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [725665341] [2020-07-28 19:01:47,286 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:47,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:47,441 INFO L280 TraceCheckUtils]: 0: Hoare triple {662#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(13);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string28.base, #t~string28.offset, 1);call write~init~int(77, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(101, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(116, #t~string28.base, 3 + #t~string28.offset, 1);call write~init~int(104, #t~string28.base, 4 + #t~string28.offset, 1);call write~init~int(58, #t~string28.base, 5 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 6 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string30.base, #t~string30.offset, 1);call write~init~int(82, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(73, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(84, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 4 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string32.base, #t~string32.offset, 1);call write~init~int(75, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {662#true} is VALID [2020-07-28 19:01:47,441 INFO L280 TraceCheckUtils]: 1: Hoare triple {662#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {662#true} is VALID [2020-07-28 19:01:47,442 INFO L280 TraceCheckUtils]: 2: Hoare triple {662#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {662#true} is VALID [2020-07-28 19:01:47,442 INFO L280 TraceCheckUtils]: 3: Hoare triple {662#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {662#true} is VALID [2020-07-28 19:01:47,443 INFO L280 TraceCheckUtils]: 4: Hoare triple {662#true} assume 0 != main_~tmp~0; {662#true} is VALID [2020-07-28 19:01:47,443 INFO L280 TraceCheckUtils]: 5: Hoare triple {662#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {664#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:01:47,444 INFO L280 TraceCheckUtils]: 6: Hoare triple {664#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {664#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:01:47,445 INFO L280 TraceCheckUtils]: 7: Hoare triple {664#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {663#false} is VALID [2020-07-28 19:01:47,445 INFO L280 TraceCheckUtils]: 8: Hoare triple {663#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {663#false} is VALID [2020-07-28 19:01:47,446 INFO L280 TraceCheckUtils]: 9: Hoare triple {663#false} assume !(0 != ~pumpRunning~0); {663#false} is VALID [2020-07-28 19:01:47,446 INFO L280 TraceCheckUtils]: 10: Hoare triple {663#false} assume !(0 != ~systemActive~0); {663#false} is VALID [2020-07-28 19:01:47,446 INFO L280 TraceCheckUtils]: 11: Hoare triple {663#false} havoc __utac_acc__Specification3_spec__1_#t~ret71, __utac_acc__Specification3_spec__1_#t~ret72, __utac_acc__Specification3_spec__1_#t~ret73, __utac_acc__Specification3_spec__1_~tmp~8, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~8;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {663#false} is VALID [2020-07-28 19:01:47,447 INFO L280 TraceCheckUtils]: 12: Hoare triple {663#false} __utac_acc__Specification3_spec__1_#t~ret71 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret71 && __utac_acc__Specification3_spec__1_#t~ret71 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~8 := __utac_acc__Specification3_spec__1_#t~ret71;havoc __utac_acc__Specification3_spec__1_#t~ret71; {663#false} is VALID [2020-07-28 19:01:47,447 INFO L280 TraceCheckUtils]: 13: Hoare triple {663#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~8);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {663#false} is VALID [2020-07-28 19:01:47,447 INFO L280 TraceCheckUtils]: 14: Hoare triple {663#false} __utac_acc__Specification3_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret72 && __utac_acc__Specification3_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret72;havoc __utac_acc__Specification3_spec__1_#t~ret72; {663#false} is VALID [2020-07-28 19:01:47,448 INFO L280 TraceCheckUtils]: 15: Hoare triple {663#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {663#false} is VALID [2020-07-28 19:01:47,448 INFO L280 TraceCheckUtils]: 16: Hoare triple {663#false} __utac_acc__Specification3_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret73 && __utac_acc__Specification3_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret73;havoc __utac_acc__Specification3_spec__1_#t~ret73; {663#false} is VALID [2020-07-28 19:01:47,448 INFO L280 TraceCheckUtils]: 17: Hoare triple {663#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {663#false} is VALID [2020-07-28 19:01:47,449 INFO L280 TraceCheckUtils]: 18: Hoare triple {663#false} assume !false; {663#false} is VALID [2020-07-28 19:01:47,450 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:47,450 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [725665341] [2020-07-28 19:01:47,450 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:47,451 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:01:47,451 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1131916971] [2020-07-28 19:01:47,452 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:01:47,453 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:47,453 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:01:47,481 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:47,482 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:01:47,482 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:47,483 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:01:47,483 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:47,483 INFO L87 Difference]: Start difference. First operand 89 states and 126 transitions. Second operand 3 states. [2020-07-28 19:01:47,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:47,700 INFO L93 Difference]: Finished difference Result 89 states and 126 transitions. [2020-07-28 19:01:47,700 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:01:47,701 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:01:47,701 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:47,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:47,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 126 transitions. [2020-07-28 19:01:47,704 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:47,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 126 transitions. [2020-07-28 19:01:47,706 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 126 transitions. [2020-07-28 19:01:47,838 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 126 edges. 126 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:47,839 INFO L225 Difference]: With dead ends: 89 [2020-07-28 19:01:47,839 INFO L226 Difference]: Without dead ends: 39 [2020-07-28 19:01:47,841 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:47,841 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2020-07-28 19:01:47,857 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 39. [2020-07-28 19:01:47,857 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:47,857 INFO L82 GeneralOperation]: Start isEquivalent. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:47,857 INFO L74 IsIncluded]: Start isIncluded. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:47,857 INFO L87 Difference]: Start difference. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:47,860 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:47,860 INFO L93 Difference]: Finished difference Result 39 states and 55 transitions. [2020-07-28 19:01:47,860 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 55 transitions. [2020-07-28 19:01:47,861 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:47,861 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:47,861 INFO L74 IsIncluded]: Start isIncluded. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:47,861 INFO L87 Difference]: Start difference. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:47,863 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:47,863 INFO L93 Difference]: Finished difference Result 39 states and 55 transitions. [2020-07-28 19:01:47,864 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 55 transitions. [2020-07-28 19:01:47,864 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:47,864 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:47,864 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:47,865 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:47,865 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 39 states. [2020-07-28 19:01:47,866 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 55 transitions. [2020-07-28 19:01:47,867 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 55 transitions. Word has length 19 [2020-07-28 19:01:47,867 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:47,867 INFO L479 AbstractCegarLoop]: Abstraction has 39 states and 55 transitions. [2020-07-28 19:01:47,867 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:01:47,868 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 55 transitions. [2020-07-28 19:01:47,868 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 19:01:47,868 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:47,869 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:47,869 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:01:47,869 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:47,870 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:47,870 INFO L82 PathProgramCache]: Analyzing trace with hash 1246279967, now seen corresponding path program 1 times [2020-07-28 19:01:47,870 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:47,870 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1847082875] [2020-07-28 19:01:47,871 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:47,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:47,996 INFO L280 TraceCheckUtils]: 0: Hoare triple {927#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(13);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string28.base, #t~string28.offset, 1);call write~init~int(77, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(101, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(116, #t~string28.base, 3 + #t~string28.offset, 1);call write~init~int(104, #t~string28.base, 4 + #t~string28.offset, 1);call write~init~int(58, #t~string28.base, 5 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 6 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string30.base, #t~string30.offset, 1);call write~init~int(82, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(73, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(84, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 4 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string32.base, #t~string32.offset, 1);call write~init~int(75, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {927#true} is VALID [2020-07-28 19:01:47,996 INFO L280 TraceCheckUtils]: 1: Hoare triple {927#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {927#true} is VALID [2020-07-28 19:01:47,997 INFO L280 TraceCheckUtils]: 2: Hoare triple {927#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {929#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:01:47,998 INFO L280 TraceCheckUtils]: 3: Hoare triple {929#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {930#(= 1 ULTIMATE.start_main_~tmp~0)} is VALID [2020-07-28 19:01:47,999 INFO L280 TraceCheckUtils]: 4: Hoare triple {930#(= 1 ULTIMATE.start_main_~tmp~0)} assume 0 != main_~tmp~0; {927#true} is VALID [2020-07-28 19:01:47,999 INFO L280 TraceCheckUtils]: 5: Hoare triple {927#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {927#true} is VALID [2020-07-28 19:01:47,999 INFO L280 TraceCheckUtils]: 6: Hoare triple {927#true} assume !false; {927#true} is VALID [2020-07-28 19:01:48,000 INFO L280 TraceCheckUtils]: 7: Hoare triple {927#true} assume test_~splverifierCounter~0 < 4; {927#true} is VALID [2020-07-28 19:01:48,000 INFO L280 TraceCheckUtils]: 8: Hoare triple {927#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~1 := test_#t~nondet1;havoc test_#t~nondet1; {927#true} is VALID [2020-07-28 19:01:48,000 INFO L280 TraceCheckUtils]: 9: Hoare triple {927#true} assume !(0 != test_~tmp~1); {927#true} is VALID [2020-07-28 19:01:48,001 INFO L280 TraceCheckUtils]: 10: Hoare triple {927#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {927#true} is VALID [2020-07-28 19:01:48,001 INFO L280 TraceCheckUtils]: 11: Hoare triple {927#true} assume !(0 != test_~tmp___0~0); {927#true} is VALID [2020-07-28 19:01:48,001 INFO L280 TraceCheckUtils]: 12: Hoare triple {927#true} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {927#true} is VALID [2020-07-28 19:01:48,002 INFO L280 TraceCheckUtils]: 13: Hoare triple {927#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {931#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:01:48,003 INFO L280 TraceCheckUtils]: 14: Hoare triple {931#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {931#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:01:48,004 INFO L280 TraceCheckUtils]: 15: Hoare triple {931#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {928#false} is VALID [2020-07-28 19:01:48,004 INFO L280 TraceCheckUtils]: 16: Hoare triple {928#false} havoc __utac_acc__Specification3_spec__1_#t~ret71, __utac_acc__Specification3_spec__1_#t~ret72, __utac_acc__Specification3_spec__1_#t~ret73, __utac_acc__Specification3_spec__1_~tmp~8, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~8;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {928#false} is VALID [2020-07-28 19:01:48,005 INFO L280 TraceCheckUtils]: 17: Hoare triple {928#false} __utac_acc__Specification3_spec__1_#t~ret71 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret71 && __utac_acc__Specification3_spec__1_#t~ret71 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~8 := __utac_acc__Specification3_spec__1_#t~ret71;havoc __utac_acc__Specification3_spec__1_#t~ret71; {928#false} is VALID [2020-07-28 19:01:48,005 INFO L280 TraceCheckUtils]: 18: Hoare triple {928#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~8);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {928#false} is VALID [2020-07-28 19:01:48,005 INFO L280 TraceCheckUtils]: 19: Hoare triple {928#false} __utac_acc__Specification3_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret72 && __utac_acc__Specification3_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret72;havoc __utac_acc__Specification3_spec__1_#t~ret72; {928#false} is VALID [2020-07-28 19:01:48,006 INFO L280 TraceCheckUtils]: 20: Hoare triple {928#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {928#false} is VALID [2020-07-28 19:01:48,006 INFO L280 TraceCheckUtils]: 21: Hoare triple {928#false} __utac_acc__Specification3_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret73 && __utac_acc__Specification3_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret73;havoc __utac_acc__Specification3_spec__1_#t~ret73; {928#false} is VALID [2020-07-28 19:01:48,006 INFO L280 TraceCheckUtils]: 22: Hoare triple {928#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {928#false} is VALID [2020-07-28 19:01:48,007 INFO L280 TraceCheckUtils]: 23: Hoare triple {928#false} assume !false; {928#false} is VALID [2020-07-28 19:01:48,008 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:48,008 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1847082875] [2020-07-28 19:01:48,008 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:48,009 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:01:48,009 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [912512917] [2020-07-28 19:01:48,009 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 24 [2020-07-28 19:01:48,009 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:48,010 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:01:48,045 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:48,046 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:01:48,046 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:48,046 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:01:48,046 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:01:48,047 INFO L87 Difference]: Start difference. First operand 39 states and 55 transitions. Second operand 5 states. [2020-07-28 19:01:48,424 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:48,424 INFO L93 Difference]: Finished difference Result 72 states and 104 transitions. [2020-07-28 19:01:48,424 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:01:48,425 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 24 [2020-07-28 19:01:48,425 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:48,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:48,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 104 transitions. [2020-07-28 19:01:48,427 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:48,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 104 transitions. [2020-07-28 19:01:48,428 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 104 transitions. [2020-07-28 19:01:48,566 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 104 edges. 104 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:48,568 INFO L225 Difference]: With dead ends: 72 [2020-07-28 19:01:48,568 INFO L226 Difference]: Without dead ends: 39 [2020-07-28 19:01:48,568 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:01:48,569 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39 states. [2020-07-28 19:01:48,622 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39 to 39. [2020-07-28 19:01:48,622 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:48,622 INFO L82 GeneralOperation]: Start isEquivalent. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:48,623 INFO L74 IsIncluded]: Start isIncluded. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:48,623 INFO L87 Difference]: Start difference. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:48,626 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:48,626 INFO L93 Difference]: Finished difference Result 39 states and 54 transitions. [2020-07-28 19:01:48,626 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 54 transitions. [2020-07-28 19:01:48,626 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:48,627 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:48,627 INFO L74 IsIncluded]: Start isIncluded. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:48,627 INFO L87 Difference]: Start difference. First operand 39 states. Second operand 39 states. [2020-07-28 19:01:48,628 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:48,629 INFO L93 Difference]: Finished difference Result 39 states and 54 transitions. [2020-07-28 19:01:48,629 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 54 transitions. [2020-07-28 19:01:48,629 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:48,629 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:48,630 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:48,630 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:48,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 39 states. [2020-07-28 19:01:48,631 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39 states to 39 states and 54 transitions. [2020-07-28 19:01:48,632 INFO L78 Accepts]: Start accepts. Automaton has 39 states and 54 transitions. Word has length 24 [2020-07-28 19:01:48,632 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:48,632 INFO L479 AbstractCegarLoop]: Abstraction has 39 states and 54 transitions. [2020-07-28 19:01:48,632 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:01:48,632 INFO L276 IsEmpty]: Start isEmpty. Operand 39 states and 54 transitions. [2020-07-28 19:01:48,633 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2020-07-28 19:01:48,633 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:48,633 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:48,633 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:01:48,634 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:48,634 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:48,634 INFO L82 PathProgramCache]: Analyzing trace with hash 607128155, now seen corresponding path program 1 times [2020-07-28 19:01:48,634 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:48,635 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [224378868] [2020-07-28 19:01:48,635 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:48,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:48,706 INFO L280 TraceCheckUtils]: 0: Hoare triple {1173#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(13);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string28.base, #t~string28.offset, 1);call write~init~int(77, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(101, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(116, #t~string28.base, 3 + #t~string28.offset, 1);call write~init~int(104, #t~string28.base, 4 + #t~string28.offset, 1);call write~init~int(58, #t~string28.base, 5 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 6 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string30.base, #t~string30.offset, 1);call write~init~int(82, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(73, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(84, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 4 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string32.base, #t~string32.offset, 1);call write~init~int(75, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,707 INFO L280 TraceCheckUtils]: 1: Hoare triple {1175#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,708 INFO L280 TraceCheckUtils]: 2: Hoare triple {1175#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,708 INFO L280 TraceCheckUtils]: 3: Hoare triple {1175#(= 0 ~pumpRunning~0)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,709 INFO L280 TraceCheckUtils]: 4: Hoare triple {1175#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~0; {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,709 INFO L280 TraceCheckUtils]: 5: Hoare triple {1175#(= 0 ~pumpRunning~0)} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,710 INFO L280 TraceCheckUtils]: 6: Hoare triple {1175#(= 0 ~pumpRunning~0)} assume !false; {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,710 INFO L280 TraceCheckUtils]: 7: Hoare triple {1175#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,711 INFO L280 TraceCheckUtils]: 8: Hoare triple {1175#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~1 := test_#t~nondet1;havoc test_#t~nondet1; {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,711 INFO L280 TraceCheckUtils]: 9: Hoare triple {1175#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~1); {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,712 INFO L280 TraceCheckUtils]: 10: Hoare triple {1175#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,713 INFO L280 TraceCheckUtils]: 11: Hoare triple {1175#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~0); {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,713 INFO L280 TraceCheckUtils]: 12: Hoare triple {1175#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,714 INFO L280 TraceCheckUtils]: 13: Hoare triple {1175#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,714 INFO L280 TraceCheckUtils]: 14: Hoare triple {1175#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,715 INFO L280 TraceCheckUtils]: 15: Hoare triple {1175#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret5, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {1175#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:48,715 INFO L280 TraceCheckUtils]: 16: Hoare triple {1175#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {1174#false} is VALID [2020-07-28 19:01:48,716 INFO L280 TraceCheckUtils]: 17: Hoare triple {1174#false} havoc __utac_acc__Specification3_spec__1_#t~ret71, __utac_acc__Specification3_spec__1_#t~ret72, __utac_acc__Specification3_spec__1_#t~ret73, __utac_acc__Specification3_spec__1_~tmp~8, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~8;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {1174#false} is VALID [2020-07-28 19:01:48,716 INFO L280 TraceCheckUtils]: 18: Hoare triple {1174#false} __utac_acc__Specification3_spec__1_#t~ret71 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret71 && __utac_acc__Specification3_spec__1_#t~ret71 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~8 := __utac_acc__Specification3_spec__1_#t~ret71;havoc __utac_acc__Specification3_spec__1_#t~ret71; {1174#false} is VALID [2020-07-28 19:01:48,716 INFO L280 TraceCheckUtils]: 19: Hoare triple {1174#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~8);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {1174#false} is VALID [2020-07-28 19:01:48,716 INFO L280 TraceCheckUtils]: 20: Hoare triple {1174#false} __utac_acc__Specification3_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret72 && __utac_acc__Specification3_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret72;havoc __utac_acc__Specification3_spec__1_#t~ret72; {1174#false} is VALID [2020-07-28 19:01:48,717 INFO L280 TraceCheckUtils]: 21: Hoare triple {1174#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {1174#false} is VALID [2020-07-28 19:01:48,717 INFO L280 TraceCheckUtils]: 22: Hoare triple {1174#false} __utac_acc__Specification3_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret73 && __utac_acc__Specification3_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret73;havoc __utac_acc__Specification3_spec__1_#t~ret73; {1174#false} is VALID [2020-07-28 19:01:48,717 INFO L280 TraceCheckUtils]: 23: Hoare triple {1174#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {1174#false} is VALID [2020-07-28 19:01:48,717 INFO L280 TraceCheckUtils]: 24: Hoare triple {1174#false} assume !false; {1174#false} is VALID [2020-07-28 19:01:48,718 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:48,719 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [224378868] [2020-07-28 19:01:48,719 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:48,719 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:01:48,719 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [980450827] [2020-07-28 19:01:48,720 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 25 [2020-07-28 19:01:48,720 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:48,720 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:01:48,752 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:48,752 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:01:48,753 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:48,753 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:01:48,753 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:48,753 INFO L87 Difference]: Start difference. First operand 39 states and 54 transitions. Second operand 3 states. [2020-07-28 19:01:48,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:48,989 INFO L93 Difference]: Finished difference Result 95 states and 135 transitions. [2020-07-28 19:01:48,989 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:01:48,989 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 25 [2020-07-28 19:01:48,990 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:48,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:48,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 135 transitions. [2020-07-28 19:01:48,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:48,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 135 transitions. [2020-07-28 19:01:48,993 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 135 transitions. [2020-07-28 19:01:49,147 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 135 edges. 135 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:49,152 INFO L225 Difference]: With dead ends: 95 [2020-07-28 19:01:49,152 INFO L226 Difference]: Without dead ends: 62 [2020-07-28 19:01:49,153 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:49,154 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62 states. [2020-07-28 19:01:49,227 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62 to 60. [2020-07-28 19:01:49,227 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:49,227 INFO L82 GeneralOperation]: Start isEquivalent. First operand 62 states. Second operand 60 states. [2020-07-28 19:01:49,227 INFO L74 IsIncluded]: Start isIncluded. First operand 62 states. Second operand 60 states. [2020-07-28 19:01:49,228 INFO L87 Difference]: Start difference. First operand 62 states. Second operand 60 states. [2020-07-28 19:01:49,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:49,230 INFO L93 Difference]: Finished difference Result 62 states and 85 transitions. [2020-07-28 19:01:49,230 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 85 transitions. [2020-07-28 19:01:49,230 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:49,230 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:49,231 INFO L74 IsIncluded]: Start isIncluded. First operand 60 states. Second operand 62 states. [2020-07-28 19:01:49,231 INFO L87 Difference]: Start difference. First operand 60 states. Second operand 62 states. [2020-07-28 19:01:49,233 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:49,233 INFO L93 Difference]: Finished difference Result 62 states and 85 transitions. [2020-07-28 19:01:49,233 INFO L276 IsEmpty]: Start isEmpty. Operand 62 states and 85 transitions. [2020-07-28 19:01:49,233 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:49,233 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:49,234 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:49,234 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:49,234 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 60 states. [2020-07-28 19:01:49,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60 states to 60 states and 84 transitions. [2020-07-28 19:01:49,236 INFO L78 Accepts]: Start accepts. Automaton has 60 states and 84 transitions. Word has length 25 [2020-07-28 19:01:49,236 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:49,236 INFO L479 AbstractCegarLoop]: Abstraction has 60 states and 84 transitions. [2020-07-28 19:01:49,236 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:01:49,236 INFO L276 IsEmpty]: Start isEmpty. Operand 60 states and 84 transitions. [2020-07-28 19:01:49,237 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2020-07-28 19:01:49,237 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:49,237 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:49,237 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:01:49,237 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:49,238 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:49,238 INFO L82 PathProgramCache]: Analyzing trace with hash 1327381871, now seen corresponding path program 1 times [2020-07-28 19:01:49,238 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:49,238 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [697255702] [2020-07-28 19:01:49,238 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:49,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:49,361 INFO L280 TraceCheckUtils]: 0: Hoare triple {1520#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(13);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string28.base, #t~string28.offset, 1);call write~init~int(77, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(101, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(116, #t~string28.base, 3 + #t~string28.offset, 1);call write~init~int(104, #t~string28.base, 4 + #t~string28.offset, 1);call write~init~int(58, #t~string28.base, 5 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 6 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string30.base, #t~string30.offset, 1);call write~init~int(82, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(73, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(84, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 4 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string32.base, #t~string32.offset, 1);call write~init~int(75, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,362 INFO L280 TraceCheckUtils]: 1: Hoare triple {1522#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,363 INFO L280 TraceCheckUtils]: 2: Hoare triple {1522#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,363 INFO L280 TraceCheckUtils]: 3: Hoare triple {1522#(= 1 ~waterLevel~0)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,364 INFO L280 TraceCheckUtils]: 4: Hoare triple {1522#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~0; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,365 INFO L280 TraceCheckUtils]: 5: Hoare triple {1522#(= 1 ~waterLevel~0)} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,365 INFO L280 TraceCheckUtils]: 6: Hoare triple {1522#(= 1 ~waterLevel~0)} assume !false; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,366 INFO L280 TraceCheckUtils]: 7: Hoare triple {1522#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,367 INFO L280 TraceCheckUtils]: 8: Hoare triple {1522#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~1 := test_#t~nondet1;havoc test_#t~nondet1; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,367 INFO L280 TraceCheckUtils]: 9: Hoare triple {1522#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~1); {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,368 INFO L280 TraceCheckUtils]: 10: Hoare triple {1522#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,369 INFO L280 TraceCheckUtils]: 11: Hoare triple {1522#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,369 INFO L280 TraceCheckUtils]: 12: Hoare triple {1522#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,370 INFO L280 TraceCheckUtils]: 13: Hoare triple {1522#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,371 INFO L280 TraceCheckUtils]: 14: Hoare triple {1522#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,371 INFO L280 TraceCheckUtils]: 15: Hoare triple {1522#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret5, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,372 INFO L280 TraceCheckUtils]: 16: Hoare triple {1522#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret24, isHighWaterLevel_~retValue_acc~3, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~3;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,373 INFO L280 TraceCheckUtils]: 17: Hoare triple {1522#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,373 INFO L280 TraceCheckUtils]: 18: Hoare triple {1522#(= 1 ~waterLevel~0)} isHighWaterLevel_#t~ret24 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret24 && isHighWaterLevel_#t~ret24 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret24;havoc isHighWaterLevel_#t~ret24; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,374 INFO L280 TraceCheckUtils]: 19: Hoare triple {1522#(= 1 ~waterLevel~0)} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,375 INFO L280 TraceCheckUtils]: 20: Hoare triple {1522#(= 1 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~3 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~3; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,375 INFO L280 TraceCheckUtils]: 21: Hoare triple {1522#(= 1 ~waterLevel~0)} processEnvironment_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret5 && processEnvironment_#t~ret5 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret5;havoc processEnvironment_#t~ret5; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,376 INFO L280 TraceCheckUtils]: 22: Hoare triple {1522#(= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~2); {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,377 INFO L280 TraceCheckUtils]: 23: Hoare triple {1522#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification3_spec__1_#t~ret71, __utac_acc__Specification3_spec__1_#t~ret72, __utac_acc__Specification3_spec__1_#t~ret73, __utac_acc__Specification3_spec__1_~tmp~8, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~8;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,377 INFO L280 TraceCheckUtils]: 24: Hoare triple {1522#(= 1 ~waterLevel~0)} __utac_acc__Specification3_spec__1_#t~ret71 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret71 && __utac_acc__Specification3_spec__1_#t~ret71 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~8 := __utac_acc__Specification3_spec__1_#t~ret71;havoc __utac_acc__Specification3_spec__1_#t~ret71; {1522#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:49,378 INFO L280 TraceCheckUtils]: 25: Hoare triple {1522#(= 1 ~waterLevel~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~8);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {1523#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:01:49,379 INFO L280 TraceCheckUtils]: 26: Hoare triple {1523#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification3_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret72 && __utac_acc__Specification3_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret72;havoc __utac_acc__Specification3_spec__1_#t~ret72; {1524#(= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~2 1)} is VALID [2020-07-28 19:01:49,380 INFO L280 TraceCheckUtils]: 27: Hoare triple {1524#(= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~2 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {1521#false} is VALID [2020-07-28 19:01:49,380 INFO L280 TraceCheckUtils]: 28: Hoare triple {1521#false} __utac_acc__Specification3_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret73 && __utac_acc__Specification3_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret73;havoc __utac_acc__Specification3_spec__1_#t~ret73; {1521#false} is VALID [2020-07-28 19:01:49,380 INFO L280 TraceCheckUtils]: 29: Hoare triple {1521#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {1521#false} is VALID [2020-07-28 19:01:49,380 INFO L280 TraceCheckUtils]: 30: Hoare triple {1521#false} assume !false; {1521#false} is VALID [2020-07-28 19:01:49,382 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:49,382 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [697255702] [2020-07-28 19:01:49,383 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:49,383 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:01:49,383 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [690012204] [2020-07-28 19:01:49,383 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 31 [2020-07-28 19:01:49,384 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:49,384 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:01:49,426 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:49,426 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:01:49,427 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:49,427 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:01:49,427 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:01:49,428 INFO L87 Difference]: Start difference. First operand 60 states and 84 transitions. Second operand 5 states. [2020-07-28 19:01:50,424 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:50,424 INFO L93 Difference]: Finished difference Result 314 states and 458 transitions. [2020-07-28 19:01:50,425 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:01:50,425 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 31 [2020-07-28 19:01:50,425 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:50,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:50,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 294 transitions. [2020-07-28 19:01:50,430 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:50,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 294 transitions. [2020-07-28 19:01:50,434 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 294 transitions. [2020-07-28 19:01:50,779 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 294 edges. 294 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:50,788 INFO L225 Difference]: With dead ends: 314 [2020-07-28 19:01:50,788 INFO L226 Difference]: Without dead ends: 260 [2020-07-28 19:01:50,789 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:01:50,790 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 260 states. [2020-07-28 19:01:50,941 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 260 to 106. [2020-07-28 19:01:50,941 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:50,941 INFO L82 GeneralOperation]: Start isEquivalent. First operand 260 states. Second operand 106 states. [2020-07-28 19:01:50,941 INFO L74 IsIncluded]: Start isIncluded. First operand 260 states. Second operand 106 states. [2020-07-28 19:01:50,941 INFO L87 Difference]: Start difference. First operand 260 states. Second operand 106 states. [2020-07-28 19:01:50,951 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:50,952 INFO L93 Difference]: Finished difference Result 260 states and 366 transitions. [2020-07-28 19:01:50,952 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 366 transitions. [2020-07-28 19:01:50,952 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:50,952 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:50,953 INFO L74 IsIncluded]: Start isIncluded. First operand 106 states. Second operand 260 states. [2020-07-28 19:01:50,953 INFO L87 Difference]: Start difference. First operand 106 states. Second operand 260 states. [2020-07-28 19:01:50,962 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:50,962 INFO L93 Difference]: Finished difference Result 260 states and 366 transitions. [2020-07-28 19:01:50,962 INFO L276 IsEmpty]: Start isEmpty. Operand 260 states and 366 transitions. [2020-07-28 19:01:50,963 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:50,963 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:50,963 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:50,963 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:50,963 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 106 states. [2020-07-28 19:01:50,966 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 106 states to 106 states and 146 transitions. [2020-07-28 19:01:50,966 INFO L78 Accepts]: Start accepts. Automaton has 106 states and 146 transitions. Word has length 31 [2020-07-28 19:01:50,967 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:50,967 INFO L479 AbstractCegarLoop]: Abstraction has 106 states and 146 transitions. [2020-07-28 19:01:50,967 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:01:50,967 INFO L276 IsEmpty]: Start isEmpty. Operand 106 states and 146 transitions. [2020-07-28 19:01:50,968 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2020-07-28 19:01:50,968 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:50,968 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:50,968 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:01:50,968 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:50,969 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:50,969 INFO L82 PathProgramCache]: Analyzing trace with hash -785377999, now seen corresponding path program 1 times [2020-07-28 19:01:50,969 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:50,969 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [418787032] [2020-07-28 19:01:50,969 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:50,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:51,037 INFO L280 TraceCheckUtils]: 0: Hoare triple {2647#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(13);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string28.base, #t~string28.offset, 1);call write~init~int(77, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(101, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(116, #t~string28.base, 3 + #t~string28.offset, 1);call write~init~int(104, #t~string28.base, 4 + #t~string28.offset, 1);call write~init~int(58, #t~string28.base, 5 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 6 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string30.base, #t~string30.offset, 1);call write~init~int(82, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(73, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(84, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 4 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string32.base, #t~string32.offset, 1);call write~init~int(75, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {2649#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,038 INFO L280 TraceCheckUtils]: 1: Hoare triple {2649#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {2649#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,038 INFO L280 TraceCheckUtils]: 2: Hoare triple {2649#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {2649#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,041 INFO L280 TraceCheckUtils]: 3: Hoare triple {2649#(= 1 ~waterLevel~0)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {2649#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,045 INFO L280 TraceCheckUtils]: 4: Hoare triple {2649#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~0; {2649#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,046 INFO L280 TraceCheckUtils]: 5: Hoare triple {2649#(= 1 ~waterLevel~0)} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2649#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,047 INFO L280 TraceCheckUtils]: 6: Hoare triple {2649#(= 1 ~waterLevel~0)} assume !false; {2649#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,047 INFO L280 TraceCheckUtils]: 7: Hoare triple {2649#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {2649#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,048 INFO L280 TraceCheckUtils]: 8: Hoare triple {2649#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~1 := test_#t~nondet1;havoc test_#t~nondet1; {2649#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,049 INFO L280 TraceCheckUtils]: 9: Hoare triple {2649#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~1; {2649#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,050 INFO L280 TraceCheckUtils]: 10: Hoare triple {2649#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {2650#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,050 INFO L280 TraceCheckUtils]: 11: Hoare triple {2650#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {2650#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,051 INFO L280 TraceCheckUtils]: 12: Hoare triple {2650#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {2650#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,051 INFO L280 TraceCheckUtils]: 13: Hoare triple {2650#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {2650#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,052 INFO L280 TraceCheckUtils]: 14: Hoare triple {2650#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {2650#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,053 INFO L280 TraceCheckUtils]: 15: Hoare triple {2650#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {2650#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,053 INFO L280 TraceCheckUtils]: 16: Hoare triple {2650#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret5, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {2650#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,054 INFO L280 TraceCheckUtils]: 17: Hoare triple {2650#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret24, isHighWaterLevel_~retValue_acc~3, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~3;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {2650#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:51,055 INFO L280 TraceCheckUtils]: 18: Hoare triple {2650#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {2648#false} is VALID [2020-07-28 19:01:51,055 INFO L280 TraceCheckUtils]: 19: Hoare triple {2648#false} isHighWaterLevel_#t~ret24 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret24 && isHighWaterLevel_#t~ret24 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret24;havoc isHighWaterLevel_#t~ret24; {2648#false} is VALID [2020-07-28 19:01:51,055 INFO L280 TraceCheckUtils]: 20: Hoare triple {2648#false} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {2648#false} is VALID [2020-07-28 19:01:51,055 INFO L280 TraceCheckUtils]: 21: Hoare triple {2648#false} isHighWaterLevel_~retValue_acc~3 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~3; {2648#false} is VALID [2020-07-28 19:01:51,055 INFO L280 TraceCheckUtils]: 22: Hoare triple {2648#false} processEnvironment_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret5 && processEnvironment_#t~ret5 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret5;havoc processEnvironment_#t~ret5; {2648#false} is VALID [2020-07-28 19:01:51,056 INFO L280 TraceCheckUtils]: 23: Hoare triple {2648#false} assume !(0 != processEnvironment_~tmp~2); {2648#false} is VALID [2020-07-28 19:01:51,056 INFO L280 TraceCheckUtils]: 24: Hoare triple {2648#false} havoc __utac_acc__Specification3_spec__1_#t~ret71, __utac_acc__Specification3_spec__1_#t~ret72, __utac_acc__Specification3_spec__1_#t~ret73, __utac_acc__Specification3_spec__1_~tmp~8, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~8;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {2648#false} is VALID [2020-07-28 19:01:51,056 INFO L280 TraceCheckUtils]: 25: Hoare triple {2648#false} __utac_acc__Specification3_spec__1_#t~ret71 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret71 && __utac_acc__Specification3_spec__1_#t~ret71 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~8 := __utac_acc__Specification3_spec__1_#t~ret71;havoc __utac_acc__Specification3_spec__1_#t~ret71; {2648#false} is VALID [2020-07-28 19:01:51,057 INFO L280 TraceCheckUtils]: 26: Hoare triple {2648#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~8);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {2648#false} is VALID [2020-07-28 19:01:51,057 INFO L280 TraceCheckUtils]: 27: Hoare triple {2648#false} __utac_acc__Specification3_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret72 && __utac_acc__Specification3_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret72;havoc __utac_acc__Specification3_spec__1_#t~ret72; {2648#false} is VALID [2020-07-28 19:01:51,057 INFO L280 TraceCheckUtils]: 28: Hoare triple {2648#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {2648#false} is VALID [2020-07-28 19:01:51,057 INFO L280 TraceCheckUtils]: 29: Hoare triple {2648#false} __utac_acc__Specification3_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret73 && __utac_acc__Specification3_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret73;havoc __utac_acc__Specification3_spec__1_#t~ret73; {2648#false} is VALID [2020-07-28 19:01:51,057 INFO L280 TraceCheckUtils]: 30: Hoare triple {2648#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {2648#false} is VALID [2020-07-28 19:01:51,058 INFO L280 TraceCheckUtils]: 31: Hoare triple {2648#false} assume !false; {2648#false} is VALID [2020-07-28 19:01:51,059 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:51,060 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [418787032] [2020-07-28 19:01:51,060 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:51,060 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:01:51,061 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1359918245] [2020-07-28 19:01:51,061 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 32 [2020-07-28 19:01:51,062 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:51,062 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:01:51,100 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:51,100 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:01:51,101 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:51,101 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:01:51,101 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:01:51,102 INFO L87 Difference]: Start difference. First operand 106 states and 146 transitions. Second operand 4 states. [2020-07-28 19:01:51,627 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:51,627 INFO L93 Difference]: Finished difference Result 212 states and 299 transitions. [2020-07-28 19:01:51,627 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:01:51,628 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 32 [2020-07-28 19:01:51,628 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:51,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:01:51,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 188 transitions. [2020-07-28 19:01:51,630 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:01:51,632 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 188 transitions. [2020-07-28 19:01:51,633 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 188 transitions. [2020-07-28 19:01:51,831 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 188 edges. 188 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:51,835 INFO L225 Difference]: With dead ends: 212 [2020-07-28 19:01:51,835 INFO L226 Difference]: Without dead ends: 158 [2020-07-28 19:01:51,836 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:01:51,836 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 158 states. [2020-07-28 19:01:52,081 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 158 to 155. [2020-07-28 19:01:52,081 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:52,081 INFO L82 GeneralOperation]: Start isEquivalent. First operand 158 states. Second operand 155 states. [2020-07-28 19:01:52,081 INFO L74 IsIncluded]: Start isIncluded. First operand 158 states. Second operand 155 states. [2020-07-28 19:01:52,081 INFO L87 Difference]: Start difference. First operand 158 states. Second operand 155 states. [2020-07-28 19:01:52,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:52,086 INFO L93 Difference]: Finished difference Result 158 states and 217 transitions. [2020-07-28 19:01:52,087 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 217 transitions. [2020-07-28 19:01:52,087 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:52,087 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:52,087 INFO L74 IsIncluded]: Start isIncluded. First operand 155 states. Second operand 158 states. [2020-07-28 19:01:52,087 INFO L87 Difference]: Start difference. First operand 155 states. Second operand 158 states. [2020-07-28 19:01:52,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:52,093 INFO L93 Difference]: Finished difference Result 158 states and 217 transitions. [2020-07-28 19:01:52,093 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 217 transitions. [2020-07-28 19:01:52,094 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:52,094 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:52,094 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:52,094 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:52,094 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 155 states. [2020-07-28 19:01:52,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 155 states to 155 states and 215 transitions. [2020-07-28 19:01:52,099 INFO L78 Accepts]: Start accepts. Automaton has 155 states and 215 transitions. Word has length 32 [2020-07-28 19:01:52,099 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:52,099 INFO L479 AbstractCegarLoop]: Abstraction has 155 states and 215 transitions. [2020-07-28 19:01:52,099 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:01:52,099 INFO L276 IsEmpty]: Start isEmpty. Operand 155 states and 215 transitions. [2020-07-28 19:01:52,100 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2020-07-28 19:01:52,100 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:52,100 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:52,100 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:01:52,101 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:52,101 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:52,101 INFO L82 PathProgramCache]: Analyzing trace with hash -1796495249, now seen corresponding path program 1 times [2020-07-28 19:01:52,101 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:52,101 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1430709507] [2020-07-28 19:01:52,102 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:52,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:52,155 INFO L280 TraceCheckUtils]: 0: Hoare triple {3488#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(13);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string28.base, #t~string28.offset, 1);call write~init~int(77, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(101, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(116, #t~string28.base, 3 + #t~string28.offset, 1);call write~init~int(104, #t~string28.base, 4 + #t~string28.offset, 1);call write~init~int(58, #t~string28.base, 5 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 6 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string30.base, #t~string30.offset, 1);call write~init~int(82, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(73, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(84, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 4 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string32.base, #t~string32.offset, 1);call write~init~int(75, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {3488#true} is VALID [2020-07-28 19:01:52,156 INFO L280 TraceCheckUtils]: 1: Hoare triple {3488#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {3488#true} is VALID [2020-07-28 19:01:52,156 INFO L280 TraceCheckUtils]: 2: Hoare triple {3488#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {3488#true} is VALID [2020-07-28 19:01:52,156 INFO L280 TraceCheckUtils]: 3: Hoare triple {3488#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {3488#true} is VALID [2020-07-28 19:01:52,156 INFO L280 TraceCheckUtils]: 4: Hoare triple {3488#true} assume 0 != main_~tmp~0; {3488#true} is VALID [2020-07-28 19:01:52,157 INFO L280 TraceCheckUtils]: 5: Hoare triple {3488#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3488#true} is VALID [2020-07-28 19:01:52,157 INFO L280 TraceCheckUtils]: 6: Hoare triple {3488#true} assume !false; {3488#true} is VALID [2020-07-28 19:01:52,157 INFO L280 TraceCheckUtils]: 7: Hoare triple {3488#true} assume test_~splverifierCounter~0 < 4; {3488#true} is VALID [2020-07-28 19:01:52,157 INFO L280 TraceCheckUtils]: 8: Hoare triple {3488#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~1 := test_#t~nondet1;havoc test_#t~nondet1; {3488#true} is VALID [2020-07-28 19:01:52,157 INFO L280 TraceCheckUtils]: 9: Hoare triple {3488#true} assume 0 != test_~tmp~1; {3488#true} is VALID [2020-07-28 19:01:52,158 INFO L280 TraceCheckUtils]: 10: Hoare triple {3488#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {3488#true} is VALID [2020-07-28 19:01:52,158 INFO L280 TraceCheckUtils]: 11: Hoare triple {3488#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {3488#true} is VALID [2020-07-28 19:01:52,158 INFO L280 TraceCheckUtils]: 12: Hoare triple {3488#true} assume !(0 != test_~tmp___0~0); {3488#true} is VALID [2020-07-28 19:01:52,158 INFO L280 TraceCheckUtils]: 13: Hoare triple {3488#true} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {3488#true} is VALID [2020-07-28 19:01:52,158 INFO L280 TraceCheckUtils]: 14: Hoare triple {3488#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {3488#true} is VALID [2020-07-28 19:01:52,159 INFO L280 TraceCheckUtils]: 15: Hoare triple {3488#true} assume !(0 != ~pumpRunning~0); {3488#true} is VALID [2020-07-28 19:01:52,159 INFO L280 TraceCheckUtils]: 16: Hoare triple {3488#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret5, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {3488#true} is VALID [2020-07-28 19:01:52,159 INFO L280 TraceCheckUtils]: 17: Hoare triple {3488#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret24, isHighWaterLevel_~retValue_acc~3, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~3;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {3488#true} is VALID [2020-07-28 19:01:52,160 INFO L280 TraceCheckUtils]: 18: Hoare triple {3488#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {3490#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:01:52,161 INFO L280 TraceCheckUtils]: 19: Hoare triple {3490#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret24 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret24 && isHighWaterLevel_#t~ret24 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret24;havoc isHighWaterLevel_#t~ret24; {3491#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)} is VALID [2020-07-28 19:01:52,161 INFO L280 TraceCheckUtils]: 20: Hoare triple {3491#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {3489#false} is VALID [2020-07-28 19:01:52,161 INFO L280 TraceCheckUtils]: 21: Hoare triple {3489#false} isHighWaterLevel_~retValue_acc~3 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~3; {3489#false} is VALID [2020-07-28 19:01:52,162 INFO L280 TraceCheckUtils]: 22: Hoare triple {3489#false} processEnvironment_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret5 && processEnvironment_#t~ret5 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret5;havoc processEnvironment_#t~ret5; {3489#false} is VALID [2020-07-28 19:01:52,162 INFO L280 TraceCheckUtils]: 23: Hoare triple {3489#false} assume !(0 != processEnvironment_~tmp~2); {3489#false} is VALID [2020-07-28 19:01:52,162 INFO L280 TraceCheckUtils]: 24: Hoare triple {3489#false} havoc __utac_acc__Specification3_spec__1_#t~ret71, __utac_acc__Specification3_spec__1_#t~ret72, __utac_acc__Specification3_spec__1_#t~ret73, __utac_acc__Specification3_spec__1_~tmp~8, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~8;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {3489#false} is VALID [2020-07-28 19:01:52,162 INFO L280 TraceCheckUtils]: 25: Hoare triple {3489#false} __utac_acc__Specification3_spec__1_#t~ret71 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret71 && __utac_acc__Specification3_spec__1_#t~ret71 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~8 := __utac_acc__Specification3_spec__1_#t~ret71;havoc __utac_acc__Specification3_spec__1_#t~ret71; {3489#false} is VALID [2020-07-28 19:01:52,162 INFO L280 TraceCheckUtils]: 26: Hoare triple {3489#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~8);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {3489#false} is VALID [2020-07-28 19:01:52,163 INFO L280 TraceCheckUtils]: 27: Hoare triple {3489#false} __utac_acc__Specification3_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret72 && __utac_acc__Specification3_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret72;havoc __utac_acc__Specification3_spec__1_#t~ret72; {3489#false} is VALID [2020-07-28 19:01:52,163 INFO L280 TraceCheckUtils]: 28: Hoare triple {3489#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {3489#false} is VALID [2020-07-28 19:01:52,163 INFO L280 TraceCheckUtils]: 29: Hoare triple {3489#false} __utac_acc__Specification3_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret73 && __utac_acc__Specification3_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret73;havoc __utac_acc__Specification3_spec__1_#t~ret73; {3489#false} is VALID [2020-07-28 19:01:52,163 INFO L280 TraceCheckUtils]: 30: Hoare triple {3489#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {3489#false} is VALID [2020-07-28 19:01:52,164 INFO L280 TraceCheckUtils]: 31: Hoare triple {3489#false} assume !false; {3489#false} is VALID [2020-07-28 19:01:52,164 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:52,165 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1430709507] [2020-07-28 19:01:52,165 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:52,165 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:01:52,165 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1684189652] [2020-07-28 19:01:52,166 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 32 [2020-07-28 19:01:52,166 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:52,166 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:01:52,203 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:52,203 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:01:52,203 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:52,204 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:01:52,204 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:01:52,204 INFO L87 Difference]: Start difference. First operand 155 states and 215 transitions. Second operand 4 states. [2020-07-28 19:01:53,099 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:53,099 INFO L93 Difference]: Finished difference Result 412 states and 582 transitions. [2020-07-28 19:01:53,099 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:01:53,100 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 32 [2020-07-28 19:01:53,100 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:53,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:01:53,113 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 191 transitions. [2020-07-28 19:01:53,120 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:01:53,123 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 191 transitions. [2020-07-28 19:01:53,125 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 191 transitions. [2020-07-28 19:01:53,367 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 191 edges. 191 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:53,375 INFO L225 Difference]: With dead ends: 412 [2020-07-28 19:01:53,375 INFO L226 Difference]: Without dead ends: 308 [2020-07-28 19:01:53,376 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:01:53,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 308 states. [2020-07-28 19:01:53,618 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 308 to 155. [2020-07-28 19:01:53,618 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:53,618 INFO L82 GeneralOperation]: Start isEquivalent. First operand 308 states. Second operand 155 states. [2020-07-28 19:01:53,619 INFO L74 IsIncluded]: Start isIncluded. First operand 308 states. Second operand 155 states. [2020-07-28 19:01:53,619 INFO L87 Difference]: Start difference. First operand 308 states. Second operand 155 states. [2020-07-28 19:01:53,629 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:53,629 INFO L93 Difference]: Finished difference Result 308 states and 433 transitions. [2020-07-28 19:01:53,629 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 433 transitions. [2020-07-28 19:01:53,629 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:53,629 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:53,630 INFO L74 IsIncluded]: Start isIncluded. First operand 155 states. Second operand 308 states. [2020-07-28 19:01:53,630 INFO L87 Difference]: Start difference. First operand 155 states. Second operand 308 states. [2020-07-28 19:01:53,637 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:53,637 INFO L93 Difference]: Finished difference Result 308 states and 433 transitions. [2020-07-28 19:01:53,637 INFO L276 IsEmpty]: Start isEmpty. Operand 308 states and 433 transitions. [2020-07-28 19:01:53,638 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:53,638 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:53,638 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:53,638 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:53,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 155 states. [2020-07-28 19:01:53,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 155 states to 155 states and 214 transitions. [2020-07-28 19:01:53,642 INFO L78 Accepts]: Start accepts. Automaton has 155 states and 214 transitions. Word has length 32 [2020-07-28 19:01:53,642 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:53,642 INFO L479 AbstractCegarLoop]: Abstraction has 155 states and 214 transitions. [2020-07-28 19:01:53,642 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:01:53,642 INFO L276 IsEmpty]: Start isEmpty. Operand 155 states and 214 transitions. [2020-07-28 19:01:53,643 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2020-07-28 19:01:53,643 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:53,643 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:53,643 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:01:53,643 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:53,644 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:53,644 INFO L82 PathProgramCache]: Analyzing trace with hash -1538329811, now seen corresponding path program 1 times [2020-07-28 19:01:53,644 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:53,644 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1927438117] [2020-07-28 19:01:53,644 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:53,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:53,723 INFO L280 TraceCheckUtils]: 0: Hoare triple {4916#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(13);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string28.base, #t~string28.offset, 1);call write~init~int(77, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(101, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(116, #t~string28.base, 3 + #t~string28.offset, 1);call write~init~int(104, #t~string28.base, 4 + #t~string28.offset, 1);call write~init~int(58, #t~string28.base, 5 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 6 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string30.base, #t~string30.offset, 1);call write~init~int(82, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(73, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(84, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 4 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string32.base, #t~string32.offset, 1);call write~init~int(75, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {4916#true} is VALID [2020-07-28 19:01:53,723 INFO L280 TraceCheckUtils]: 1: Hoare triple {4916#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {4916#true} is VALID [2020-07-28 19:01:53,723 INFO L280 TraceCheckUtils]: 2: Hoare triple {4916#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {4916#true} is VALID [2020-07-28 19:01:53,724 INFO L280 TraceCheckUtils]: 3: Hoare triple {4916#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {4916#true} is VALID [2020-07-28 19:01:53,724 INFO L280 TraceCheckUtils]: 4: Hoare triple {4916#true} assume 0 != main_~tmp~0; {4916#true} is VALID [2020-07-28 19:01:53,724 INFO L280 TraceCheckUtils]: 5: Hoare triple {4916#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {4916#true} is VALID [2020-07-28 19:01:53,724 INFO L280 TraceCheckUtils]: 6: Hoare triple {4916#true} assume !false; {4916#true} is VALID [2020-07-28 19:01:53,724 INFO L280 TraceCheckUtils]: 7: Hoare triple {4916#true} assume test_~splverifierCounter~0 < 4; {4916#true} is VALID [2020-07-28 19:01:53,724 INFO L280 TraceCheckUtils]: 8: Hoare triple {4916#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~1 := test_#t~nondet1;havoc test_#t~nondet1; {4916#true} is VALID [2020-07-28 19:01:53,725 INFO L280 TraceCheckUtils]: 9: Hoare triple {4916#true} assume 0 != test_~tmp~1; {4916#true} is VALID [2020-07-28 19:01:53,725 INFO L280 TraceCheckUtils]: 10: Hoare triple {4916#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {4916#true} is VALID [2020-07-28 19:01:53,726 INFO L280 TraceCheckUtils]: 11: Hoare triple {4916#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {4916#true} is VALID [2020-07-28 19:01:53,726 INFO L280 TraceCheckUtils]: 12: Hoare triple {4916#true} assume !(0 != test_~tmp___0~0); {4916#true} is VALID [2020-07-28 19:01:53,726 INFO L280 TraceCheckUtils]: 13: Hoare triple {4916#true} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {4916#true} is VALID [2020-07-28 19:01:53,726 INFO L280 TraceCheckUtils]: 14: Hoare triple {4916#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {4916#true} is VALID [2020-07-28 19:01:53,726 INFO L280 TraceCheckUtils]: 15: Hoare triple {4916#true} assume !(0 != ~pumpRunning~0); {4916#true} is VALID [2020-07-28 19:01:53,727 INFO L280 TraceCheckUtils]: 16: Hoare triple {4916#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret5, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {4916#true} is VALID [2020-07-28 19:01:53,727 INFO L280 TraceCheckUtils]: 17: Hoare triple {4916#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret24, isHighWaterLevel_~retValue_acc~3, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~3;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {4916#true} is VALID [2020-07-28 19:01:53,727 INFO L280 TraceCheckUtils]: 18: Hoare triple {4916#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {4916#true} is VALID [2020-07-28 19:01:53,729 INFO L280 TraceCheckUtils]: 19: Hoare triple {4916#true} isHighWaterLevel_#t~ret24 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret24 && isHighWaterLevel_#t~ret24 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret24;havoc isHighWaterLevel_#t~ret24; {4916#true} is VALID [2020-07-28 19:01:53,733 INFO L280 TraceCheckUtils]: 20: Hoare triple {4916#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {4918#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} is VALID [2020-07-28 19:01:53,733 INFO L280 TraceCheckUtils]: 21: Hoare triple {4918#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} isHighWaterLevel_~retValue_acc~3 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~3; {4919#(= 1 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:01:53,734 INFO L280 TraceCheckUtils]: 22: Hoare triple {4919#(= 1 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret5 && processEnvironment_#t~ret5 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret5;havoc processEnvironment_#t~ret5; {4920#(= 1 ULTIMATE.start_processEnvironment_~tmp~2)} is VALID [2020-07-28 19:01:53,735 INFO L280 TraceCheckUtils]: 23: Hoare triple {4920#(= 1 ULTIMATE.start_processEnvironment_~tmp~2)} assume !(0 != processEnvironment_~tmp~2); {4917#false} is VALID [2020-07-28 19:01:53,735 INFO L280 TraceCheckUtils]: 24: Hoare triple {4917#false} havoc __utac_acc__Specification3_spec__1_#t~ret71, __utac_acc__Specification3_spec__1_#t~ret72, __utac_acc__Specification3_spec__1_#t~ret73, __utac_acc__Specification3_spec__1_~tmp~8, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~8;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {4917#false} is VALID [2020-07-28 19:01:53,735 INFO L280 TraceCheckUtils]: 25: Hoare triple {4917#false} __utac_acc__Specification3_spec__1_#t~ret71 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret71 && __utac_acc__Specification3_spec__1_#t~ret71 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~8 := __utac_acc__Specification3_spec__1_#t~ret71;havoc __utac_acc__Specification3_spec__1_#t~ret71; {4917#false} is VALID [2020-07-28 19:01:53,736 INFO L280 TraceCheckUtils]: 26: Hoare triple {4917#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~8);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {4917#false} is VALID [2020-07-28 19:01:53,736 INFO L280 TraceCheckUtils]: 27: Hoare triple {4917#false} __utac_acc__Specification3_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret72 && __utac_acc__Specification3_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret72;havoc __utac_acc__Specification3_spec__1_#t~ret72; {4917#false} is VALID [2020-07-28 19:01:53,736 INFO L280 TraceCheckUtils]: 28: Hoare triple {4917#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {4917#false} is VALID [2020-07-28 19:01:53,737 INFO L280 TraceCheckUtils]: 29: Hoare triple {4917#false} __utac_acc__Specification3_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret73 && __utac_acc__Specification3_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret73;havoc __utac_acc__Specification3_spec__1_#t~ret73; {4917#false} is VALID [2020-07-28 19:01:53,737 INFO L280 TraceCheckUtils]: 30: Hoare triple {4917#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {4917#false} is VALID [2020-07-28 19:01:53,737 INFO L280 TraceCheckUtils]: 31: Hoare triple {4917#false} assume !false; {4917#false} is VALID [2020-07-28 19:01:53,738 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:53,738 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1927438117] [2020-07-28 19:01:53,739 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:53,739 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:01:53,739 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [364760046] [2020-07-28 19:01:53,739 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2020-07-28 19:01:53,739 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:53,740 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:01:53,782 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:53,782 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:01:53,782 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:53,783 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:01:53,783 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:01:53,783 INFO L87 Difference]: Start difference. First operand 155 states and 214 transitions. Second operand 5 states. [2020-07-28 19:01:54,839 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:54,839 INFO L93 Difference]: Finished difference Result 447 states and 626 transitions. [2020-07-28 19:01:54,839 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:01:54,839 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2020-07-28 19:01:54,839 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:54,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:54,841 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 178 transitions. [2020-07-28 19:01:54,841 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:54,842 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 178 transitions. [2020-07-28 19:01:54,842 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 178 transitions. [2020-07-28 19:01:55,040 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 178 edges. 178 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:55,049 INFO L225 Difference]: With dead ends: 447 [2020-07-28 19:01:55,049 INFO L226 Difference]: Without dead ends: 298 [2020-07-28 19:01:55,050 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:01:55,051 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 298 states. [2020-07-28 19:01:55,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 298 to 161. [2020-07-28 19:01:55,426 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:55,426 INFO L82 GeneralOperation]: Start isEquivalent. First operand 298 states. Second operand 161 states. [2020-07-28 19:01:55,426 INFO L74 IsIncluded]: Start isIncluded. First operand 298 states. Second operand 161 states. [2020-07-28 19:01:55,426 INFO L87 Difference]: Start difference. First operand 298 states. Second operand 161 states. [2020-07-28 19:01:55,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:55,437 INFO L93 Difference]: Finished difference Result 298 states and 415 transitions. [2020-07-28 19:01:55,438 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 415 transitions. [2020-07-28 19:01:55,439 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:55,439 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:55,439 INFO L74 IsIncluded]: Start isIncluded. First operand 161 states. Second operand 298 states. [2020-07-28 19:01:55,439 INFO L87 Difference]: Start difference. First operand 161 states. Second operand 298 states. [2020-07-28 19:01:55,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:55,451 INFO L93 Difference]: Finished difference Result 298 states and 415 transitions. [2020-07-28 19:01:55,451 INFO L276 IsEmpty]: Start isEmpty. Operand 298 states and 415 transitions. [2020-07-28 19:01:55,452 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:55,452 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:55,452 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:55,452 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:55,453 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 161 states. [2020-07-28 19:01:55,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 161 states to 161 states and 219 transitions. [2020-07-28 19:01:55,457 INFO L78 Accepts]: Start accepts. Automaton has 161 states and 219 transitions. Word has length 32 [2020-07-28 19:01:55,458 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:55,458 INFO L479 AbstractCegarLoop]: Abstraction has 161 states and 219 transitions. [2020-07-28 19:01:55,458 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:01:55,458 INFO L276 IsEmpty]: Start isEmpty. Operand 161 states and 219 transitions. [2020-07-28 19:01:55,459 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 19:01:55,459 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:55,459 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:55,460 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:01:55,460 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:55,460 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:55,460 INFO L82 PathProgramCache]: Analyzing trace with hash -1048057311, now seen corresponding path program 1 times [2020-07-28 19:01:55,461 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:55,461 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1659937678] [2020-07-28 19:01:55,461 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:55,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:55,593 INFO L280 TraceCheckUtils]: 0: Hoare triple {6387#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(13);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string28.base, #t~string28.offset, 1);call write~init~int(77, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(101, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(116, #t~string28.base, 3 + #t~string28.offset, 1);call write~init~int(104, #t~string28.base, 4 + #t~string28.offset, 1);call write~init~int(58, #t~string28.base, 5 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 6 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string30.base, #t~string30.offset, 1);call write~init~int(82, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(73, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(84, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 4 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string32.base, #t~string32.offset, 1);call write~init~int(75, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,594 INFO L280 TraceCheckUtils]: 1: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,594 INFO L280 TraceCheckUtils]: 2: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,595 INFO L280 TraceCheckUtils]: 3: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,596 INFO L280 TraceCheckUtils]: 4: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~0; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,596 INFO L280 TraceCheckUtils]: 5: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,598 INFO L280 TraceCheckUtils]: 6: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume !false; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,598 INFO L280 TraceCheckUtils]: 7: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,599 INFO L280 TraceCheckUtils]: 8: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~1 := test_#t~nondet1;havoc test_#t~nondet1; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,599 INFO L280 TraceCheckUtils]: 9: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp~1; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,600 INFO L280 TraceCheckUtils]: 10: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,601 INFO L280 TraceCheckUtils]: 11: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,601 INFO L280 TraceCheckUtils]: 12: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~0); {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,602 INFO L280 TraceCheckUtils]: 13: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,602 INFO L280 TraceCheckUtils]: 14: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,603 INFO L280 TraceCheckUtils]: 15: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,604 INFO L280 TraceCheckUtils]: 16: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret5, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,604 INFO L280 TraceCheckUtils]: 17: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret24, isHighWaterLevel_~retValue_acc~3, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~3;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,605 INFO L280 TraceCheckUtils]: 18: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,605 INFO L280 TraceCheckUtils]: 19: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret24 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret24 && isHighWaterLevel_#t~ret24 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret24;havoc isHighWaterLevel_#t~ret24; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,606 INFO L280 TraceCheckUtils]: 20: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,607 INFO L280 TraceCheckUtils]: 21: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~3 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~3; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,607 INFO L280 TraceCheckUtils]: 22: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} processEnvironment_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret5 && processEnvironment_#t~ret5 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret5;havoc processEnvironment_#t~ret5; {6389#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:01:55,608 INFO L280 TraceCheckUtils]: 23: Hoare triple {6389#(= 0 ~methaneLevelCritical~0)} assume 0 != processEnvironment_~tmp~2;havoc activatePump_#t~ret6, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret7, isMethaneAlarm_~retValue_acc~1;havoc isMethaneAlarm_~retValue_acc~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {6390#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:01:55,609 INFO L280 TraceCheckUtils]: 24: Hoare triple {6390#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} isMethaneAlarm_#t~ret7 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret7 && isMethaneAlarm_#t~ret7 <= 2147483647;isMethaneAlarm_~retValue_acc~1 := isMethaneAlarm_#t~ret7;havoc isMethaneAlarm_#t~ret7;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~1; {6391#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} is VALID [2020-07-28 19:01:55,610 INFO L280 TraceCheckUtils]: 25: Hoare triple {6391#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} activatePump_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret6 && activatePump_#t~ret6 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret6;havoc activatePump_#t~ret6; {6392#(= 0 ULTIMATE.start_activatePump_~tmp~3)} is VALID [2020-07-28 19:01:55,610 INFO L280 TraceCheckUtils]: 26: Hoare triple {6392#(= 0 ULTIMATE.start_activatePump_~tmp~3)} assume 0 != activatePump_~tmp~3; {6388#false} is VALID [2020-07-28 19:01:55,610 INFO L280 TraceCheckUtils]: 27: Hoare triple {6388#false} havoc __utac_acc__Specification3_spec__1_#t~ret71, __utac_acc__Specification3_spec__1_#t~ret72, __utac_acc__Specification3_spec__1_#t~ret73, __utac_acc__Specification3_spec__1_~tmp~8, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~8;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {6388#false} is VALID [2020-07-28 19:01:55,611 INFO L280 TraceCheckUtils]: 28: Hoare triple {6388#false} __utac_acc__Specification3_spec__1_#t~ret71 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret71 && __utac_acc__Specification3_spec__1_#t~ret71 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~8 := __utac_acc__Specification3_spec__1_#t~ret71;havoc __utac_acc__Specification3_spec__1_#t~ret71; {6388#false} is VALID [2020-07-28 19:01:55,611 INFO L280 TraceCheckUtils]: 29: Hoare triple {6388#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~8);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {6388#false} is VALID [2020-07-28 19:01:55,611 INFO L280 TraceCheckUtils]: 30: Hoare triple {6388#false} __utac_acc__Specification3_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret72 && __utac_acc__Specification3_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret72;havoc __utac_acc__Specification3_spec__1_#t~ret72; {6388#false} is VALID [2020-07-28 19:01:55,611 INFO L280 TraceCheckUtils]: 31: Hoare triple {6388#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {6388#false} is VALID [2020-07-28 19:01:55,611 INFO L280 TraceCheckUtils]: 32: Hoare triple {6388#false} __utac_acc__Specification3_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret73 && __utac_acc__Specification3_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret73;havoc __utac_acc__Specification3_spec__1_#t~ret73; {6388#false} is VALID [2020-07-28 19:01:55,612 INFO L280 TraceCheckUtils]: 33: Hoare triple {6388#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {6388#false} is VALID [2020-07-28 19:01:55,612 INFO L280 TraceCheckUtils]: 34: Hoare triple {6388#false} assume !false; {6388#false} is VALID [2020-07-28 19:01:55,614 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:55,615 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1659937678] [2020-07-28 19:01:55,615 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:55,615 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:01:55,616 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [541816605] [2020-07-28 19:01:55,616 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 35 [2020-07-28 19:01:55,617 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:55,617 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:01:55,661 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:55,661 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:01:55,662 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:55,662 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:01:55,663 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:01:55,663 INFO L87 Difference]: Start difference. First operand 161 states and 219 transitions. Second operand 6 states. [2020-07-28 19:01:59,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:59,073 INFO L93 Difference]: Finished difference Result 1154 states and 1559 transitions. [2020-07-28 19:01:59,073 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2020-07-28 19:01:59,073 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 35 [2020-07-28 19:01:59,073 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:59,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:01:59,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 453 transitions. [2020-07-28 19:01:59,078 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:01:59,081 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 453 transitions. [2020-07-28 19:01:59,081 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 14 states and 453 transitions. [2020-07-28 19:01:59,587 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 453 edges. 453 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:59,647 INFO L225 Difference]: With dead ends: 1154 [2020-07-28 19:01:59,648 INFO L226 Difference]: Without dead ends: 999 [2020-07-28 19:01:59,648 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2020-07-28 19:01:59,650 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 999 states. [2020-07-28 19:02:00,352 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 999 to 302. [2020-07-28 19:02:00,352 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:00,353 INFO L82 GeneralOperation]: Start isEquivalent. First operand 999 states. Second operand 302 states. [2020-07-28 19:02:00,353 INFO L74 IsIncluded]: Start isIncluded. First operand 999 states. Second operand 302 states. [2020-07-28 19:02:00,353 INFO L87 Difference]: Start difference. First operand 999 states. Second operand 302 states. [2020-07-28 19:02:00,394 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:00,394 INFO L93 Difference]: Finished difference Result 999 states and 1327 transitions. [2020-07-28 19:02:00,394 INFO L276 IsEmpty]: Start isEmpty. Operand 999 states and 1327 transitions. [2020-07-28 19:02:00,395 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:00,395 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:00,395 INFO L74 IsIncluded]: Start isIncluded. First operand 302 states. Second operand 999 states. [2020-07-28 19:02:00,395 INFO L87 Difference]: Start difference. First operand 302 states. Second operand 999 states. [2020-07-28 19:02:00,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:00,451 INFO L93 Difference]: Finished difference Result 999 states and 1327 transitions. [2020-07-28 19:02:00,451 INFO L276 IsEmpty]: Start isEmpty. Operand 999 states and 1327 transitions. [2020-07-28 19:02:00,453 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:00,453 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:00,454 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:00,454 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:00,454 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 302 states. [2020-07-28 19:02:00,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 302 states to 302 states and 406 transitions. [2020-07-28 19:02:00,462 INFO L78 Accepts]: Start accepts. Automaton has 302 states and 406 transitions. Word has length 35 [2020-07-28 19:02:00,462 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:00,462 INFO L479 AbstractCegarLoop]: Abstraction has 302 states and 406 transitions. [2020-07-28 19:02:00,463 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:00,463 INFO L276 IsEmpty]: Start isEmpty. Operand 302 states and 406 transitions. [2020-07-28 19:02:00,463 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2020-07-28 19:02:00,463 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:00,464 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:00,464 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:02:00,464 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:00,464 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:00,464 INFO L82 PathProgramCache]: Analyzing trace with hash -367998941, now seen corresponding path program 1 times [2020-07-28 19:02:00,465 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:00,465 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1456995995] [2020-07-28 19:02:00,465 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:00,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:00,556 INFO L280 TraceCheckUtils]: 0: Hoare triple {10468#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(13);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string28.base, #t~string28.offset, 1);call write~init~int(77, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(101, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(116, #t~string28.base, 3 + #t~string28.offset, 1);call write~init~int(104, #t~string28.base, 4 + #t~string28.offset, 1);call write~init~int(58, #t~string28.base, 5 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 6 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string30.base, #t~string30.offset, 1);call write~init~int(82, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(73, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(84, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 4 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string32.base, #t~string32.offset, 1);call write~init~int(75, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {10468#true} is VALID [2020-07-28 19:02:00,557 INFO L280 TraceCheckUtils]: 1: Hoare triple {10468#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {10468#true} is VALID [2020-07-28 19:02:00,557 INFO L280 TraceCheckUtils]: 2: Hoare triple {10468#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {10468#true} is VALID [2020-07-28 19:02:00,557 INFO L280 TraceCheckUtils]: 3: Hoare triple {10468#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {10468#true} is VALID [2020-07-28 19:02:00,557 INFO L280 TraceCheckUtils]: 4: Hoare triple {10468#true} assume 0 != main_~tmp~0; {10468#true} is VALID [2020-07-28 19:02:00,558 INFO L280 TraceCheckUtils]: 5: Hoare triple {10468#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {10468#true} is VALID [2020-07-28 19:02:00,558 INFO L280 TraceCheckUtils]: 6: Hoare triple {10468#true} assume !false; {10468#true} is VALID [2020-07-28 19:02:00,559 INFO L280 TraceCheckUtils]: 7: Hoare triple {10468#true} assume test_~splverifierCounter~0 < 4; {10468#true} is VALID [2020-07-28 19:02:00,560 INFO L280 TraceCheckUtils]: 8: Hoare triple {10468#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~1 := test_#t~nondet1;havoc test_#t~nondet1; {10468#true} is VALID [2020-07-28 19:02:00,560 INFO L280 TraceCheckUtils]: 9: Hoare triple {10468#true} assume 0 != test_~tmp~1; {10468#true} is VALID [2020-07-28 19:02:00,560 INFO L280 TraceCheckUtils]: 10: Hoare triple {10468#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10468#true} is VALID [2020-07-28 19:02:00,562 INFO L280 TraceCheckUtils]: 11: Hoare triple {10468#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {10468#true} is VALID [2020-07-28 19:02:00,563 INFO L280 TraceCheckUtils]: 12: Hoare triple {10468#true} assume !(0 != test_~tmp___0~0); {10468#true} is VALID [2020-07-28 19:02:00,563 INFO L280 TraceCheckUtils]: 13: Hoare triple {10468#true} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {10468#true} is VALID [2020-07-28 19:02:00,563 INFO L280 TraceCheckUtils]: 14: Hoare triple {10468#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {10468#true} is VALID [2020-07-28 19:02:00,563 INFO L280 TraceCheckUtils]: 15: Hoare triple {10468#true} assume !(0 != ~pumpRunning~0); {10468#true} is VALID [2020-07-28 19:02:00,563 INFO L280 TraceCheckUtils]: 16: Hoare triple {10468#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret5, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {10468#true} is VALID [2020-07-28 19:02:00,564 INFO L280 TraceCheckUtils]: 17: Hoare triple {10468#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret24, isHighWaterLevel_~retValue_acc~3, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~3;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {10468#true} is VALID [2020-07-28 19:02:00,564 INFO L280 TraceCheckUtils]: 18: Hoare triple {10468#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {10468#true} is VALID [2020-07-28 19:02:00,565 INFO L280 TraceCheckUtils]: 19: Hoare triple {10468#true} isHighWaterLevel_#t~ret24 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret24 && isHighWaterLevel_#t~ret24 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret24;havoc isHighWaterLevel_#t~ret24; {10468#true} is VALID [2020-07-28 19:02:00,566 INFO L280 TraceCheckUtils]: 20: Hoare triple {10468#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {10468#true} is VALID [2020-07-28 19:02:00,566 INFO L280 TraceCheckUtils]: 21: Hoare triple {10468#true} isHighWaterLevel_~retValue_acc~3 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~3; {10468#true} is VALID [2020-07-28 19:02:00,566 INFO L280 TraceCheckUtils]: 22: Hoare triple {10468#true} processEnvironment_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret5 && processEnvironment_#t~ret5 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret5;havoc processEnvironment_#t~ret5; {10468#true} is VALID [2020-07-28 19:02:00,566 INFO L280 TraceCheckUtils]: 23: Hoare triple {10468#true} assume 0 != processEnvironment_~tmp~2;havoc activatePump_#t~ret6, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret7, isMethaneAlarm_~retValue_acc~1;havoc isMethaneAlarm_~retValue_acc~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {10468#true} is VALID [2020-07-28 19:02:00,567 INFO L280 TraceCheckUtils]: 24: Hoare triple {10468#true} isMethaneAlarm_#t~ret7 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret7 && isMethaneAlarm_#t~ret7 <= 2147483647;isMethaneAlarm_~retValue_acc~1 := isMethaneAlarm_#t~ret7;havoc isMethaneAlarm_#t~ret7;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~1; {10468#true} is VALID [2020-07-28 19:02:00,567 INFO L280 TraceCheckUtils]: 25: Hoare triple {10468#true} activatePump_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret6 && activatePump_#t~ret6 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret6;havoc activatePump_#t~ret6; {10468#true} is VALID [2020-07-28 19:02:00,577 INFO L280 TraceCheckUtils]: 26: Hoare triple {10468#true} assume !(0 != activatePump_~tmp~3);~pumpRunning~0 := 1; {10470#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,577 INFO L280 TraceCheckUtils]: 27: Hoare triple {10470#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification3_spec__1_#t~ret71, __utac_acc__Specification3_spec__1_#t~ret72, __utac_acc__Specification3_spec__1_#t~ret73, __utac_acc__Specification3_spec__1_~tmp~8, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~8;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {10470#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,578 INFO L280 TraceCheckUtils]: 28: Hoare triple {10470#(= 1 ~pumpRunning~0)} __utac_acc__Specification3_spec__1_#t~ret71 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret71 && __utac_acc__Specification3_spec__1_#t~ret71 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~8 := __utac_acc__Specification3_spec__1_#t~ret71;havoc __utac_acc__Specification3_spec__1_#t~ret71; {10470#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,578 INFO L280 TraceCheckUtils]: 29: Hoare triple {10470#(= 1 ~pumpRunning~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~8);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {10470#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,579 INFO L280 TraceCheckUtils]: 30: Hoare triple {10470#(= 1 ~pumpRunning~0)} __utac_acc__Specification3_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret72 && __utac_acc__Specification3_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret72;havoc __utac_acc__Specification3_spec__1_#t~ret72; {10470#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,580 INFO L280 TraceCheckUtils]: 31: Hoare triple {10470#(= 1 ~pumpRunning~0)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {10471#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:02:00,580 INFO L280 TraceCheckUtils]: 32: Hoare triple {10471#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification3_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret73 && __utac_acc__Specification3_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret73;havoc __utac_acc__Specification3_spec__1_#t~ret73; {10472#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~1)} is VALID [2020-07-28 19:02:00,581 INFO L280 TraceCheckUtils]: 33: Hoare triple {10472#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {10469#false} is VALID [2020-07-28 19:02:00,581 INFO L280 TraceCheckUtils]: 34: Hoare triple {10469#false} assume !false; {10469#false} is VALID [2020-07-28 19:02:00,582 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:00,582 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1456995995] [2020-07-28 19:02:00,583 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:00,583 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:00,583 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [986941532] [2020-07-28 19:02:00,584 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 35 [2020-07-28 19:02:00,584 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:00,584 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:00,625 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 35 edges. 35 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:00,625 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:00,625 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:00,625 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:00,626 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:00,626 INFO L87 Difference]: Start difference. First operand 302 states and 406 transitions. Second operand 5 states. [2020-07-28 19:02:02,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:02,210 INFO L93 Difference]: Finished difference Result 646 states and 888 transitions. [2020-07-28 19:02:02,210 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:02,210 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 35 [2020-07-28 19:02:02,210 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:02,211 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:02,212 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 188 transitions. [2020-07-28 19:02:02,212 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:02,213 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 188 transitions. [2020-07-28 19:02:02,213 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 188 transitions. [2020-07-28 19:02:02,423 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 188 edges. 188 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:02,425 INFO L225 Difference]: With dead ends: 646 [2020-07-28 19:02:02,425 INFO L226 Difference]: Without dead ends: 97 [2020-07-28 19:02:02,426 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:02,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 97 states. [2020-07-28 19:02:02,641 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 97 to 96. [2020-07-28 19:02:02,642 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:02,642 INFO L82 GeneralOperation]: Start isEquivalent. First operand 97 states. Second operand 96 states. [2020-07-28 19:02:02,642 INFO L74 IsIncluded]: Start isIncluded. First operand 97 states. Second operand 96 states. [2020-07-28 19:02:02,642 INFO L87 Difference]: Start difference. First operand 97 states. Second operand 96 states. [2020-07-28 19:02:02,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:02,643 INFO L93 Difference]: Finished difference Result 97 states and 116 transitions. [2020-07-28 19:02:02,643 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 116 transitions. [2020-07-28 19:02:02,644 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:02,644 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:02,644 INFO L74 IsIncluded]: Start isIncluded. First operand 96 states. Second operand 97 states. [2020-07-28 19:02:02,644 INFO L87 Difference]: Start difference. First operand 96 states. Second operand 97 states. [2020-07-28 19:02:02,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:02,646 INFO L93 Difference]: Finished difference Result 97 states and 116 transitions. [2020-07-28 19:02:02,646 INFO L276 IsEmpty]: Start isEmpty. Operand 97 states and 116 transitions. [2020-07-28 19:02:02,646 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:02,646 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:02,646 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:02,646 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:02,647 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 96 states. [2020-07-28 19:02:02,648 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 96 states to 96 states and 115 transitions. [2020-07-28 19:02:02,648 INFO L78 Accepts]: Start accepts. Automaton has 96 states and 115 transitions. Word has length 35 [2020-07-28 19:02:02,648 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:02,648 INFO L479 AbstractCegarLoop]: Abstraction has 96 states and 115 transitions. [2020-07-28 19:02:02,648 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:02,648 INFO L276 IsEmpty]: Start isEmpty. Operand 96 states and 115 transitions. [2020-07-28 19:02:02,649 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:02:02,649 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:02,649 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:02,649 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-28 19:02:02,650 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:02,650 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:02,650 INFO L82 PathProgramCache]: Analyzing trace with hash -1326928741, now seen corresponding path program 1 times [2020-07-28 19:02:02,650 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:02,650 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1904492863] [2020-07-28 19:02:02,651 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:02,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:02,739 INFO L280 TraceCheckUtils]: 0: Hoare triple {11720#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(13);call #t~string11.base, #t~string11.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string11.base, #t~string11.offset, 1);call write~init~int(110, #t~string11.base, 1 + #t~string11.offset, 1);call write~init~int(0, #t~string11.base, 2 + #t~string11.offset, 1);call #t~string13.base, #t~string13.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string13.base, #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 1 + #t~string13.offset, 1);call write~init~int(102, #t~string13.base, 2 + #t~string13.offset, 1);call write~init~int(0, #t~string13.base, 3 + #t~string13.offset, 1);call #t~string15.base, #t~string15.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string15.base, #t~string15.offset, 1);call write~init~int(80, #t~string15.base, 1 + #t~string15.offset, 1);call write~init~int(117, #t~string15.base, 2 + #t~string15.offset, 1);call write~init~int(109, #t~string15.base, 3 + #t~string15.offset, 1);call write~init~int(112, #t~string15.base, 4 + #t~string15.offset, 1);call write~init~int(58, #t~string15.base, 5 + #t~string15.offset, 1);call write~init~int(0, #t~string15.base, 6 + #t~string15.offset, 1);call #t~string17.base, #t~string17.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string17.base, #t~string17.offset, 1);call write~init~int(110, #t~string17.base, 1 + #t~string17.offset, 1);call write~init~int(0, #t~string17.base, 2 + #t~string17.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string19.base, #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 1 + #t~string19.offset, 1);call write~init~int(102, #t~string19.base, 2 + #t~string19.offset, 1);call write~init~int(0, #t~string19.base, 3 + #t~string19.offset, 1);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string21.base, #t~string21.offset, 1);call write~init~int(32, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string23.base, #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 1 + #t~string23.offset, 1);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(13);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string28.base, #t~string28.offset, 1);call write~init~int(77, #t~string28.base, 1 + #t~string28.offset, 1);call write~init~int(101, #t~string28.base, 2 + #t~string28.offset, 1);call write~init~int(116, #t~string28.base, 3 + #t~string28.offset, 1);call write~init~int(104, #t~string28.base, 4 + #t~string28.offset, 1);call write~init~int(58, #t~string28.base, 5 + #t~string28.offset, 1);call write~init~int(0, #t~string28.base, 6 + #t~string28.offset, 1);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string30.base, #t~string30.offset, 1);call write~init~int(82, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(73, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(84, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 4 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string32.base, #t~string32.offset, 1);call write~init~int(75, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 2 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string34.base, #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 1 + #t~string34.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(30);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(9);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(21);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(30);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(9);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(25);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0; {11720#true} is VALID [2020-07-28 19:02:02,740 INFO L280 TraceCheckUtils]: 1: Hoare triple {11720#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {11720#true} is VALID [2020-07-28 19:02:02,740 INFO L280 TraceCheckUtils]: 2: Hoare triple {11720#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {11722#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:02:02,741 INFO L280 TraceCheckUtils]: 3: Hoare triple {11722#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {11723#(= 1 ULTIMATE.start_main_~tmp~0)} is VALID [2020-07-28 19:02:02,741 INFO L280 TraceCheckUtils]: 4: Hoare triple {11723#(= 1 ULTIMATE.start_main_~tmp~0)} assume 0 != main_~tmp~0; {11720#true} is VALID [2020-07-28 19:02:02,741 INFO L280 TraceCheckUtils]: 5: Hoare triple {11720#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~1, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~1;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11720#true} is VALID [2020-07-28 19:02:02,742 INFO L280 TraceCheckUtils]: 6: Hoare triple {11720#true} assume !false; {11720#true} is VALID [2020-07-28 19:02:02,742 INFO L280 TraceCheckUtils]: 7: Hoare triple {11720#true} assume test_~splverifierCounter~0 < 4; {11720#true} is VALID [2020-07-28 19:02:02,742 INFO L280 TraceCheckUtils]: 8: Hoare triple {11720#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~1 := test_#t~nondet1;havoc test_#t~nondet1; {11720#true} is VALID [2020-07-28 19:02:02,742 INFO L280 TraceCheckUtils]: 9: Hoare triple {11720#true} assume 0 != test_~tmp~1; {11720#true} is VALID [2020-07-28 19:02:02,742 INFO L280 TraceCheckUtils]: 10: Hoare triple {11720#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11720#true} is VALID [2020-07-28 19:02:02,743 INFO L280 TraceCheckUtils]: 11: Hoare triple {11720#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {11720#true} is VALID [2020-07-28 19:02:02,743 INFO L280 TraceCheckUtils]: 12: Hoare triple {11720#true} assume 0 != test_~tmp___0~0; {11720#true} is VALID [2020-07-28 19:02:02,744 INFO L280 TraceCheckUtils]: 13: Hoare triple {11720#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {11724#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,744 INFO L280 TraceCheckUtils]: 14: Hoare triple {11724#(not (= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {11724#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,745 INFO L280 TraceCheckUtils]: 15: Hoare triple {11724#(not (= 0 ~methaneLevelCritical~0))} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {11724#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,745 INFO L280 TraceCheckUtils]: 16: Hoare triple {11724#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0); {11724#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,746 INFO L280 TraceCheckUtils]: 17: Hoare triple {11724#(not (= 0 ~methaneLevelCritical~0))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret5, processEnvironment_~tmp~2;havoc processEnvironment_~tmp~2; {11724#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,746 INFO L280 TraceCheckUtils]: 18: Hoare triple {11724#(not (= 0 ~methaneLevelCritical~0))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret24, isHighWaterLevel_~retValue_acc~3, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~3;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {11724#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,747 INFO L280 TraceCheckUtils]: 19: Hoare triple {11724#(not (= 0 ~methaneLevelCritical~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {11724#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,747 INFO L280 TraceCheckUtils]: 20: Hoare triple {11724#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_#t~ret24 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret24 && isHighWaterLevel_#t~ret24 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret24;havoc isHighWaterLevel_#t~ret24; {11724#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,748 INFO L280 TraceCheckUtils]: 21: Hoare triple {11724#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {11724#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,748 INFO L280 TraceCheckUtils]: 22: Hoare triple {11724#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_~retValue_acc~3 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~3; {11724#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,749 INFO L280 TraceCheckUtils]: 23: Hoare triple {11724#(not (= 0 ~methaneLevelCritical~0))} processEnvironment_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret5 && processEnvironment_#t~ret5 <= 2147483647;processEnvironment_~tmp~2 := processEnvironment_#t~ret5;havoc processEnvironment_#t~ret5; {11724#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,750 INFO L280 TraceCheckUtils]: 24: Hoare triple {11724#(not (= 0 ~methaneLevelCritical~0))} assume 0 != processEnvironment_~tmp~2;havoc activatePump_#t~ret6, activatePump_~tmp~3;havoc activatePump_~tmp~3;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret7, isMethaneAlarm_~retValue_acc~1;havoc isMethaneAlarm_~retValue_acc~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {11724#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,750 INFO L280 TraceCheckUtils]: 25: Hoare triple {11724#(not (= 0 ~methaneLevelCritical~0))} isMethaneAlarm_#t~ret7 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret7 && isMethaneAlarm_#t~ret7 <= 2147483647;isMethaneAlarm_~retValue_acc~1 := isMethaneAlarm_#t~ret7;havoc isMethaneAlarm_#t~ret7;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~1; {11724#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,751 INFO L280 TraceCheckUtils]: 26: Hoare triple {11724#(not (= 0 ~methaneLevelCritical~0))} activatePump_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret6 && activatePump_#t~ret6 <= 2147483647;activatePump_~tmp~3 := activatePump_#t~ret6;havoc activatePump_#t~ret6; {11724#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,753 INFO L280 TraceCheckUtils]: 27: Hoare triple {11724#(not (= 0 ~methaneLevelCritical~0))} assume 0 != activatePump_~tmp~3; {11724#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,755 INFO L280 TraceCheckUtils]: 28: Hoare triple {11724#(not (= 0 ~methaneLevelCritical~0))} havoc __utac_acc__Specification3_spec__1_#t~ret71, __utac_acc__Specification3_spec__1_#t~ret72, __utac_acc__Specification3_spec__1_#t~ret73, __utac_acc__Specification3_spec__1_~tmp~8, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~8;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {11725#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} is VALID [2020-07-28 19:02:02,756 INFO L280 TraceCheckUtils]: 29: Hoare triple {11725#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} __utac_acc__Specification3_spec__1_#t~ret71 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret71 && __utac_acc__Specification3_spec__1_#t~ret71 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~8 := __utac_acc__Specification3_spec__1_#t~ret71;havoc __utac_acc__Specification3_spec__1_#t~ret71; {11726#(not (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8))} is VALID [2020-07-28 19:02:02,757 INFO L280 TraceCheckUtils]: 30: Hoare triple {11726#(not (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8))} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~8);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {11721#false} is VALID [2020-07-28 19:02:02,757 INFO L280 TraceCheckUtils]: 31: Hoare triple {11721#false} __utac_acc__Specification3_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret72 && __utac_acc__Specification3_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~2 := __utac_acc__Specification3_spec__1_#t~ret72;havoc __utac_acc__Specification3_spec__1_#t~ret72; {11721#false} is VALID [2020-07-28 19:02:02,757 INFO L280 TraceCheckUtils]: 32: Hoare triple {11721#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~2;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~2;havoc isPumpRunning_~retValue_acc~2;isPumpRunning_~retValue_acc~2 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~2; {11721#false} is VALID [2020-07-28 19:02:02,757 INFO L280 TraceCheckUtils]: 33: Hoare triple {11721#false} __utac_acc__Specification3_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret73 && __utac_acc__Specification3_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret73;havoc __utac_acc__Specification3_spec__1_#t~ret73; {11721#false} is VALID [2020-07-28 19:02:02,757 INFO L280 TraceCheckUtils]: 34: Hoare triple {11721#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {11721#false} is VALID [2020-07-28 19:02:02,758 INFO L280 TraceCheckUtils]: 35: Hoare triple {11721#false} assume !false; {11721#false} is VALID [2020-07-28 19:02:02,759 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:02,760 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1904492863] [2020-07-28 19:02:02,760 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:02,760 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2020-07-28 19:02:02,760 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [207416152] [2020-07-28 19:02:02,761 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 36 [2020-07-28 19:02:02,761 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:02,761 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:02,804 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:02,804 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:02,804 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:02,805 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:02,805 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:02,805 INFO L87 Difference]: Start difference. First operand 96 states and 115 transitions. Second operand 7 states. [2020-07-28 19:02:04,217 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:04,217 INFO L93 Difference]: Finished difference Result 280 states and 335 transitions. [2020-07-28 19:02:04,217 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2020-07-28 19:02:04,218 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 36 [2020-07-28 19:02:04,219 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:04,219 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:04,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 195 transitions. [2020-07-28 19:02:04,221 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:04,225 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 195 transitions. [2020-07-28 19:02:04,225 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 195 transitions. [2020-07-28 19:02:04,461 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 195 edges. 195 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:04,461 INFO L225 Difference]: With dead ends: 280 [2020-07-28 19:02:04,462 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:02:04,463 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=65, Invalid=117, Unknown=0, NotChecked=0, Total=182 [2020-07-28 19:02:04,463 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:02:04,463 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:02:04,463 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:04,463 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:04,463 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:04,464 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:04,464 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:04,464 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:04,464 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:04,464 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:04,464 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:04,464 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:04,465 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:04,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:04,465 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:04,465 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:04,465 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:04,465 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:04,466 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:04,466 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:04,466 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:02:04,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:02:04,466 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 36 [2020-07-28 19:02:04,466 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:04,466 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:02:04,466 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:04,467 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:04,467 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:04,467 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:02:04,469 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:02:04,601 WARN L193 SmtUtils]: Spent 123.00 ms on a formula simplification. DAG size of input: 95 DAG size of output: 72 [2020-07-28 19:02:04,720 WARN L193 SmtUtils]: Spent 107.00 ms on a formula simplification. DAG size of input: 105 DAG size of output: 53 [2020-07-28 19:02:05,102 WARN L193 SmtUtils]: Spent 314.00 ms on a formula simplification. DAG size of input: 169 DAG size of output: 118 [2020-07-28 19:02:05,310 WARN L193 SmtUtils]: Spent 196.00 ms on a formula simplification. DAG size of input: 169 DAG size of output: 118 [2020-07-28 19:02:05,678 WARN L193 SmtUtils]: Spent 125.00 ms on a formula simplification. DAG size of input: 130 DAG size of output: 97 [2020-07-28 19:02:05,809 WARN L193 SmtUtils]: Spent 103.00 ms on a formula simplification. DAG size of input: 143 DAG size of output: 103 [2020-07-28 19:02:06,062 WARN L193 SmtUtils]: Spent 246.00 ms on a formula simplification. DAG size of input: 69 DAG size of output: 45 [2020-07-28 19:02:06,202 WARN L193 SmtUtils]: Spent 122.00 ms on a formula simplification. DAG size of input: 51 DAG size of output: 28 [2020-07-28 19:02:06,312 WARN L193 SmtUtils]: Spent 106.00 ms on a formula simplification that was a NOOP. DAG size: 40 [2020-07-28 19:02:06,719 WARN L193 SmtUtils]: Spent 371.00 ms on a formula simplification. DAG size of input: 111 DAG size of output: 26 [2020-07-28 19:02:07,112 WARN L193 SmtUtils]: Spent 369.00 ms on a formula simplification. DAG size of input: 111 DAG size of output: 26 [2020-07-28 19:02:07,218 WARN L193 SmtUtils]: Spent 102.00 ms on a formula simplification that was a NOOP. DAG size: 38 [2020-07-28 19:02:07,482 WARN L193 SmtUtils]: Spent 239.00 ms on a formula simplification. DAG size of input: 63 DAG size of output: 46 [2020-07-28 19:02:07,696 WARN L193 SmtUtils]: Spent 202.00 ms on a formula simplification. DAG size of input: 66 DAG size of output: 42 [2020-07-28 19:02:08,028 WARN L193 SmtUtils]: Spent 278.00 ms on a formula simplification. DAG size of input: 90 DAG size of output: 26 [2020-07-28 19:02:08,443 WARN L193 SmtUtils]: Spent 369.00 ms on a formula simplification. DAG size of input: 95 DAG size of output: 37 [2020-07-28 19:02:08,447 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 497) no Hoare annotation was computed. [2020-07-28 19:02:08,448 INFO L264 CegarLoopResult]: At program point L52-2(lines 52 66) the Hoare annotation is: false [2020-07-28 19:02:08,448 INFO L264 CegarLoopResult]: At program point L234(lines 234 240) the Hoare annotation is: (let ((.cse3 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse0 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse1 (not (= 0 ~systemActive~0))) (.cse4 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 (not (= 0 ~methaneLevelCritical~0)) .cse2 .cse3 (not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (= 1 ULTIMATE.start_processEnvironment_~tmp~2) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse4 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4) (= 1 |ULTIMATE.start_isHighWaterLevel_#res|) (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (and .cse3 .cse0 .cse1 .cse2 (= 0 ULTIMATE.start_activatePump_~tmp~3) (= 1 ~pumpRunning~0)) (and .cse3 .cse0 .cse1 .cse4 (= 1 ~waterLevel~0) .cse2))) [2020-07-28 19:02:08,448 INFO L264 CegarLoopResult]: At program point L234-1(lines 234 240) the Hoare annotation is: false [2020-07-28 19:02:08,448 INFO L264 CegarLoopResult]: At program point L234-2(lines 234 240) the Hoare annotation is: false [2020-07-28 19:02:08,448 INFO L268 CegarLoopResult]: For program point L482(lines 482 488) no Hoare annotation was computed. [2020-07-28 19:02:08,448 INFO L268 CegarLoopResult]: For program point L482-1(lines 482 488) no Hoare annotation was computed. [2020-07-28 19:02:08,449 INFO L268 CegarLoopResult]: For program point L482-2(lines 482 488) no Hoare annotation was computed. [2020-07-28 19:02:08,449 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:02:08,449 INFO L268 CegarLoopResult]: For program point L185(lines 185 198) no Hoare annotation was computed. [2020-07-28 19:02:08,449 INFO L268 CegarLoopResult]: For program point L53(line 53) no Hoare annotation was computed. [2020-07-28 19:02:08,449 INFO L264 CegarLoopResult]: At program point L532(lines 527 535) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0)) [2020-07-28 19:02:08,449 INFO L268 CegarLoopResult]: For program point L912(lines 912 932) no Hoare annotation was computed. [2020-07-28 19:02:08,449 INFO L268 CegarLoopResult]: For program point L912-2(lines 912 932) no Hoare annotation was computed. [2020-07-28 19:02:08,450 INFO L268 CegarLoopResult]: For program point L912-4(lines 912 932) no Hoare annotation was computed. [2020-07-28 19:02:08,450 INFO L264 CegarLoopResult]: At program point L103(lines 99 105) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ULTIMATE.start_main_~tmp~0)) [2020-07-28 19:02:08,450 INFO L268 CegarLoopResult]: For program point L417(lines 417 421) no Hoare annotation was computed. [2020-07-28 19:02:08,450 INFO L264 CegarLoopResult]: At program point L203(lines 154 204) the Hoare annotation is: false [2020-07-28 19:02:08,450 INFO L264 CegarLoopResult]: At program point L385(lines 370 388) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse2 (not (= 0 ~systemActive~0))) (.cse3 (= 0 ~pumpRunning~0)) (.cse4 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse3 .cse4 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4) (= 1 |ULTIMATE.start_isHighWaterLevel_#res|) (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (and .cse0 .cse1 .cse2 .cse3 (= 1 ~waterLevel~0) .cse4))) [2020-07-28 19:02:08,451 INFO L264 CegarLoopResult]: At program point L385-1(lines 370 388) the Hoare annotation is: false [2020-07-28 19:02:08,451 INFO L264 CegarLoopResult]: At program point L385-2(lines 370 388) the Hoare annotation is: false [2020-07-28 19:02:08,451 INFO L268 CegarLoopResult]: For program point L56(lines 56 60) no Hoare annotation was computed. [2020-07-28 19:02:08,451 INFO L268 CegarLoopResult]: For program point L56-1(lines 227 233) no Hoare annotation was computed. [2020-07-28 19:02:08,451 INFO L271 CegarLoopResult]: At program point L139(lines 120 142) the Hoare annotation is: true [2020-07-28 19:02:08,451 INFO L264 CegarLoopResult]: At program point L321(lines 314 324) the Hoare annotation is: (let ((.cse0 (= 0 ~methaneLevelCritical~0)) (.cse8 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (let ((.cse2 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|)) (.cse9 (<= 2 ~waterLevel~0)) (.cse10 (= 1 ULTIMATE.start_processEnvironment_~tmp~2)) (.cse11 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse12 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (.cse13 (= 1 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse14 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse4 (not (= 0 ~systemActive~0))) (.cse16 (not .cse8)) (.cse15 (not .cse0)) (.cse5 (= 0 ~pumpRunning~0)) (.cse6 (= 1 ~waterLevel~0)) (.cse7 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse2 .cse3 .cse4 .cse7 .cse0 .cse1 .cse10 .cse11 .cse5 .cse8 .cse12 .cse13 .cse14) (and .cse9 .cse3 .cse4 .cse15 .cse7 .cse1 .cse16 .cse10 .cse11 .cse5 .cse12 .cse13 .cse14) (and .cse1 .cse3 .cse4 .cse16 .cse15 .cse5 .cse6 .cse7)))) [2020-07-28 19:02:08,451 INFO L264 CegarLoopResult]: At program point L321-1(lines 314 324) the Hoare annotation is: false [2020-07-28 19:02:08,452 INFO L264 CegarLoopResult]: At program point L321-2(lines 314 324) the Hoare annotation is: false [2020-07-28 19:02:08,452 INFO L268 CegarLoopResult]: For program point L156(lines 155 202) no Hoare annotation was computed. [2020-07-28 19:02:08,452 INFO L264 CegarLoopResult]: At program point L487(lines 478 491) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse2 (not (= 0 ~systemActive~0))) (.cse3 (= 0 ~pumpRunning~0)) (.cse4 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse3 (= 1 ~waterLevel~0) .cse4))) [2020-07-28 19:02:08,452 INFO L264 CegarLoopResult]: At program point L487-1(lines 478 491) the Hoare annotation is: false [2020-07-28 19:02:08,452 INFO L264 CegarLoopResult]: At program point L487-2(lines 478 491) the Hoare annotation is: false [2020-07-28 19:02:08,452 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:02:08,452 INFO L268 CegarLoopResult]: For program point L157(lines 157 161) no Hoare annotation was computed. [2020-07-28 19:02:08,452 INFO L268 CegarLoopResult]: For program point L405(lines 405 409) no Hoare annotation was computed. [2020-07-28 19:02:08,452 INFO L268 CegarLoopResult]: For program point L405-3(lines 405 409) no Hoare annotation was computed. [2020-07-28 19:02:08,453 INFO L268 CegarLoopResult]: For program point L405-6(lines 405 409) no Hoare annotation was computed. [2020-07-28 19:02:08,453 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 497) no Hoare annotation was computed. [2020-07-28 19:02:08,453 INFO L268 CegarLoopResult]: For program point L918(lines 918 931) no Hoare annotation was computed. [2020-07-28 19:02:08,453 INFO L264 CegarLoopResult]: At program point L918-1(lines 1 935) the Hoare annotation is: (let ((.cse5 (not (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8))) (.cse6 (not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (.cse2 (= 0 ~methaneLevelCritical~0)) (.cse4 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse0 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse1 (not (= 0 ~systemActive~0))) (.cse7 (= 0 ~pumpRunning~0)) (.cse8 (= 1 ~waterLevel~0)) (.cse3 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 (not .cse2) .cse3 .cse4 .cse5 .cse6 (= 1 ULTIMATE.start_processEnvironment_~tmp~2) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse7 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4) (= 1 |ULTIMATE.start_isHighWaterLevel_#res|) (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (and .cse4 .cse0 .cse1 .cse3 (= 0 ULTIMATE.start_activatePump_~tmp~3) (= 1 ~pumpRunning~0)) (and .cse4 .cse5 .cse0 .cse1 .cse6 .cse7 .cse8 .cse3) (and .cse2 .cse4 .cse0 .cse1 .cse7 .cse8 .cse3))) [2020-07-28 19:02:08,453 INFO L268 CegarLoopResult]: For program point L918-2(lines 918 931) no Hoare annotation was computed. [2020-07-28 19:02:08,453 INFO L264 CegarLoopResult]: At program point L918-3(lines 1 935) the Hoare annotation is: false [2020-07-28 19:02:08,453 INFO L268 CegarLoopResult]: For program point L918-4(lines 918 931) no Hoare annotation was computed. [2020-07-28 19:02:08,453 INFO L264 CegarLoopResult]: At program point L918-5(lines 1 935) the Hoare annotation is: false [2020-07-28 19:02:08,454 INFO L268 CegarLoopResult]: For program point L175(lines 175 181) no Hoare annotation was computed. [2020-07-28 19:02:08,454 INFO L264 CegarLoopResult]: At program point L175-1(lines 175 181) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse2 (not (= 0 ~systemActive~0))) (.cse4 (= 0 ~pumpRunning~0)) (.cse3 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and .cse0 .cse1 .cse2 .cse3 (= 0 ULTIMATE.start_activatePump_~tmp~3) (= 1 ~pumpRunning~0)) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse4 .cse3) (and .cse0 .cse1 .cse2 .cse4 (= 1 ~waterLevel~0) .cse3))) [2020-07-28 19:02:08,454 INFO L268 CegarLoopResult]: For program point L259(lines 259 276) no Hoare annotation was computed. [2020-07-28 19:02:08,454 INFO L268 CegarLoopResult]: For program point L259-1(lines 259 276) no Hoare annotation was computed. [2020-07-28 19:02:08,454 INFO L268 CegarLoopResult]: For program point L193(lines 193 197) no Hoare annotation was computed. [2020-07-28 19:02:08,454 INFO L268 CegarLoopResult]: For program point L259-2(lines 259 276) no Hoare annotation was computed. [2020-07-28 19:02:08,454 INFO L264 CegarLoopResult]: At program point L193-2(lines 227 233) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse2 (not (= 0 ~systemActive~0))) (.cse4 (= 0 ~pumpRunning~0)) (.cse3 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and .cse0 .cse1 .cse2 .cse3 (= 0 ULTIMATE.start_activatePump_~tmp~3) (= 1 ~pumpRunning~0)) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse4 .cse3) (and .cse0 .cse1 .cse2 .cse4 (= 1 ~waterLevel~0) .cse3))) [2020-07-28 19:02:08,455 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:02:08,455 INFO L264 CegarLoopResult]: At program point L474(lines 469 477) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (not (= 0 ~systemActive~0))) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and .cse0 .cse1 .cse2 .cse3 (= 0 ULTIMATE.start_activatePump_~tmp~3) (= 1 ~pumpRunning~0)) (and (= 0 ~methaneLevelCritical~0) (= 1 |ULTIMATE.start_getWaterLevel_#res|) .cse0 .cse2 .cse1 (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse3))) [2020-07-28 19:02:08,455 INFO L264 CegarLoopResult]: At program point L474-1(lines 469 477) the Hoare annotation is: false [2020-07-28 19:02:08,455 INFO L264 CegarLoopResult]: At program point L474-2(lines 469 477) the Hoare annotation is: false [2020-07-28 19:02:08,455 INFO L264 CegarLoopResult]: At program point L524(lines 1 935) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (not (= 0 ~systemActive~0)) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0)) [2020-07-28 19:02:08,455 INFO L264 CegarLoopResult]: At program point L227(lines 226 245) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse2 (not (= 0 ~systemActive~0))) (.cse4 (= 0 ~pumpRunning~0)) (.cse3 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and .cse0 .cse1 .cse2 .cse3 (= 0 ULTIMATE.start_activatePump_~tmp~3) (= 1 ~pumpRunning~0)) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse4 .cse3) (and .cse0 .cse1 .cse2 .cse4 (= 1 ~waterLevel~0) .cse3))) [2020-07-28 19:02:08,455 INFO L268 CegarLoopResult]: For program point L227-1(lines 227 233) no Hoare annotation was computed. [2020-07-28 19:02:08,456 INFO L264 CegarLoopResult]: At program point L227-2(lines 226 245) the Hoare annotation is: false [2020-07-28 19:02:08,456 INFO L264 CegarLoopResult]: At program point L227-3(lines 226 245) the Hoare annotation is: false [2020-07-28 19:02:08,456 INFO L264 CegarLoopResult]: At program point L442(lines 437 445) the Hoare annotation is: (let ((.cse0 (= 0 ~methaneLevelCritical~0)) (.cse7 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (let ((.cse8 (<= 2 ~waterLevel~0)) (.cse11 (= 1 ULTIMATE.start_processEnvironment_~tmp~2)) (.cse12 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse13 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (.cse14 (= 1 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse15 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not (= 0 ~systemActive~0))) (.cse10 (not .cse7)) (.cse9 (not .cse0)) (.cse4 (= 0 ~pumpRunning~0)) (.cse5 (= 1 ~waterLevel~0)) (.cse6 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse2 .cse3 .cse9 .cse6 .cse1 .cse10 .cse11 .cse12 .cse4 .cse13 .cse14 .cse15) (and .cse8 .cse2 .cse3 .cse6 .cse0 .cse1 .cse11 .cse12 .cse4 .cse7 .cse13 .cse14 .cse15) (and .cse1 .cse2 .cse3 .cse10 .cse9 .cse4 .cse5 .cse6)))) [2020-07-28 19:02:08,456 INFO L264 CegarLoopResult]: At program point L442-1(lines 437 445) the Hoare annotation is: (let ((.cse9 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse8 (= 0 ~methaneLevelCritical~0))) (let ((.cse4 (not .cse8)) (.cse3 (not .cse9)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (not (= 0 ~systemActive~0))) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse5 (= 0 ~pumpRunning~0)) (.cse6 (= 1 ~waterLevel~0)) (.cse7 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and (<= 2 ~waterLevel~0) .cse2 .cse1 .cse4 .cse7 .cse0 .cse3 (= 1 ULTIMATE.start_processEnvironment_~tmp~2) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse5 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4) (= 1 |ULTIMATE.start_isHighWaterLevel_#res|) (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (and .cse0 .cse2 .cse1 .cse7 (= 0 ULTIMATE.start_activatePump_~tmp~3) (= 1 ~pumpRunning~0)) (and .cse8 .cse0 .cse1 .cse2 .cse5 .cse6 .cse9 .cse7)))) [2020-07-28 19:02:08,456 INFO L264 CegarLoopResult]: At program point L442-2(lines 437 445) the Hoare annotation is: false [2020-07-28 19:02:08,456 INFO L264 CegarLoopResult]: At program point L442-3(lines 437 445) the Hoare annotation is: false [2020-07-28 19:02:08,457 INFO L264 CegarLoopResult]: At program point L442-4(lines 437 445) the Hoare annotation is: false [2020-07-28 19:02:08,457 INFO L264 CegarLoopResult]: At program point L442-5(lines 437 445) the Hoare annotation is: false [2020-07-28 19:02:08,457 INFO L268 CegarLoopResult]: For program point L922(lines 922 928) no Hoare annotation was computed. [2020-07-28 19:02:08,457 INFO L268 CegarLoopResult]: For program point L922-2(lines 922 928) no Hoare annotation was computed. [2020-07-28 19:02:08,457 INFO L268 CegarLoopResult]: For program point L922-4(lines 922 928) no Hoare annotation was computed. [2020-07-28 19:02:08,457 INFO L268 CegarLoopResult]: For program point L130(lines 130 137) no Hoare annotation was computed. [2020-07-28 19:02:08,457 INFO L271 CegarLoopResult]: At program point L130-1(lines 130 137) the Hoare annotation is: true [2020-07-28 19:02:08,457 INFO L268 CegarLoopResult]: For program point L296(lines 296 302) no Hoare annotation was computed. [2020-07-28 19:02:08,457 INFO L268 CegarLoopResult]: For program point L263(lines 263 271) no Hoare annotation was computed. [2020-07-28 19:02:08,457 INFO L268 CegarLoopResult]: For program point L263-1(lines 263 271) no Hoare annotation was computed. [2020-07-28 19:02:08,458 INFO L268 CegarLoopResult]: For program point L296-2(lines 296 302) no Hoare annotation was computed. [2020-07-28 19:02:08,458 INFO L268 CegarLoopResult]: For program point L263-2(lines 263 271) no Hoare annotation was computed. [2020-07-28 19:02:08,458 INFO L268 CegarLoopResult]: For program point L296-4(lines 296 302) no Hoare annotation was computed. [2020-07-28 19:02:08,458 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:02:08,458 INFO L268 CegarLoopResult]: For program point L379(lines 379 383) no Hoare annotation was computed. [2020-07-28 19:02:08,458 INFO L268 CegarLoopResult]: For program point L379-2(lines 379 383) no Hoare annotation was computed. [2020-07-28 19:02:08,458 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 497) no Hoare annotation was computed. [2020-07-28 19:02:08,458 INFO L268 CegarLoopResult]: For program point L379-3(lines 379 383) no Hoare annotation was computed. [2020-07-28 19:02:08,458 INFO L268 CegarLoopResult]: For program point L379-5(lines 379 383) no Hoare annotation was computed. [2020-07-28 19:02:08,458 INFO L268 CegarLoopResult]: For program point L379-6(lines 379 383) no Hoare annotation was computed. [2020-07-28 19:02:08,459 INFO L268 CegarLoopResult]: For program point L379-8(lines 379 383) no Hoare annotation was computed. [2020-07-28 19:02:08,459 INFO L268 CegarLoopResult]: For program point L429(lines 429 433) no Hoare annotation was computed. [2020-07-28 19:02:08,459 INFO L264 CegarLoopResult]: At program point L330(lines 325 333) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (= 1 |ULTIMATE.start_isPumpRunning_#res|) (= 1 ULTIMATE.start_main_~tmp~0) (= 0 ULTIMATE.start_activatePump_~tmp~3) (= 1 ~pumpRunning~0)) [2020-07-28 19:02:08,459 INFO L264 CegarLoopResult]: At program point L330-1(lines 325 333) the Hoare annotation is: false [2020-07-28 19:02:08,459 INFO L264 CegarLoopResult]: At program point L330-2(lines 325 333) the Hoare annotation is: false [2020-07-28 19:02:08,459 INFO L268 CegarLoopResult]: For program point L165(lines 165 171) no Hoare annotation was computed. [2020-07-28 19:02:08,459 INFO L264 CegarLoopResult]: At program point L165-1(lines 165 171) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse2 (not (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~8))) (.cse5 (not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (.cse8 (= 0 ~methaneLevelCritical~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse4 (not (= 0 ~systemActive~0))) (.cse6 (= 0 ~pumpRunning~0)) (.cse9 (= 1 ~waterLevel~0)) (.cse7 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse0 .cse1 .cse3 .cse4 .cse6 .cse7) (and .cse1 .cse3 .cse4 .cse7 (= 0 ULTIMATE.start_activatePump_~tmp~3) (= 1 ~pumpRunning~0)) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse9 .cse7) (and .cse8 .cse1 .cse3 .cse4 .cse6 .cse9 .cse7))) [2020-07-28 19:02:08,459 INFO L268 CegarLoopResult]: For program point L497(line 497) no Hoare annotation was computed. [2020-07-28 19:02:08,460 INFO L268 CegarLoopResult]: For program point L497-1(line 497) no Hoare annotation was computed. [2020-07-28 19:02:08,460 INFO L268 CegarLoopResult]: For program point L497-2(line 497) no Hoare annotation was computed. [2020-07-28 19:02:08,464 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:02:08,464 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:02:08,466 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-28 19:02:08,466 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-28 19:02:08,466 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-28 19:02:08,468 WARN L170 areAnnotationChecker]: L156 has no Hoare annotation [2020-07-28 19:02:08,468 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:02:08,468 WARN L170 areAnnotationChecker]: L227-1 has no Hoare annotation [2020-07-28 19:02:08,468 WARN L170 areAnnotationChecker]: L156 has no Hoare annotation [2020-07-28 19:02:08,468 WARN L170 areAnnotationChecker]: L156 has no Hoare annotation [2020-07-28 19:02:08,468 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:02:08,468 WARN L170 areAnnotationChecker]: L227-1 has no Hoare annotation [2020-07-28 19:02:08,468 WARN L170 areAnnotationChecker]: L227-1 has no Hoare annotation [2020-07-28 19:02:08,468 WARN L170 areAnnotationChecker]: L157 has no Hoare annotation [2020-07-28 19:02:08,468 WARN L170 areAnnotationChecker]: L405-3 has no Hoare annotation [2020-07-28 19:02:08,468 WARN L170 areAnnotationChecker]: L405-3 has no Hoare annotation [2020-07-28 19:02:08,469 WARN L170 areAnnotationChecker]: L259-1 has no Hoare annotation [2020-07-28 19:02:08,469 WARN L170 areAnnotationChecker]: L165 has no Hoare annotation [2020-07-28 19:02:08,469 WARN L170 areAnnotationChecker]: L165 has no Hoare annotation [2020-07-28 19:02:08,469 WARN L170 areAnnotationChecker]: L259-1 has no Hoare annotation [2020-07-28 19:02:08,469 WARN L170 areAnnotationChecker]: L259-1 has no Hoare annotation [2020-07-28 19:02:08,469 WARN L170 areAnnotationChecker]: L417 has no Hoare annotation [2020-07-28 19:02:08,469 WARN L170 areAnnotationChecker]: L417 has no Hoare annotation [2020-07-28 19:02:08,470 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2020-07-28 19:02:08,470 WARN L170 areAnnotationChecker]: L482-1 has no Hoare annotation [2020-07-28 19:02:08,470 WARN L170 areAnnotationChecker]: L482-1 has no Hoare annotation [2020-07-28 19:02:08,470 WARN L170 areAnnotationChecker]: L912-2 has no Hoare annotation [2020-07-28 19:02:08,470 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2020-07-28 19:02:08,470 WARN L170 areAnnotationChecker]: L175 has no Hoare annotation [2020-07-28 19:02:08,470 WARN L170 areAnnotationChecker]: L379-3 has no Hoare annotation [2020-07-28 19:02:08,470 WARN L170 areAnnotationChecker]: L912-2 has no Hoare annotation [2020-07-28 19:02:08,470 WARN L170 areAnnotationChecker]: L912-2 has no Hoare annotation [2020-07-28 19:02:08,470 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2020-07-28 19:02:08,470 WARN L170 areAnnotationChecker]: L429 has no Hoare annotation [2020-07-28 19:02:08,470 WARN L170 areAnnotationChecker]: L185 has no Hoare annotation [2020-07-28 19:02:08,471 WARN L170 areAnnotationChecker]: L379-3 has no Hoare annotation [2020-07-28 19:02:08,471 WARN L170 areAnnotationChecker]: L379-3 has no Hoare annotation [2020-07-28 19:02:08,471 WARN L170 areAnnotationChecker]: L918-2 has no Hoare annotation [2020-07-28 19:02:08,471 WARN L170 areAnnotationChecker]: L185 has no Hoare annotation [2020-07-28 19:02:08,471 WARN L170 areAnnotationChecker]: L185 has no Hoare annotation [2020-07-28 19:02:08,471 WARN L170 areAnnotationChecker]: L379-5 has no Hoare annotation [2020-07-28 19:02:08,471 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:02:08,471 WARN L170 areAnnotationChecker]: L918-2 has no Hoare annotation [2020-07-28 19:02:08,471 WARN L170 areAnnotationChecker]: L918-2 has no Hoare annotation [2020-07-28 19:02:08,471 WARN L170 areAnnotationChecker]: L405 has no Hoare annotation [2020-07-28 19:02:08,472 WARN L170 areAnnotationChecker]: L193 has no Hoare annotation [2020-07-28 19:02:08,472 WARN L170 areAnnotationChecker]: L193 has no Hoare annotation [2020-07-28 19:02:08,472 WARN L170 areAnnotationChecker]: L263-1 has no Hoare annotation [2020-07-28 19:02:08,472 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:02:08,472 WARN L170 areAnnotationChecker]: L922-2 has no Hoare annotation [2020-07-28 19:02:08,472 WARN L170 areAnnotationChecker]: L405 has no Hoare annotation [2020-07-28 19:02:08,472 WARN L170 areAnnotationChecker]: L405 has no Hoare annotation [2020-07-28 19:02:08,472 WARN L170 areAnnotationChecker]: L259 has no Hoare annotation [2020-07-28 19:02:08,473 WARN L170 areAnnotationChecker]: L263-1 has no Hoare annotation [2020-07-28 19:02:08,473 WARN L170 areAnnotationChecker]: L263-1 has no Hoare annotation [2020-07-28 19:02:08,473 WARN L170 areAnnotationChecker]: L56 has no Hoare annotation [2020-07-28 19:02:08,473 WARN L170 areAnnotationChecker]: L56 has no Hoare annotation [2020-07-28 19:02:08,473 WARN L170 areAnnotationChecker]: L922-2 has no Hoare annotation [2020-07-28 19:02:08,473 WARN L170 areAnnotationChecker]: L922-2 has no Hoare annotation [2020-07-28 19:02:08,474 WARN L170 areAnnotationChecker]: L259 has no Hoare annotation [2020-07-28 19:02:08,474 WARN L170 areAnnotationChecker]: L259 has no Hoare annotation [2020-07-28 19:02:08,475 WARN L170 areAnnotationChecker]: L56-1 has no Hoare annotation [2020-07-28 19:02:08,475 WARN L170 areAnnotationChecker]: L56-1 has no Hoare annotation [2020-07-28 19:02:08,475 WARN L170 areAnnotationChecker]: L497-1 has no Hoare annotation [2020-07-28 19:02:08,475 WARN L170 areAnnotationChecker]: L497-1 has no Hoare annotation [2020-07-28 19:02:08,475 WARN L170 areAnnotationChecker]: L482 has no Hoare annotation [2020-07-28 19:02:08,475 WARN L170 areAnnotationChecker]: L482 has no Hoare annotation [2020-07-28 19:02:08,475 WARN L170 areAnnotationChecker]: L912 has no Hoare annotation [2020-07-28 19:02:08,476 WARN L170 areAnnotationChecker]: L296-2 has no Hoare annotation [2020-07-28 19:02:08,476 WARN L170 areAnnotationChecker]: L405-6 has no Hoare annotation [2020-07-28 19:02:08,476 WARN L170 areAnnotationChecker]: L405-6 has no Hoare annotation [2020-07-28 19:02:08,476 WARN L170 areAnnotationChecker]: L259-2 has no Hoare annotation [2020-07-28 19:02:08,476 WARN L170 areAnnotationChecker]: L379 has no Hoare annotation [2020-07-28 19:02:08,476 WARN L170 areAnnotationChecker]: L912 has no Hoare annotation [2020-07-28 19:02:08,476 WARN L170 areAnnotationChecker]: L912 has no Hoare annotation [2020-07-28 19:02:08,476 WARN L170 areAnnotationChecker]: L296-2 has no Hoare annotation [2020-07-28 19:02:08,476 WARN L170 areAnnotationChecker]: L296-2 has no Hoare annotation [2020-07-28 19:02:08,476 WARN L170 areAnnotationChecker]: L259-2 has no Hoare annotation [2020-07-28 19:02:08,476 WARN L170 areAnnotationChecker]: L259-2 has no Hoare annotation [2020-07-28 19:02:08,477 WARN L170 areAnnotationChecker]: L379 has no Hoare annotation [2020-07-28 19:02:08,477 WARN L170 areAnnotationChecker]: L379 has no Hoare annotation [2020-07-28 19:02:08,477 WARN L170 areAnnotationChecker]: L918 has no Hoare annotation [2020-07-28 19:02:08,477 WARN L170 areAnnotationChecker]: L482-2 has no Hoare annotation [2020-07-28 19:02:08,477 WARN L170 areAnnotationChecker]: L482-2 has no Hoare annotation [2020-07-28 19:02:08,477 WARN L170 areAnnotationChecker]: L912-4 has no Hoare annotation [2020-07-28 19:02:08,477 WARN L170 areAnnotationChecker]: L379-2 has no Hoare annotation [2020-07-28 19:02:08,477 WARN L170 areAnnotationChecker]: L918 has no Hoare annotation [2020-07-28 19:02:08,477 WARN L170 areAnnotationChecker]: L918 has no Hoare annotation [2020-07-28 19:02:08,477 WARN L170 areAnnotationChecker]: L379-6 has no Hoare annotation [2020-07-28 19:02:08,478 WARN L170 areAnnotationChecker]: L912-4 has no Hoare annotation [2020-07-28 19:02:08,478 WARN L170 areAnnotationChecker]: L912-4 has no Hoare annotation [2020-07-28 19:02:08,478 WARN L170 areAnnotationChecker]: L263 has no Hoare annotation [2020-07-28 19:02:08,478 WARN L170 areAnnotationChecker]: L922 has no Hoare annotation [2020-07-28 19:02:08,478 WARN L170 areAnnotationChecker]: L379-6 has no Hoare annotation [2020-07-28 19:02:08,478 WARN L170 areAnnotationChecker]: L379-6 has no Hoare annotation [2020-07-28 19:02:08,478 WARN L170 areAnnotationChecker]: L918-4 has no Hoare annotation [2020-07-28 19:02:08,478 WARN L170 areAnnotationChecker]: L263 has no Hoare annotation [2020-07-28 19:02:08,478 WARN L170 areAnnotationChecker]: L263 has no Hoare annotation [2020-07-28 19:02:08,478 WARN L170 areAnnotationChecker]: L922 has no Hoare annotation [2020-07-28 19:02:08,478 WARN L170 areAnnotationChecker]: L922 has no Hoare annotation [2020-07-28 19:02:08,479 WARN L170 areAnnotationChecker]: L379-8 has no Hoare annotation [2020-07-28 19:02:08,479 WARN L170 areAnnotationChecker]: L918-4 has no Hoare annotation [2020-07-28 19:02:08,479 WARN L170 areAnnotationChecker]: L918-4 has no Hoare annotation [2020-07-28 19:02:08,484 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2020-07-28 19:02:08,484 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2020-07-28 19:02:08,484 WARN L170 areAnnotationChecker]: L263-2 has no Hoare annotation [2020-07-28 19:02:08,484 WARN L170 areAnnotationChecker]: L922-4 has no Hoare annotation [2020-07-28 19:02:08,484 WARN L170 areAnnotationChecker]: L296 has no Hoare annotation [2020-07-28 19:02:08,484 WARN L170 areAnnotationChecker]: L263-2 has no Hoare annotation [2020-07-28 19:02:08,485 WARN L170 areAnnotationChecker]: L263-2 has no Hoare annotation [2020-07-28 19:02:08,485 WARN L170 areAnnotationChecker]: L922-4 has no Hoare annotation [2020-07-28 19:02:08,485 WARN L170 areAnnotationChecker]: L922-4 has no Hoare annotation [2020-07-28 19:02:08,485 WARN L170 areAnnotationChecker]: L296 has no Hoare annotation [2020-07-28 19:02:08,485 WARN L170 areAnnotationChecker]: L296 has no Hoare annotation [2020-07-28 19:02:08,485 WARN L170 areAnnotationChecker]: L497-2 has no Hoare annotation [2020-07-28 19:02:08,485 WARN L170 areAnnotationChecker]: L497-2 has no Hoare annotation [2020-07-28 19:02:08,485 WARN L170 areAnnotationChecker]: L296-4 has no Hoare annotation [2020-07-28 19:02:08,485 WARN L170 areAnnotationChecker]: L296-4 has no Hoare annotation [2020-07-28 19:02:08,485 WARN L170 areAnnotationChecker]: L296-4 has no Hoare annotation [2020-07-28 19:02:08,485 INFO L163 areAnnotationChecker]: CFG has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:02:08,528 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:02:08 BoogieIcfgContainer [2020-07-28 19:02:08,528 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:02:08,529 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:02:08,530 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:02:08,530 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:02:08,530 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:01:45" (3/4) ... [2020-07-28 19:02:08,538 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:02:08,566 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:02:08,569 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:02:08,570 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:02:08,571 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:02:08,572 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:02:08,573 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:02:08,574 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:02:08,599 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == methaneLevelCritical && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel [2020-07-28 19:02:08,600 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == methaneLevelCritical && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp [2020-07-28 19:02:08,600 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((2 <= waterLevel && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && 1 == tmp) && 0 == splverifierCounter) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning)) || (((((((0 == splverifierCounter && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) [2020-07-28 19:02:08,600 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 0 == pumpRunning) && 1 == tmp) || ((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == tmp)) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning)) || (((((((0 == splverifierCounter && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) [2020-07-28 19:02:08,601 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == tmp)) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) [2020-07-28 19:02:08,601 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == tmp)) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) [2020-07-28 19:02:08,601 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == tmp)) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) [2020-07-28 19:02:08,601 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((2 <= waterLevel && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && 1 == tmp) && 0 == splverifierCounter) && !(0 == \result)) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning)) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) [2020-07-28 19:02:08,602 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0 == splverifierCounter && !(0 == systemActive)) && 1 == \result) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) || ((((((((((((2 <= waterLevel && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && 1 == tmp) && 0 == splverifierCounter) && !(0 == \result)) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0)) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning)) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result) && 1 == tmp) [2020-07-28 19:02:08,603 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 0 == pumpRunning) && 1 == tmp) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) [2020-07-28 19:02:08,604 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning) || ((((((((0 == methaneLevelCritical && 1 == \result) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result) && 1 == tmp) [2020-07-28 19:02:08,604 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 0 == pumpRunning) && 1 == tmp) && 0 == tmp) && 1 == \result) && 1 == tmp___0) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) [2020-07-28 19:02:08,605 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning [2020-07-28 19:02:08,605 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) && 0 == \result) || ((((((((((((2 <= waterLevel && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && 1 == tmp) && 0 == splverifierCounter) && !(0 == \result)) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0)) || ((((((((((((2 <= waterLevel && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && 0 == \result) && 0 == tmp) && 1 == \result) && 1 == tmp___0)) || (((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) [2020-07-28 19:02:08,606 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) && 0 == \result) || (((((((((((((2 <= waterLevel && 0 == \result) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && 0 == \result) && 0 == tmp) && 1 == \result) && 1 == tmp___0)) || ((((((((((((2 <= waterLevel && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && 1 == tmp) && 0 == splverifierCounter) && !(0 == \result)) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0)) || (((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) [2020-07-28 19:02:08,666 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:02:08,666 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:02:08,668 INFO L168 Benchmark]: Toolchain (without parser) took 25233.48 ms. Allocated memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: 509.6 MB). Free memory was 950.8 MB in the beginning and 1.4 GB in the end (delta: -479.4 MB). Peak memory consumption was 30.3 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:08,669 INFO L168 Benchmark]: CDTParser took 0.80 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:02:08,669 INFO L168 Benchmark]: CACSL2BoogieTranslator took 662.87 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 147.3 MB). Free memory was 950.8 MB in the beginning and 1.1 GB in the end (delta: -177.6 MB). Peak memory consumption was 26.2 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:08,669 INFO L168 Benchmark]: Boogie Procedure Inliner took 86.18 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:08,669 INFO L168 Benchmark]: Boogie Preprocessor took 83.03 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:02:08,670 INFO L168 Benchmark]: RCFGBuilder took 1523.23 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 963.9 MB in the end (delta: 158.0 MB). Peak memory consumption was 158.0 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:08,670 INFO L168 Benchmark]: TraceAbstraction took 22734.49 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 362.3 MB). Free memory was 957.2 MB in the beginning and 1.4 GB in the end (delta: -486.5 MB). There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:02:08,670 INFO L168 Benchmark]: Witness Printer took 136.89 ms. Allocated memory is still 1.5 GB. Free memory was 1.4 GB in the beginning and 1.4 GB in the end (delta: 13.6 MB). Peak memory consumption was 13.6 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:08,672 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.80 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 662.87 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 147.3 MB). Free memory was 950.8 MB in the beginning and 1.1 GB in the end (delta: -177.6 MB). Peak memory consumption was 26.2 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 86.18 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 83.03 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 1523.23 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 963.9 MB in the end (delta: 158.0 MB). Peak memory consumption was 158.0 MB. Max. memory is 11.5 GB. * TraceAbstraction took 22734.49 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 362.3 MB). Free memory was 957.2 MB in the beginning and 1.4 GB in the end (delta: -486.5 MB). There was no memory consumed. Max. memory is 11.5 GB. * Witness Printer took 136.89 ms. Allocated memory is still 1.5 GB. Free memory was 1.4 GB in the beginning and 1.4 GB in the end (delta: 13.6 MB). Peak memory consumption was 13.6 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 497]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 497]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 497]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 437]: Loop Invariant Derived loop invariant: (((((((((0 == splverifierCounter && !(0 == systemActive)) && 1 == \result) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) || ((((((((((((2 <= waterLevel && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && 1 == tmp) && 0 == splverifierCounter) && !(0 == \result)) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0)) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning)) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result) && 1 == tmp) - InvariantResult [Line: 437]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 437]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel - InvariantResult [Line: 370]: Loop Invariant Derived loop invariant: (((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 0 == pumpRunning) && 1 == tmp) && 0 == tmp) && 1 == \result) && 1 == tmp___0) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) - InvariantResult [Line: 314]: Loop Invariant Derived loop invariant: ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) && 0 == \result) || (((((((((((((2 <= waterLevel && 0 == \result) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && 0 == \result) && 0 == tmp) && 1 == \result) && 1 == tmp___0)) || ((((((((((((2 <= waterLevel && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && 1 == tmp) && 0 == splverifierCounter) && !(0 == \result)) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0)) || (((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) - InvariantResult [Line: 437]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 234]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 370]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 314]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 437]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 234]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning - InvariantResult [Line: 370]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 314]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 527]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel - InvariantResult [Line: 227]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == tmp)) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 175]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == tmp)) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) - InvariantResult [Line: 437]: Loop Invariant Derived loop invariant: (((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) && 0 == \result) || ((((((((((((2 <= waterLevel && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && 1 == tmp) && 0 == splverifierCounter) && !(0 == \result)) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0)) || ((((((((((((2 <= waterLevel && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && 0 == \result) && 0 == tmp) && 1 == \result) && 1 == tmp___0)) || (((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 99]: Loop Invariant Derived loop invariant: ((((0 == methaneLevelCritical && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((((((2 <= waterLevel && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && 1 == tmp) && 0 == splverifierCounter) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning)) || (((((((0 == splverifierCounter && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 234]: Loop Invariant Derived loop invariant: (((((((((((((2 <= waterLevel && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && 1 == tmp) && 0 == splverifierCounter) && !(0 == \result)) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning)) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) - InvariantResult [Line: 226]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 120]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 154]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 325]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 226]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 478]: Loop Invariant Derived loop invariant: ((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 0 == pumpRunning) && 1 == tmp) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) - InvariantResult [Line: 478]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 226]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == tmp)) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) - InvariantResult [Line: 478]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning) || ((((((((0 == methaneLevelCritical && 1 == \result) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == pumpRunning) && 1 == waterLevel) && 0 == \result) && 1 == tmp) - InvariantResult [Line: 165]: Loop Invariant Derived loop invariant: ((((((((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 0 == pumpRunning) && 1 == tmp) || ((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == tmp)) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning)) || (((((((0 == splverifierCounter && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 93 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 18.6s, OverallIterations: 11, TraceHistogramMax: 1, AutomataDifference: 14.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 3.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 997 SDtfs, 1376 SDslu, 1640 SDs, 0 SdLazy, 234 SolverSat, 34 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.3s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 82 GetRequests, 29 SyntacticMatches, 0 SemanticMatches, 53 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 39 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=302occurred in iteration=9, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 2.4s AutomataMinimizationTime, 11 MinimizatonAttempts, 1147 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 40 LocationsWithAnnotation, 40 PreInvPairs, 221 NumberOfFragments, 1156 HoareAnnotationTreeSize, 40 FomulaSimplifications, 184480 FormulaSimplificationTreeSizeReduction, 1.3s HoareSimplificationTime, 40 FomulaSimplificationsInter, 37270 FormulaSimplificationTreeSizeReductionInter, 2.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.4s SatisfiabilityAnalysisTime, 0.8s InterpolantComputationTime, 319 NumberOfCodeBlocks, 319 NumberOfCodeBlocksAsserted, 11 NumberOfCheckSat, 308 ConstructedInterpolants, 0 QuantifiedInterpolants, 17323 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 11 InterpolantComputations, 11 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...