./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8271090c98217a098933d4a7a6aa5b00a536c5c8 ..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:01:47,566 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:01:47,569 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:01:47,587 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:01:47,588 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:01:47,590 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:01:47,592 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:01:47,602 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:01:47,607 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:01:47,611 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:01:47,613 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:01:47,614 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:01:47,615 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:01:47,617 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:01:47,618 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:01:47,619 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:01:47,621 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:01:47,622 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:01:47,624 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:01:47,628 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:01:47,635 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:01:47,639 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:01:47,641 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:01:47,642 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:01:47,645 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:01:47,645 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:01:47,646 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:01:47,647 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:01:47,648 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:01:47,649 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:01:47,649 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:01:47,650 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:01:47,651 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:01:47,652 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:01:47,653 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:01:47,654 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:01:47,655 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:01:47,655 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:01:47,655 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:01:47,656 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:01:47,657 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:01:47,658 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:01:47,689 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:01:47,690 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:01:47,691 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:01:47,692 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:01:47,692 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:01:47,692 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:01:47,692 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:01:47,692 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:01:47,693 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:01:47,693 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:01:47,694 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:01:47,694 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:01:47,694 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:01:47,695 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:01:47,695 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:01:47,695 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:01:47,695 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:01:47,696 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:01:47,696 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:01:47,696 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:01:47,696 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:01:47,697 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:01:47,697 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:01:47,697 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:01:47,697 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:01:47,697 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:01:47,698 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:01:47,698 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:01:47,698 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:01:47,698 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8271090c98217a098933d4a7a6aa5b00a536c5c8 [2020-07-28 19:01:47,993 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:01:48,009 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:01:48,013 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:01:48,015 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:01:48,016 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:01:48,017 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c [2020-07-28 19:01:48,094 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/80b0811bc/572e478949f644ea9e5e1a86c62410cc/FLAGbbcd27265 [2020-07-28 19:01:48,668 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:01:48,669 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product45.cil.c [2020-07-28 19:01:48,683 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/80b0811bc/572e478949f644ea9e5e1a86c62410cc/FLAGbbcd27265 [2020-07-28 19:01:48,947 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/80b0811bc/572e478949f644ea9e5e1a86c62410cc [2020-07-28 19:01:48,951 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:01:48,953 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:01:48,954 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:01:48,955 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:01:48,959 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:01:48,961 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:01:48" (1/1) ... [2020-07-28 19:01:48,964 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@8781850 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:48, skipping insertion in model container [2020-07-28 19:01:48,965 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:01:48" (1/1) ... [2020-07-28 19:01:48,973 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:01:49,022 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:01:49,380 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:01:49,471 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:01:49,568 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:01:49,612 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:01:49,613 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:49 WrapperNode [2020-07-28 19:01:49,613 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:01:49,615 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:01:49,615 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:01:49,615 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:01:49,624 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:49" (1/1) ... [2020-07-28 19:01:49,643 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:49" (1/1) ... [2020-07-28 19:01:49,724 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:01:49,725 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:01:49,725 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:01:49,725 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:01:49,736 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:49" (1/1) ... [2020-07-28 19:01:49,737 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:49" (1/1) ... [2020-07-28 19:01:49,743 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:49" (1/1) ... [2020-07-28 19:01:49,743 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:49" (1/1) ... [2020-07-28 19:01:49,763 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:49" (1/1) ... [2020-07-28 19:01:49,780 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:49" (1/1) ... [2020-07-28 19:01:49,788 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:49" (1/1) ... [2020-07-28 19:01:49,801 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:01:49,802 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:01:49,802 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:01:49,802 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:01:49,803 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:49" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:01:49,868 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:01:49,869 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:01:49,869 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:01:49,869 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:01:51,754 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:01:51,755 INFO L295 CfgBuilder]: Removed 198 assume(true) statements. [2020-07-28 19:01:51,763 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:01:51 BoogieIcfgContainer [2020-07-28 19:01:51,763 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:01:51,765 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:01:51,766 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:01:51,769 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:01:51,770 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:01:48" (1/3) ... [2020-07-28 19:01:51,771 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4e879460 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:01:51, skipping insertion in model container [2020-07-28 19:01:51,771 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:49" (2/3) ... [2020-07-28 19:01:51,772 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@4e879460 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:01:51, skipping insertion in model container [2020-07-28 19:01:51,772 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:01:51" (3/3) ... [2020-07-28 19:01:51,776 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product45.cil.c [2020-07-28 19:01:51,789 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:01:51,798 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:01:51,816 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:01:51,856 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:01:51,856 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:01:51,857 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:01:51,858 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:01:51,858 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:01:51,858 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:01:51,859 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:01:51,859 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:01:51,889 INFO L276 IsEmpty]: Start isEmpty. Operand 135 states. [2020-07-28 19:01:51,900 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-28 19:01:51,900 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:51,901 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:51,902 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:51,909 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:51,910 INFO L82 PathProgramCache]: Analyzing trace with hash 1981233963, now seen corresponding path program 1 times [2020-07-28 19:01:51,922 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:51,922 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [738440193] [2020-07-28 19:01:51,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:52,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:52,334 INFO L280 TraceCheckUtils]: 0: Hoare triple {138#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {138#true} is VALID [2020-07-28 19:01:52,335 INFO L280 TraceCheckUtils]: 1: Hoare triple {138#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {138#true} is VALID [2020-07-28 19:01:52,336 INFO L280 TraceCheckUtils]: 2: Hoare triple {138#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {138#true} is VALID [2020-07-28 19:01:52,336 INFO L280 TraceCheckUtils]: 3: Hoare triple {138#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {138#true} is VALID [2020-07-28 19:01:52,336 INFO L280 TraceCheckUtils]: 4: Hoare triple {138#true} assume 0 != main_~tmp~1; {138#true} is VALID [2020-07-28 19:01:52,337 INFO L280 TraceCheckUtils]: 5: Hoare triple {138#true} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~6, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~6;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {138#true} is VALID [2020-07-28 19:01:52,338 INFO L280 TraceCheckUtils]: 6: Hoare triple {138#true} assume false; {139#false} is VALID [2020-07-28 19:01:52,338 INFO L280 TraceCheckUtils]: 7: Hoare triple {139#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {139#false} is VALID [2020-07-28 19:01:52,339 INFO L280 TraceCheckUtils]: 8: Hoare triple {139#false} assume !(0 != ~pumpRunning~0); {139#false} is VALID [2020-07-28 19:01:52,339 INFO L280 TraceCheckUtils]: 9: Hoare triple {139#false} assume !(0 != ~systemActive~0); {139#false} is VALID [2020-07-28 19:01:52,340 INFO L280 TraceCheckUtils]: 10: Hoare triple {139#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {139#false} is VALID [2020-07-28 19:01:52,340 INFO L280 TraceCheckUtils]: 11: Hoare triple {139#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {139#false} is VALID [2020-07-28 19:01:52,340 INFO L280 TraceCheckUtils]: 12: Hoare triple {139#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {139#false} is VALID [2020-07-28 19:01:52,341 INFO L280 TraceCheckUtils]: 13: Hoare triple {139#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {139#false} is VALID [2020-07-28 19:01:52,341 INFO L280 TraceCheckUtils]: 14: Hoare triple {139#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {139#false} is VALID [2020-07-28 19:01:52,342 INFO L280 TraceCheckUtils]: 15: Hoare triple {139#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {139#false} is VALID [2020-07-28 19:01:52,342 INFO L280 TraceCheckUtils]: 16: Hoare triple {139#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {139#false} is VALID [2020-07-28 19:01:52,343 INFO L280 TraceCheckUtils]: 17: Hoare triple {139#false} assume !false; {139#false} is VALID [2020-07-28 19:01:52,347 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:52,348 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [738440193] [2020-07-28 19:01:52,349 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:52,349 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:01:52,350 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [744074010] [2020-07-28 19:01:52,357 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:01:52,359 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:52,364 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:01:52,412 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:52,412 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:01:52,413 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:52,422 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:01:52,423 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:01:52,425 INFO L87 Difference]: Start difference. First operand 135 states. Second operand 2 states. [2020-07-28 19:01:52,736 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:52,737 INFO L93 Difference]: Finished difference Result 264 states and 395 transitions. [2020-07-28 19:01:52,737 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:01:52,737 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:01:52,737 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:52,739 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:01:52,749 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 395 transitions. [2020-07-28 19:01:52,749 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:01:52,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 395 transitions. [2020-07-28 19:01:52,756 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 395 transitions. [2020-07-28 19:01:53,261 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 395 edges. 395 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:53,282 INFO L225 Difference]: With dead ends: 264 [2020-07-28 19:01:53,283 INFO L226 Difference]: Without dead ends: 131 [2020-07-28 19:01:53,287 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:01:53,306 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 131 states. [2020-07-28 19:01:53,369 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 131 to 131. [2020-07-28 19:01:53,370 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:53,370 INFO L82 GeneralOperation]: Start isEquivalent. First operand 131 states. Second operand 131 states. [2020-07-28 19:01:53,371 INFO L74 IsIncluded]: Start isIncluded. First operand 131 states. Second operand 131 states. [2020-07-28 19:01:53,371 INFO L87 Difference]: Start difference. First operand 131 states. Second operand 131 states. [2020-07-28 19:01:53,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:53,381 INFO L93 Difference]: Finished difference Result 131 states and 189 transitions. [2020-07-28 19:01:53,381 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states and 189 transitions. [2020-07-28 19:01:53,383 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:53,383 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:53,384 INFO L74 IsIncluded]: Start isIncluded. First operand 131 states. Second operand 131 states. [2020-07-28 19:01:53,384 INFO L87 Difference]: Start difference. First operand 131 states. Second operand 131 states. [2020-07-28 19:01:53,393 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:53,393 INFO L93 Difference]: Finished difference Result 131 states and 189 transitions. [2020-07-28 19:01:53,394 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states and 189 transitions. [2020-07-28 19:01:53,395 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:53,396 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:53,396 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:53,396 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:53,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 131 states. [2020-07-28 19:01:53,404 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 131 states to 131 states and 189 transitions. [2020-07-28 19:01:53,406 INFO L78 Accepts]: Start accepts. Automaton has 131 states and 189 transitions. Word has length 18 [2020-07-28 19:01:53,406 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:53,407 INFO L479 AbstractCegarLoop]: Abstraction has 131 states and 189 transitions. [2020-07-28 19:01:53,407 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:01:53,407 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states and 189 transitions. [2020-07-28 19:01:53,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 19:01:53,409 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:53,409 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:53,409 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:01:53,410 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:53,410 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:53,410 INFO L82 PathProgramCache]: Analyzing trace with hash 1070203210, now seen corresponding path program 1 times [2020-07-28 19:01:53,411 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:53,411 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1760678844] [2020-07-28 19:01:53,411 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:53,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:53,529 INFO L280 TraceCheckUtils]: 0: Hoare triple {965#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {965#true} is VALID [2020-07-28 19:01:53,529 INFO L280 TraceCheckUtils]: 1: Hoare triple {965#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {965#true} is VALID [2020-07-28 19:01:53,529 INFO L280 TraceCheckUtils]: 2: Hoare triple {965#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {965#true} is VALID [2020-07-28 19:01:53,530 INFO L280 TraceCheckUtils]: 3: Hoare triple {965#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {965#true} is VALID [2020-07-28 19:01:53,530 INFO L280 TraceCheckUtils]: 4: Hoare triple {965#true} assume 0 != main_~tmp~1; {965#true} is VALID [2020-07-28 19:01:53,531 INFO L280 TraceCheckUtils]: 5: Hoare triple {965#true} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~6, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~6;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {967#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:01:53,532 INFO L280 TraceCheckUtils]: 6: Hoare triple {967#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {967#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:01:53,534 INFO L280 TraceCheckUtils]: 7: Hoare triple {967#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {966#false} is VALID [2020-07-28 19:01:53,534 INFO L280 TraceCheckUtils]: 8: Hoare triple {966#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {966#false} is VALID [2020-07-28 19:01:53,534 INFO L280 TraceCheckUtils]: 9: Hoare triple {966#false} assume !(0 != ~pumpRunning~0); {966#false} is VALID [2020-07-28 19:01:53,535 INFO L280 TraceCheckUtils]: 10: Hoare triple {966#false} assume !(0 != ~systemActive~0); {966#false} is VALID [2020-07-28 19:01:53,535 INFO L280 TraceCheckUtils]: 11: Hoare triple {966#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {966#false} is VALID [2020-07-28 19:01:53,536 INFO L280 TraceCheckUtils]: 12: Hoare triple {966#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {966#false} is VALID [2020-07-28 19:01:53,536 INFO L280 TraceCheckUtils]: 13: Hoare triple {966#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {966#false} is VALID [2020-07-28 19:01:53,536 INFO L280 TraceCheckUtils]: 14: Hoare triple {966#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {966#false} is VALID [2020-07-28 19:01:53,536 INFO L280 TraceCheckUtils]: 15: Hoare triple {966#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {966#false} is VALID [2020-07-28 19:01:53,537 INFO L280 TraceCheckUtils]: 16: Hoare triple {966#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {966#false} is VALID [2020-07-28 19:01:53,537 INFO L280 TraceCheckUtils]: 17: Hoare triple {966#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {966#false} is VALID [2020-07-28 19:01:53,538 INFO L280 TraceCheckUtils]: 18: Hoare triple {966#false} assume !false; {966#false} is VALID [2020-07-28 19:01:53,539 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:53,539 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1760678844] [2020-07-28 19:01:53,540 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:53,540 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:01:53,540 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1183443858] [2020-07-28 19:01:53,542 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:01:53,542 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:53,543 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:01:53,569 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:53,569 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:01:53,570 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:53,570 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:01:53,570 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:53,570 INFO L87 Difference]: Start difference. First operand 131 states and 189 transitions. Second operand 3 states. [2020-07-28 19:01:53,839 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:53,839 INFO L93 Difference]: Finished difference Result 131 states and 189 transitions. [2020-07-28 19:01:53,839 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:01:53,839 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:01:53,840 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:53,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:53,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 189 transitions. [2020-07-28 19:01:53,844 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:53,847 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 189 transitions. [2020-07-28 19:01:53,847 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 189 transitions. [2020-07-28 19:01:54,080 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 189 edges. 189 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:54,083 INFO L225 Difference]: With dead ends: 131 [2020-07-28 19:01:54,084 INFO L226 Difference]: Without dead ends: 53 [2020-07-28 19:01:54,085 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:54,086 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2020-07-28 19:01:54,106 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2020-07-28 19:01:54,106 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:54,107 INFO L82 GeneralOperation]: Start isEquivalent. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:54,107 INFO L74 IsIncluded]: Start isIncluded. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:54,107 INFO L87 Difference]: Start difference. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:54,110 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:54,110 INFO L93 Difference]: Finished difference Result 53 states and 76 transitions. [2020-07-28 19:01:54,111 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 76 transitions. [2020-07-28 19:01:54,111 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:54,111 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:54,112 INFO L74 IsIncluded]: Start isIncluded. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:54,112 INFO L87 Difference]: Start difference. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:54,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:54,115 INFO L93 Difference]: Finished difference Result 53 states and 76 transitions. [2020-07-28 19:01:54,115 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 76 transitions. [2020-07-28 19:01:54,116 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:54,116 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:54,116 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:54,116 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:54,117 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 53 states. [2020-07-28 19:01:54,119 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 76 transitions. [2020-07-28 19:01:54,119 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 76 transitions. Word has length 19 [2020-07-28 19:01:54,120 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:54,120 INFO L479 AbstractCegarLoop]: Abstraction has 53 states and 76 transitions. [2020-07-28 19:01:54,120 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:01:54,120 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 76 transitions. [2020-07-28 19:01:54,121 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 19:01:54,121 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:54,122 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:54,122 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:01:54,122 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:54,122 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:54,123 INFO L82 PathProgramCache]: Analyzing trace with hash 1049766460, now seen corresponding path program 1 times [2020-07-28 19:01:54,123 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:54,123 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [109867957] [2020-07-28 19:01:54,123 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:54,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:54,245 INFO L280 TraceCheckUtils]: 0: Hoare triple {1336#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {1338#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:54,247 INFO L280 TraceCheckUtils]: 1: Hoare triple {1338#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {1338#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:54,250 INFO L280 TraceCheckUtils]: 2: Hoare triple {1338#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1338#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:54,251 INFO L280 TraceCheckUtils]: 3: Hoare triple {1338#(= 1 ~systemActive~0)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {1338#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:54,252 INFO L280 TraceCheckUtils]: 4: Hoare triple {1338#(= 1 ~systemActive~0)} assume 0 != main_~tmp~1; {1338#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:54,253 INFO L280 TraceCheckUtils]: 5: Hoare triple {1338#(= 1 ~systemActive~0)} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~6, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~6;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1338#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:54,254 INFO L280 TraceCheckUtils]: 6: Hoare triple {1338#(= 1 ~systemActive~0)} assume !false; {1338#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:54,255 INFO L280 TraceCheckUtils]: 7: Hoare triple {1338#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0 < 4; {1338#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:54,256 INFO L280 TraceCheckUtils]: 8: Hoare triple {1338#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {1338#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:54,257 INFO L280 TraceCheckUtils]: 9: Hoare triple {1338#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~6); {1338#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:54,257 INFO L280 TraceCheckUtils]: 10: Hoare triple {1338#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {1338#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:54,258 INFO L280 TraceCheckUtils]: 11: Hoare triple {1338#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2); {1338#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:54,258 INFO L280 TraceCheckUtils]: 12: Hoare triple {1338#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {1338#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:54,259 INFO L280 TraceCheckUtils]: 13: Hoare triple {1338#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0; {1338#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:54,260 INFO L280 TraceCheckUtils]: 14: Hoare triple {1338#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {1338#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:54,263 INFO L280 TraceCheckUtils]: 15: Hoare triple {1338#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {1337#false} is VALID [2020-07-28 19:01:54,264 INFO L280 TraceCheckUtils]: 16: Hoare triple {1337#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {1337#false} is VALID [2020-07-28 19:01:54,264 INFO L280 TraceCheckUtils]: 17: Hoare triple {1337#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {1337#false} is VALID [2020-07-28 19:01:54,264 INFO L280 TraceCheckUtils]: 18: Hoare triple {1337#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {1337#false} is VALID [2020-07-28 19:01:54,264 INFO L280 TraceCheckUtils]: 19: Hoare triple {1337#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {1337#false} is VALID [2020-07-28 19:01:54,265 INFO L280 TraceCheckUtils]: 20: Hoare triple {1337#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {1337#false} is VALID [2020-07-28 19:01:54,265 INFO L280 TraceCheckUtils]: 21: Hoare triple {1337#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {1337#false} is VALID [2020-07-28 19:01:54,265 INFO L280 TraceCheckUtils]: 22: Hoare triple {1337#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {1337#false} is VALID [2020-07-28 19:01:54,265 INFO L280 TraceCheckUtils]: 23: Hoare triple {1337#false} assume !false; {1337#false} is VALID [2020-07-28 19:01:54,267 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:54,267 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [109867957] [2020-07-28 19:01:54,267 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:54,267 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:01:54,268 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [808423408] [2020-07-28 19:01:54,268 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 19:01:54,268 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:54,268 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:01:54,302 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:54,302 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:01:54,303 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:54,303 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:01:54,303 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:54,304 INFO L87 Difference]: Start difference. First operand 53 states and 76 transitions. Second operand 3 states. [2020-07-28 19:01:54,498 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:54,498 INFO L93 Difference]: Finished difference Result 100 states and 146 transitions. [2020-07-28 19:01:54,498 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:01:54,498 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 19:01:54,498 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:54,499 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:54,502 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 146 transitions. [2020-07-28 19:01:54,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:54,510 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 146 transitions. [2020-07-28 19:01:54,510 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 146 transitions. [2020-07-28 19:01:54,687 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 146 edges. 146 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:54,689 INFO L225 Difference]: With dead ends: 100 [2020-07-28 19:01:54,689 INFO L226 Difference]: Without dead ends: 53 [2020-07-28 19:01:54,690 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:54,690 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2020-07-28 19:01:54,733 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2020-07-28 19:01:54,734 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:54,734 INFO L82 GeneralOperation]: Start isEquivalent. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:54,734 INFO L74 IsIncluded]: Start isIncluded. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:54,734 INFO L87 Difference]: Start difference. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:54,738 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:54,738 INFO L93 Difference]: Finished difference Result 53 states and 75 transitions. [2020-07-28 19:01:54,738 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 75 transitions. [2020-07-28 19:01:54,739 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:54,739 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:54,739 INFO L74 IsIncluded]: Start isIncluded. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:54,739 INFO L87 Difference]: Start difference. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:54,742 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:54,742 INFO L93 Difference]: Finished difference Result 53 states and 75 transitions. [2020-07-28 19:01:54,742 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 75 transitions. [2020-07-28 19:01:54,743 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:54,743 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:54,743 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:54,743 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:54,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 53 states. [2020-07-28 19:01:54,746 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 75 transitions. [2020-07-28 19:01:54,746 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 75 transitions. Word has length 24 [2020-07-28 19:01:54,746 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:54,746 INFO L479 AbstractCegarLoop]: Abstraction has 53 states and 75 transitions. [2020-07-28 19:01:54,747 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:01:54,747 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 75 transitions. [2020-07-28 19:01:54,747 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2020-07-28 19:01:54,748 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:54,748 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:54,748 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:01:54,748 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:54,749 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:54,749 INFO L82 PathProgramCache]: Analyzing trace with hash -927374502, now seen corresponding path program 1 times [2020-07-28 19:01:54,749 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:54,750 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [252840008] [2020-07-28 19:01:54,750 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:54,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:54,821 INFO L280 TraceCheckUtils]: 0: Hoare triple {1660#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,822 INFO L280 TraceCheckUtils]: 1: Hoare triple {1662#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,823 INFO L280 TraceCheckUtils]: 2: Hoare triple {1662#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,824 INFO L280 TraceCheckUtils]: 3: Hoare triple {1662#(= 0 ~pumpRunning~0)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,825 INFO L280 TraceCheckUtils]: 4: Hoare triple {1662#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~1; {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,825 INFO L280 TraceCheckUtils]: 5: Hoare triple {1662#(= 0 ~pumpRunning~0)} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~6, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~6;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,826 INFO L280 TraceCheckUtils]: 6: Hoare triple {1662#(= 0 ~pumpRunning~0)} assume !false; {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,827 INFO L280 TraceCheckUtils]: 7: Hoare triple {1662#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,827 INFO L280 TraceCheckUtils]: 8: Hoare triple {1662#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,828 INFO L280 TraceCheckUtils]: 9: Hoare triple {1662#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~6); {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,829 INFO L280 TraceCheckUtils]: 10: Hoare triple {1662#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,830 INFO L280 TraceCheckUtils]: 11: Hoare triple {1662#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2); {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,830 INFO L280 TraceCheckUtils]: 12: Hoare triple {1662#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,831 INFO L280 TraceCheckUtils]: 13: Hoare triple {1662#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,832 INFO L280 TraceCheckUtils]: 14: Hoare triple {1662#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,833 INFO L280 TraceCheckUtils]: 15: Hoare triple {1662#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,834 INFO L280 TraceCheckUtils]: 16: Hoare triple {1662#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret14, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {1662#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:54,834 INFO L280 TraceCheckUtils]: 17: Hoare triple {1662#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {1661#false} is VALID [2020-07-28 19:01:54,834 INFO L280 TraceCheckUtils]: 18: Hoare triple {1661#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {1661#false} is VALID [2020-07-28 19:01:54,835 INFO L280 TraceCheckUtils]: 19: Hoare triple {1661#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {1661#false} is VALID [2020-07-28 19:01:54,835 INFO L280 TraceCheckUtils]: 20: Hoare triple {1661#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {1661#false} is VALID [2020-07-28 19:01:54,835 INFO L280 TraceCheckUtils]: 21: Hoare triple {1661#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {1661#false} is VALID [2020-07-28 19:01:54,836 INFO L280 TraceCheckUtils]: 22: Hoare triple {1661#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {1661#false} is VALID [2020-07-28 19:01:54,836 INFO L280 TraceCheckUtils]: 23: Hoare triple {1661#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {1661#false} is VALID [2020-07-28 19:01:54,836 INFO L280 TraceCheckUtils]: 24: Hoare triple {1661#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {1661#false} is VALID [2020-07-28 19:01:54,837 INFO L280 TraceCheckUtils]: 25: Hoare triple {1661#false} assume !false; {1661#false} is VALID [2020-07-28 19:01:54,838 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:54,838 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [252840008] [2020-07-28 19:01:54,839 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:54,839 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:01:54,839 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1454316529] [2020-07-28 19:01:54,839 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:01:54,840 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:54,840 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:01:54,874 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:54,874 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:01:54,875 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:54,875 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:01:54,875 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:54,875 INFO L87 Difference]: Start difference. First operand 53 states and 75 transitions. Second operand 3 states. [2020-07-28 19:01:55,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:55,093 INFO L93 Difference]: Finished difference Result 123 states and 177 transitions. [2020-07-28 19:01:55,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:01:55,094 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:01:55,094 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:55,094 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:55,096 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 177 transitions. [2020-07-28 19:01:55,097 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:55,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 177 transitions. [2020-07-28 19:01:55,099 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 177 transitions. [2020-07-28 19:01:55,294 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 177 edges. 177 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:55,296 INFO L225 Difference]: With dead ends: 123 [2020-07-28 19:01:55,298 INFO L226 Difference]: Without dead ends: 76 [2020-07-28 19:01:55,299 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:55,299 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2020-07-28 19:01:55,358 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 74. [2020-07-28 19:01:55,358 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:55,359 INFO L82 GeneralOperation]: Start isEquivalent. First operand 76 states. Second operand 74 states. [2020-07-28 19:01:55,359 INFO L74 IsIncluded]: Start isIncluded. First operand 76 states. Second operand 74 states. [2020-07-28 19:01:55,359 INFO L87 Difference]: Start difference. First operand 76 states. Second operand 74 states. [2020-07-28 19:01:55,362 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:55,363 INFO L93 Difference]: Finished difference Result 76 states and 105 transitions. [2020-07-28 19:01:55,363 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 105 transitions. [2020-07-28 19:01:55,363 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:55,363 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:55,363 INFO L74 IsIncluded]: Start isIncluded. First operand 74 states. Second operand 76 states. [2020-07-28 19:01:55,364 INFO L87 Difference]: Start difference. First operand 74 states. Second operand 76 states. [2020-07-28 19:01:55,366 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:55,366 INFO L93 Difference]: Finished difference Result 76 states and 105 transitions. [2020-07-28 19:01:55,367 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 105 transitions. [2020-07-28 19:01:55,367 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:55,367 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:55,367 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:55,367 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:55,367 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 74 states. [2020-07-28 19:01:55,370 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 104 transitions. [2020-07-28 19:01:55,370 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 104 transitions. Word has length 26 [2020-07-28 19:01:55,370 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:55,371 INFO L479 AbstractCegarLoop]: Abstraction has 74 states and 104 transitions. [2020-07-28 19:01:55,371 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:01:55,371 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 104 transitions. [2020-07-28 19:01:55,371 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2020-07-28 19:01:55,372 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:55,372 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:55,372 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:01:55,372 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:55,372 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:55,373 INFO L82 PathProgramCache]: Analyzing trace with hash -44236562, now seen corresponding path program 1 times [2020-07-28 19:01:55,373 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:55,373 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1025502293] [2020-07-28 19:01:55,373 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:55,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:55,487 INFO L280 TraceCheckUtils]: 0: Hoare triple {2090#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,488 INFO L280 TraceCheckUtils]: 1: Hoare triple {2092#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,489 INFO L280 TraceCheckUtils]: 2: Hoare triple {2092#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,492 INFO L280 TraceCheckUtils]: 3: Hoare triple {2092#(= 1 ~waterLevel~0)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,492 INFO L280 TraceCheckUtils]: 4: Hoare triple {2092#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~1; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,493 INFO L280 TraceCheckUtils]: 5: Hoare triple {2092#(= 1 ~waterLevel~0)} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~6, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~6;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,494 INFO L280 TraceCheckUtils]: 6: Hoare triple {2092#(= 1 ~waterLevel~0)} assume !false; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,494 INFO L280 TraceCheckUtils]: 7: Hoare triple {2092#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,495 INFO L280 TraceCheckUtils]: 8: Hoare triple {2092#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,496 INFO L280 TraceCheckUtils]: 9: Hoare triple {2092#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~6); {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,497 INFO L280 TraceCheckUtils]: 10: Hoare triple {2092#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,497 INFO L280 TraceCheckUtils]: 11: Hoare triple {2092#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~2); {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,498 INFO L280 TraceCheckUtils]: 12: Hoare triple {2092#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,504 INFO L280 TraceCheckUtils]: 13: Hoare triple {2092#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,504 INFO L280 TraceCheckUtils]: 14: Hoare triple {2092#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,505 INFO L280 TraceCheckUtils]: 15: Hoare triple {2092#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,506 INFO L280 TraceCheckUtils]: 16: Hoare triple {2092#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret14, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,506 INFO L280 TraceCheckUtils]: 17: Hoare triple {2092#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,507 INFO L280 TraceCheckUtils]: 18: Hoare triple {2092#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,508 INFO L280 TraceCheckUtils]: 19: Hoare triple {2092#(= 1 ~waterLevel~0)} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,512 INFO L280 TraceCheckUtils]: 20: Hoare triple {2092#(= 1 ~waterLevel~0)} assume 0 != isHighWaterLevel_~tmp~5;isHighWaterLevel_~tmp___0~1 := 0; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,513 INFO L280 TraceCheckUtils]: 21: Hoare triple {2092#(= 1 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,514 INFO L280 TraceCheckUtils]: 22: Hoare triple {2092#(= 1 ~waterLevel~0)} processEnvironment__wrappee__methaneQuery_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret14 && processEnvironment__wrappee__methaneQuery_#t~ret14 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret14;havoc processEnvironment__wrappee__methaneQuery_#t~ret14; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,514 INFO L280 TraceCheckUtils]: 23: Hoare triple {2092#(= 1 ~waterLevel~0)} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~2); {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,514 INFO L280 TraceCheckUtils]: 24: Hoare triple {2092#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,515 INFO L280 TraceCheckUtils]: 25: Hoare triple {2092#(= 1 ~waterLevel~0)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {2092#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:55,516 INFO L280 TraceCheckUtils]: 26: Hoare triple {2092#(= 1 ~waterLevel~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {2093#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:01:55,517 INFO L280 TraceCheckUtils]: 27: Hoare triple {2093#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {2094#(= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} is VALID [2020-07-28 19:01:55,517 INFO L280 TraceCheckUtils]: 28: Hoare triple {2094#(= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {2091#false} is VALID [2020-07-28 19:01:55,518 INFO L280 TraceCheckUtils]: 29: Hoare triple {2091#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {2091#false} is VALID [2020-07-28 19:01:55,518 INFO L280 TraceCheckUtils]: 30: Hoare triple {2091#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {2091#false} is VALID [2020-07-28 19:01:55,518 INFO L280 TraceCheckUtils]: 31: Hoare triple {2091#false} assume !false; {2091#false} is VALID [2020-07-28 19:01:55,521 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:55,521 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1025502293] [2020-07-28 19:01:55,521 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:55,522 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:01:55,522 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1767450714] [2020-07-28 19:01:55,522 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2020-07-28 19:01:55,522 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:55,523 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:01:55,577 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:55,577 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:01:55,577 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:55,578 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:01:55,578 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:01:55,578 INFO L87 Difference]: Start difference. First operand 74 states and 104 transitions. Second operand 5 states. [2020-07-28 19:01:56,560 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:56,561 INFO L93 Difference]: Finished difference Result 373 states and 541 transitions. [2020-07-28 19:01:56,561 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:01:56,561 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2020-07-28 19:01:56,563 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:56,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:56,568 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 377 transitions. [2020-07-28 19:01:56,569 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:56,573 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 377 transitions. [2020-07-28 19:01:56,573 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 377 transitions. [2020-07-28 19:01:57,028 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 377 edges. 377 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:57,038 INFO L225 Difference]: With dead ends: 373 [2020-07-28 19:01:57,038 INFO L226 Difference]: Without dead ends: 305 [2020-07-28 19:01:57,039 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:01:57,040 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2020-07-28 19:01:57,200 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 121. [2020-07-28 19:01:57,200 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:57,200 INFO L82 GeneralOperation]: Start isEquivalent. First operand 305 states. Second operand 121 states. [2020-07-28 19:01:57,200 INFO L74 IsIncluded]: Start isIncluded. First operand 305 states. Second operand 121 states. [2020-07-28 19:01:57,200 INFO L87 Difference]: Start difference. First operand 305 states. Second operand 121 states. [2020-07-28 19:01:57,215 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:57,216 INFO L93 Difference]: Finished difference Result 305 states and 429 transitions. [2020-07-28 19:01:57,216 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 429 transitions. [2020-07-28 19:01:57,217 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:57,217 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:57,217 INFO L74 IsIncluded]: Start isIncluded. First operand 121 states. Second operand 305 states. [2020-07-28 19:01:57,218 INFO L87 Difference]: Start difference. First operand 121 states. Second operand 305 states. [2020-07-28 19:01:57,231 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:57,231 INFO L93 Difference]: Finished difference Result 305 states and 429 transitions. [2020-07-28 19:01:57,231 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 429 transitions. [2020-07-28 19:01:57,232 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:57,232 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:57,233 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:57,233 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:57,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 121 states. [2020-07-28 19:01:57,237 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 121 states to 121 states and 167 transitions. [2020-07-28 19:01:57,238 INFO L78 Accepts]: Start accepts. Automaton has 121 states and 167 transitions. Word has length 32 [2020-07-28 19:01:57,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:57,239 INFO L479 AbstractCegarLoop]: Abstraction has 121 states and 167 transitions. [2020-07-28 19:01:57,239 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:01:57,239 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 167 transitions. [2020-07-28 19:01:57,241 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:01:57,241 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:57,242 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:57,242 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:01:57,242 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:57,243 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:57,243 INFO L82 PathProgramCache]: Analyzing trace with hash -1115283092, now seen corresponding path program 1 times [2020-07-28 19:01:57,243 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:57,243 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [288199782] [2020-07-28 19:01:57,244 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:57,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:57,373 INFO L280 TraceCheckUtils]: 0: Hoare triple {3393#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {3395#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,388 INFO L280 TraceCheckUtils]: 1: Hoare triple {3395#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {3395#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,388 INFO L280 TraceCheckUtils]: 2: Hoare triple {3395#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {3395#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,389 INFO L280 TraceCheckUtils]: 3: Hoare triple {3395#(= 1 ~waterLevel~0)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {3395#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,390 INFO L280 TraceCheckUtils]: 4: Hoare triple {3395#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~1; {3395#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,391 INFO L280 TraceCheckUtils]: 5: Hoare triple {3395#(= 1 ~waterLevel~0)} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~6, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~6;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3395#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,391 INFO L280 TraceCheckUtils]: 6: Hoare triple {3395#(= 1 ~waterLevel~0)} assume !false; {3395#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,392 INFO L280 TraceCheckUtils]: 7: Hoare triple {3395#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {3395#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,393 INFO L280 TraceCheckUtils]: 8: Hoare triple {3395#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {3395#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,396 INFO L280 TraceCheckUtils]: 9: Hoare triple {3395#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~6; {3395#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,398 INFO L280 TraceCheckUtils]: 10: Hoare triple {3395#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {3396#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,398 INFO L280 TraceCheckUtils]: 11: Hoare triple {3396#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {3396#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,399 INFO L280 TraceCheckUtils]: 12: Hoare triple {3396#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~2); {3396#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,400 INFO L280 TraceCheckUtils]: 13: Hoare triple {3396#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {3396#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,401 INFO L280 TraceCheckUtils]: 14: Hoare triple {3396#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {3396#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,401 INFO L280 TraceCheckUtils]: 15: Hoare triple {3396#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {3396#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,402 INFO L280 TraceCheckUtils]: 16: Hoare triple {3396#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {3396#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,403 INFO L280 TraceCheckUtils]: 17: Hoare triple {3396#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret14, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {3396#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,403 INFO L280 TraceCheckUtils]: 18: Hoare triple {3396#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {3396#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:01:57,404 INFO L280 TraceCheckUtils]: 19: Hoare triple {3396#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {3394#false} is VALID [2020-07-28 19:01:57,404 INFO L280 TraceCheckUtils]: 20: Hoare triple {3394#false} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {3394#false} is VALID [2020-07-28 19:01:57,404 INFO L280 TraceCheckUtils]: 21: Hoare triple {3394#false} assume 0 != isHighWaterLevel_~tmp~5;isHighWaterLevel_~tmp___0~1 := 0; {3394#false} is VALID [2020-07-28 19:01:57,405 INFO L280 TraceCheckUtils]: 22: Hoare triple {3394#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {3394#false} is VALID [2020-07-28 19:01:57,405 INFO L280 TraceCheckUtils]: 23: Hoare triple {3394#false} processEnvironment__wrappee__methaneQuery_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret14 && processEnvironment__wrappee__methaneQuery_#t~ret14 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret14;havoc processEnvironment__wrappee__methaneQuery_#t~ret14; {3394#false} is VALID [2020-07-28 19:01:57,405 INFO L280 TraceCheckUtils]: 24: Hoare triple {3394#false} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~2); {3394#false} is VALID [2020-07-28 19:01:57,405 INFO L280 TraceCheckUtils]: 25: Hoare triple {3394#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {3394#false} is VALID [2020-07-28 19:01:57,405 INFO L280 TraceCheckUtils]: 26: Hoare triple {3394#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {3394#false} is VALID [2020-07-28 19:01:57,406 INFO L280 TraceCheckUtils]: 27: Hoare triple {3394#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {3394#false} is VALID [2020-07-28 19:01:57,406 INFO L280 TraceCheckUtils]: 28: Hoare triple {3394#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {3394#false} is VALID [2020-07-28 19:01:57,407 INFO L280 TraceCheckUtils]: 29: Hoare triple {3394#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {3394#false} is VALID [2020-07-28 19:01:57,407 INFO L280 TraceCheckUtils]: 30: Hoare triple {3394#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {3394#false} is VALID [2020-07-28 19:01:57,408 INFO L280 TraceCheckUtils]: 31: Hoare triple {3394#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {3394#false} is VALID [2020-07-28 19:01:57,408 INFO L280 TraceCheckUtils]: 32: Hoare triple {3394#false} assume !false; {3394#false} is VALID [2020-07-28 19:01:57,410 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:57,410 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [288199782] [2020-07-28 19:01:57,412 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:57,412 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:01:57,412 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1290794457] [2020-07-28 19:01:57,413 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:01:57,413 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:57,413 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:01:57,464 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:57,464 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:01:57,464 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:57,464 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:01:57,464 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:01:57,465 INFO L87 Difference]: Start difference. First operand 121 states and 167 transitions. Second operand 4 states. [2020-07-28 19:01:58,054 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:58,054 INFO L93 Difference]: Finished difference Result 250 states and 352 transitions. [2020-07-28 19:01:58,054 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:01:58,054 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:01:58,055 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:58,055 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:01:58,058 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 241 transitions. [2020-07-28 19:01:58,058 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:01:58,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 241 transitions. [2020-07-28 19:01:58,062 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 241 transitions. [2020-07-28 19:01:58,346 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 241 edges. 241 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:58,351 INFO L225 Difference]: With dead ends: 250 [2020-07-28 19:01:58,351 INFO L226 Difference]: Without dead ends: 182 [2020-07-28 19:01:58,354 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:01:58,363 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2020-07-28 19:01:58,588 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 179. [2020-07-28 19:01:58,588 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:58,588 INFO L82 GeneralOperation]: Start isEquivalent. First operand 182 states. Second operand 179 states. [2020-07-28 19:01:58,588 INFO L74 IsIncluded]: Start isIncluded. First operand 182 states. Second operand 179 states. [2020-07-28 19:01:58,589 INFO L87 Difference]: Start difference. First operand 182 states. Second operand 179 states. [2020-07-28 19:01:58,595 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:58,596 INFO L93 Difference]: Finished difference Result 182 states and 250 transitions. [2020-07-28 19:01:58,596 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 250 transitions. [2020-07-28 19:01:58,596 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:58,597 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:58,597 INFO L74 IsIncluded]: Start isIncluded. First operand 179 states. Second operand 182 states. [2020-07-28 19:01:58,597 INFO L87 Difference]: Start difference. First operand 179 states. Second operand 182 states. [2020-07-28 19:01:58,604 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:58,604 INFO L93 Difference]: Finished difference Result 182 states and 250 transitions. [2020-07-28 19:01:58,604 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 250 transitions. [2020-07-28 19:01:58,605 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:58,605 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:58,605 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:58,605 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:58,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 179 states. [2020-07-28 19:01:58,613 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 248 transitions. [2020-07-28 19:01:58,613 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 248 transitions. Word has length 33 [2020-07-28 19:01:58,614 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:58,614 INFO L479 AbstractCegarLoop]: Abstraction has 179 states and 248 transitions. [2020-07-28 19:01:58,614 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:01:58,614 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 248 transitions. [2020-07-28 19:01:58,615 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:01:58,615 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:58,615 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:58,615 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:01:58,616 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:58,616 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:58,616 INFO L82 PathProgramCache]: Analyzing trace with hash -2126400342, now seen corresponding path program 1 times [2020-07-28 19:01:58,616 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:58,617 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [888107483] [2020-07-28 19:01:58,617 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:58,640 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:58,680 INFO L280 TraceCheckUtils]: 0: Hoare triple {4356#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {4356#true} is VALID [2020-07-28 19:01:58,680 INFO L280 TraceCheckUtils]: 1: Hoare triple {4356#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {4356#true} is VALID [2020-07-28 19:01:58,680 INFO L280 TraceCheckUtils]: 2: Hoare triple {4356#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {4356#true} is VALID [2020-07-28 19:01:58,681 INFO L280 TraceCheckUtils]: 3: Hoare triple {4356#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {4356#true} is VALID [2020-07-28 19:01:58,681 INFO L280 TraceCheckUtils]: 4: Hoare triple {4356#true} assume 0 != main_~tmp~1; {4356#true} is VALID [2020-07-28 19:01:58,681 INFO L280 TraceCheckUtils]: 5: Hoare triple {4356#true} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~6, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~6;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {4356#true} is VALID [2020-07-28 19:01:58,681 INFO L280 TraceCheckUtils]: 6: Hoare triple {4356#true} assume !false; {4356#true} is VALID [2020-07-28 19:01:58,681 INFO L280 TraceCheckUtils]: 7: Hoare triple {4356#true} assume test_~splverifierCounter~0 < 4; {4356#true} is VALID [2020-07-28 19:01:58,681 INFO L280 TraceCheckUtils]: 8: Hoare triple {4356#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {4356#true} is VALID [2020-07-28 19:01:58,682 INFO L280 TraceCheckUtils]: 9: Hoare triple {4356#true} assume 0 != test_~tmp~6; {4356#true} is VALID [2020-07-28 19:01:58,682 INFO L280 TraceCheckUtils]: 10: Hoare triple {4356#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {4356#true} is VALID [2020-07-28 19:01:58,682 INFO L280 TraceCheckUtils]: 11: Hoare triple {4356#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {4356#true} is VALID [2020-07-28 19:01:58,682 INFO L280 TraceCheckUtils]: 12: Hoare triple {4356#true} assume !(0 != test_~tmp___0~2); {4356#true} is VALID [2020-07-28 19:01:58,682 INFO L280 TraceCheckUtils]: 13: Hoare triple {4356#true} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {4356#true} is VALID [2020-07-28 19:01:58,682 INFO L280 TraceCheckUtils]: 14: Hoare triple {4356#true} assume 0 != test_~tmp___2~0; {4356#true} is VALID [2020-07-28 19:01:58,683 INFO L280 TraceCheckUtils]: 15: Hoare triple {4356#true} assume !(0 != ~pumpRunning~0); {4356#true} is VALID [2020-07-28 19:01:58,683 INFO L280 TraceCheckUtils]: 16: Hoare triple {4356#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {4356#true} is VALID [2020-07-28 19:01:58,683 INFO L280 TraceCheckUtils]: 17: Hoare triple {4356#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret14, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {4356#true} is VALID [2020-07-28 19:01:58,683 INFO L280 TraceCheckUtils]: 18: Hoare triple {4356#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {4356#true} is VALID [2020-07-28 19:01:58,684 INFO L280 TraceCheckUtils]: 19: Hoare triple {4356#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {4358#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:01:58,685 INFO L280 TraceCheckUtils]: 20: Hoare triple {4358#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {4359#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~5)} is VALID [2020-07-28 19:01:58,686 INFO L280 TraceCheckUtils]: 21: Hoare triple {4359#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~5)} assume 0 != isHighWaterLevel_~tmp~5;isHighWaterLevel_~tmp___0~1 := 0; {4357#false} is VALID [2020-07-28 19:01:58,686 INFO L280 TraceCheckUtils]: 22: Hoare triple {4357#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {4357#false} is VALID [2020-07-28 19:01:58,686 INFO L280 TraceCheckUtils]: 23: Hoare triple {4357#false} processEnvironment__wrappee__methaneQuery_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret14 && processEnvironment__wrappee__methaneQuery_#t~ret14 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret14;havoc processEnvironment__wrappee__methaneQuery_#t~ret14; {4357#false} is VALID [2020-07-28 19:01:58,686 INFO L280 TraceCheckUtils]: 24: Hoare triple {4357#false} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~2); {4357#false} is VALID [2020-07-28 19:01:58,687 INFO L280 TraceCheckUtils]: 25: Hoare triple {4357#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {4357#false} is VALID [2020-07-28 19:01:58,687 INFO L280 TraceCheckUtils]: 26: Hoare triple {4357#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {4357#false} is VALID [2020-07-28 19:01:58,687 INFO L280 TraceCheckUtils]: 27: Hoare triple {4357#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {4357#false} is VALID [2020-07-28 19:01:58,687 INFO L280 TraceCheckUtils]: 28: Hoare triple {4357#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {4357#false} is VALID [2020-07-28 19:01:58,687 INFO L280 TraceCheckUtils]: 29: Hoare triple {4357#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {4357#false} is VALID [2020-07-28 19:01:58,688 INFO L280 TraceCheckUtils]: 30: Hoare triple {4357#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {4357#false} is VALID [2020-07-28 19:01:58,688 INFO L280 TraceCheckUtils]: 31: Hoare triple {4357#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {4357#false} is VALID [2020-07-28 19:01:58,688 INFO L280 TraceCheckUtils]: 32: Hoare triple {4357#false} assume !false; {4357#false} is VALID [2020-07-28 19:01:58,689 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:58,690 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [888107483] [2020-07-28 19:01:58,690 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:58,690 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:01:58,691 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [603950763] [2020-07-28 19:01:58,691 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:01:58,691 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:58,692 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:01:58,731 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:58,732 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:01:58,732 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:58,732 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:01:58,732 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:01:58,733 INFO L87 Difference]: Start difference. First operand 179 states and 248 transitions. Second operand 4 states. [2020-07-28 19:01:59,876 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:59,877 INFO L93 Difference]: Finished difference Result 497 states and 700 transitions. [2020-07-28 19:01:59,877 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:01:59,877 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:01:59,878 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:59,878 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:01:59,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 264 transitions. [2020-07-28 19:01:59,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:01:59,885 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 264 transitions. [2020-07-28 19:01:59,885 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 264 transitions. [2020-07-28 19:02:00,164 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 264 edges. 264 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:00,176 INFO L225 Difference]: With dead ends: 497 [2020-07-28 19:02:00,176 INFO L226 Difference]: Without dead ends: 370 [2020-07-28 19:02:00,177 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:00,178 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 370 states. [2020-07-28 19:02:00,422 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 370 to 179. [2020-07-28 19:02:00,423 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:00,423 INFO L82 GeneralOperation]: Start isEquivalent. First operand 370 states. Second operand 179 states. [2020-07-28 19:02:00,423 INFO L74 IsIncluded]: Start isIncluded. First operand 370 states. Second operand 179 states. [2020-07-28 19:02:00,423 INFO L87 Difference]: Start difference. First operand 370 states. Second operand 179 states. [2020-07-28 19:02:00,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:00,436 INFO L93 Difference]: Finished difference Result 370 states and 518 transitions. [2020-07-28 19:02:00,436 INFO L276 IsEmpty]: Start isEmpty. Operand 370 states and 518 transitions. [2020-07-28 19:02:00,437 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:00,437 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:00,437 INFO L74 IsIncluded]: Start isIncluded. First operand 179 states. Second operand 370 states. [2020-07-28 19:02:00,438 INFO L87 Difference]: Start difference. First operand 179 states. Second operand 370 states. [2020-07-28 19:02:00,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:00,450 INFO L93 Difference]: Finished difference Result 370 states and 518 transitions. [2020-07-28 19:02:00,450 INFO L276 IsEmpty]: Start isEmpty. Operand 370 states and 518 transitions. [2020-07-28 19:02:00,451 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:00,451 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:00,451 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:00,451 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:00,451 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 179 states. [2020-07-28 19:02:00,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 246 transitions. [2020-07-28 19:02:00,456 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 246 transitions. Word has length 33 [2020-07-28 19:02:00,457 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:00,457 INFO L479 AbstractCegarLoop]: Abstraction has 179 states and 246 transitions. [2020-07-28 19:02:00,457 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:00,457 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 246 transitions. [2020-07-28 19:02:00,457 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:00,458 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:00,458 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:00,458 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:02:00,458 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:00,458 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:00,459 INFO L82 PathProgramCache]: Analyzing trace with hash -1868234904, now seen corresponding path program 1 times [2020-07-28 19:02:00,459 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:00,459 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [74024334] [2020-07-28 19:02:00,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:00,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:00,538 INFO L280 TraceCheckUtils]: 0: Hoare triple {6036#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {6036#true} is VALID [2020-07-28 19:02:00,538 INFO L280 TraceCheckUtils]: 1: Hoare triple {6036#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {6036#true} is VALID [2020-07-28 19:02:00,539 INFO L280 TraceCheckUtils]: 2: Hoare triple {6036#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {6036#true} is VALID [2020-07-28 19:02:00,539 INFO L280 TraceCheckUtils]: 3: Hoare triple {6036#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {6036#true} is VALID [2020-07-28 19:02:00,539 INFO L280 TraceCheckUtils]: 4: Hoare triple {6036#true} assume 0 != main_~tmp~1; {6036#true} is VALID [2020-07-28 19:02:00,540 INFO L280 TraceCheckUtils]: 5: Hoare triple {6036#true} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~6, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~6;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6036#true} is VALID [2020-07-28 19:02:00,540 INFO L280 TraceCheckUtils]: 6: Hoare triple {6036#true} assume !false; {6036#true} is VALID [2020-07-28 19:02:00,540 INFO L280 TraceCheckUtils]: 7: Hoare triple {6036#true} assume test_~splverifierCounter~0 < 4; {6036#true} is VALID [2020-07-28 19:02:00,540 INFO L280 TraceCheckUtils]: 8: Hoare triple {6036#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {6036#true} is VALID [2020-07-28 19:02:00,541 INFO L280 TraceCheckUtils]: 9: Hoare triple {6036#true} assume 0 != test_~tmp~6; {6036#true} is VALID [2020-07-28 19:02:00,541 INFO L280 TraceCheckUtils]: 10: Hoare triple {6036#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6036#true} is VALID [2020-07-28 19:02:00,541 INFO L280 TraceCheckUtils]: 11: Hoare triple {6036#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {6036#true} is VALID [2020-07-28 19:02:00,543 INFO L280 TraceCheckUtils]: 12: Hoare triple {6036#true} assume !(0 != test_~tmp___0~2); {6036#true} is VALID [2020-07-28 19:02:00,543 INFO L280 TraceCheckUtils]: 13: Hoare triple {6036#true} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {6036#true} is VALID [2020-07-28 19:02:00,544 INFO L280 TraceCheckUtils]: 14: Hoare triple {6036#true} assume 0 != test_~tmp___2~0; {6036#true} is VALID [2020-07-28 19:02:00,544 INFO L280 TraceCheckUtils]: 15: Hoare triple {6036#true} assume !(0 != ~pumpRunning~0); {6036#true} is VALID [2020-07-28 19:02:00,544 INFO L280 TraceCheckUtils]: 16: Hoare triple {6036#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {6036#true} is VALID [2020-07-28 19:02:00,544 INFO L280 TraceCheckUtils]: 17: Hoare triple {6036#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret14, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {6036#true} is VALID [2020-07-28 19:02:00,544 INFO L280 TraceCheckUtils]: 18: Hoare triple {6036#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {6036#true} is VALID [2020-07-28 19:02:00,545 INFO L280 TraceCheckUtils]: 19: Hoare triple {6036#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {6036#true} is VALID [2020-07-28 19:02:00,545 INFO L280 TraceCheckUtils]: 20: Hoare triple {6036#true} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {6036#true} is VALID [2020-07-28 19:02:00,552 INFO L280 TraceCheckUtils]: 21: Hoare triple {6036#true} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {6038#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} is VALID [2020-07-28 19:02:00,553 INFO L280 TraceCheckUtils]: 22: Hoare triple {6038#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {6039#(= 1 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:02:00,554 INFO L280 TraceCheckUtils]: 23: Hoare triple {6039#(= 1 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__methaneQuery_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret14 && processEnvironment__wrappee__methaneQuery_#t~ret14 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret14;havoc processEnvironment__wrappee__methaneQuery_#t~ret14; {6040#(= 1 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2)} is VALID [2020-07-28 19:02:00,555 INFO L280 TraceCheckUtils]: 24: Hoare triple {6040#(= 1 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2)} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~2); {6037#false} is VALID [2020-07-28 19:02:00,556 INFO L280 TraceCheckUtils]: 25: Hoare triple {6037#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {6037#false} is VALID [2020-07-28 19:02:00,556 INFO L280 TraceCheckUtils]: 26: Hoare triple {6037#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {6037#false} is VALID [2020-07-28 19:02:00,556 INFO L280 TraceCheckUtils]: 27: Hoare triple {6037#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {6037#false} is VALID [2020-07-28 19:02:00,556 INFO L280 TraceCheckUtils]: 28: Hoare triple {6037#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {6037#false} is VALID [2020-07-28 19:02:00,556 INFO L280 TraceCheckUtils]: 29: Hoare triple {6037#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {6037#false} is VALID [2020-07-28 19:02:00,557 INFO L280 TraceCheckUtils]: 30: Hoare triple {6037#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {6037#false} is VALID [2020-07-28 19:02:00,557 INFO L280 TraceCheckUtils]: 31: Hoare triple {6037#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {6037#false} is VALID [2020-07-28 19:02:00,557 INFO L280 TraceCheckUtils]: 32: Hoare triple {6037#false} assume !false; {6037#false} is VALID [2020-07-28 19:02:00,558 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:00,559 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [74024334] [2020-07-28 19:02:00,559 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:00,559 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:00,559 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1632899730] [2020-07-28 19:02:00,560 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2020-07-28 19:02:00,560 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:00,561 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:00,601 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:00,601 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:00,602 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:00,602 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:00,602 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:00,603 INFO L87 Difference]: Start difference. First operand 179 states and 246 transitions. Second operand 5 states. [2020-07-28 19:02:01,812 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:01,812 INFO L93 Difference]: Finished difference Result 540 states and 754 transitions. [2020-07-28 19:02:01,813 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:01,813 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2020-07-28 19:02:01,813 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:01,813 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:01,815 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 239 transitions. [2020-07-28 19:02:01,815 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:01,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 239 transitions. [2020-07-28 19:02:01,817 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 239 transitions. [2020-07-28 19:02:02,059 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 239 edges. 239 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:02,072 INFO L225 Difference]: With dead ends: 540 [2020-07-28 19:02:02,072 INFO L226 Difference]: Without dead ends: 367 [2020-07-28 19:02:02,073 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:02,074 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 367 states. [2020-07-28 19:02:02,415 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 367 to 188. [2020-07-28 19:02:02,415 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:02,415 INFO L82 GeneralOperation]: Start isEquivalent. First operand 367 states. Second operand 188 states. [2020-07-28 19:02:02,415 INFO L74 IsIncluded]: Start isIncluded. First operand 367 states. Second operand 188 states. [2020-07-28 19:02:02,415 INFO L87 Difference]: Start difference. First operand 367 states. Second operand 188 states. [2020-07-28 19:02:02,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:02,428 INFO L93 Difference]: Finished difference Result 367 states and 509 transitions. [2020-07-28 19:02:02,428 INFO L276 IsEmpty]: Start isEmpty. Operand 367 states and 509 transitions. [2020-07-28 19:02:02,429 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:02,429 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:02,430 INFO L74 IsIncluded]: Start isIncluded. First operand 188 states. Second operand 367 states. [2020-07-28 19:02:02,430 INFO L87 Difference]: Start difference. First operand 188 states. Second operand 367 states. [2020-07-28 19:02:02,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:02,441 INFO L93 Difference]: Finished difference Result 367 states and 509 transitions. [2020-07-28 19:02:02,441 INFO L276 IsEmpty]: Start isEmpty. Operand 367 states and 509 transitions. [2020-07-28 19:02:02,442 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:02,443 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:02,443 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:02,443 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:02,443 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 188 states. [2020-07-28 19:02:02,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 253 transitions. [2020-07-28 19:02:02,448 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 253 transitions. Word has length 33 [2020-07-28 19:02:02,448 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:02,448 INFO L479 AbstractCegarLoop]: Abstraction has 188 states and 253 transitions. [2020-07-28 19:02:02,449 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:02,449 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 253 transitions. [2020-07-28 19:02:02,449 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:02:02,450 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:02,450 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:02,450 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:02:02,450 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:02,451 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:02,451 INFO L82 PathProgramCache]: Analyzing trace with hash 941421312, now seen corresponding path program 1 times [2020-07-28 19:02:02,451 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:02,452 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [213567789] [2020-07-28 19:02:02,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:02,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:02,590 INFO L280 TraceCheckUtils]: 0: Hoare triple {7786#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,591 INFO L280 TraceCheckUtils]: 1: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,592 INFO L280 TraceCheckUtils]: 2: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,593 INFO L280 TraceCheckUtils]: 3: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,594 INFO L280 TraceCheckUtils]: 4: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume 0 != main_~tmp~1; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,595 INFO L280 TraceCheckUtils]: 5: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~6, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~6;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,596 INFO L280 TraceCheckUtils]: 6: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !false; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,597 INFO L280 TraceCheckUtils]: 7: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume test_~splverifierCounter~0 < 4; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,598 INFO L280 TraceCheckUtils]: 8: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,599 INFO L280 TraceCheckUtils]: 9: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume 0 != test_~tmp~6; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,600 INFO L280 TraceCheckUtils]: 10: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,601 INFO L280 TraceCheckUtils]: 11: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,602 INFO L280 TraceCheckUtils]: 12: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(0 != test_~tmp___0~2); {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,603 INFO L280 TraceCheckUtils]: 13: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,604 INFO L280 TraceCheckUtils]: 14: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume 0 != test_~tmp___2~0; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,605 INFO L280 TraceCheckUtils]: 15: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0); {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,606 INFO L280 TraceCheckUtils]: 16: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,607 INFO L280 TraceCheckUtils]: 17: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret14, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,607 INFO L280 TraceCheckUtils]: 18: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,609 INFO L280 TraceCheckUtils]: 19: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,610 INFO L280 TraceCheckUtils]: 20: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,611 INFO L280 TraceCheckUtils]: 21: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,612 INFO L280 TraceCheckUtils]: 22: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,613 INFO L280 TraceCheckUtils]: 23: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} processEnvironment__wrappee__methaneQuery_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret14 && processEnvironment__wrappee__methaneQuery_#t~ret14 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret14;havoc processEnvironment__wrappee__methaneQuery_#t~ret14; {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:02,614 INFO L280 TraceCheckUtils]: 24: Hoare triple {7788#(and (<= ~methaneLevelCritical~0 0) (<= 0 ~methaneLevelCritical~0))} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~2;havoc activatePump_#t~ret16, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {7789#(and (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} is VALID [2020-07-28 19:02:02,615 INFO L280 TraceCheckUtils]: 25: Hoare triple {7789#(and (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {7790#(and (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) (<= |ULTIMATE.start_isMethaneAlarm_#res| 0))} is VALID [2020-07-28 19:02:02,616 INFO L280 TraceCheckUtils]: 26: Hoare triple {7790#(and (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) (<= |ULTIMATE.start_isMethaneAlarm_#res| 0))} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {7791#(and (<= ULTIMATE.start_activatePump_~tmp~4 0) (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1)))} is VALID [2020-07-28 19:02:02,617 INFO L280 TraceCheckUtils]: 27: Hoare triple {7791#(and (<= ULTIMATE.start_activatePump_~tmp~4 0) (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1)))} assume 0 != activatePump_~tmp~4; {7787#false} is VALID [2020-07-28 19:02:02,618 INFO L280 TraceCheckUtils]: 28: Hoare triple {7787#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {7787#false} is VALID [2020-07-28 19:02:02,618 INFO L280 TraceCheckUtils]: 29: Hoare triple {7787#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {7787#false} is VALID [2020-07-28 19:02:02,618 INFO L280 TraceCheckUtils]: 30: Hoare triple {7787#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {7787#false} is VALID [2020-07-28 19:02:02,618 INFO L280 TraceCheckUtils]: 31: Hoare triple {7787#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {7787#false} is VALID [2020-07-28 19:02:02,619 INFO L280 TraceCheckUtils]: 32: Hoare triple {7787#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {7787#false} is VALID [2020-07-28 19:02:02,619 INFO L280 TraceCheckUtils]: 33: Hoare triple {7787#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {7787#false} is VALID [2020-07-28 19:02:02,619 INFO L280 TraceCheckUtils]: 34: Hoare triple {7787#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {7787#false} is VALID [2020-07-28 19:02:02,619 INFO L280 TraceCheckUtils]: 35: Hoare triple {7787#false} assume !false; {7787#false} is VALID [2020-07-28 19:02:02,624 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:02,624 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [213567789] [2020-07-28 19:02:02,625 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:02,625 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:02,625 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [887581475] [2020-07-28 19:02:02,626 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 36 [2020-07-28 19:02:02,626 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:02,626 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:02:02,676 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:02,676 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:02:02,677 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:02,677 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:02:02,677 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:02:02,677 INFO L87 Difference]: Start difference. First operand 188 states and 253 transitions. Second operand 6 states. [2020-07-28 19:02:06,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:06,407 INFO L93 Difference]: Finished difference Result 1177 states and 1553 transitions. [2020-07-28 19:02:06,407 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2020-07-28 19:02:06,408 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 36 [2020-07-28 19:02:06,408 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:06,408 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:06,411 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 507 transitions. [2020-07-28 19:02:06,411 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:06,414 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 507 transitions. [2020-07-28 19:02:06,414 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 14 states and 507 transitions. [2020-07-28 19:02:07,077 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 507 edges. 507 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:07,122 INFO L225 Difference]: With dead ends: 1177 [2020-07-28 19:02:07,123 INFO L226 Difference]: Without dead ends: 995 [2020-07-28 19:02:07,123 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2020-07-28 19:02:07,125 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 995 states. [2020-07-28 19:02:07,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 995 to 356. [2020-07-28 19:02:07,979 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:07,979 INFO L82 GeneralOperation]: Start isEquivalent. First operand 995 states. Second operand 356 states. [2020-07-28 19:02:07,980 INFO L74 IsIncluded]: Start isIncluded. First operand 995 states. Second operand 356 states. [2020-07-28 19:02:07,980 INFO L87 Difference]: Start difference. First operand 995 states. Second operand 356 states. [2020-07-28 19:02:08,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:08,052 INFO L93 Difference]: Finished difference Result 995 states and 1287 transitions. [2020-07-28 19:02:08,052 INFO L276 IsEmpty]: Start isEmpty. Operand 995 states and 1287 transitions. [2020-07-28 19:02:08,054 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:08,055 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:08,055 INFO L74 IsIncluded]: Start isIncluded. First operand 356 states. Second operand 995 states. [2020-07-28 19:02:08,055 INFO L87 Difference]: Start difference. First operand 356 states. Second operand 995 states. [2020-07-28 19:02:08,125 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:08,126 INFO L93 Difference]: Finished difference Result 995 states and 1287 transitions. [2020-07-28 19:02:08,126 INFO L276 IsEmpty]: Start isEmpty. Operand 995 states and 1287 transitions. [2020-07-28 19:02:08,128 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:08,128 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:08,128 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:08,128 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:08,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 356 states. [2020-07-28 19:02:08,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 356 states to 356 states and 472 transitions. [2020-07-28 19:02:08,143 INFO L78 Accepts]: Start accepts. Automaton has 356 states and 472 transitions. Word has length 36 [2020-07-28 19:02:08,143 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:08,143 INFO L479 AbstractCegarLoop]: Abstraction has 356 states and 472 transitions. [2020-07-28 19:02:08,143 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:08,144 INFO L276 IsEmpty]: Start isEmpty. Operand 356 states and 472 transitions. [2020-07-28 19:02:08,145 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:02:08,145 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:08,146 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:08,146 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:02:08,146 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:08,147 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:08,147 INFO L82 PathProgramCache]: Analyzing trace with hash 1621479682, now seen corresponding path program 1 times [2020-07-28 19:02:08,147 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:08,147 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [288687631] [2020-07-28 19:02:08,147 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:08,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:08,263 INFO L280 TraceCheckUtils]: 0: Hoare triple {11887#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {11887#true} is VALID [2020-07-28 19:02:08,263 INFO L280 TraceCheckUtils]: 1: Hoare triple {11887#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {11887#true} is VALID [2020-07-28 19:02:08,263 INFO L280 TraceCheckUtils]: 2: Hoare triple {11887#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {11887#true} is VALID [2020-07-28 19:02:08,263 INFO L280 TraceCheckUtils]: 3: Hoare triple {11887#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {11887#true} is VALID [2020-07-28 19:02:08,264 INFO L280 TraceCheckUtils]: 4: Hoare triple {11887#true} assume 0 != main_~tmp~1; {11887#true} is VALID [2020-07-28 19:02:08,264 INFO L280 TraceCheckUtils]: 5: Hoare triple {11887#true} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~6, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~6;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11887#true} is VALID [2020-07-28 19:02:08,264 INFO L280 TraceCheckUtils]: 6: Hoare triple {11887#true} assume !false; {11887#true} is VALID [2020-07-28 19:02:08,267 INFO L280 TraceCheckUtils]: 7: Hoare triple {11887#true} assume test_~splverifierCounter~0 < 4; {11887#true} is VALID [2020-07-28 19:02:08,267 INFO L280 TraceCheckUtils]: 8: Hoare triple {11887#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {11887#true} is VALID [2020-07-28 19:02:08,267 INFO L280 TraceCheckUtils]: 9: Hoare triple {11887#true} assume 0 != test_~tmp~6; {11887#true} is VALID [2020-07-28 19:02:08,267 INFO L280 TraceCheckUtils]: 10: Hoare triple {11887#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11887#true} is VALID [2020-07-28 19:02:08,267 INFO L280 TraceCheckUtils]: 11: Hoare triple {11887#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {11887#true} is VALID [2020-07-28 19:02:08,268 INFO L280 TraceCheckUtils]: 12: Hoare triple {11887#true} assume !(0 != test_~tmp___0~2); {11887#true} is VALID [2020-07-28 19:02:08,268 INFO L280 TraceCheckUtils]: 13: Hoare triple {11887#true} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {11887#true} is VALID [2020-07-28 19:02:08,268 INFO L280 TraceCheckUtils]: 14: Hoare triple {11887#true} assume 0 != test_~tmp___2~0; {11887#true} is VALID [2020-07-28 19:02:08,268 INFO L280 TraceCheckUtils]: 15: Hoare triple {11887#true} assume !(0 != ~pumpRunning~0); {11887#true} is VALID [2020-07-28 19:02:08,268 INFO L280 TraceCheckUtils]: 16: Hoare triple {11887#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {11887#true} is VALID [2020-07-28 19:02:08,269 INFO L280 TraceCheckUtils]: 17: Hoare triple {11887#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret14, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {11887#true} is VALID [2020-07-28 19:02:08,269 INFO L280 TraceCheckUtils]: 18: Hoare triple {11887#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {11887#true} is VALID [2020-07-28 19:02:08,269 INFO L280 TraceCheckUtils]: 19: Hoare triple {11887#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {11887#true} is VALID [2020-07-28 19:02:08,275 INFO L280 TraceCheckUtils]: 20: Hoare triple {11887#true} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {11887#true} is VALID [2020-07-28 19:02:08,275 INFO L280 TraceCheckUtils]: 21: Hoare triple {11887#true} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {11887#true} is VALID [2020-07-28 19:02:08,275 INFO L280 TraceCheckUtils]: 22: Hoare triple {11887#true} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {11887#true} is VALID [2020-07-28 19:02:08,275 INFO L280 TraceCheckUtils]: 23: Hoare triple {11887#true} processEnvironment__wrappee__methaneQuery_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret14 && processEnvironment__wrappee__methaneQuery_#t~ret14 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret14;havoc processEnvironment__wrappee__methaneQuery_#t~ret14; {11887#true} is VALID [2020-07-28 19:02:08,276 INFO L280 TraceCheckUtils]: 24: Hoare triple {11887#true} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~2;havoc activatePump_#t~ret16, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11887#true} is VALID [2020-07-28 19:02:08,276 INFO L280 TraceCheckUtils]: 25: Hoare triple {11887#true} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {11887#true} is VALID [2020-07-28 19:02:08,276 INFO L280 TraceCheckUtils]: 26: Hoare triple {11887#true} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {11887#true} is VALID [2020-07-28 19:02:08,280 INFO L280 TraceCheckUtils]: 27: Hoare triple {11887#true} assume !(0 != activatePump_~tmp~4);~pumpRunning~0 := 1; {11889#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:08,281 INFO L280 TraceCheckUtils]: 28: Hoare triple {11889#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11889#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:08,281 INFO L280 TraceCheckUtils]: 29: Hoare triple {11889#(= 1 ~pumpRunning~0)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {11889#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:08,282 INFO L280 TraceCheckUtils]: 30: Hoare triple {11889#(= 1 ~pumpRunning~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11889#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:08,282 INFO L280 TraceCheckUtils]: 31: Hoare triple {11889#(= 1 ~pumpRunning~0)} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {11889#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:08,283 INFO L280 TraceCheckUtils]: 32: Hoare triple {11889#(= 1 ~pumpRunning~0)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {11890#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:02:08,284 INFO L280 TraceCheckUtils]: 33: Hoare triple {11890#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {11891#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~0)} is VALID [2020-07-28 19:02:08,284 INFO L280 TraceCheckUtils]: 34: Hoare triple {11891#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {11888#false} is VALID [2020-07-28 19:02:08,285 INFO L280 TraceCheckUtils]: 35: Hoare triple {11888#false} assume !false; {11888#false} is VALID [2020-07-28 19:02:08,286 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:08,286 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [288687631] [2020-07-28 19:02:08,287 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:08,287 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:08,287 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1524391967] [2020-07-28 19:02:08,287 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 36 [2020-07-28 19:02:08,288 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:08,288 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:08,334 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:08,334 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:08,334 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:08,334 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:08,334 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:08,334 INFO L87 Difference]: Start difference. First operand 356 states and 472 transitions. Second operand 5 states. [2020-07-28 19:02:10,453 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:10,453 INFO L93 Difference]: Finished difference Result 930 states and 1259 transitions. [2020-07-28 19:02:10,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:10,454 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 36 [2020-07-28 19:02:10,454 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:10,454 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:10,455 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 269 transitions. [2020-07-28 19:02:10,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:10,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 269 transitions. [2020-07-28 19:02:10,456 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 269 transitions. [2020-07-28 19:02:10,779 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 269 edges. 269 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:10,797 INFO L225 Difference]: With dead ends: 930 [2020-07-28 19:02:10,797 INFO L226 Difference]: Without dead ends: 580 [2020-07-28 19:02:10,798 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:10,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 580 states. [2020-07-28 19:02:11,618 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 580 to 302. [2020-07-28 19:02:11,618 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:11,619 INFO L82 GeneralOperation]: Start isEquivalent. First operand 580 states. Second operand 302 states. [2020-07-28 19:02:11,619 INFO L74 IsIncluded]: Start isIncluded. First operand 580 states. Second operand 302 states. [2020-07-28 19:02:11,619 INFO L87 Difference]: Start difference. First operand 580 states. Second operand 302 states. [2020-07-28 19:02:11,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:11,643 INFO L93 Difference]: Finished difference Result 580 states and 763 transitions. [2020-07-28 19:02:11,644 INFO L276 IsEmpty]: Start isEmpty. Operand 580 states and 763 transitions. [2020-07-28 19:02:11,645 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:11,645 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:11,646 INFO L74 IsIncluded]: Start isIncluded. First operand 302 states. Second operand 580 states. [2020-07-28 19:02:11,646 INFO L87 Difference]: Start difference. First operand 302 states. Second operand 580 states. [2020-07-28 19:02:11,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:11,673 INFO L93 Difference]: Finished difference Result 580 states and 763 transitions. [2020-07-28 19:02:11,674 INFO L276 IsEmpty]: Start isEmpty. Operand 580 states and 763 transitions. [2020-07-28 19:02:11,675 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:11,676 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:11,676 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:11,676 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:11,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 302 states. [2020-07-28 19:02:11,687 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 302 states to 302 states and 389 transitions. [2020-07-28 19:02:11,687 INFO L78 Accepts]: Start accepts. Automaton has 302 states and 389 transitions. Word has length 36 [2020-07-28 19:02:11,687 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:11,688 INFO L479 AbstractCegarLoop]: Abstraction has 302 states and 389 transitions. [2020-07-28 19:02:11,688 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:11,688 INFO L276 IsEmpty]: Start isEmpty. Operand 302 states and 389 transitions. [2020-07-28 19:02:11,689 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2020-07-28 19:02:11,689 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:11,689 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:11,690 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-28 19:02:11,690 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:11,690 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:11,690 INFO L82 PathProgramCache]: Analyzing trace with hash 886341574, now seen corresponding path program 1 times [2020-07-28 19:02:11,691 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:11,691 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [202247588] [2020-07-28 19:02:11,691 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:11,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:11,766 INFO L280 TraceCheckUtils]: 0: Hoare triple {14753#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {14753#true} is VALID [2020-07-28 19:02:11,767 INFO L280 TraceCheckUtils]: 1: Hoare triple {14753#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {14753#true} is VALID [2020-07-28 19:02:11,767 INFO L280 TraceCheckUtils]: 2: Hoare triple {14753#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {14753#true} is VALID [2020-07-28 19:02:11,767 INFO L280 TraceCheckUtils]: 3: Hoare triple {14753#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {14753#true} is VALID [2020-07-28 19:02:11,767 INFO L280 TraceCheckUtils]: 4: Hoare triple {14753#true} assume 0 != main_~tmp~1; {14753#true} is VALID [2020-07-28 19:02:11,768 INFO L280 TraceCheckUtils]: 5: Hoare triple {14753#true} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~6, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~6;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {14753#true} is VALID [2020-07-28 19:02:11,768 INFO L280 TraceCheckUtils]: 6: Hoare triple {14753#true} assume !false; {14753#true} is VALID [2020-07-28 19:02:11,768 INFO L280 TraceCheckUtils]: 7: Hoare triple {14753#true} assume test_~splverifierCounter~0 < 4; {14753#true} is VALID [2020-07-28 19:02:11,768 INFO L280 TraceCheckUtils]: 8: Hoare triple {14753#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {14753#true} is VALID [2020-07-28 19:02:11,769 INFO L280 TraceCheckUtils]: 9: Hoare triple {14753#true} assume 0 != test_~tmp~6; {14753#true} is VALID [2020-07-28 19:02:11,769 INFO L280 TraceCheckUtils]: 10: Hoare triple {14753#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {14753#true} is VALID [2020-07-28 19:02:11,769 INFO L280 TraceCheckUtils]: 11: Hoare triple {14753#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {14753#true} is VALID [2020-07-28 19:02:11,769 INFO L280 TraceCheckUtils]: 12: Hoare triple {14753#true} assume 0 != test_~tmp___0~2; {14753#true} is VALID [2020-07-28 19:02:11,771 INFO L280 TraceCheckUtils]: 13: Hoare triple {14753#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,772 INFO L280 TraceCheckUtils]: 14: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,773 INFO L280 TraceCheckUtils]: 15: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,773 INFO L280 TraceCheckUtils]: 16: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,774 INFO L280 TraceCheckUtils]: 17: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,778 INFO L280 TraceCheckUtils]: 18: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret14, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,778 INFO L280 TraceCheckUtils]: 19: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,779 INFO L280 TraceCheckUtils]: 20: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,779 INFO L280 TraceCheckUtils]: 21: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,780 INFO L280 TraceCheckUtils]: 22: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,780 INFO L280 TraceCheckUtils]: 23: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,781 INFO L280 TraceCheckUtils]: 24: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} processEnvironment__wrappee__methaneQuery_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret14 && processEnvironment__wrappee__methaneQuery_#t~ret14 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret14;havoc processEnvironment__wrappee__methaneQuery_#t~ret14; {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,782 INFO L280 TraceCheckUtils]: 25: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~2;havoc activatePump_#t~ret16, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,782 INFO L280 TraceCheckUtils]: 26: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,783 INFO L280 TraceCheckUtils]: 27: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,783 INFO L280 TraceCheckUtils]: 28: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} assume 0 != activatePump_~tmp~4; {14755#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:11,784 INFO L280 TraceCheckUtils]: 29: Hoare triple {14755#(= 1 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {14756#(= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:11,785 INFO L280 TraceCheckUtils]: 30: Hoare triple {14756#(= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {14757#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0)} is VALID [2020-07-28 19:02:11,785 INFO L280 TraceCheckUtils]: 31: Hoare triple {14757#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {14754#false} is VALID [2020-07-28 19:02:11,786 INFO L280 TraceCheckUtils]: 32: Hoare triple {14754#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {14754#false} is VALID [2020-07-28 19:02:11,786 INFO L280 TraceCheckUtils]: 33: Hoare triple {14754#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {14754#false} is VALID [2020-07-28 19:02:11,786 INFO L280 TraceCheckUtils]: 34: Hoare triple {14754#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {14754#false} is VALID [2020-07-28 19:02:11,786 INFO L280 TraceCheckUtils]: 35: Hoare triple {14754#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {14754#false} is VALID [2020-07-28 19:02:11,787 INFO L280 TraceCheckUtils]: 36: Hoare triple {14754#false} assume !false; {14754#false} is VALID [2020-07-28 19:02:11,789 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:11,790 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [202247588] [2020-07-28 19:02:11,790 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:11,790 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:11,790 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1200915409] [2020-07-28 19:02:11,791 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 37 [2020-07-28 19:02:11,791 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:11,791 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:11,836 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 37 edges. 37 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:11,837 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:11,837 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:11,837 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:11,837 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:11,837 INFO L87 Difference]: Start difference. First operand 302 states and 389 transitions. Second operand 5 states. [2020-07-28 19:02:13,886 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:13,887 INFO L93 Difference]: Finished difference Result 732 states and 937 transitions. [2020-07-28 19:02:13,887 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:13,887 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 37 [2020-07-28 19:02:13,887 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:13,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:13,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 224 transitions. [2020-07-28 19:02:13,889 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:13,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 224 transitions. [2020-07-28 19:02:13,890 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 224 transitions. [2020-07-28 19:02:14,158 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 224 edges. 224 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:14,170 INFO L225 Difference]: With dead ends: 732 [2020-07-28 19:02:14,170 INFO L226 Difference]: Without dead ends: 436 [2020-07-28 19:02:14,171 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:14,172 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 436 states. [2020-07-28 19:02:14,962 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 436 to 282. [2020-07-28 19:02:14,963 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:14,963 INFO L82 GeneralOperation]: Start isEquivalent. First operand 436 states. Second operand 282 states. [2020-07-28 19:02:14,963 INFO L74 IsIncluded]: Start isIncluded. First operand 436 states. Second operand 282 states. [2020-07-28 19:02:14,963 INFO L87 Difference]: Start difference. First operand 436 states. Second operand 282 states. [2020-07-28 19:02:14,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:14,976 INFO L93 Difference]: Finished difference Result 436 states and 543 transitions. [2020-07-28 19:02:14,976 INFO L276 IsEmpty]: Start isEmpty. Operand 436 states and 543 transitions. [2020-07-28 19:02:14,977 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:14,977 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:14,977 INFO L74 IsIncluded]: Start isIncluded. First operand 282 states. Second operand 436 states. [2020-07-28 19:02:14,977 INFO L87 Difference]: Start difference. First operand 282 states. Second operand 436 states. [2020-07-28 19:02:14,987 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:14,987 INFO L93 Difference]: Finished difference Result 436 states and 543 transitions. [2020-07-28 19:02:14,987 INFO L276 IsEmpty]: Start isEmpty. Operand 436 states and 543 transitions. [2020-07-28 19:02:14,988 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:14,988 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:14,988 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:14,988 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:14,989 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 282 states. [2020-07-28 19:02:14,996 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 282 states to 282 states and 352 transitions. [2020-07-28 19:02:14,996 INFO L78 Accepts]: Start accepts. Automaton has 282 states and 352 transitions. Word has length 37 [2020-07-28 19:02:14,996 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:14,997 INFO L479 AbstractCegarLoop]: Abstraction has 282 states and 352 transitions. [2020-07-28 19:02:14,997 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:14,997 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 352 transitions. [2020-07-28 19:02:14,998 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2020-07-28 19:02:14,998 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:14,998 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:14,998 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:02:14,998 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:14,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:14,999 INFO L82 PathProgramCache]: Analyzing trace with hash 2123545264, now seen corresponding path program 1 times [2020-07-28 19:02:14,999 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:14,999 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [957131592] [2020-07-28 19:02:14,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:15,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:15,085 INFO L280 TraceCheckUtils]: 0: Hoare triple {17036#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {17036#true} is VALID [2020-07-28 19:02:15,085 INFO L280 TraceCheckUtils]: 1: Hoare triple {17036#true} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {17036#true} is VALID [2020-07-28 19:02:15,086 INFO L280 TraceCheckUtils]: 2: Hoare triple {17036#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {17036#true} is VALID [2020-07-28 19:02:15,086 INFO L280 TraceCheckUtils]: 3: Hoare triple {17036#true} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {17036#true} is VALID [2020-07-28 19:02:15,086 INFO L280 TraceCheckUtils]: 4: Hoare triple {17036#true} assume 0 != main_~tmp~1; {17036#true} is VALID [2020-07-28 19:02:15,086 INFO L280 TraceCheckUtils]: 5: Hoare triple {17036#true} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~6, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~6;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {17036#true} is VALID [2020-07-28 19:02:15,086 INFO L280 TraceCheckUtils]: 6: Hoare triple {17036#true} assume !false; {17036#true} is VALID [2020-07-28 19:02:15,086 INFO L280 TraceCheckUtils]: 7: Hoare triple {17036#true} assume test_~splverifierCounter~0 < 4; {17036#true} is VALID [2020-07-28 19:02:15,087 INFO L280 TraceCheckUtils]: 8: Hoare triple {17036#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {17036#true} is VALID [2020-07-28 19:02:15,087 INFO L280 TraceCheckUtils]: 9: Hoare triple {17036#true} assume !(0 != test_~tmp~6); {17036#true} is VALID [2020-07-28 19:02:15,087 INFO L280 TraceCheckUtils]: 10: Hoare triple {17036#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {17036#true} is VALID [2020-07-28 19:02:15,087 INFO L280 TraceCheckUtils]: 11: Hoare triple {17036#true} assume !(0 != test_~tmp___0~2); {17036#true} is VALID [2020-07-28 19:02:15,087 INFO L280 TraceCheckUtils]: 12: Hoare triple {17036#true} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {17036#true} is VALID [2020-07-28 19:02:15,088 INFO L280 TraceCheckUtils]: 13: Hoare triple {17036#true} assume 0 != test_~tmp___2~0; {17036#true} is VALID [2020-07-28 19:02:15,088 INFO L280 TraceCheckUtils]: 14: Hoare triple {17036#true} assume !(0 != ~pumpRunning~0); {17036#true} is VALID [2020-07-28 19:02:15,088 INFO L280 TraceCheckUtils]: 15: Hoare triple {17036#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {17036#true} is VALID [2020-07-28 19:02:15,088 INFO L280 TraceCheckUtils]: 16: Hoare triple {17036#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret14, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {17036#true} is VALID [2020-07-28 19:02:15,089 INFO L280 TraceCheckUtils]: 17: Hoare triple {17036#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {17036#true} is VALID [2020-07-28 19:02:15,089 INFO L280 TraceCheckUtils]: 18: Hoare triple {17036#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {17036#true} is VALID [2020-07-28 19:02:15,089 INFO L280 TraceCheckUtils]: 19: Hoare triple {17036#true} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {17036#true} is VALID [2020-07-28 19:02:15,091 INFO L280 TraceCheckUtils]: 20: Hoare triple {17036#true} assume 0 != isHighWaterLevel_~tmp~5;isHighWaterLevel_~tmp___0~1 := 0; {17038#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} is VALID [2020-07-28 19:02:15,091 INFO L280 TraceCheckUtils]: 21: Hoare triple {17038#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {17039#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:02:15,092 INFO L280 TraceCheckUtils]: 22: Hoare triple {17039#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__methaneQuery_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret14 && processEnvironment__wrappee__methaneQuery_#t~ret14 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret14;havoc processEnvironment__wrappee__methaneQuery_#t~ret14; {17040#(= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2)} is VALID [2020-07-28 19:02:15,093 INFO L280 TraceCheckUtils]: 23: Hoare triple {17040#(= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~2;havoc activatePump_#t~ret16, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {17037#false} is VALID [2020-07-28 19:02:15,093 INFO L280 TraceCheckUtils]: 24: Hoare triple {17037#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {17037#false} is VALID [2020-07-28 19:02:15,093 INFO L280 TraceCheckUtils]: 25: Hoare triple {17037#false} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {17037#false} is VALID [2020-07-28 19:02:15,093 INFO L280 TraceCheckUtils]: 26: Hoare triple {17037#false} assume !(0 != activatePump_~tmp~4);~pumpRunning~0 := 1; {17037#false} is VALID [2020-07-28 19:02:15,093 INFO L280 TraceCheckUtils]: 27: Hoare triple {17037#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {17037#false} is VALID [2020-07-28 19:02:15,094 INFO L280 TraceCheckUtils]: 28: Hoare triple {17037#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {17037#false} is VALID [2020-07-28 19:02:15,094 INFO L280 TraceCheckUtils]: 29: Hoare triple {17037#false} assume 0 != __utac_acc__Specification3_spec__1_~tmp~0; {17037#false} is VALID [2020-07-28 19:02:15,094 INFO L280 TraceCheckUtils]: 30: Hoare triple {17037#false} assume !false; {17037#false} is VALID [2020-07-28 19:02:15,094 INFO L280 TraceCheckUtils]: 31: Hoare triple {17037#false} assume test_~splverifierCounter~0 < 4; {17037#false} is VALID [2020-07-28 19:02:15,094 INFO L280 TraceCheckUtils]: 32: Hoare triple {17037#false} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {17037#false} is VALID [2020-07-28 19:02:15,095 INFO L280 TraceCheckUtils]: 33: Hoare triple {17037#false} assume !(0 != test_~tmp~6); {17037#false} is VALID [2020-07-28 19:02:15,095 INFO L280 TraceCheckUtils]: 34: Hoare triple {17037#false} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {17037#false} is VALID [2020-07-28 19:02:15,095 INFO L280 TraceCheckUtils]: 35: Hoare triple {17037#false} assume !(0 != test_~tmp___0~2); {17037#false} is VALID [2020-07-28 19:02:15,096 INFO L280 TraceCheckUtils]: 36: Hoare triple {17037#false} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {17037#false} is VALID [2020-07-28 19:02:15,096 INFO L280 TraceCheckUtils]: 37: Hoare triple {17037#false} assume 0 != test_~tmp___2~0; {17037#false} is VALID [2020-07-28 19:02:15,096 INFO L280 TraceCheckUtils]: 38: Hoare triple {17037#false} assume 0 != ~pumpRunning~0; {17037#false} is VALID [2020-07-28 19:02:15,096 INFO L280 TraceCheckUtils]: 39: Hoare triple {17037#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {17037#false} is VALID [2020-07-28 19:02:15,097 INFO L280 TraceCheckUtils]: 40: Hoare triple {17037#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {17037#false} is VALID [2020-07-28 19:02:15,097 INFO L280 TraceCheckUtils]: 41: Hoare triple {17037#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {17037#false} is VALID [2020-07-28 19:02:15,097 INFO L280 TraceCheckUtils]: 42: Hoare triple {17037#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {17037#false} is VALID [2020-07-28 19:02:15,098 INFO L280 TraceCheckUtils]: 43: Hoare triple {17037#false} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {17037#false} is VALID [2020-07-28 19:02:15,098 INFO L280 TraceCheckUtils]: 44: Hoare triple {17037#false} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {17037#false} is VALID [2020-07-28 19:02:15,098 INFO L280 TraceCheckUtils]: 45: Hoare triple {17037#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {17037#false} is VALID [2020-07-28 19:02:15,098 INFO L280 TraceCheckUtils]: 46: Hoare triple {17037#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {17037#false} is VALID [2020-07-28 19:02:15,098 INFO L280 TraceCheckUtils]: 47: Hoare triple {17037#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {17037#false} is VALID [2020-07-28 19:02:15,100 INFO L280 TraceCheckUtils]: 48: Hoare triple {17037#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {17037#false} is VALID [2020-07-28 19:02:15,101 INFO L280 TraceCheckUtils]: 49: Hoare triple {17037#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {17037#false} is VALID [2020-07-28 19:02:15,101 INFO L280 TraceCheckUtils]: 50: Hoare triple {17037#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {17037#false} is VALID [2020-07-28 19:02:15,101 INFO L280 TraceCheckUtils]: 51: Hoare triple {17037#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {17037#false} is VALID [2020-07-28 19:02:15,102 INFO L280 TraceCheckUtils]: 52: Hoare triple {17037#false} assume !false; {17037#false} is VALID [2020-07-28 19:02:15,104 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:02:15,105 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [957131592] [2020-07-28 19:02:15,105 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:15,105 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:15,105 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [628510855] [2020-07-28 19:02:15,106 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 53 [2020-07-28 19:02:15,106 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:15,106 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:15,158 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:15,159 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:15,159 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:15,159 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:15,159 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:15,160 INFO L87 Difference]: Start difference. First operand 282 states and 352 transitions. Second operand 5 states. [2020-07-28 19:02:16,870 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,870 INFO L93 Difference]: Finished difference Result 653 states and 819 transitions. [2020-07-28 19:02:16,870 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:16,870 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 53 [2020-07-28 19:02:16,871 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:16,871 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:16,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 149 transitions. [2020-07-28 19:02:16,872 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:16,872 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 149 transitions. [2020-07-28 19:02:16,872 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 149 transitions. [2020-07-28 19:02:17,045 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 149 edges. 149 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:17,055 INFO L225 Difference]: With dead ends: 653 [2020-07-28 19:02:17,055 INFO L226 Difference]: Without dead ends: 377 [2020-07-28 19:02:17,056 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:17,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 377 states. [2020-07-28 19:02:17,804 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 377 to 282. [2020-07-28 19:02:17,804 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:17,805 INFO L82 GeneralOperation]: Start isEquivalent. First operand 377 states. Second operand 282 states. [2020-07-28 19:02:17,805 INFO L74 IsIncluded]: Start isIncluded. First operand 377 states. Second operand 282 states. [2020-07-28 19:02:17,805 INFO L87 Difference]: Start difference. First operand 377 states. Second operand 282 states. [2020-07-28 19:02:17,815 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:17,815 INFO L93 Difference]: Finished difference Result 377 states and 469 transitions. [2020-07-28 19:02:17,815 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 469 transitions. [2020-07-28 19:02:17,816 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:17,816 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:17,816 INFO L74 IsIncluded]: Start isIncluded. First operand 282 states. Second operand 377 states. [2020-07-28 19:02:17,816 INFO L87 Difference]: Start difference. First operand 282 states. Second operand 377 states. [2020-07-28 19:02:17,827 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:17,827 INFO L93 Difference]: Finished difference Result 377 states and 469 transitions. [2020-07-28 19:02:17,827 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 469 transitions. [2020-07-28 19:02:17,828 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:17,828 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:17,828 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:17,828 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:17,829 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 282 states. [2020-07-28 19:02:17,836 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 282 states to 282 states and 348 transitions. [2020-07-28 19:02:17,836 INFO L78 Accepts]: Start accepts. Automaton has 282 states and 348 transitions. Word has length 53 [2020-07-28 19:02:17,837 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:17,837 INFO L479 AbstractCegarLoop]: Abstraction has 282 states and 348 transitions. [2020-07-28 19:02:17,837 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:17,837 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 348 transitions. [2020-07-28 19:02:17,838 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2020-07-28 19:02:17,838 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:17,838 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:17,838 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-28 19:02:17,838 INFO L427 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:17,839 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:17,839 INFO L82 PathProgramCache]: Analyzing trace with hash 2051158706, now seen corresponding path program 1 times [2020-07-28 19:02:17,839 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:17,839 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [49518506] [2020-07-28 19:02:17,839 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:17,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:17,924 INFO L280 TraceCheckUtils]: 0: Hoare triple {19077#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {19079#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,925 INFO L280 TraceCheckUtils]: 1: Hoare triple {19079#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {19079#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,926 INFO L280 TraceCheckUtils]: 2: Hoare triple {19079#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {19079#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,927 INFO L280 TraceCheckUtils]: 3: Hoare triple {19079#(= 1 ~systemActive~0)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {19079#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,928 INFO L280 TraceCheckUtils]: 4: Hoare triple {19079#(= 1 ~systemActive~0)} assume 0 != main_~tmp~1; {19079#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,928 INFO L280 TraceCheckUtils]: 5: Hoare triple {19079#(= 1 ~systemActive~0)} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~6, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~6;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {19079#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,929 INFO L280 TraceCheckUtils]: 6: Hoare triple {19079#(= 1 ~systemActive~0)} assume !false; {19079#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,930 INFO L280 TraceCheckUtils]: 7: Hoare triple {19079#(= 1 ~systemActive~0)} assume test_~splverifierCounter~0 < 4; {19079#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,931 INFO L280 TraceCheckUtils]: 8: Hoare triple {19079#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {19079#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,931 INFO L280 TraceCheckUtils]: 9: Hoare triple {19079#(= 1 ~systemActive~0)} assume !(0 != test_~tmp~6); {19079#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,932 INFO L280 TraceCheckUtils]: 10: Hoare triple {19079#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {19079#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,933 INFO L280 TraceCheckUtils]: 11: Hoare triple {19079#(= 1 ~systemActive~0)} assume !(0 != test_~tmp___0~2); {19079#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,934 INFO L280 TraceCheckUtils]: 12: Hoare triple {19079#(= 1 ~systemActive~0)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {19079#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,935 INFO L280 TraceCheckUtils]: 13: Hoare triple {19079#(= 1 ~systemActive~0)} assume 0 != test_~tmp___2~0; {19079#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,936 INFO L280 TraceCheckUtils]: 14: Hoare triple {19079#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {19079#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,936 INFO L280 TraceCheckUtils]: 15: Hoare triple {19079#(= 1 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {19077#true} is VALID [2020-07-28 19:02:17,936 INFO L280 TraceCheckUtils]: 16: Hoare triple {19077#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret14, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {19077#true} is VALID [2020-07-28 19:02:17,937 INFO L280 TraceCheckUtils]: 17: Hoare triple {19077#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {19077#true} is VALID [2020-07-28 19:02:17,938 INFO L280 TraceCheckUtils]: 18: Hoare triple {19077#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {19080#(not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))} is VALID [2020-07-28 19:02:17,938 INFO L280 TraceCheckUtils]: 19: Hoare triple {19080#(not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {19081#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~5))} is VALID [2020-07-28 19:02:17,939 INFO L280 TraceCheckUtils]: 20: Hoare triple {19081#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~5))} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {19078#false} is VALID [2020-07-28 19:02:17,939 INFO L280 TraceCheckUtils]: 21: Hoare triple {19078#false} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {19078#false} is VALID [2020-07-28 19:02:17,940 INFO L280 TraceCheckUtils]: 22: Hoare triple {19078#false} processEnvironment__wrappee__methaneQuery_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret14 && processEnvironment__wrappee__methaneQuery_#t~ret14 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret14;havoc processEnvironment__wrappee__methaneQuery_#t~ret14; {19078#false} is VALID [2020-07-28 19:02:17,940 INFO L280 TraceCheckUtils]: 23: Hoare triple {19078#false} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~2;havoc activatePump_#t~ret16, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {19078#false} is VALID [2020-07-28 19:02:17,940 INFO L280 TraceCheckUtils]: 24: Hoare triple {19078#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {19078#false} is VALID [2020-07-28 19:02:17,940 INFO L280 TraceCheckUtils]: 25: Hoare triple {19078#false} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {19078#false} is VALID [2020-07-28 19:02:17,940 INFO L280 TraceCheckUtils]: 26: Hoare triple {19078#false} assume !(0 != activatePump_~tmp~4);~pumpRunning~0 := 1; {19078#false} is VALID [2020-07-28 19:02:17,940 INFO L280 TraceCheckUtils]: 27: Hoare triple {19078#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {19078#false} is VALID [2020-07-28 19:02:17,941 INFO L280 TraceCheckUtils]: 28: Hoare triple {19078#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {19078#false} is VALID [2020-07-28 19:02:17,941 INFO L280 TraceCheckUtils]: 29: Hoare triple {19078#false} assume 0 != __utac_acc__Specification3_spec__1_~tmp~0; {19078#false} is VALID [2020-07-28 19:02:17,941 INFO L280 TraceCheckUtils]: 30: Hoare triple {19078#false} assume !false; {19078#false} is VALID [2020-07-28 19:02:17,941 INFO L280 TraceCheckUtils]: 31: Hoare triple {19078#false} assume test_~splverifierCounter~0 < 4; {19078#false} is VALID [2020-07-28 19:02:17,942 INFO L280 TraceCheckUtils]: 32: Hoare triple {19078#false} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {19078#false} is VALID [2020-07-28 19:02:17,942 INFO L280 TraceCheckUtils]: 33: Hoare triple {19078#false} assume !(0 != test_~tmp~6); {19078#false} is VALID [2020-07-28 19:02:17,942 INFO L280 TraceCheckUtils]: 34: Hoare triple {19078#false} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {19078#false} is VALID [2020-07-28 19:02:17,942 INFO L280 TraceCheckUtils]: 35: Hoare triple {19078#false} assume !(0 != test_~tmp___0~2); {19078#false} is VALID [2020-07-28 19:02:17,943 INFO L280 TraceCheckUtils]: 36: Hoare triple {19078#false} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {19078#false} is VALID [2020-07-28 19:02:17,943 INFO L280 TraceCheckUtils]: 37: Hoare triple {19078#false} assume 0 != test_~tmp___2~0; {19078#false} is VALID [2020-07-28 19:02:17,943 INFO L280 TraceCheckUtils]: 38: Hoare triple {19078#false} assume 0 != ~pumpRunning~0; {19078#false} is VALID [2020-07-28 19:02:17,943 INFO L280 TraceCheckUtils]: 39: Hoare triple {19078#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19078#false} is VALID [2020-07-28 19:02:17,943 INFO L280 TraceCheckUtils]: 40: Hoare triple {19078#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {19078#false} is VALID [2020-07-28 19:02:17,943 INFO L280 TraceCheckUtils]: 41: Hoare triple {19078#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {19078#false} is VALID [2020-07-28 19:02:17,943 INFO L280 TraceCheckUtils]: 42: Hoare triple {19078#false} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {19078#false} is VALID [2020-07-28 19:02:17,944 INFO L280 TraceCheckUtils]: 43: Hoare triple {19078#false} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {19078#false} is VALID [2020-07-28 19:02:17,944 INFO L280 TraceCheckUtils]: 44: Hoare triple {19078#false} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {19078#false} is VALID [2020-07-28 19:02:17,944 INFO L280 TraceCheckUtils]: 45: Hoare triple {19078#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {19078#false} is VALID [2020-07-28 19:02:17,945 INFO L280 TraceCheckUtils]: 46: Hoare triple {19078#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {19078#false} is VALID [2020-07-28 19:02:17,945 INFO L280 TraceCheckUtils]: 47: Hoare triple {19078#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {19078#false} is VALID [2020-07-28 19:02:17,945 INFO L280 TraceCheckUtils]: 48: Hoare triple {19078#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {19078#false} is VALID [2020-07-28 19:02:17,945 INFO L280 TraceCheckUtils]: 49: Hoare triple {19078#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {19078#false} is VALID [2020-07-28 19:02:17,945 INFO L280 TraceCheckUtils]: 50: Hoare triple {19078#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {19078#false} is VALID [2020-07-28 19:02:17,946 INFO L280 TraceCheckUtils]: 51: Hoare triple {19078#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {19078#false} is VALID [2020-07-28 19:02:17,946 INFO L280 TraceCheckUtils]: 52: Hoare triple {19078#false} assume !false; {19078#false} is VALID [2020-07-28 19:02:17,949 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:02:17,949 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [49518506] [2020-07-28 19:02:17,950 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:17,950 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:17,950 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1330821310] [2020-07-28 19:02:17,951 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 53 [2020-07-28 19:02:17,951 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:17,951 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:18,015 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:18,015 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:18,015 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:18,016 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:18,016 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:18,016 INFO L87 Difference]: Start difference. First operand 282 states and 348 transitions. Second operand 5 states. [2020-07-28 19:02:19,457 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:19,458 INFO L93 Difference]: Finished difference Result 600 states and 751 transitions. [2020-07-28 19:02:19,458 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:19,458 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 53 [2020-07-28 19:02:19,458 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:19,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:19,459 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 150 transitions. [2020-07-28 19:02:19,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:19,460 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 150 transitions. [2020-07-28 19:02:19,460 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 150 transitions. [2020-07-28 19:02:19,659 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 150 edges. 150 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:19,668 INFO L225 Difference]: With dead ends: 600 [2020-07-28 19:02:19,668 INFO L226 Difference]: Without dead ends: 324 [2020-07-28 19:02:19,669 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:19,670 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2020-07-28 19:02:20,402 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 240. [2020-07-28 19:02:20,402 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:20,403 INFO L82 GeneralOperation]: Start isEquivalent. First operand 324 states. Second operand 240 states. [2020-07-28 19:02:20,403 INFO L74 IsIncluded]: Start isIncluded. First operand 324 states. Second operand 240 states. [2020-07-28 19:02:20,403 INFO L87 Difference]: Start difference. First operand 324 states. Second operand 240 states. [2020-07-28 19:02:20,412 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:20,412 INFO L93 Difference]: Finished difference Result 324 states and 405 transitions. [2020-07-28 19:02:20,413 INFO L276 IsEmpty]: Start isEmpty. Operand 324 states and 405 transitions. [2020-07-28 19:02:20,413 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:20,413 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:20,414 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand 324 states. [2020-07-28 19:02:20,414 INFO L87 Difference]: Start difference. First operand 240 states. Second operand 324 states. [2020-07-28 19:02:20,422 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:20,422 INFO L93 Difference]: Finished difference Result 324 states and 405 transitions. [2020-07-28 19:02:20,422 INFO L276 IsEmpty]: Start isEmpty. Operand 324 states and 405 transitions. [2020-07-28 19:02:20,423 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:20,423 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:20,423 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:20,424 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:20,424 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 240 states. [2020-07-28 19:02:20,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 297 transitions. [2020-07-28 19:02:20,430 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 297 transitions. Word has length 53 [2020-07-28 19:02:20,431 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:20,431 INFO L479 AbstractCegarLoop]: Abstraction has 240 states and 297 transitions. [2020-07-28 19:02:20,431 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:20,431 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 297 transitions. [2020-07-28 19:02:20,432 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2020-07-28 19:02:20,432 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:20,432 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:20,433 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2020-07-28 19:02:20,433 INFO L427 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:20,433 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:20,433 INFO L82 PathProgramCache]: Analyzing trace with hash 1485859958, now seen corresponding path program 1 times [2020-07-28 19:02:20,434 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:20,434 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1300327006] [2020-07-28 19:02:20,434 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:20,456 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:20,528 INFO L280 TraceCheckUtils]: 0: Hoare triple {20874#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {20876#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:20,533 INFO L280 TraceCheckUtils]: 1: Hoare triple {20876#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {20876#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:20,535 INFO L280 TraceCheckUtils]: 2: Hoare triple {20876#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {20876#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:20,537 INFO L280 TraceCheckUtils]: 3: Hoare triple {20876#(= 1 ~waterLevel~0)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {20876#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:20,538 INFO L280 TraceCheckUtils]: 4: Hoare triple {20876#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~1; {20876#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:20,541 INFO L280 TraceCheckUtils]: 5: Hoare triple {20876#(= 1 ~waterLevel~0)} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~6, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~6;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {20876#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:20,542 INFO L280 TraceCheckUtils]: 6: Hoare triple {20876#(= 1 ~waterLevel~0)} assume !false; {20876#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:20,546 INFO L280 TraceCheckUtils]: 7: Hoare triple {20876#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {20876#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:20,547 INFO L280 TraceCheckUtils]: 8: Hoare triple {20876#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {20876#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:20,549 INFO L280 TraceCheckUtils]: 9: Hoare triple {20876#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~6; {20876#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:20,552 INFO L280 TraceCheckUtils]: 10: Hoare triple {20876#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,555 INFO L280 TraceCheckUtils]: 11: Hoare triple {20877#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,555 INFO L280 TraceCheckUtils]: 12: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,556 INFO L280 TraceCheckUtils]: 13: Hoare triple {20877#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,556 INFO L280 TraceCheckUtils]: 14: Hoare triple {20877#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,557 INFO L280 TraceCheckUtils]: 15: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,558 INFO L280 TraceCheckUtils]: 16: Hoare triple {20877#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,558 INFO L280 TraceCheckUtils]: 17: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret14, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,559 INFO L280 TraceCheckUtils]: 18: Hoare triple {20877#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,559 INFO L280 TraceCheckUtils]: 19: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,560 INFO L280 TraceCheckUtils]: 20: Hoare triple {20877#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,560 INFO L280 TraceCheckUtils]: 21: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,561 INFO L280 TraceCheckUtils]: 22: Hoare triple {20877#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,561 INFO L280 TraceCheckUtils]: 23: Hoare triple {20877#(<= ~waterLevel~0 2)} processEnvironment__wrappee__methaneQuery_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret14 && processEnvironment__wrappee__methaneQuery_#t~ret14 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret14;havoc processEnvironment__wrappee__methaneQuery_#t~ret14; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,562 INFO L280 TraceCheckUtils]: 24: Hoare triple {20877#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~2;havoc activatePump_#t~ret16, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,563 INFO L280 TraceCheckUtils]: 25: Hoare triple {20877#(<= ~waterLevel~0 2)} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,563 INFO L280 TraceCheckUtils]: 26: Hoare triple {20877#(<= ~waterLevel~0 2)} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,564 INFO L280 TraceCheckUtils]: 27: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(0 != activatePump_~tmp~4);~pumpRunning~0 := 1; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,564 INFO L280 TraceCheckUtils]: 28: Hoare triple {20877#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,565 INFO L280 TraceCheckUtils]: 29: Hoare triple {20877#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,565 INFO L280 TraceCheckUtils]: 30: Hoare triple {20877#(<= ~waterLevel~0 2)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,566 INFO L280 TraceCheckUtils]: 31: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !false; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,567 INFO L280 TraceCheckUtils]: 32: Hoare triple {20877#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,573 INFO L280 TraceCheckUtils]: 33: Hoare triple {20877#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,574 INFO L280 TraceCheckUtils]: 34: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~6); {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,574 INFO L280 TraceCheckUtils]: 35: Hoare triple {20877#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,575 INFO L280 TraceCheckUtils]: 36: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,576 INFO L280 TraceCheckUtils]: 37: Hoare triple {20877#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,576 INFO L280 TraceCheckUtils]: 38: Hoare triple {20877#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,578 INFO L280 TraceCheckUtils]: 39: Hoare triple {20877#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:20,578 INFO L280 TraceCheckUtils]: 40: Hoare triple {20877#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:20,579 INFO L280 TraceCheckUtils]: 41: Hoare triple {20878#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:20,580 INFO L280 TraceCheckUtils]: 42: Hoare triple {20878#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:20,580 INFO L280 TraceCheckUtils]: 43: Hoare triple {20878#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:20,581 INFO L280 TraceCheckUtils]: 44: Hoare triple {20878#(<= ~waterLevel~0 1)} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:20,581 INFO L280 TraceCheckUtils]: 45: Hoare triple {20878#(<= ~waterLevel~0 1)} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:20,582 INFO L280 TraceCheckUtils]: 46: Hoare triple {20878#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:20,582 INFO L280 TraceCheckUtils]: 47: Hoare triple {20878#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:20,583 INFO L280 TraceCheckUtils]: 48: Hoare triple {20878#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {20879#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:02:20,584 INFO L280 TraceCheckUtils]: 49: Hoare triple {20879#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {20880#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} is VALID [2020-07-28 19:02:20,584 INFO L280 TraceCheckUtils]: 50: Hoare triple {20880#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {20875#false} is VALID [2020-07-28 19:02:20,585 INFO L280 TraceCheckUtils]: 51: Hoare triple {20875#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {20875#false} is VALID [2020-07-28 19:02:20,585 INFO L280 TraceCheckUtils]: 52: Hoare triple {20875#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {20875#false} is VALID [2020-07-28 19:02:20,585 INFO L280 TraceCheckUtils]: 53: Hoare triple {20875#false} assume !false; {20875#false} is VALID [2020-07-28 19:02:20,589 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 5 proven. 4 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2020-07-28 19:02:20,590 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1300327006] [2020-07-28 19:02:20,590 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1294458084] [2020-07-28 19:02:20,591 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:02:20,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:20,727 INFO L263 TraceCheckSpWp]: Trace formula consists of 421 conjuncts, 7 conjunts are in the unsatisfiable core [2020-07-28 19:02:20,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:20,758 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:02:20,994 INFO L280 TraceCheckUtils]: 0: Hoare triple {20874#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string6.base, #t~string6.offset, 1);call write~init~int(77, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(101, #t~string6.base, 2 + #t~string6.offset, 1);call write~init~int(116, #t~string6.base, 3 + #t~string6.offset, 1);call write~init~int(104, #t~string6.base, 4 + #t~string6.offset, 1);call write~init~int(58, #t~string6.base, 5 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 6 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string8.base, #t~string8.offset, 1);call write~init~int(82, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(73, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(84, #t~string8.base, 3 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 4 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string10.base, #t~string10.offset, 1);call write~init~int(75, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 2 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string12.base, #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 1 + #t~string12.offset, 1);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(13);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string21.base, #t~string21.offset, 1);call write~init~int(110, #t~string21.base, 1 + #t~string21.offset, 1);call write~init~int(0, #t~string21.base, 2 + #t~string21.offset, 1);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string23.base, #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 1 + #t~string23.offset, 1);call write~init~int(102, #t~string23.base, 2 + #t~string23.offset, 1);call write~init~int(0, #t~string23.base, 3 + #t~string23.offset, 1);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string25.base, #t~string25.offset, 1);call write~init~int(80, #t~string25.base, 1 + #t~string25.offset, 1);call write~init~int(117, #t~string25.base, 2 + #t~string25.offset, 1);call write~init~int(109, #t~string25.base, 3 + #t~string25.offset, 1);call write~init~int(112, #t~string25.base, 4 + #t~string25.offset, 1);call write~init~int(58, #t~string25.base, 5 + #t~string25.offset, 1);call write~init~int(0, #t~string25.base, 6 + #t~string25.offset, 1);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string27.base, #t~string27.offset, 1);call write~init~int(110, #t~string27.base, 1 + #t~string27.offset, 1);call write~init~int(0, #t~string27.base, 2 + #t~string27.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string29.base, #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 1 + #t~string29.offset, 1);call write~init~int(102, #t~string29.base, 2 + #t~string29.offset, 1);call write~init~int(0, #t~string29.base, 3 + #t~string29.offset, 1);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string31.base, #t~string31.offset, 1);call write~init~int(32, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 2 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string33.base, #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 1 + #t~string33.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~pumpRunning~0 := 0;~systemActive~0 := 1;~head~0.base, ~head~0.offset := 0, 0; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:20,995 INFO L280 TraceCheckUtils]: 1: Hoare triple {20878#(<= ~waterLevel~0 1)} havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~3, main_~tmp~1;havoc main_~retValue_acc~3;havoc main_~tmp~1; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:20,996 INFO L280 TraceCheckUtils]: 2: Hoare triple {20878#(<= ~waterLevel~0 1)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:20,997 INFO L280 TraceCheckUtils]: 3: Hoare triple {20878#(<= ~waterLevel~0 1)} main_#t~ret13 := valid_product_#res;assume -2147483648 <= main_#t~ret13 && main_#t~ret13 <= 2147483647;main_~tmp~1 := main_#t~ret13;havoc main_#t~ret13; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:20,997 INFO L280 TraceCheckUtils]: 4: Hoare triple {20878#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~1; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:20,998 INFO L280 TraceCheckUtils]: 5: Hoare triple {20878#(<= ~waterLevel~0 1)} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~6, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~6;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:20,999 INFO L280 TraceCheckUtils]: 6: Hoare triple {20878#(<= ~waterLevel~0 1)} assume !false; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:20,999 INFO L280 TraceCheckUtils]: 7: Hoare triple {20878#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:21,000 INFO L280 TraceCheckUtils]: 8: Hoare triple {20878#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:21,001 INFO L280 TraceCheckUtils]: 9: Hoare triple {20878#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~6; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:21,002 INFO L280 TraceCheckUtils]: 10: Hoare triple {20878#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,002 INFO L280 TraceCheckUtils]: 11: Hoare triple {20877#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,003 INFO L280 TraceCheckUtils]: 12: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,004 INFO L280 TraceCheckUtils]: 13: Hoare triple {20877#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,005 INFO L280 TraceCheckUtils]: 14: Hoare triple {20877#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,006 INFO L280 TraceCheckUtils]: 15: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,006 INFO L280 TraceCheckUtils]: 16: Hoare triple {20877#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,007 INFO L280 TraceCheckUtils]: 17: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret14, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,008 INFO L280 TraceCheckUtils]: 18: Hoare triple {20877#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret34, isHighWaterLevel_~retValue_acc~6, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~6;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,009 INFO L280 TraceCheckUtils]: 19: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,010 INFO L280 TraceCheckUtils]: 20: Hoare triple {20877#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret34 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret34 && isHighWaterLevel_#t~ret34 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret34;havoc isHighWaterLevel_#t~ret34; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,010 INFO L280 TraceCheckUtils]: 21: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,011 INFO L280 TraceCheckUtils]: 22: Hoare triple {20877#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~6 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~6; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,012 INFO L280 TraceCheckUtils]: 23: Hoare triple {20877#(<= ~waterLevel~0 2)} processEnvironment__wrappee__methaneQuery_#t~ret14 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret14 && processEnvironment__wrappee__methaneQuery_#t~ret14 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret14;havoc processEnvironment__wrappee__methaneQuery_#t~ret14; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,013 INFO L280 TraceCheckUtils]: 24: Hoare triple {20877#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~2;havoc activatePump_#t~ret16, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,013 INFO L280 TraceCheckUtils]: 25: Hoare triple {20877#(<= ~waterLevel~0 2)} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,014 INFO L280 TraceCheckUtils]: 26: Hoare triple {20877#(<= ~waterLevel~0 2)} activatePump_#t~ret16 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret16 && activatePump_#t~ret16 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret16;havoc activatePump_#t~ret16; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,015 INFO L280 TraceCheckUtils]: 27: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(0 != activatePump_~tmp~4);~pumpRunning~0 := 1; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,015 INFO L280 TraceCheckUtils]: 28: Hoare triple {20877#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,016 INFO L280 TraceCheckUtils]: 29: Hoare triple {20877#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,017 INFO L280 TraceCheckUtils]: 30: Hoare triple {20877#(<= ~waterLevel~0 2)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,017 INFO L280 TraceCheckUtils]: 31: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !false; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,018 INFO L280 TraceCheckUtils]: 32: Hoare triple {20877#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,019 INFO L280 TraceCheckUtils]: 33: Hoare triple {20877#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~6 := test_#t~nondet35;havoc test_#t~nondet35; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,019 INFO L280 TraceCheckUtils]: 34: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~6); {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,020 INFO L280 TraceCheckUtils]: 35: Hoare triple {20877#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~2 := test_#t~nondet36;havoc test_#t~nondet36; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,020 INFO L280 TraceCheckUtils]: 36: Hoare triple {20877#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,021 INFO L280 TraceCheckUtils]: 37: Hoare triple {20877#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,022 INFO L280 TraceCheckUtils]: 38: Hoare triple {20877#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,022 INFO L280 TraceCheckUtils]: 39: Hoare triple {20877#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {20877#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:21,023 INFO L280 TraceCheckUtils]: 40: Hoare triple {20877#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:21,024 INFO L280 TraceCheckUtils]: 41: Hoare triple {20878#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret15, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:21,025 INFO L280 TraceCheckUtils]: 42: Hoare triple {20878#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret17, isMethaneAlarm_~retValue_acc~4;havoc isMethaneAlarm_~retValue_acc~4;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:21,025 INFO L280 TraceCheckUtils]: 43: Hoare triple {20878#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret17 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret17 && isMethaneAlarm_#t~ret17 <= 2147483647;isMethaneAlarm_~retValue_acc~4 := isMethaneAlarm_#t~ret17;havoc isMethaneAlarm_#t~ret17;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~4; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:21,026 INFO L280 TraceCheckUtils]: 44: Hoare triple {20878#(<= ~waterLevel~0 1)} processEnvironment_#t~ret15 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret15 && processEnvironment_#t~ret15 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret15;havoc processEnvironment_#t~ret15; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:21,027 INFO L280 TraceCheckUtils]: 45: Hoare triple {20878#(<= ~waterLevel~0 1)} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:21,027 INFO L280 TraceCheckUtils]: 46: Hoare triple {20878#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:21,028 INFO L280 TraceCheckUtils]: 47: Hoare triple {20878#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {20878#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:21,029 INFO L280 TraceCheckUtils]: 48: Hoare triple {20878#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {20879#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:02:21,030 INFO L280 TraceCheckUtils]: 49: Hoare triple {20879#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {20880#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} is VALID [2020-07-28 19:02:21,031 INFO L280 TraceCheckUtils]: 50: Hoare triple {20880#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~5;havoc isPumpRunning_~retValue_acc~5;isPumpRunning_~retValue_acc~5 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~5; {20875#false} is VALID [2020-07-28 19:02:21,031 INFO L280 TraceCheckUtils]: 51: Hoare triple {20875#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {20875#false} is VALID [2020-07-28 19:02:21,032 INFO L280 TraceCheckUtils]: 52: Hoare triple {20875#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {20875#false} is VALID [2020-07-28 19:02:21,032 INFO L280 TraceCheckUtils]: 53: Hoare triple {20875#false} assume !false; {20875#false} is VALID [2020-07-28 19:02:21,038 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 5 proven. 4 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2020-07-28 19:02:21,038 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:02:21,039 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 6 [2020-07-28 19:02:21,039 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [580916851] [2020-07-28 19:02:21,040 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 54 [2020-07-28 19:02:21,040 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:21,040 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:21,126 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:21,126 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:21,126 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:21,127 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:21,127 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:21,127 INFO L87 Difference]: Start difference. First operand 240 states and 297 transitions. Second operand 7 states. [2020-07-28 19:02:24,190 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:24,190 INFO L93 Difference]: Finished difference Result 886 states and 1123 transitions. [2020-07-28 19:02:24,191 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2020-07-28 19:02:24,191 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 54 [2020-07-28 19:02:24,191 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:24,191 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:24,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 379 transitions. [2020-07-28 19:02:24,193 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:24,195 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 379 transitions. [2020-07-28 19:02:24,196 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 379 transitions. [2020-07-28 19:02:24,677 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 379 edges. 379 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:24,677 INFO L225 Difference]: With dead ends: 886 [2020-07-28 19:02:24,677 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:02:24,679 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 54 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=59, Invalid=97, Unknown=0, NotChecked=0, Total=156 [2020-07-28 19:02:24,680 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:02:24,680 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:02:24,680 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:24,680 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:24,680 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:24,680 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:24,680 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:24,681 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:24,681 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:24,681 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:24,681 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:24,681 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:24,681 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:24,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:24,681 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:24,682 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:24,682 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:24,682 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:24,682 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:24,682 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:24,682 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:02:24,682 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:02:24,682 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 54 [2020-07-28 19:02:24,682 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:24,683 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:02:24,683 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:24,683 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:24,683 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:24,884 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2020-07-28 19:02:24,887 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:02:25,295 WARN L193 SmtUtils]: Spent 395.00 ms on a formula simplification. DAG size of input: 146 DAG size of output: 117 [2020-07-28 19:02:25,553 WARN L193 SmtUtils]: Spent 238.00 ms on a formula simplification. DAG size of input: 133 DAG size of output: 103 [2020-07-28 19:02:26,239 WARN L193 SmtUtils]: Spent 676.00 ms on a formula simplification. DAG size of input: 235 DAG size of output: 203 [2020-07-28 19:02:26,442 WARN L193 SmtUtils]: Spent 192.00 ms on a formula simplification. DAG size of input: 163 DAG size of output: 116 [2020-07-28 19:02:27,220 WARN L193 SmtUtils]: Spent 695.00 ms on a formula simplification. DAG size of input: 288 DAG size of output: 240 [2020-07-28 19:02:27,337 WARN L193 SmtUtils]: Spent 110.00 ms on a formula simplification. DAG size of input: 142 DAG size of output: 104 [2020-07-28 19:02:27,681 WARN L193 SmtUtils]: Spent 243.00 ms on a formula simplification. DAG size of input: 201 DAG size of output: 151 [2020-07-28 19:02:27,922 WARN L193 SmtUtils]: Spent 232.00 ms on a formula simplification. DAG size of input: 223 DAG size of output: 173 [2020-07-28 19:02:28,565 WARN L193 SmtUtils]: Spent 620.00 ms on a formula simplification. DAG size of input: 116 DAG size of output: 40 [2020-07-28 19:02:29,099 WARN L193 SmtUtils]: Spent 473.00 ms on a formula simplification. DAG size of input: 102 DAG size of output: 31 [2020-07-28 19:02:30,438 WARN L193 SmtUtils]: Spent 1.33 s on a formula simplification. DAG size of input: 199 DAG size of output: 33 [2020-07-28 19:02:31,159 WARN L193 SmtUtils]: Spent 694.00 ms on a formula simplification. DAG size of input: 108 DAG size of output: 55 [2020-07-28 19:02:31,427 WARN L193 SmtUtils]: Spent 249.00 ms on a formula simplification. DAG size of input: 61 DAG size of output: 45 [2020-07-28 19:02:33,107 WARN L193 SmtUtils]: Spent 1.62 s on a formula simplification. DAG size of input: 232 DAG size of output: 32 [2020-07-28 19:02:33,705 WARN L193 SmtUtils]: Spent 593.00 ms on a formula simplification. DAG size of input: 98 DAG size of output: 51 [2020-07-28 19:02:33,961 WARN L193 SmtUtils]: Spent 197.00 ms on a formula simplification. DAG size of input: 53 DAG size of output: 35 [2020-07-28 19:02:34,191 WARN L193 SmtUtils]: Spent 170.00 ms on a formula simplification. DAG size of input: 47 DAG size of output: 37 [2020-07-28 19:02:35,429 WARN L193 SmtUtils]: Spent 1.21 s on a formula simplification. DAG size of input: 143 DAG size of output: 52 [2020-07-28 19:02:36,544 WARN L193 SmtUtils]: Spent 1.09 s on a formula simplification. DAG size of input: 168 DAG size of output: 51 [2020-07-28 19:02:36,551 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 580) no Hoare annotation was computed. [2020-07-28 19:02:36,551 INFO L268 CegarLoopResult]: For program point L465(lines 465 469) no Hoare annotation was computed. [2020-07-28 19:02:36,551 INFO L268 CegarLoopResult]: For program point L465-2(lines 465 469) no Hoare annotation was computed. [2020-07-28 19:02:36,552 INFO L268 CegarLoopResult]: For program point L465-3(lines 465 469) no Hoare annotation was computed. [2020-07-28 19:02:36,552 INFO L268 CegarLoopResult]: For program point L465-5(lines 465 469) no Hoare annotation was computed. [2020-07-28 19:02:36,552 INFO L268 CegarLoopResult]: For program point L465-6(lines 465 469) no Hoare annotation was computed. [2020-07-28 19:02:36,552 INFO L268 CegarLoopResult]: For program point L465-8(lines 465 469) no Hoare annotation was computed. [2020-07-28 19:02:36,553 INFO L268 CegarLoopResult]: For program point L465-9(lines 465 469) no Hoare annotation was computed. [2020-07-28 19:02:36,553 INFO L268 CegarLoopResult]: For program point L465-11(lines 465 469) no Hoare annotation was computed. [2020-07-28 19:02:36,553 INFO L268 CegarLoopResult]: For program point L465-12(lines 465 469) no Hoare annotation was computed. [2020-07-28 19:02:36,553 INFO L268 CegarLoopResult]: For program point L465-14(lines 465 469) no Hoare annotation was computed. [2020-07-28 19:02:36,553 INFO L268 CegarLoopResult]: For program point L465-15(lines 465 469) no Hoare annotation was computed. [2020-07-28 19:02:36,553 INFO L268 CegarLoopResult]: For program point L465-17(lines 465 469) no Hoare annotation was computed. [2020-07-28 19:02:36,554 INFO L264 CegarLoopResult]: At program point L532(lines 485 533) the Hoare annotation is: false [2020-07-28 19:02:36,554 INFO L264 CegarLoopResult]: At program point L171(lines 162 175) the Hoare annotation is: false [2020-07-28 19:02:36,554 INFO L264 CegarLoopResult]: At program point L171-1(lines 162 175) the Hoare annotation is: (let ((.cse10 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))) (let ((.cse3 (<= ~waterLevel~0 1)) (.cse4 (not .cse10)) (.cse7 (= 1 ~methaneLevelCritical~0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (<= ~methaneLevelCritical~0 0)) (.cse9 (<= ~waterLevel~0 2)) (.cse2 (= 0 ~pumpRunning~0)) (.cse5 (<= 0 ~methaneLevelCritical~0)) (.cse6 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse2 .cse3 .cse4 .cse6) (and .cse8 .cse0 .cse7 .cse9 .cse10 .cse2 .cse6) (and .cse8 .cse0 .cse1 .cse9 .cse10 .cse2 .cse5 .cse6)))) [2020-07-28 19:02:36,554 INFO L264 CegarLoopResult]: At program point L171-2(lines 162 175) the Hoare annotation is: false [2020-07-28 19:02:36,554 INFO L264 CegarLoopResult]: At program point L171-3(lines 162 175) the Hoare annotation is: false [2020-07-28 19:02:36,554 INFO L264 CegarLoopResult]: At program point L171-4(lines 162 175) the Hoare annotation is: false [2020-07-28 19:02:36,554 INFO L264 CegarLoopResult]: At program point L171-5(lines 162 175) the Hoare annotation is: false [2020-07-28 19:02:36,555 INFO L264 CegarLoopResult]: At program point L238(lines 234 240) the Hoare annotation is: (and (<= ~methaneLevelCritical~0 0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0) (<= 0 ~methaneLevelCritical~0)) [2020-07-28 19:02:36,555 INFO L264 CegarLoopResult]: At program point L471(lines 456 474) the Hoare annotation is: false [2020-07-28 19:02:36,555 INFO L264 CegarLoopResult]: At program point L471-1(lines 456 474) the Hoare annotation is: (let ((.cse12 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse13 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~5))) (let ((.cse9 (<= 2 ~waterLevel~0)) (.cse2 (= 1 ~methaneLevelCritical~0)) (.cse11 (<= ~waterLevel~0 2)) (.cse14 (= 1 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse15 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse0 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse10 (<= ~methaneLevelCritical~0 0)) (.cse3 (not .cse13)) (.cse4 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse5 (= 0 ~pumpRunning~0)) (.cse6 (<= ~waterLevel~0 1)) (.cse7 (not .cse12)) (.cse16 (<= 0 ~methaneLevelCritical~0)) (.cse8 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse1 .cse10 .cse11 .cse12 .cse5 .cse13 .cse14 .cse15 .cse16 .cse8) (and .cse9 .cse1 .cse2 .cse11 .cse12 .cse5 .cse13 .cse14 .cse15 .cse8) (and .cse0 .cse1 .cse10 .cse3 .cse4 .cse5 .cse6 .cse7 .cse16 .cse8)))) [2020-07-28 19:02:36,555 INFO L264 CegarLoopResult]: At program point L471-2(lines 456 474) the Hoare annotation is: false [2020-07-28 19:02:36,555 INFO L264 CegarLoopResult]: At program point L471-3(lines 456 474) the Hoare annotation is: false [2020-07-28 19:02:36,555 INFO L264 CegarLoopResult]: At program point L471-4(lines 456 474) the Hoare annotation is: false [2020-07-28 19:02:36,555 INFO L264 CegarLoopResult]: At program point L471-5(lines 456 474) the Hoare annotation is: false [2020-07-28 19:02:36,556 INFO L264 CegarLoopResult]: At program point L571(lines 566 574) the Hoare annotation is: (and (<= ~methaneLevelCritical~0 0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0) (<= 0 ~methaneLevelCritical~0)) [2020-07-28 19:02:36,556 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 580) no Hoare annotation was computed. [2020-07-28 19:02:36,556 INFO L271 CegarLoopResult]: At program point L274(lines 255 277) the Hoare annotation is: true [2020-07-28 19:02:36,556 INFO L268 CegarLoopResult]: For program point L506(lines 506 512) no Hoare annotation was computed. [2020-07-28 19:02:36,556 INFO L264 CegarLoopResult]: At program point L506-1(lines 506 512) the Hoare annotation is: (let ((.cse1 (<= ~methaneLevelCritical~0 0)) (.cse4 (<= 0 ~methaneLevelCritical~0)) (.cse6 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse8 (= 1 ~pumpRunning~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse9 (= 1 ~methaneLevelCritical~0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= 0 ~pumpRunning~0)) (.cse5 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse0 .cse1 .cse2 .cse7 .cse4 .cse8 .cse5) (and .cse6 .cse0 .cse9 .cse2 .cse7 .cse8 .cse5) (and .cse0 .cse9 .cse2 .cse3 .cse5))) [2020-07-28 19:02:36,556 INFO L264 CegarLoopResult]: At program point L407(lines 400 410) the Hoare annotation is: (let ((.cse0 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse4 (= 1 ~pumpRunning~0)) (.cse5 (= 1 ~systemActive~0))) (or (and (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse0 .cse1 (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse2 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse3 .cse4 (<= 0 ~methaneLevelCritical~0) .cse5) (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 .cse1 (= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 .cse5))) [2020-07-28 19:02:36,556 INFO L264 CegarLoopResult]: At program point L407-1(lines 400 410) the Hoare annotation is: false [2020-07-28 19:02:36,557 INFO L264 CegarLoopResult]: At program point L407-2(lines 400 410) the Hoare annotation is: (let ((.cse3 (= 1 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2)) (.cse0 (<= 2 ~waterLevel~0)) (.cse4 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse7 (= 0 ~pumpRunning~0)) (.cse1 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~5)) (.cse8 (= 1 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse9 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse1 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse2 .cse3 .cse4 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse5 .cse6 .cse7 .cse8 .cse9 (<= 0 ~methaneLevelCritical~0)) (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse3 .cse0 .cse4 (= 1 ~methaneLevelCritical~0) .cse5 .cse6 .cse7 .cse1 .cse8 .cse9 .cse2))) [2020-07-28 19:02:36,557 INFO L264 CegarLoopResult]: At program point L407-3(lines 400 410) the Hoare annotation is: false [2020-07-28 19:02:36,557 INFO L264 CegarLoopResult]: At program point L407-4(lines 400 410) the Hoare annotation is: false [2020-07-28 19:02:36,557 INFO L264 CegarLoopResult]: At program point L407-5(lines 400 410) the Hoare annotation is: false [2020-07-28 19:02:36,557 INFO L264 CegarLoopResult]: At program point L407-6(lines 400 410) the Hoare annotation is: false [2020-07-28 19:02:36,557 INFO L264 CegarLoopResult]: At program point L407-7(lines 400 410) the Hoare annotation is: false [2020-07-28 19:02:36,557 INFO L264 CegarLoopResult]: At program point L407-8(lines 400 410) the Hoare annotation is: false [2020-07-28 19:02:36,557 INFO L268 CegarLoopResult]: For program point L113(lines 113 117) no Hoare annotation was computed. [2020-07-28 19:02:36,558 INFO L268 CegarLoopResult]: For program point L346(lines 346 363) no Hoare annotation was computed. [2020-07-28 19:02:36,558 INFO L268 CegarLoopResult]: For program point L346-1(lines 346 363) no Hoare annotation was computed. [2020-07-28 19:02:36,558 INFO L268 CegarLoopResult]: For program point L346-2(lines 346 363) no Hoare annotation was computed. [2020-07-28 19:02:36,558 INFO L268 CegarLoopResult]: For program point L580(line 580) no Hoare annotation was computed. [2020-07-28 19:02:36,558 INFO L268 CegarLoopResult]: For program point L580-1(line 580) no Hoare annotation was computed. [2020-07-28 19:02:36,558 INFO L268 CegarLoopResult]: For program point L580-2(line 580) no Hoare annotation was computed. [2020-07-28 19:02:36,558 INFO L268 CegarLoopResult]: For program point L382(lines 382 388) no Hoare annotation was computed. [2020-07-28 19:02:36,558 INFO L268 CegarLoopResult]: For program point L382-2(lines 382 388) no Hoare annotation was computed. [2020-07-28 19:02:36,558 INFO L268 CegarLoopResult]: For program point L382-4(lines 382 388) no Hoare annotation was computed. [2020-07-28 19:02:36,558 INFO L268 CegarLoopResult]: For program point L382-6(lines 382 388) no Hoare annotation was computed. [2020-07-28 19:02:36,558 INFO L268 CegarLoopResult]: For program point L382-8(lines 382 388) no Hoare annotation was computed. [2020-07-28 19:02:36,559 INFO L268 CegarLoopResult]: For program point L382-10(lines 382 388) no Hoare annotation was computed. [2020-07-28 19:02:36,559 INFO L264 CegarLoopResult]: At program point L416(lines 411 419) the Hoare annotation is: (and (<= 2 ~waterLevel~0) (<= ULTIMATE.start_activatePump_~tmp~4 0) (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~5) (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1)) (= 1 ~systemActive~0) (= 1 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2) (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) (<= ~waterLevel~0 2) (= 1 |ULTIMATE.start_isPumpRunning_#res|) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) (= 1 |ULTIMATE.start_isHighWaterLevel_#res|) (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1) (= 1 ~pumpRunning~0) (<= 0 ~methaneLevelCritical~0)) [2020-07-28 19:02:36,559 INFO L264 CegarLoopResult]: At program point L416-1(lines 411 419) the Hoare annotation is: false [2020-07-28 19:02:36,559 INFO L268 CegarLoopResult]: For program point L350(lines 350 358) no Hoare annotation was computed. [2020-07-28 19:02:36,559 INFO L264 CegarLoopResult]: At program point L416-2(lines 411 419) the Hoare annotation is: false [2020-07-28 19:02:36,559 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:02:36,559 INFO L268 CegarLoopResult]: For program point L350-1(lines 350 358) no Hoare annotation was computed. [2020-07-28 19:02:36,559 INFO L268 CegarLoopResult]: For program point L350-2(lines 350 358) no Hoare annotation was computed. [2020-07-28 19:02:36,560 INFO L268 CegarLoopResult]: For program point L53(lines 53 73) no Hoare annotation was computed. [2020-07-28 19:02:36,560 INFO L268 CegarLoopResult]: For program point L53-2(lines 53 73) no Hoare annotation was computed. [2020-07-28 19:02:36,560 INFO L268 CegarLoopResult]: For program point L53-4(lines 53 73) no Hoare annotation was computed. [2020-07-28 19:02:36,560 INFO L268 CegarLoopResult]: For program point L516(lines 516 527) no Hoare annotation was computed. [2020-07-28 19:02:36,560 INFO L268 CegarLoopResult]: For program point L320(lines 320 337) no Hoare annotation was computed. [2020-07-28 19:02:36,560 INFO L268 CegarLoopResult]: For program point L320-1(lines 320 337) no Hoare annotation was computed. [2020-07-28 19:02:36,560 INFO L268 CegarLoopResult]: For program point L320-2(lines 320 337) no Hoare annotation was computed. [2020-07-28 19:02:36,560 INFO L268 CegarLoopResult]: For program point L320-3(lines 320 337) no Hoare annotation was computed. [2020-07-28 19:02:36,560 INFO L268 CegarLoopResult]: For program point L320-4(lines 320 337) no Hoare annotation was computed. [2020-07-28 19:02:36,560 INFO L268 CegarLoopResult]: For program point L320-5(lines 320 337) no Hoare annotation was computed. [2020-07-28 19:02:36,561 INFO L268 CegarLoopResult]: For program point L89(lines 89 93) no Hoare annotation was computed. [2020-07-28 19:02:36,561 INFO L268 CegarLoopResult]: For program point L89-3(lines 89 93) no Hoare annotation was computed. [2020-07-28 19:02:36,561 INFO L268 CegarLoopResult]: For program point L89-6(lines 89 93) no Hoare annotation was computed. [2020-07-28 19:02:36,561 INFO L264 CegarLoopResult]: At program point L288(lines 287 306) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 2)) (.cse3 (= 0 ~pumpRunning~0)) (.cse1 (<= ~methaneLevelCritical~0 0)) (.cse4 (<= 0 ~methaneLevelCritical~0)) (.cse7 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse6 (= 1 ~methaneLevelCritical~0)) (.cse8 (<= ~waterLevel~0 1)) (.cse9 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse10 (= 1 ~pumpRunning~0)) (.cse5 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse0 .cse6 .cse2 .cse3 .cse5) (and .cse7 .cse0 .cse1 .cse8 .cse9 .cse4 .cse10 .cse5) (and .cse7 .cse0 .cse6 .cse8 .cse9 .cse10 .cse5))) [2020-07-28 19:02:36,561 INFO L268 CegarLoopResult]: For program point L288-1(lines 288 294) no Hoare annotation was computed. [2020-07-28 19:02:36,561 INFO L264 CegarLoopResult]: At program point L288-2(lines 287 306) the Hoare annotation is: false [2020-07-28 19:02:36,561 INFO L264 CegarLoopResult]: At program point L288-3(lines 287 306) the Hoare annotation is: false [2020-07-28 19:02:36,561 INFO L264 CegarLoopResult]: At program point L189-2(lines 189 203) the Hoare annotation is: false [2020-07-28 19:02:36,562 INFO L268 CegarLoopResult]: For program point L487(lines 486 531) no Hoare annotation was computed. [2020-07-28 19:02:36,562 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:02:36,562 INFO L268 CegarLoopResult]: For program point L190(line 190) no Hoare annotation was computed. [2020-07-28 19:02:36,562 INFO L268 CegarLoopResult]: For program point L488(lines 488 492) no Hoare annotation was computed. [2020-07-28 19:02:36,562 INFO L264 CegarLoopResult]: At program point L158(lines 153 161) the Hoare annotation is: (let ((.cse0 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse1 (<= ~methaneLevelCritical~0 0)) (.cse2 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse3 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse11 (<= ~waterLevel~0 1)) (.cse4 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse5 (= 1 ~systemActive~0)) (.cse12 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse6 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse8 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|)) (.cse9 (= 1 ~pumpRunning~0)) (.cse10 (<= 0 ~methaneLevelCritical~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~5) .cse3 .cse4 .cse5 (= 1 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2) .cse6 .cse7 .cse8 (<= ~waterLevel~0 2) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) (= 1 |ULTIMATE.start_isHighWaterLevel_#res|) (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1) .cse9 .cse10) (and .cse7 .cse6 .cse1 .cse2 (= 0 ~pumpRunning~0) .cse11 .cse10 .cse5 .cse12) (and .cse0 .cse1 .cse2 .cse3 .cse11 .cse4 .cse5 .cse12 .cse7 .cse6 .cse8 .cse9 .cse10))) [2020-07-28 19:02:36,562 INFO L264 CegarLoopResult]: At program point L158-1(lines 153 161) the Hoare annotation is: false [2020-07-28 19:02:36,562 INFO L264 CegarLoopResult]: At program point L158-2(lines 153 161) the Hoare annotation is: false [2020-07-28 19:02:36,562 INFO L268 CegarLoopResult]: For program point L59(lines 59 72) no Hoare annotation was computed. [2020-07-28 19:02:36,563 INFO L264 CegarLoopResult]: At program point L59-1(lines 1 949) the Hoare annotation is: (let ((.cse7 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse21 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse9 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse19 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|)) (.cse15 (= 1 ~pumpRunning~0)) (.cse18 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse16 (<= ~methaneLevelCritical~0 0)) (.cse20 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse4 (<= ~waterLevel~0 1)) (.cse17 (<= 0 ~methaneLevelCritical~0)) (.cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse10 (= 1 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 ~methaneLevelCritical~0)) (.cse11 (<= ~waterLevel~0 2)) (.cse12 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse3 (= 0 ~pumpRunning~0)) (.cse8 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~5)) (.cse5 (= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0)) (.cse13 (= 1 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse6 (= 1 ~systemActive~0)) (.cse14 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse2 .cse8 .cse9 .cse6 .cse10 .cse1 .cse11 .cse12 .cse5 .cse13 .cse14 .cse15) (and .cse1 .cse16 .cse3 (= 1 ~waterLevel~0) .cse17 .cse6) (and .cse18 .cse7 .cse1 .cse16 .cse19 .cse20 .cse21 .cse4 .cse9 .cse15 .cse17 .cse6) (and .cse0 .cse7 .cse1 .cse2 .cse4 .cse5 .cse9 .cse15 .cse6) (and .cse7 .cse16 .cse20 .cse8 .cse21 .cse9 .cse6 .cse10 .cse1 .cse18 .cse19 .cse11 .cse12 .cse13 .cse14 .cse15 .cse17) (and .cse18 .cse1 .cse16 .cse20 .cse3 .cse4 .cse17 .cse6) (and .cse0 .cse10 .cse1 .cse2 .cse11 .cse12 .cse3 .cse8 .cse5 .cse13 .cse6 .cse14))) [2020-07-28 19:02:36,563 INFO L268 CegarLoopResult]: For program point L59-2(lines 59 72) no Hoare annotation was computed. [2020-07-28 19:02:36,563 INFO L264 CegarLoopResult]: At program point L59-3(lines 1 949) the Hoare annotation is: false [2020-07-28 19:02:36,563 INFO L268 CegarLoopResult]: For program point L59-4(lines 59 72) no Hoare annotation was computed. [2020-07-28 19:02:36,563 INFO L264 CegarLoopResult]: At program point L59-5(lines 1 949) the Hoare annotation is: false [2020-07-28 19:02:36,563 INFO L268 CegarLoopResult]: For program point L522(lines 522 526) no Hoare annotation was computed. [2020-07-28 19:02:36,563 INFO L268 CegarLoopResult]: For program point L522-2(lines 288 294) no Hoare annotation was computed. [2020-07-28 19:02:36,564 INFO L268 CegarLoopResult]: For program point L324(lines 324 332) no Hoare annotation was computed. [2020-07-28 19:02:36,564 INFO L268 CegarLoopResult]: For program point L324-1(lines 324 332) no Hoare annotation was computed. [2020-07-28 19:02:36,564 INFO L268 CegarLoopResult]: For program point L324-2(lines 324 332) no Hoare annotation was computed. [2020-07-28 19:02:36,564 INFO L268 CegarLoopResult]: For program point L324-3(lines 324 332) no Hoare annotation was computed. [2020-07-28 19:02:36,564 INFO L268 CegarLoopResult]: For program point L324-4(lines 324 332) no Hoare annotation was computed. [2020-07-28 19:02:36,564 INFO L268 CegarLoopResult]: For program point L324-5(lines 324 332) no Hoare annotation was computed. [2020-07-28 19:02:36,564 INFO L264 CegarLoopResult]: At program point L126(lines 121 129) the Hoare annotation is: (let ((.cse0 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (<= ~waterLevel~0 1)) (.cse3 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse4 (= 1 ~pumpRunning~0)) (.cse5 (= 1 ~systemActive~0))) (or (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 .cse1 (= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 .cse5) (and (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse0 .cse1 (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse2 .cse3 .cse4 (<= 0 ~methaneLevelCritical~0) .cse5))) [2020-07-28 19:02:36,564 INFO L264 CegarLoopResult]: At program point L126-1(lines 121 129) the Hoare annotation is: false [2020-07-28 19:02:36,565 INFO L264 CegarLoopResult]: At program point L126-2(lines 121 129) the Hoare annotation is: (let ((.cse3 (= 1 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2)) (.cse0 (<= 2 ~waterLevel~0)) (.cse4 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse7 (= 0 ~pumpRunning~0)) (.cse1 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~5)) (.cse8 (= 1 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse9 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 (<= ~methaneLevelCritical~0 0) (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse1 .cse2 .cse3 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0) .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 (<= 0 ~methaneLevelCritical~0)) (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse3 .cse0 .cse4 (= 1 ~methaneLevelCritical~0) .cse5 .cse6 .cse7 .cse1 .cse8 .cse9 .cse2))) [2020-07-28 19:02:36,565 INFO L264 CegarLoopResult]: At program point L126-3(lines 121 129) the Hoare annotation is: (let ((.cse19 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse17 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|)) (.cse11 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse7 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~5)) (.cse13 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse1 (= 1 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2)) (.cse4 (<= ~waterLevel~0 2)) (.cse5 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse8 (= 1 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse9 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse14 (= 1 ~pumpRunning~0)) (.cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse3 (= 1 ~methaneLevelCritical~0)) (.cse15 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse16 (<= ~methaneLevelCritical~0 0)) (.cse18 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse6 (= 0 ~pumpRunning~0)) (.cse12 (<= ~waterLevel~0 1)) (.cse20 (<= 0 ~methaneLevelCritical~0)) (.cse10 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse11 .cse2 .cse3 .cse12 .cse13 .cse14 .cse10) (and .cse15 .cse11 .cse2 .cse16 .cse17 .cse18 .cse19 .cse12 .cse13 .cse14 .cse20 .cse10) (and .cse11 .cse16 .cse18 .cse7 .cse19 .cse13 .cse10 .cse1 .cse2 .cse15 .cse17 .cse4 .cse5 .cse8 .cse9 .cse14 .cse20) (and .cse0 .cse11 .cse3 .cse7 .cse13 .cse10 .cse1 .cse2 .cse4 .cse5 .cse8 .cse9 .cse14) (and .cse0 .cse2 .cse3 .cse6 .cse12 .cse10) (and .cse15 .cse2 .cse16 .cse18 .cse6 .cse12 .cse20 .cse10))) [2020-07-28 19:02:36,565 INFO L264 CegarLoopResult]: At program point L126-4(lines 121 129) the Hoare annotation is: false [2020-07-28 19:02:36,565 INFO L264 CegarLoopResult]: At program point L126-5(lines 121 129) the Hoare annotation is: false [2020-07-28 19:02:36,565 INFO L264 CegarLoopResult]: At program point L126-6(lines 121 129) the Hoare annotation is: false [2020-07-28 19:02:36,565 INFO L264 CegarLoopResult]: At program point L126-7(lines 121 129) the Hoare annotation is: false [2020-07-28 19:02:36,565 INFO L264 CegarLoopResult]: At program point L126-8(lines 121 129) the Hoare annotation is: false [2020-07-28 19:02:36,566 INFO L264 CegarLoopResult]: At program point L126-9(lines 121 129) the Hoare annotation is: false [2020-07-28 19:02:36,566 INFO L264 CegarLoopResult]: At program point L126-10(lines 121 129) the Hoare annotation is: false [2020-07-28 19:02:36,566 INFO L264 CegarLoopResult]: At program point L126-11(lines 121 129) the Hoare annotation is: false [2020-07-28 19:02:36,566 INFO L268 CegarLoopResult]: For program point L193(lines 193 197) no Hoare annotation was computed. [2020-07-28 19:02:36,566 INFO L268 CegarLoopResult]: For program point L193-1(lines 288 294) no Hoare annotation was computed. [2020-07-28 19:02:36,566 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:02:36,566 INFO L268 CegarLoopResult]: For program point L63(lines 63 69) no Hoare annotation was computed. [2020-07-28 19:02:36,566 INFO L268 CegarLoopResult]: For program point L63-2(lines 63 69) no Hoare annotation was computed. [2020-07-28 19:02:36,566 INFO L268 CegarLoopResult]: For program point L63-4(lines 63 69) no Hoare annotation was computed. [2020-07-28 19:02:36,567 INFO L264 CegarLoopResult]: At program point L295(lines 295 301) the Hoare annotation is: (let ((.cse5 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse7 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0)) (.cse0 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse4 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|)) (.cse12 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse1 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse14 (= 1 ~methaneLevelCritical~0)) (.cse18 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~5)) (.cse8 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse13 (= 1 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2)) (.cse15 (<= ~waterLevel~0 2)) (.cse16 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse19 (= 1 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse20 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse9 (= 1 ~pumpRunning~0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (<= ~methaneLevelCritical~0 0)) (.cse17 (= 0 ~pumpRunning~0)) (.cse6 (<= ~waterLevel~0 1)) (.cse10 (<= 0 ~methaneLevelCritical~0)) (.cse11 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse12 .cse13 .cse2 .cse14 .cse15 .cse16 .cse17 .cse18 .cse19 .cse20 .cse11) (and .cse12 .cse1 .cse2 .cse14 .cse6 .cse8 .cse9 .cse11) (and .cse2 .cse14 .cse17 .cse6 .cse11) (and .cse1 .cse3 .cse5 .cse18 .cse7 .cse8 .cse11 .cse13 .cse2 .cse0 .cse4 .cse15 .cse16 .cse19 .cse20 .cse9 .cse10) (and .cse12 .cse1 .cse14 .cse18 .cse8 .cse11 .cse13 .cse2 .cse15 .cse16 .cse19 .cse20 .cse9) (and .cse2 .cse3 .cse17 .cse6 .cse10 .cse11))) [2020-07-28 19:02:36,567 INFO L264 CegarLoopResult]: At program point L295-1(lines 295 301) the Hoare annotation is: false [2020-07-28 19:02:36,567 INFO L264 CegarLoopResult]: At program point L295-2(lines 295 301) the Hoare annotation is: false [2020-07-28 19:02:36,567 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:02:36,567 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 580) no Hoare annotation was computed. [2020-07-28 19:02:36,567 INFO L268 CegarLoopResult]: For program point L496(lines 496 502) no Hoare annotation was computed. [2020-07-28 19:02:36,567 INFO L264 CegarLoopResult]: At program point L496-1(lines 496 502) the Hoare annotation is: (let ((.cse1 (<= ULTIMATE.start_activatePump_~tmp~4 0)) (.cse5 (< 0 (+ ULTIMATE.start_activatePump_~tmp~4 1))) (.cse7 (= 1 ~pumpRunning~0)) (.cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse13 (<= 2 ~waterLevel~0)) (.cse3 (= 1 ~methaneLevelCritical~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse6 (= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0)) (.cse14 (<= |ULTIMATE.start_isMethaneLevelCritical_#res| 0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse11 (<= ~methaneLevelCritical~0 0)) (.cse15 (<= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse9 (= 0 ~pumpRunning~0)) (.cse10 (<= ~waterLevel~0 1)) (.cse12 (<= 0 ~methaneLevelCritical~0)) (.cse8 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse2 .cse3 .cse9 .cse10 .cse6 .cse8) (and .cse2 .cse11 .cse9 (= 1 ~waterLevel~0) .cse12 .cse8) (and .cse13 .cse2 .cse11 .cse4 .cse9 .cse12 .cse8) (and .cse14 .cse1 .cse2 .cse11 (<= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse15 .cse4 (<= |ULTIMATE.start_isMethaneAlarm_#res| 0) .cse5 .cse7 .cse12 .cse8) (and .cse0 .cse13 .cse2 .cse3 .cse4 .cse9 .cse6 .cse8) (and .cse14 .cse2 .cse11 .cse15 .cse9 .cse10 .cse12 .cse8))) [2020-07-28 19:02:36,568 INFO L268 CegarLoopResult]: For program point L265(lines 265 272) no Hoare annotation was computed. [2020-07-28 19:02:36,568 INFO L271 CegarLoopResult]: At program point L265-1(lines 265 272) the Hoare annotation is: true [2020-07-28 19:02:36,568 INFO L268 CegarLoopResult]: For program point L166(lines 166 172) no Hoare annotation was computed. [2020-07-28 19:02:36,568 INFO L268 CegarLoopResult]: For program point L166-1(lines 166 172) no Hoare annotation was computed. [2020-07-28 19:02:36,568 INFO L268 CegarLoopResult]: For program point L166-2(lines 166 172) no Hoare annotation was computed. [2020-07-28 19:02:36,568 INFO L268 CegarLoopResult]: For program point L166-3(lines 166 172) no Hoare annotation was computed. [2020-07-28 19:02:36,568 INFO L268 CegarLoopResult]: For program point L166-4(lines 166 172) no Hoare annotation was computed. [2020-07-28 19:02:36,568 INFO L268 CegarLoopResult]: For program point L166-5(lines 166 172) no Hoare annotation was computed. [2020-07-28 19:02:36,568 INFO L264 CegarLoopResult]: At program point L563(lines 1 949) the Hoare annotation is: (and (<= ~methaneLevelCritical~0 0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0) (<= 0 ~methaneLevelCritical~0)) [2020-07-28 19:02:36,569 INFO L268 CegarLoopResult]: For program point L101(lines 101 105) no Hoare annotation was computed. [2020-07-28 19:02:36,573 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:02:36,573 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:02:36,578 WARN L170 areAnnotationChecker]: L265 has no Hoare annotation [2020-07-28 19:02:36,578 WARN L170 areAnnotationChecker]: L265 has no Hoare annotation [2020-07-28 19:02:36,578 WARN L170 areAnnotationChecker]: L265 has no Hoare annotation [2020-07-28 19:02:36,580 WARN L170 areAnnotationChecker]: L487 has no Hoare annotation [2020-07-28 19:02:36,580 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:02:36,580 WARN L170 areAnnotationChecker]: L288-1 has no Hoare annotation [2020-07-28 19:02:36,580 WARN L170 areAnnotationChecker]: L487 has no Hoare annotation [2020-07-28 19:02:36,580 WARN L170 areAnnotationChecker]: L487 has no Hoare annotation [2020-07-28 19:02:36,581 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:02:36,581 WARN L170 areAnnotationChecker]: L288-1 has no Hoare annotation [2020-07-28 19:02:36,581 WARN L170 areAnnotationChecker]: L288-1 has no Hoare annotation [2020-07-28 19:02:36,581 WARN L170 areAnnotationChecker]: L488 has no Hoare annotation [2020-07-28 19:02:36,581 WARN L170 areAnnotationChecker]: L89-3 has no Hoare annotation [2020-07-28 19:02:36,581 WARN L170 areAnnotationChecker]: L89-3 has no Hoare annotation [2020-07-28 19:02:36,581 WARN L170 areAnnotationChecker]: L346-1 has no Hoare annotation [2020-07-28 19:02:36,582 WARN L170 areAnnotationChecker]: L496 has no Hoare annotation [2020-07-28 19:02:36,582 WARN L170 areAnnotationChecker]: L496 has no Hoare annotation [2020-07-28 19:02:36,582 WARN L170 areAnnotationChecker]: L346-1 has no Hoare annotation [2020-07-28 19:02:36,582 WARN L170 areAnnotationChecker]: L346-1 has no Hoare annotation [2020-07-28 19:02:36,582 WARN L170 areAnnotationChecker]: L101 has no Hoare annotation [2020-07-28 19:02:36,582 WARN L170 areAnnotationChecker]: L101 has no Hoare annotation [2020-07-28 19:02:36,582 WARN L170 areAnnotationChecker]: L506 has no Hoare annotation [2020-07-28 19:02:36,583 WARN L170 areAnnotationChecker]: L320-3 has no Hoare annotation [2020-07-28 19:02:36,583 WARN L170 areAnnotationChecker]: L320-3 has no Hoare annotation [2020-07-28 19:02:36,583 WARN L170 areAnnotationChecker]: L53-2 has no Hoare annotation [2020-07-28 19:02:36,583 WARN L170 areAnnotationChecker]: L506 has no Hoare annotation [2020-07-28 19:02:36,583 WARN L170 areAnnotationChecker]: L506 has no Hoare annotation [2020-07-28 19:02:36,583 WARN L170 areAnnotationChecker]: L350-1 has no Hoare annotation [2020-07-28 19:02:36,583 WARN L170 areAnnotationChecker]: L166-3 has no Hoare annotation [2020-07-28 19:02:36,584 WARN L170 areAnnotationChecker]: L166-3 has no Hoare annotation [2020-07-28 19:02:36,584 WARN L170 areAnnotationChecker]: L53-2 has no Hoare annotation [2020-07-28 19:02:36,584 WARN L170 areAnnotationChecker]: L53-2 has no Hoare annotation [2020-07-28 19:02:36,584 WARN L170 areAnnotationChecker]: L113 has no Hoare annotation [2020-07-28 19:02:36,584 WARN L170 areAnnotationChecker]: L113 has no Hoare annotation [2020-07-28 19:02:36,584 WARN L170 areAnnotationChecker]: L516 has no Hoare annotation [2020-07-28 19:02:36,584 WARN L170 areAnnotationChecker]: L350-1 has no Hoare annotation [2020-07-28 19:02:36,584 WARN L170 areAnnotationChecker]: L350-1 has no Hoare annotation [2020-07-28 19:02:36,584 WARN L170 areAnnotationChecker]: L465-9 has no Hoare annotation [2020-07-28 19:02:36,584 WARN L170 areAnnotationChecker]: L59-2 has no Hoare annotation [2020-07-28 19:02:36,584 WARN L170 areAnnotationChecker]: L516 has no Hoare annotation [2020-07-28 19:02:36,585 WARN L170 areAnnotationChecker]: L516 has no Hoare annotation [2020-07-28 19:02:36,585 WARN L170 areAnnotationChecker]: L320-2 has no Hoare annotation [2020-07-28 19:02:36,585 WARN L170 areAnnotationChecker]: L320-2 has no Hoare annotation [2020-07-28 19:02:36,585 WARN L170 areAnnotationChecker]: L465-9 has no Hoare annotation [2020-07-28 19:02:36,585 WARN L170 areAnnotationChecker]: L465-9 has no Hoare annotation [2020-07-28 19:02:36,585 WARN L170 areAnnotationChecker]: L190 has no Hoare annotation [2020-07-28 19:02:36,585 WARN L170 areAnnotationChecker]: L59-2 has no Hoare annotation [2020-07-28 19:02:36,585 WARN L170 areAnnotationChecker]: L59-2 has no Hoare annotation [2020-07-28 19:02:36,585 WARN L170 areAnnotationChecker]: L522-2 has no Hoare annotation [2020-07-28 19:02:36,585 WARN L170 areAnnotationChecker]: L522-2 has no Hoare annotation [2020-07-28 19:02:36,585 WARN L170 areAnnotationChecker]: L522 has no Hoare annotation [2020-07-28 19:02:36,586 WARN L170 areAnnotationChecker]: L522 has no Hoare annotation [2020-07-28 19:02:36,586 WARN L170 areAnnotationChecker]: L166-2 has no Hoare annotation [2020-07-28 19:02:36,586 WARN L170 areAnnotationChecker]: L166-2 has no Hoare annotation [2020-07-28 19:02:36,586 WARN L170 areAnnotationChecker]: L465-11 has no Hoare annotation [2020-07-28 19:02:36,586 WARN L170 areAnnotationChecker]: L190 has no Hoare annotation [2020-07-28 19:02:36,586 WARN L170 areAnnotationChecker]: L63-2 has no Hoare annotation [2020-07-28 19:02:36,586 WARN L170 areAnnotationChecker]: L89 has no Hoare annotation [2020-07-28 19:02:36,586 WARN L170 areAnnotationChecker]: L89 has no Hoare annotation [2020-07-28 19:02:36,586 WARN L170 areAnnotationChecker]: L346 has no Hoare annotation [2020-07-28 19:02:36,587 WARN L170 areAnnotationChecker]: L465-6 has no Hoare annotation [2020-07-28 19:02:36,588 WARN L170 areAnnotationChecker]: L324-3 has no Hoare annotation [2020-07-28 19:02:36,588 WARN L170 areAnnotationChecker]: L193 has no Hoare annotation [2020-07-28 19:02:36,588 WARN L170 areAnnotationChecker]: L193 has no Hoare annotation [2020-07-28 19:02:36,588 WARN L170 areAnnotationChecker]: L63-2 has no Hoare annotation [2020-07-28 19:02:36,588 WARN L170 areAnnotationChecker]: L63-2 has no Hoare annotation [2020-07-28 19:02:36,588 WARN L170 areAnnotationChecker]: L346 has no Hoare annotation [2020-07-28 19:02:36,588 WARN L170 areAnnotationChecker]: L346 has no Hoare annotation [2020-07-28 19:02:36,590 WARN L170 areAnnotationChecker]: L465-6 has no Hoare annotation [2020-07-28 19:02:36,590 WARN L170 areAnnotationChecker]: L465-6 has no Hoare annotation [2020-07-28 19:02:36,590 WARN L170 areAnnotationChecker]: L324-3 has no Hoare annotation [2020-07-28 19:02:36,590 WARN L170 areAnnotationChecker]: L324-3 has no Hoare annotation [2020-07-28 19:02:36,590 WARN L170 areAnnotationChecker]: L193-1 has no Hoare annotation [2020-07-28 19:02:36,590 WARN L170 areAnnotationChecker]: L193-1 has no Hoare annotation [2020-07-28 19:02:36,591 WARN L170 areAnnotationChecker]: L580-1 has no Hoare annotation [2020-07-28 19:02:36,591 WARN L170 areAnnotationChecker]: L580-1 has no Hoare annotation [2020-07-28 19:02:36,593 WARN L170 areAnnotationChecker]: L320-1 has no Hoare annotation [2020-07-28 19:02:36,593 WARN L170 areAnnotationChecker]: L320-1 has no Hoare annotation [2020-07-28 19:02:36,593 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:02:36,593 WARN L170 areAnnotationChecker]: L465-8 has no Hoare annotation [2020-07-28 19:02:36,593 WARN L170 areAnnotationChecker]: L89-6 has no Hoare annotation [2020-07-28 19:02:36,593 WARN L170 areAnnotationChecker]: L89-6 has no Hoare annotation [2020-07-28 19:02:36,593 WARN L170 areAnnotationChecker]: L346-2 has no Hoare annotation [2020-07-28 19:02:36,593 WARN L170 areAnnotationChecker]: L350 has no Hoare annotation [2020-07-28 19:02:36,593 WARN L170 areAnnotationChecker]: L166-1 has no Hoare annotation [2020-07-28 19:02:36,593 WARN L170 areAnnotationChecker]: L166-1 has no Hoare annotation [2020-07-28 19:02:36,593 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:02:36,594 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:02:36,594 WARN L170 areAnnotationChecker]: L324-2 has no Hoare annotation [2020-07-28 19:02:36,594 WARN L170 areAnnotationChecker]: L382-6 has no Hoare annotation [2020-07-28 19:02:36,594 WARN L170 areAnnotationChecker]: L346-2 has no Hoare annotation [2020-07-28 19:02:36,594 WARN L170 areAnnotationChecker]: L346-2 has no Hoare annotation [2020-07-28 19:02:36,594 WARN L170 areAnnotationChecker]: L350 has no Hoare annotation [2020-07-28 19:02:36,594 WARN L170 areAnnotationChecker]: L350 has no Hoare annotation [2020-07-28 19:02:36,594 WARN L170 areAnnotationChecker]: L465-3 has no Hoare annotation [2020-07-28 19:02:36,594 WARN L170 areAnnotationChecker]: L59 has no Hoare annotation [2020-07-28 19:02:36,594 WARN L170 areAnnotationChecker]: L324-2 has no Hoare annotation [2020-07-28 19:02:36,594 WARN L170 areAnnotationChecker]: L324-2 has no Hoare annotation [2020-07-28 19:02:36,594 WARN L170 areAnnotationChecker]: L382-6 has no Hoare annotation [2020-07-28 19:02:36,595 WARN L170 areAnnotationChecker]: L382-6 has no Hoare annotation [2020-07-28 19:02:36,595 WARN L170 areAnnotationChecker]: L320-5 has no Hoare annotation [2020-07-28 19:02:36,595 WARN L170 areAnnotationChecker]: L320-5 has no Hoare annotation [2020-07-28 19:02:36,595 WARN L170 areAnnotationChecker]: L53-4 has no Hoare annotation [2020-07-28 19:02:36,595 WARN L170 areAnnotationChecker]: L320 has no Hoare annotation [2020-07-28 19:02:36,595 WARN L170 areAnnotationChecker]: L320 has no Hoare annotation [2020-07-28 19:02:36,595 WARN L170 areAnnotationChecker]: L465-3 has no Hoare annotation [2020-07-28 19:02:36,595 WARN L170 areAnnotationChecker]: L465-3 has no Hoare annotation [2020-07-28 19:02:36,595 WARN L170 areAnnotationChecker]: L59 has no Hoare annotation [2020-07-28 19:02:36,595 WARN L170 areAnnotationChecker]: L59 has no Hoare annotation [2020-07-28 19:02:36,595 WARN L170 areAnnotationChecker]: L350-2 has no Hoare annotation [2020-07-28 19:02:36,596 WARN L170 areAnnotationChecker]: L166-5 has no Hoare annotation [2020-07-28 19:02:36,596 WARN L170 areAnnotationChecker]: L166-5 has no Hoare annotation [2020-07-28 19:02:36,596 WARN L170 areAnnotationChecker]: L53-4 has no Hoare annotation [2020-07-28 19:02:36,596 WARN L170 areAnnotationChecker]: L53-4 has no Hoare annotation [2020-07-28 19:02:36,596 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2020-07-28 19:02:36,596 WARN L170 areAnnotationChecker]: L166 has no Hoare annotation [2020-07-28 19:02:36,596 WARN L170 areAnnotationChecker]: L465-5 has no Hoare annotation [2020-07-28 19:02:36,596 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2020-07-28 19:02:36,596 WARN L170 areAnnotationChecker]: L382-4 has no Hoare annotation [2020-07-28 19:02:36,596 WARN L170 areAnnotationChecker]: L350-2 has no Hoare annotation [2020-07-28 19:02:36,596 WARN L170 areAnnotationChecker]: L350-2 has no Hoare annotation [2020-07-28 19:02:36,596 WARN L170 areAnnotationChecker]: L465-15 has no Hoare annotation [2020-07-28 19:02:36,597 WARN L170 areAnnotationChecker]: L59-4 has no Hoare annotation [2020-07-28 19:02:36,597 WARN L170 areAnnotationChecker]: L465 has no Hoare annotation [2020-07-28 19:02:36,597 WARN L170 areAnnotationChecker]: L324-1 has no Hoare annotation [2020-07-28 19:02:36,597 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2020-07-28 19:02:36,597 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2020-07-28 19:02:36,597 WARN L170 areAnnotationChecker]: L382-4 has no Hoare annotation [2020-07-28 19:02:36,597 WARN L170 areAnnotationChecker]: L382-4 has no Hoare annotation [2020-07-28 19:02:36,597 WARN L170 areAnnotationChecker]: L320-4 has no Hoare annotation [2020-07-28 19:02:36,597 WARN L170 areAnnotationChecker]: L320-4 has no Hoare annotation [2020-07-28 19:02:36,597 WARN L170 areAnnotationChecker]: L465-15 has no Hoare annotation [2020-07-28 19:02:36,597 WARN L170 areAnnotationChecker]: L465-15 has no Hoare annotation [2020-07-28 19:02:36,597 WARN L170 areAnnotationChecker]: L59-4 has no Hoare annotation [2020-07-28 19:02:36,598 WARN L170 areAnnotationChecker]: L59-4 has no Hoare annotation [2020-07-28 19:02:36,598 WARN L170 areAnnotationChecker]: L465 has no Hoare annotation [2020-07-28 19:02:36,598 WARN L170 areAnnotationChecker]: L465 has no Hoare annotation [2020-07-28 19:02:36,598 WARN L170 areAnnotationChecker]: L324-1 has no Hoare annotation [2020-07-28 19:02:36,598 WARN L170 areAnnotationChecker]: L324-1 has no Hoare annotation [2020-07-28 19:02:36,598 WARN L170 areAnnotationChecker]: L580 has no Hoare annotation [2020-07-28 19:02:36,598 WARN L170 areAnnotationChecker]: L580 has no Hoare annotation [2020-07-28 19:02:36,598 WARN L170 areAnnotationChecker]: L166-4 has no Hoare annotation [2020-07-28 19:02:36,598 WARN L170 areAnnotationChecker]: L166-4 has no Hoare annotation [2020-07-28 19:02:36,598 WARN L170 areAnnotationChecker]: L465-17 has no Hoare annotation [2020-07-28 19:02:36,599 WARN L170 areAnnotationChecker]: L63-4 has no Hoare annotation [2020-07-28 19:02:36,599 WARN L170 areAnnotationChecker]: L465-2 has no Hoare annotation [2020-07-28 19:02:36,601 WARN L170 areAnnotationChecker]: L465-12 has no Hoare annotation [2020-07-28 19:02:36,601 WARN L170 areAnnotationChecker]: L324-5 has no Hoare annotation [2020-07-28 19:02:36,601 WARN L170 areAnnotationChecker]: L63-4 has no Hoare annotation [2020-07-28 19:02:36,601 WARN L170 areAnnotationChecker]: L63-4 has no Hoare annotation [2020-07-28 19:02:36,601 WARN L170 areAnnotationChecker]: L324 has no Hoare annotation [2020-07-28 19:02:36,601 WARN L170 areAnnotationChecker]: L382-2 has no Hoare annotation [2020-07-28 19:02:36,601 WARN L170 areAnnotationChecker]: L465-12 has no Hoare annotation [2020-07-28 19:02:36,601 WARN L170 areAnnotationChecker]: L465-12 has no Hoare annotation [2020-07-28 19:02:36,602 WARN L170 areAnnotationChecker]: L324-5 has no Hoare annotation [2020-07-28 19:02:36,602 WARN L170 areAnnotationChecker]: L324-5 has no Hoare annotation [2020-07-28 19:02:36,602 WARN L170 areAnnotationChecker]: L580-2 has no Hoare annotation [2020-07-28 19:02:36,602 WARN L170 areAnnotationChecker]: L580-2 has no Hoare annotation [2020-07-28 19:02:36,602 WARN L170 areAnnotationChecker]: L324 has no Hoare annotation [2020-07-28 19:02:36,602 WARN L170 areAnnotationChecker]: L324 has no Hoare annotation [2020-07-28 19:02:36,602 WARN L170 areAnnotationChecker]: L382-2 has no Hoare annotation [2020-07-28 19:02:36,602 WARN L170 areAnnotationChecker]: L382-2 has no Hoare annotation [2020-07-28 19:02:36,602 WARN L170 areAnnotationChecker]: L465-14 has no Hoare annotation [2020-07-28 19:02:36,602 WARN L170 areAnnotationChecker]: L324-4 has no Hoare annotation [2020-07-28 19:02:36,602 WARN L170 areAnnotationChecker]: L382-10 has no Hoare annotation [2020-07-28 19:02:36,603 WARN L170 areAnnotationChecker]: L382 has no Hoare annotation [2020-07-28 19:02:36,603 WARN L170 areAnnotationChecker]: L324-4 has no Hoare annotation [2020-07-28 19:02:36,603 WARN L170 areAnnotationChecker]: L324-4 has no Hoare annotation [2020-07-28 19:02:36,603 WARN L170 areAnnotationChecker]: L382-10 has no Hoare annotation [2020-07-28 19:02:36,603 WARN L170 areAnnotationChecker]: L382-10 has no Hoare annotation [2020-07-28 19:02:36,603 WARN L170 areAnnotationChecker]: L382 has no Hoare annotation [2020-07-28 19:02:36,603 WARN L170 areAnnotationChecker]: L382 has no Hoare annotation [2020-07-28 19:02:36,603 WARN L170 areAnnotationChecker]: L382-8 has no Hoare annotation [2020-07-28 19:02:36,603 WARN L170 areAnnotationChecker]: L382-8 has no Hoare annotation [2020-07-28 19:02:36,603 WARN L170 areAnnotationChecker]: L382-8 has no Hoare annotation [2020-07-28 19:02:36,603 INFO L163 areAnnotationChecker]: CFG has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:02:36,656 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:02:36 BoogieIcfgContainer [2020-07-28 19:02:36,656 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:02:36,657 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:02:36,657 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:02:36,657 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:02:36,658 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:01:51" (3/4) ... [2020-07-28 19:02:36,661 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:02:36,681 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:02:36,682 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:02:36,684 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:02:36,685 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:02:36,686 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:02:36,687 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:02:36,688 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:02:36,720 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && 1 == tmp) && 1 == systemActive) || (((((((((((((1 == \result && tmp <= 0) && 1 == methaneLevelCritical) && 0 == tmp) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning)) || (((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && 1 == waterLevel) && 0 <= methaneLevelCritical) && 1 == systemActive)) || (((((((((((\result <= 0 && tmp <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 <= \result) && \result <= 0) && waterLevel <= 1) && 0 < tmp + 1) && 1 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive)) || ((((((((1 == \result && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 1) && 1 == tmp) && 0 < tmp + 1) && 1 == pumpRunning) && 1 == systemActive)) || ((((((((((((((((tmp <= 0 && methaneLevelCritical <= 0) && 0 <= \result) && 0 == tmp) && \result <= 0) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && 0 == splverifierCounter) && \result <= 0) && 0 <= \result) && waterLevel <= 2) && 0 == \result) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning) && 0 <= methaneLevelCritical)) || (((((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && waterLevel <= 1) && 0 <= methaneLevelCritical) && 1 == systemActive)) || (((((((((((1 == \result && 1 == tmp) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == tmp) && 1 == \result) && 1 == systemActive) && 1 == tmp___0) [2020-07-28 19:02:36,720 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((1 == \result && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 < tmp + 1) && 1 == tmp) && 1 == pumpRunning) && 1 == systemActive) || ((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && 1 == tmp) && 1 == systemActive)) || (((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && 1 == waterLevel) && 0 <= methaneLevelCritical) && 1 == systemActive)) || ((((((2 <= waterLevel && 0 == splverifierCounter) && methaneLevelCritical <= 0) && waterLevel <= 2) && 0 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive)) || (((((((((((\result <= 0 && tmp <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 <= \result) && waterLevel <= 2) && \result <= 0) && 0 < tmp + 1) && 1 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive)) || (((((((1 == \result && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && 1 == tmp) && 1 == systemActive)) || (((((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && waterLevel <= 1) && 0 <= methaneLevelCritical) && 1 == systemActive) [2020-07-28 19:02:36,721 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((\result <= 0 && tmp <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 <= \result) && waterLevel <= 1) && \result <= 0) && 0 < tmp + 1) && 1 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive) || ((((((((((1 == \result && 1 == tmp) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) && 1 == systemActive)) || (((((((1 == \result && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 1) && 0 < tmp + 1) && 1 == pumpRunning) && 1 == systemActive)) || ((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive)) || ((((((((((((((((tmp <= 0 && methaneLevelCritical <= 0) && 0 <= \result) && 0 == tmp) && \result <= 0) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && 0 == splverifierCounter) && \result <= 0) && 0 <= \result) && waterLevel <= 2) && 0 == \result) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning) && 0 <= methaneLevelCritical)) || ((((((((((((1 == \result && tmp <= 0) && 1 == methaneLevelCritical) && 0 == tmp) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning)) || (((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && waterLevel <= 1) && 0 <= methaneLevelCritical) && 1 == systemActive) [2020-07-28 19:02:36,723 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == \result && 1 == tmp) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) && 1 == systemActive) || (((((((1 == \result && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 1) && 0 < tmp + 1) && 1 == pumpRunning) && 1 == systemActive)) || (((((((((((\result <= 0 && tmp <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 <= \result) && \result <= 0) && waterLevel <= 1) && 0 < tmp + 1) && 1 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive)) || ((((((((((((((((tmp <= 0 && methaneLevelCritical <= 0) && 0 <= \result) && 0 == tmp) && \result <= 0) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && 0 == splverifierCounter) && \result <= 0) && 0 <= \result) && waterLevel <= 2) && 0 == \result) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning) && 0 <= methaneLevelCritical)) || ((((((((((((1 == \result && tmp <= 0) && 1 == methaneLevelCritical) && 0 == tmp) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning)) || (((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive)) || (((((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && waterLevel <= 1) && 0 <= methaneLevelCritical) && 1 == systemActive) [2020-07-28 19:02:36,723 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((1 == \result && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 1) && 0 < tmp + 1) && 1 == pumpRunning) && 1 == systemActive) || (((((((((\result <= 0 && tmp <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && waterLevel <= 1) && 0 < tmp + 1) && 1 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive) [2020-07-28 19:02:36,724 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((\result <= 0 && tmp <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 <= \result) && waterLevel <= 1) && \result <= 0) && 0 < tmp + 1) && 1 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive) || (((((((1 == \result && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 1) && 0 < tmp + 1) && 1 == pumpRunning) && 1 == systemActive) [2020-07-28 19:02:36,724 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result)) && 0 <= methaneLevelCritical) && 1 == systemActive) || (((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result)) && 1 == systemActive)) || ((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive)) || (((((((2 <= waterLevel && 0 == splverifierCounter) && methaneLevelCritical <= 0) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive) [2020-07-28 19:02:36,724 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((2 <= waterLevel && tmp <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == tmp) && \result <= 0) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && \result <= 0) && 0 == splverifierCounter) && 0 <= \result) && waterLevel <= 2) && 0 == \result) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning) && 0 <= methaneLevelCritical) || ((((((((0 == splverifierCounter && \result <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && waterLevel <= 1) && 0 <= methaneLevelCritical) && 1 == systemActive) && \result <= 1)) || ((((((((((((tmp <= 0 && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && waterLevel <= 1) && 0 < tmp + 1) && 1 == systemActive) && \result <= 1) && 0 == splverifierCounter) && \result <= 0) && 0 <= \result) && 1 == pumpRunning) && 0 <= methaneLevelCritical) [2020-07-28 19:02:36,726 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0 == tmp___0 && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == tmp)) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result)) && 1 == systemActive) || ((((((((((2 <= waterLevel && 0 == splverifierCounter) && methaneLevelCritical <= 0) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) && 0 <= methaneLevelCritical) && 1 == systemActive)) || (((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) && 1 == systemActive)) || (((((((((0 == tmp___0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && !(0 == tmp)) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result)) && 0 <= methaneLevelCritical) && 1 == systemActive) [2020-07-28 19:02:36,726 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((2 <= waterLevel && tmp <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == tmp) && \result <= 0) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && \result <= 0) && 0 == splverifierCounter) && 0 <= \result) && waterLevel <= 2) && 1 == \result) && 0 == \result) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning) && 0 <= methaneLevelCritical [2020-07-28 19:02:36,728 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((2 <= waterLevel && methaneLevelCritical <= 0) && 0 <= \result) && 0 == tmp) && 1 == systemActive) && 1 == tmp) && \result <= 0) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == \result) && 1 == tmp___0) && 0 <= methaneLevelCritical) || (((((((((((1 == \result && 1 == tmp) && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) && 1 == systemActive) [2020-07-28 19:02:36,728 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((2 <= waterLevel && methaneLevelCritical <= 0) && 0 <= \result) && 0 == tmp) && \result <= 0) && 1 == systemActive) && 1 == tmp) && 0 == splverifierCounter) && \result <= 0) && 0 <= \result) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == \result) && 1 == tmp___0) && 0 <= methaneLevelCritical) || (((((((((((1 == \result && 1 == tmp) && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) && 1 == systemActive) [2020-07-28 19:02:36,828 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:02:36,828 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:02:36,831 INFO L168 Benchmark]: Toolchain (without parser) took 47878.79 ms. Allocated memory was 1.0 GB in the beginning and 1.7 GB in the end (delta: 703.6 MB). Free memory was 954.9 MB in the beginning and 1.6 GB in the end (delta: -679.2 MB). Peak memory consumption was 24.3 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:36,831 INFO L168 Benchmark]: CDTParser took 1.02 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:02:36,831 INFO L168 Benchmark]: CACSL2BoogieTranslator took 659.10 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 142.1 MB). Free memory was 954.9 MB in the beginning and 1.1 GB in the end (delta: -167.8 MB). Peak memory consumption was 31.8 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:36,832 INFO L168 Benchmark]: Boogie Procedure Inliner took 109.63 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:36,832 INFO L168 Benchmark]: Boogie Preprocessor took 76.42 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:36,832 INFO L168 Benchmark]: RCFGBuilder took 1961.93 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 916.2 MB in the end (delta: 193.1 MB). Peak memory consumption was 193.1 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:36,833 INFO L168 Benchmark]: TraceAbstraction took 44891.44 ms. Allocated memory was 1.2 GB in the beginning and 1.7 GB in the end (delta: 561.5 MB). Free memory was 916.2 MB in the beginning and 1.7 GB in the end (delta: -735.4 MB). There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:02:36,833 INFO L168 Benchmark]: Witness Printer took 171.61 ms. Allocated memory is still 1.7 GB. Free memory was 1.7 GB in the beginning and 1.6 GB in the end (delta: 17.5 MB). Peak memory consumption was 17.5 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:36,836 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 1.02 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 659.10 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 142.1 MB). Free memory was 954.9 MB in the beginning and 1.1 GB in the end (delta: -167.8 MB). Peak memory consumption was 31.8 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 109.63 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 76.42 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1961.93 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 916.2 MB in the end (delta: 193.1 MB). Peak memory consumption was 193.1 MB. Max. memory is 11.5 GB. * TraceAbstraction took 44891.44 ms. Allocated memory was 1.2 GB in the beginning and 1.7 GB in the end (delta: 561.5 MB). Free memory was 916.2 MB in the beginning and 1.7 GB in the end (delta: -735.4 MB). There was no memory consumed. Max. memory is 11.5 GB. * Witness Printer took 171.61 ms. Allocated memory is still 1.7 GB. Free memory was 1.7 GB in the beginning and 1.6 GB in the end (delta: 17.5 MB). Peak memory consumption was 17.5 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 580]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 580]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 580]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 456]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 255]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 456]: Loop Invariant Derived loop invariant: ((((((((((0 == tmp___0 && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == tmp)) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result)) && 1 == systemActive) || ((((((((((2 <= waterLevel && 0 == splverifierCounter) && methaneLevelCritical <= 0) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) && 0 <= methaneLevelCritical) && 1 == systemActive)) || (((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) && 1 == systemActive)) || (((((((((0 == tmp___0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && !(0 == tmp)) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result)) && 0 <= methaneLevelCritical) && 1 == systemActive) - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: (((((((((((((((((2 <= waterLevel && tmp <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == tmp) && \result <= 0) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && \result <= 0) && 0 == splverifierCounter) && 0 <= \result) && waterLevel <= 2) && 1 == \result) && 0 == \result) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning) && 0 <= methaneLevelCritical - InvariantResult [Line: 456]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: ((((((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result)) && 0 <= methaneLevelCritical) && 1 == systemActive) || (((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result)) && 1 == systemActive)) || ((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive)) || (((((((2 <= waterLevel && 0 == splverifierCounter) && methaneLevelCritical <= 0) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((methaneLevelCritical <= 0 && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) && 0 <= methaneLevelCritical - InvariantResult [Line: 287]: Loop Invariant Derived loop invariant: (((((((0 == splverifierCounter && methaneLevelCritical <= 0) && waterLevel <= 2) && 0 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive) || ((((0 == splverifierCounter && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive)) || (((((((tmp <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && waterLevel <= 1) && 0 < tmp + 1) && 0 <= methaneLevelCritical) && 1 == pumpRunning) && 1 == systemActive)) || ((((((tmp <= 0 && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 1) && 0 < tmp + 1) && 1 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && 1 == tmp) && 1 == systemActive) || (((((((((((((1 == \result && tmp <= 0) && 1 == methaneLevelCritical) && 0 == tmp) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning)) || (((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && 1 == waterLevel) && 0 <= methaneLevelCritical) && 1 == systemActive)) || (((((((((((\result <= 0 && tmp <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 <= \result) && \result <= 0) && waterLevel <= 1) && 0 < tmp + 1) && 1 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive)) || ((((((((1 == \result && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 1) && 1 == tmp) && 0 < tmp + 1) && 1 == pumpRunning) && 1 == systemActive)) || ((((((((((((((((tmp <= 0 && methaneLevelCritical <= 0) && 0 <= \result) && 0 == tmp) && \result <= 0) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && 0 == splverifierCounter) && \result <= 0) && 0 <= \result) && waterLevel <= 2) && 0 == \result) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning) && 0 <= methaneLevelCritical)) || (((((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && waterLevel <= 1) && 0 <= methaneLevelCritical) && 1 == systemActive)) || (((((((((((1 == \result && 1 == tmp) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == tmp) && 1 == \result) && 1 == systemActive) && 1 == tmp___0) - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 153]: Loop Invariant Derived loop invariant: ((((((((((((((((((2 <= waterLevel && tmp <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == tmp) && \result <= 0) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && \result <= 0) && 0 == splverifierCounter) && 0 <= \result) && waterLevel <= 2) && 0 == \result) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning) && 0 <= methaneLevelCritical) || ((((((((0 == splverifierCounter && \result <= 0) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && waterLevel <= 1) && 0 <= methaneLevelCritical) && 1 == systemActive) && \result <= 1)) || ((((((((((((tmp <= 0 && methaneLevelCritical <= 0) && 0 <= \result) && \result <= 0) && waterLevel <= 1) && 0 < tmp + 1) && 1 == systemActive) && \result <= 1) && 0 == splverifierCounter) && \result <= 0) && 0 <= \result) && 1 == pumpRunning) && 0 <= methaneLevelCritical) - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 566]: Loop Invariant Derived loop invariant: (((methaneLevelCritical <= 0 && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) && 0 <= methaneLevelCritical - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 234]: Loop Invariant Derived loop invariant: (((methaneLevelCritical <= 0 && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) && 0 <= methaneLevelCritical - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 506]: Loop Invariant Derived loop invariant: (((((((0 == splverifierCounter && methaneLevelCritical <= 0) && waterLevel <= 2) && 0 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive) || (((((((tmp <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && waterLevel <= 2) && 0 < tmp + 1) && 0 <= methaneLevelCritical) && 1 == pumpRunning) && 1 == systemActive)) || ((((((tmp <= 0 && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 < tmp + 1) && 1 == pumpRunning) && 1 == systemActive)) || ((((0 == splverifierCounter && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: (((((((((((((((1 == \result && 1 == tmp) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) && 1 == systemActive) || (((((((1 == \result && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 1) && 0 < tmp + 1) && 1 == pumpRunning) && 1 == systemActive)) || (((((((((((\result <= 0 && tmp <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 <= \result) && \result <= 0) && waterLevel <= 1) && 0 < tmp + 1) && 1 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive)) || ((((((((((((((((tmp <= 0 && methaneLevelCritical <= 0) && 0 <= \result) && 0 == tmp) && \result <= 0) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && 0 == splverifierCounter) && \result <= 0) && 0 <= \result) && waterLevel <= 2) && 0 == \result) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning) && 0 <= methaneLevelCritical)) || ((((((((((((1 == \result && tmp <= 0) && 1 == methaneLevelCritical) && 0 == tmp) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning)) || (((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive)) || (((((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && waterLevel <= 1) && 0 <= methaneLevelCritical) && 1 == systemActive) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: (((((((((((\result <= 0 && tmp <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 <= \result) && waterLevel <= 1) && \result <= 0) && 0 < tmp + 1) && 1 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive) || (((((((1 == \result && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 1) && 0 < tmp + 1) && 1 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: (((((((((((((2 <= waterLevel && methaneLevelCritical <= 0) && 0 <= \result) && 0 == tmp) && 1 == systemActive) && 1 == tmp) && \result <= 0) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == \result) && 1 == tmp___0) && 0 <= methaneLevelCritical) || (((((((((((1 == \result && 1 == tmp) && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) && 1 == systemActive) - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 265]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: (((((((1 == \result && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 1) && 0 < tmp + 1) && 1 == pumpRunning) && 1 == systemActive) || (((((((((\result <= 0 && tmp <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && waterLevel <= 1) && 0 < tmp + 1) && 1 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive) - InvariantResult [Line: 400]: Loop Invariant Derived loop invariant: (((((((((((((((2 <= waterLevel && methaneLevelCritical <= 0) && 0 <= \result) && 0 == tmp) && \result <= 0) && 1 == systemActive) && 1 == tmp) && 0 == splverifierCounter) && \result <= 0) && 0 <= \result) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == \result) && 1 == tmp___0) && 0 <= methaneLevelCritical) || (((((((((((1 == \result && 1 == tmp) && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) && 1 == systemActive) - InvariantResult [Line: 485]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 189]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 295]: Loop Invariant Derived loop invariant: ((((((((((((((((\result <= 0 && tmp <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 <= \result) && waterLevel <= 1) && \result <= 0) && 0 < tmp + 1) && 1 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive) || ((((((((((1 == \result && 1 == tmp) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) && 1 == \result) && 1 == tmp___0) && 1 == systemActive)) || (((((((1 == \result && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 1) && 0 < tmp + 1) && 1 == pumpRunning) && 1 == systemActive)) || ((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive)) || ((((((((((((((((tmp <= 0 && methaneLevelCritical <= 0) && 0 <= \result) && 0 == tmp) && \result <= 0) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && 0 == splverifierCounter) && \result <= 0) && 0 <= \result) && waterLevel <= 2) && 0 == \result) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning) && 0 <= methaneLevelCritical)) || ((((((((((((1 == \result && tmp <= 0) && 1 == methaneLevelCritical) && 0 == tmp) && 0 < tmp + 1) && 1 == systemActive) && 1 == tmp) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == \result) && 1 == tmp___0) && 1 == pumpRunning)) || (((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && waterLevel <= 1) && 0 <= methaneLevelCritical) && 1 == systemActive) - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 287]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 287]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 162]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 456]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 411]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 456]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 456]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 496]: Loop Invariant Derived loop invariant: (((((((((((((1 == \result && tmp <= 0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 < tmp + 1) && 1 == tmp) && 1 == pumpRunning) && 1 == systemActive) || ((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && 1 == tmp) && 1 == systemActive)) || (((((0 == splverifierCounter && methaneLevelCritical <= 0) && 0 == pumpRunning) && 1 == waterLevel) && 0 <= methaneLevelCritical) && 1 == systemActive)) || ((((((2 <= waterLevel && 0 == splverifierCounter) && methaneLevelCritical <= 0) && waterLevel <= 2) && 0 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive)) || (((((((((((\result <= 0 && tmp <= 0) && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 <= \result) && waterLevel <= 2) && \result <= 0) && 0 < tmp + 1) && 1 == pumpRunning) && 0 <= methaneLevelCritical) && 1 == systemActive)) || (((((((1 == \result && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && 1 == tmp) && 1 == systemActive)) || (((((((\result <= 0 && 0 == splverifierCounter) && methaneLevelCritical <= 0) && 0 <= \result) && 0 == pumpRunning) && waterLevel <= 1) && 0 <= methaneLevelCritical) && 1 == systemActive) - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 135 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 33.0s, OverallIterations: 14, TraceHistogramMax: 2, AutomataDifference: 23.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 11.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1559 SDtfs, 2115 SDslu, 2622 SDs, 0 SdLazy, 418 SolverSat, 75 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.5s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 149 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 65 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 56 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=356occurred in iteration=9, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 5.6s AutomataMinimizationTime, 14 MinimizatonAttempts, 1809 StatesRemovedByMinimization, 10 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 57 LocationsWithAnnotation, 57 PreInvPairs, 294 NumberOfFragments, 1894 HoareAnnotationTreeSize, 57 FomulaSimplifications, 1994439 FormulaSimplificationTreeSizeReduction, 3.0s HoareSimplificationTime, 57 FomulaSimplificationsInter, 731247 FormulaSimplificationTreeSizeReductionInter, 8.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.6s InterpolantComputationTime, 541 NumberOfCodeBlocks, 541 NumberOfCodeBlocksAsserted, 15 NumberOfCheckSat, 526 ConstructedInterpolants, 0 QuantifiedInterpolants, 45766 SizeOfPredicates, 4 NumberOfNonLiveVariables, 421 ConjunctsInSsa, 7 ConjunctsInUnsatCore, 15 InterpolantComputations, 13 PerfectInterpolantSequences, 48/56 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...