./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash cfed73d0949579dcb398cd2d92995791596ce6cd ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:01:49,940 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:01:49,942 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:01:49,957 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:01:49,957 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:01:49,959 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:01:49,960 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:01:49,962 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:01:49,964 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:01:49,965 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:01:49,966 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:01:49,968 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:01:49,968 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:01:49,969 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:01:49,970 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:01:49,972 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:01:49,972 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:01:49,974 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:01:49,976 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:01:49,978 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:01:49,980 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:01:49,982 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:01:49,983 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:01:49,984 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:01:49,987 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:01:49,988 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:01:49,988 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:01:49,989 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:01:49,990 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:01:49,991 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:01:49,991 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:01:49,992 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:01:49,993 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:01:49,994 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:01:49,995 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:01:49,996 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:01:49,996 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:01:49,997 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:01:49,997 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:01:49,998 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:01:49,999 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:01:50,000 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:01:50,018 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:01:50,018 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:01:50,020 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:01:50,020 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:01:50,020 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:01:50,020 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:01:50,021 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:01:50,021 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:01:50,021 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:01:50,021 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:01:50,022 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:01:50,022 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:01:50,022 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:01:50,022 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:01:50,023 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:01:50,023 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:01:50,023 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:01:50,023 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:01:50,024 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:01:50,024 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:01:50,024 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:01:50,024 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:01:50,024 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:01:50,025 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:01:50,025 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:01:50,025 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:01:50,025 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:01:50,026 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:01:50,026 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:01:50,026 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> cfed73d0949579dcb398cd2d92995791596ce6cd [2020-07-28 19:01:50,373 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:01:50,389 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:01:50,394 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:01:50,395 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:01:50,401 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:01:50,402 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c [2020-07-28 19:01:50,474 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9e4b7c631/24d334a1e03c483da257da915514e874/FLAGea47c01cb [2020-07-28 19:01:51,040 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:01:51,041 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product46.cil.c [2020-07-28 19:01:51,054 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9e4b7c631/24d334a1e03c483da257da915514e874/FLAGea47c01cb [2020-07-28 19:01:51,332 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/9e4b7c631/24d334a1e03c483da257da915514e874 [2020-07-28 19:01:51,335 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:01:51,338 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:01:51,339 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:01:51,340 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:01:51,343 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:01:51,345 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:01:51" (1/1) ... [2020-07-28 19:01:51,348 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@34eeb0bb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:51, skipping insertion in model container [2020-07-28 19:01:51,348 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:01:51" (1/1) ... [2020-07-28 19:01:51,356 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:01:51,426 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:01:51,884 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:01:51,899 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:01:51,991 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:01:52,036 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:01:52,036 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:52 WrapperNode [2020-07-28 19:01:52,037 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:01:52,038 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:01:52,038 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:01:52,038 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:01:52,047 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:52" (1/1) ... [2020-07-28 19:01:52,067 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:52" (1/1) ... [2020-07-28 19:01:52,140 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:01:52,140 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:01:52,140 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:01:52,141 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:01:52,153 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:52" (1/1) ... [2020-07-28 19:01:52,154 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:52" (1/1) ... [2020-07-28 19:01:52,172 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:52" (1/1) ... [2020-07-28 19:01:52,173 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:52" (1/1) ... [2020-07-28 19:01:52,201 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:52" (1/1) ... [2020-07-28 19:01:52,212 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:52" (1/1) ... [2020-07-28 19:01:52,216 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:52" (1/1) ... [2020-07-28 19:01:52,229 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:01:52,229 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:01:52,230 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:01:52,230 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:01:52,231 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:52" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:01:52,297 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:01:52,297 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:01:52,297 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:01:52,298 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:01:54,173 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:01:54,174 INFO L295 CfgBuilder]: Removed 200 assume(true) statements. [2020-07-28 19:01:54,180 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:01:54 BoogieIcfgContainer [2020-07-28 19:01:54,181 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:01:54,182 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:01:54,183 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:01:54,186 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:01:54,187 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:01:51" (1/3) ... [2020-07-28 19:01:54,188 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@271978c4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:01:54, skipping insertion in model container [2020-07-28 19:01:54,188 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:52" (2/3) ... [2020-07-28 19:01:54,189 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@271978c4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:01:54, skipping insertion in model container [2020-07-28 19:01:54,189 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:01:54" (3/3) ... [2020-07-28 19:01:54,192 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product46.cil.c [2020-07-28 19:01:54,203 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:01:54,214 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:01:54,228 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:01:54,265 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:01:54,266 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:01:54,266 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:01:54,267 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:01:54,267 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:01:54,268 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:01:54,268 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:01:54,268 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:01:54,294 INFO L276 IsEmpty]: Start isEmpty. Operand 135 states. [2020-07-28 19:01:54,303 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-28 19:01:54,304 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:54,305 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:54,306 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:54,315 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:54,315 INFO L82 PathProgramCache]: Analyzing trace with hash 1532365727, now seen corresponding path program 1 times [2020-07-28 19:01:54,327 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:54,328 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1235703485] [2020-07-28 19:01:54,328 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:54,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:54,703 INFO L280 TraceCheckUtils]: 0: Hoare triple {138#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {138#true} is VALID [2020-07-28 19:01:54,704 INFO L280 TraceCheckUtils]: 1: Hoare triple {138#true} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {138#true} is VALID [2020-07-28 19:01:54,704 INFO L280 TraceCheckUtils]: 2: Hoare triple {138#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {138#true} is VALID [2020-07-28 19:01:54,704 INFO L280 TraceCheckUtils]: 3: Hoare triple {138#true} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {138#true} is VALID [2020-07-28 19:01:54,705 INFO L280 TraceCheckUtils]: 4: Hoare triple {138#true} assume 0 != main_~tmp~4; {138#true} is VALID [2020-07-28 19:01:54,705 INFO L280 TraceCheckUtils]: 5: Hoare triple {138#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {138#true} is VALID [2020-07-28 19:01:54,707 INFO L280 TraceCheckUtils]: 6: Hoare triple {138#true} assume !true; {139#false} is VALID [2020-07-28 19:01:54,707 INFO L280 TraceCheckUtils]: 7: Hoare triple {139#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {139#false} is VALID [2020-07-28 19:01:54,707 INFO L280 TraceCheckUtils]: 8: Hoare triple {139#false} assume !(0 != ~pumpRunning~0); {139#false} is VALID [2020-07-28 19:01:54,708 INFO L280 TraceCheckUtils]: 9: Hoare triple {139#false} assume !(0 != ~systemActive~0); {139#false} is VALID [2020-07-28 19:01:54,708 INFO L280 TraceCheckUtils]: 10: Hoare triple {139#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {139#false} is VALID [2020-07-28 19:01:54,709 INFO L280 TraceCheckUtils]: 11: Hoare triple {139#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {139#false} is VALID [2020-07-28 19:01:54,709 INFO L280 TraceCheckUtils]: 12: Hoare triple {139#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {139#false} is VALID [2020-07-28 19:01:54,710 INFO L280 TraceCheckUtils]: 13: Hoare triple {139#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {139#false} is VALID [2020-07-28 19:01:54,710 INFO L280 TraceCheckUtils]: 14: Hoare triple {139#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {139#false} is VALID [2020-07-28 19:01:54,712 INFO L280 TraceCheckUtils]: 15: Hoare triple {139#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {139#false} is VALID [2020-07-28 19:01:54,712 INFO L280 TraceCheckUtils]: 16: Hoare triple {139#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {139#false} is VALID [2020-07-28 19:01:54,713 INFO L280 TraceCheckUtils]: 17: Hoare triple {139#false} assume !false; {139#false} is VALID [2020-07-28 19:01:54,720 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:54,721 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1235703485] [2020-07-28 19:01:54,724 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:54,724 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:01:54,725 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [738260016] [2020-07-28 19:01:54,733 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:01:54,735 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:54,739 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:01:54,791 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:54,791 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:01:54,792 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:54,801 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:01:54,802 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:01:54,804 INFO L87 Difference]: Start difference. First operand 135 states. Second operand 2 states. [2020-07-28 19:01:55,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:55,149 INFO L93 Difference]: Finished difference Result 264 states and 395 transitions. [2020-07-28 19:01:55,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:01:55,150 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:01:55,150 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:55,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:01:55,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 395 transitions. [2020-07-28 19:01:55,168 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:01:55,176 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 395 transitions. [2020-07-28 19:01:55,177 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 395 transitions. [2020-07-28 19:01:55,715 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 395 edges. 395 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:55,737 INFO L225 Difference]: With dead ends: 264 [2020-07-28 19:01:55,737 INFO L226 Difference]: Without dead ends: 131 [2020-07-28 19:01:55,742 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:01:55,761 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 131 states. [2020-07-28 19:01:55,810 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 131 to 131. [2020-07-28 19:01:55,811 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:55,811 INFO L82 GeneralOperation]: Start isEquivalent. First operand 131 states. Second operand 131 states. [2020-07-28 19:01:55,812 INFO L74 IsIncluded]: Start isIncluded. First operand 131 states. Second operand 131 states. [2020-07-28 19:01:55,812 INFO L87 Difference]: Start difference. First operand 131 states. Second operand 131 states. [2020-07-28 19:01:55,823 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:55,823 INFO L93 Difference]: Finished difference Result 131 states and 189 transitions. [2020-07-28 19:01:55,823 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states and 189 transitions. [2020-07-28 19:01:55,825 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:55,825 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:55,825 INFO L74 IsIncluded]: Start isIncluded. First operand 131 states. Second operand 131 states. [2020-07-28 19:01:55,825 INFO L87 Difference]: Start difference. First operand 131 states. Second operand 131 states. [2020-07-28 19:01:55,833 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:55,833 INFO L93 Difference]: Finished difference Result 131 states and 189 transitions. [2020-07-28 19:01:55,834 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states and 189 transitions. [2020-07-28 19:01:55,835 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:55,835 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:55,836 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:55,836 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:55,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 131 states. [2020-07-28 19:01:55,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 131 states to 131 states and 189 transitions. [2020-07-28 19:01:55,844 INFO L78 Accepts]: Start accepts. Automaton has 131 states and 189 transitions. Word has length 18 [2020-07-28 19:01:55,845 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:55,845 INFO L479 AbstractCegarLoop]: Abstraction has 131 states and 189 transitions. [2020-07-28 19:01:55,845 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:01:55,845 INFO L276 IsEmpty]: Start isEmpty. Operand 131 states and 189 transitions. [2020-07-28 19:01:55,846 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 19:01:55,846 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:55,847 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:55,847 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:01:55,847 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:55,848 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:55,848 INFO L82 PathProgramCache]: Analyzing trace with hash -70818645, now seen corresponding path program 1 times [2020-07-28 19:01:55,848 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:55,849 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [125119542] [2020-07-28 19:01:55,849 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:55,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:56,011 INFO L280 TraceCheckUtils]: 0: Hoare triple {968#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {968#true} is VALID [2020-07-28 19:01:56,011 INFO L280 TraceCheckUtils]: 1: Hoare triple {968#true} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {968#true} is VALID [2020-07-28 19:01:56,012 INFO L280 TraceCheckUtils]: 2: Hoare triple {968#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {968#true} is VALID [2020-07-28 19:01:56,012 INFO L280 TraceCheckUtils]: 3: Hoare triple {968#true} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {968#true} is VALID [2020-07-28 19:01:56,012 INFO L280 TraceCheckUtils]: 4: Hoare triple {968#true} assume 0 != main_~tmp~4; {968#true} is VALID [2020-07-28 19:01:56,014 INFO L280 TraceCheckUtils]: 5: Hoare triple {968#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {970#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:01:56,015 INFO L280 TraceCheckUtils]: 6: Hoare triple {970#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {970#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:01:56,015 INFO L280 TraceCheckUtils]: 7: Hoare triple {970#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {969#false} is VALID [2020-07-28 19:01:56,016 INFO L280 TraceCheckUtils]: 8: Hoare triple {969#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {969#false} is VALID [2020-07-28 19:01:56,016 INFO L280 TraceCheckUtils]: 9: Hoare triple {969#false} assume !(0 != ~pumpRunning~0); {969#false} is VALID [2020-07-28 19:01:56,016 INFO L280 TraceCheckUtils]: 10: Hoare triple {969#false} assume !(0 != ~systemActive~0); {969#false} is VALID [2020-07-28 19:01:56,016 INFO L280 TraceCheckUtils]: 11: Hoare triple {969#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {969#false} is VALID [2020-07-28 19:01:56,017 INFO L280 TraceCheckUtils]: 12: Hoare triple {969#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {969#false} is VALID [2020-07-28 19:01:56,017 INFO L280 TraceCheckUtils]: 13: Hoare triple {969#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {969#false} is VALID [2020-07-28 19:01:56,018 INFO L280 TraceCheckUtils]: 14: Hoare triple {969#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {969#false} is VALID [2020-07-28 19:01:56,018 INFO L280 TraceCheckUtils]: 15: Hoare triple {969#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {969#false} is VALID [2020-07-28 19:01:56,019 INFO L280 TraceCheckUtils]: 16: Hoare triple {969#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {969#false} is VALID [2020-07-28 19:01:56,019 INFO L280 TraceCheckUtils]: 17: Hoare triple {969#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {969#false} is VALID [2020-07-28 19:01:56,019 INFO L280 TraceCheckUtils]: 18: Hoare triple {969#false} assume !false; {969#false} is VALID [2020-07-28 19:01:56,020 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:56,020 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [125119542] [2020-07-28 19:01:56,020 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:56,020 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:01:56,020 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1366104965] [2020-07-28 19:01:56,022 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:01:56,022 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:56,022 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:01:56,057 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:56,057 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:01:56,058 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:56,059 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:01:56,059 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:56,059 INFO L87 Difference]: Start difference. First operand 131 states and 189 transitions. Second operand 3 states. [2020-07-28 19:01:56,315 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:56,315 INFO L93 Difference]: Finished difference Result 131 states and 189 transitions. [2020-07-28 19:01:56,315 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:01:56,316 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:01:56,316 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:56,316 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:56,318 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 189 transitions. [2020-07-28 19:01:56,319 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:56,321 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 189 transitions. [2020-07-28 19:01:56,321 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 189 transitions. [2020-07-28 19:01:56,535 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 189 edges. 189 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:56,538 INFO L225 Difference]: With dead ends: 131 [2020-07-28 19:01:56,538 INFO L226 Difference]: Without dead ends: 53 [2020-07-28 19:01:56,539 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:56,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2020-07-28 19:01:56,574 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2020-07-28 19:01:56,575 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:56,575 INFO L82 GeneralOperation]: Start isEquivalent. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:56,575 INFO L74 IsIncluded]: Start isIncluded. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:56,575 INFO L87 Difference]: Start difference. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:56,578 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:56,580 INFO L93 Difference]: Finished difference Result 53 states and 76 transitions. [2020-07-28 19:01:56,580 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 76 transitions. [2020-07-28 19:01:56,581 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:56,581 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:56,582 INFO L74 IsIncluded]: Start isIncluded. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:56,582 INFO L87 Difference]: Start difference. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:56,585 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:56,585 INFO L93 Difference]: Finished difference Result 53 states and 76 transitions. [2020-07-28 19:01:56,585 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 76 transitions. [2020-07-28 19:01:56,586 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:56,586 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:56,587 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:56,587 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:56,587 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 53 states. [2020-07-28 19:01:56,589 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 76 transitions. [2020-07-28 19:01:56,589 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 76 transitions. Word has length 19 [2020-07-28 19:01:56,590 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:56,590 INFO L479 AbstractCegarLoop]: Abstraction has 53 states and 76 transitions. [2020-07-28 19:01:56,590 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:01:56,590 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 76 transitions. [2020-07-28 19:01:56,596 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 19:01:56,596 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:56,597 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:56,597 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:01:56,597 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:56,598 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:56,598 INFO L82 PathProgramCache]: Analyzing trace with hash 1705695964, now seen corresponding path program 1 times [2020-07-28 19:01:56,598 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:56,598 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1507841006] [2020-07-28 19:01:56,599 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:56,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:56,734 INFO L280 TraceCheckUtils]: 0: Hoare triple {1341#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1341#true} is VALID [2020-07-28 19:01:56,735 INFO L280 TraceCheckUtils]: 1: Hoare triple {1341#true} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {1341#true} is VALID [2020-07-28 19:01:56,736 INFO L280 TraceCheckUtils]: 2: Hoare triple {1341#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {1343#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:01:56,736 INFO L280 TraceCheckUtils]: 3: Hoare triple {1343#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {1344#(= 1 ULTIMATE.start_main_~tmp~4)} is VALID [2020-07-28 19:01:56,737 INFO L280 TraceCheckUtils]: 4: Hoare triple {1344#(= 1 ULTIMATE.start_main_~tmp~4)} assume 0 != main_~tmp~4; {1341#true} is VALID [2020-07-28 19:01:56,737 INFO L280 TraceCheckUtils]: 5: Hoare triple {1341#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1341#true} is VALID [2020-07-28 19:01:56,737 INFO L280 TraceCheckUtils]: 6: Hoare triple {1341#true} assume !false; {1341#true} is VALID [2020-07-28 19:01:56,738 INFO L280 TraceCheckUtils]: 7: Hoare triple {1341#true} assume test_~splverifierCounter~0 < 4; {1341#true} is VALID [2020-07-28 19:01:56,738 INFO L280 TraceCheckUtils]: 8: Hoare triple {1341#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {1341#true} is VALID [2020-07-28 19:01:56,738 INFO L280 TraceCheckUtils]: 9: Hoare triple {1341#true} assume !(0 != test_~tmp~9); {1341#true} is VALID [2020-07-28 19:01:56,738 INFO L280 TraceCheckUtils]: 10: Hoare triple {1341#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {1341#true} is VALID [2020-07-28 19:01:56,739 INFO L280 TraceCheckUtils]: 11: Hoare triple {1341#true} assume !(0 != test_~tmp___0~2); {1341#true} is VALID [2020-07-28 19:01:56,739 INFO L280 TraceCheckUtils]: 12: Hoare triple {1341#true} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {1341#true} is VALID [2020-07-28 19:01:56,740 INFO L280 TraceCheckUtils]: 13: Hoare triple {1341#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1345#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:01:56,741 INFO L280 TraceCheckUtils]: 14: Hoare triple {1345#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {1345#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:01:56,741 INFO L280 TraceCheckUtils]: 15: Hoare triple {1345#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {1342#false} is VALID [2020-07-28 19:01:56,742 INFO L280 TraceCheckUtils]: 16: Hoare triple {1342#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {1342#false} is VALID [2020-07-28 19:01:56,742 INFO L280 TraceCheckUtils]: 17: Hoare triple {1342#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {1342#false} is VALID [2020-07-28 19:01:56,742 INFO L280 TraceCheckUtils]: 18: Hoare triple {1342#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {1342#false} is VALID [2020-07-28 19:01:56,743 INFO L280 TraceCheckUtils]: 19: Hoare triple {1342#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {1342#false} is VALID [2020-07-28 19:01:56,743 INFO L280 TraceCheckUtils]: 20: Hoare triple {1342#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {1342#false} is VALID [2020-07-28 19:01:56,743 INFO L280 TraceCheckUtils]: 21: Hoare triple {1342#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {1342#false} is VALID [2020-07-28 19:01:56,744 INFO L280 TraceCheckUtils]: 22: Hoare triple {1342#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {1342#false} is VALID [2020-07-28 19:01:56,744 INFO L280 TraceCheckUtils]: 23: Hoare triple {1342#false} assume !false; {1342#false} is VALID [2020-07-28 19:01:56,745 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:56,745 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1507841006] [2020-07-28 19:01:56,745 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:56,746 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:01:56,746 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2017428099] [2020-07-28 19:01:56,746 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 24 [2020-07-28 19:01:56,746 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:56,747 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:01:56,777 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:56,777 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:01:56,777 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:56,777 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:01:56,778 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:01:56,778 INFO L87 Difference]: Start difference. First operand 53 states and 76 transitions. Second operand 5 states. [2020-07-28 19:01:57,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:57,164 INFO L93 Difference]: Finished difference Result 100 states and 146 transitions. [2020-07-28 19:01:57,164 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:01:57,164 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 24 [2020-07-28 19:01:57,165 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:57,165 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:57,168 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 146 transitions. [2020-07-28 19:01:57,168 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:57,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 146 transitions. [2020-07-28 19:01:57,171 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 146 transitions. [2020-07-28 19:01:57,346 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 146 edges. 146 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:57,347 INFO L225 Difference]: With dead ends: 100 [2020-07-28 19:01:57,347 INFO L226 Difference]: Without dead ends: 53 [2020-07-28 19:01:57,348 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:01:57,348 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 53 states. [2020-07-28 19:01:57,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 53 to 53. [2020-07-28 19:01:57,397 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:57,398 INFO L82 GeneralOperation]: Start isEquivalent. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:57,398 INFO L74 IsIncluded]: Start isIncluded. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:57,398 INFO L87 Difference]: Start difference. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:57,405 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:57,405 INFO L93 Difference]: Finished difference Result 53 states and 75 transitions. [2020-07-28 19:01:57,405 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 75 transitions. [2020-07-28 19:01:57,406 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:57,406 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:57,406 INFO L74 IsIncluded]: Start isIncluded. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:57,406 INFO L87 Difference]: Start difference. First operand 53 states. Second operand 53 states. [2020-07-28 19:01:57,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:57,412 INFO L93 Difference]: Finished difference Result 53 states and 75 transitions. [2020-07-28 19:01:57,412 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 75 transitions. [2020-07-28 19:01:57,413 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:57,413 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:57,413 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:57,413 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:57,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 53 states. [2020-07-28 19:01:57,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53 states to 53 states and 75 transitions. [2020-07-28 19:01:57,418 INFO L78 Accepts]: Start accepts. Automaton has 53 states and 75 transitions. Word has length 24 [2020-07-28 19:01:57,418 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:57,419 INFO L479 AbstractCegarLoop]: Abstraction has 53 states and 75 transitions. [2020-07-28 19:01:57,419 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:01:57,419 INFO L276 IsEmpty]: Start isEmpty. Operand 53 states and 75 transitions. [2020-07-28 19:01:57,420 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2020-07-28 19:01:57,420 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:57,421 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:57,421 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:01:57,422 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:57,422 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:57,422 INFO L82 PathProgramCache]: Analyzing trace with hash -1939313638, now seen corresponding path program 1 times [2020-07-28 19:01:57,423 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:57,423 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1068120155] [2020-07-28 19:01:57,423 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:57,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:57,483 INFO L280 TraceCheckUtils]: 0: Hoare triple {1675#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,484 INFO L280 TraceCheckUtils]: 1: Hoare triple {1677#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,485 INFO L280 TraceCheckUtils]: 2: Hoare triple {1677#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,485 INFO L280 TraceCheckUtils]: 3: Hoare triple {1677#(= 0 ~pumpRunning~0)} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,486 INFO L280 TraceCheckUtils]: 4: Hoare triple {1677#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~4; {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,486 INFO L280 TraceCheckUtils]: 5: Hoare triple {1677#(= 0 ~pumpRunning~0)} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,487 INFO L280 TraceCheckUtils]: 6: Hoare triple {1677#(= 0 ~pumpRunning~0)} assume !false; {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,487 INFO L280 TraceCheckUtils]: 7: Hoare triple {1677#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,488 INFO L280 TraceCheckUtils]: 8: Hoare triple {1677#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,489 INFO L280 TraceCheckUtils]: 9: Hoare triple {1677#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~9); {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,489 INFO L280 TraceCheckUtils]: 10: Hoare triple {1677#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,490 INFO L280 TraceCheckUtils]: 11: Hoare triple {1677#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2); {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,490 INFO L280 TraceCheckUtils]: 12: Hoare triple {1677#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,491 INFO L280 TraceCheckUtils]: 13: Hoare triple {1677#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,491 INFO L280 TraceCheckUtils]: 14: Hoare triple {1677#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,492 INFO L280 TraceCheckUtils]: 15: Hoare triple {1677#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,493 INFO L280 TraceCheckUtils]: 16: Hoare triple {1677#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {1677#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:01:57,493 INFO L280 TraceCheckUtils]: 17: Hoare triple {1677#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {1676#false} is VALID [2020-07-28 19:01:57,494 INFO L280 TraceCheckUtils]: 18: Hoare triple {1676#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {1676#false} is VALID [2020-07-28 19:01:57,494 INFO L280 TraceCheckUtils]: 19: Hoare triple {1676#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {1676#false} is VALID [2020-07-28 19:01:57,494 INFO L280 TraceCheckUtils]: 20: Hoare triple {1676#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {1676#false} is VALID [2020-07-28 19:01:57,494 INFO L280 TraceCheckUtils]: 21: Hoare triple {1676#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {1676#false} is VALID [2020-07-28 19:01:57,495 INFO L280 TraceCheckUtils]: 22: Hoare triple {1676#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {1676#false} is VALID [2020-07-28 19:01:57,495 INFO L280 TraceCheckUtils]: 23: Hoare triple {1676#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {1676#false} is VALID [2020-07-28 19:01:57,495 INFO L280 TraceCheckUtils]: 24: Hoare triple {1676#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {1676#false} is VALID [2020-07-28 19:01:57,495 INFO L280 TraceCheckUtils]: 25: Hoare triple {1676#false} assume !false; {1676#false} is VALID [2020-07-28 19:01:57,497 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:57,497 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1068120155] [2020-07-28 19:01:57,497 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:57,497 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:01:57,498 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [758256541] [2020-07-28 19:01:57,498 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:01:57,498 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:57,498 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:01:57,540 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:57,540 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:01:57,541 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:57,541 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:01:57,541 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:57,541 INFO L87 Difference]: Start difference. First operand 53 states and 75 transitions. Second operand 3 states. [2020-07-28 19:01:57,834 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:57,835 INFO L93 Difference]: Finished difference Result 123 states and 177 transitions. [2020-07-28 19:01:57,835 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:01:57,835 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:01:57,836 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:57,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:57,838 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 177 transitions. [2020-07-28 19:01:57,838 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:57,840 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 177 transitions. [2020-07-28 19:01:57,841 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 177 transitions. [2020-07-28 19:01:58,042 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 177 edges. 177 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:58,044 INFO L225 Difference]: With dead ends: 123 [2020-07-28 19:01:58,044 INFO L226 Difference]: Without dead ends: 76 [2020-07-28 19:01:58,045 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:58,049 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76 states. [2020-07-28 19:01:58,138 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76 to 74. [2020-07-28 19:01:58,138 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:58,139 INFO L82 GeneralOperation]: Start isEquivalent. First operand 76 states. Second operand 74 states. [2020-07-28 19:01:58,139 INFO L74 IsIncluded]: Start isIncluded. First operand 76 states. Second operand 74 states. [2020-07-28 19:01:58,139 INFO L87 Difference]: Start difference. First operand 76 states. Second operand 74 states. [2020-07-28 19:01:58,143 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:58,143 INFO L93 Difference]: Finished difference Result 76 states and 105 transitions. [2020-07-28 19:01:58,144 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 105 transitions. [2020-07-28 19:01:58,144 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:58,144 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:58,144 INFO L74 IsIncluded]: Start isIncluded. First operand 74 states. Second operand 76 states. [2020-07-28 19:01:58,145 INFO L87 Difference]: Start difference. First operand 74 states. Second operand 76 states. [2020-07-28 19:01:58,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:58,149 INFO L93 Difference]: Finished difference Result 76 states and 105 transitions. [2020-07-28 19:01:58,150 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 105 transitions. [2020-07-28 19:01:58,150 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:58,150 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:58,150 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:58,151 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:58,151 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 74 states. [2020-07-28 19:01:58,154 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74 states to 74 states and 104 transitions. [2020-07-28 19:01:58,154 INFO L78 Accepts]: Start accepts. Automaton has 74 states and 104 transitions. Word has length 26 [2020-07-28 19:01:58,155 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:58,155 INFO L479 AbstractCegarLoop]: Abstraction has 74 states and 104 transitions. [2020-07-28 19:01:58,155 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:01:58,155 INFO L276 IsEmpty]: Start isEmpty. Operand 74 states and 104 transitions. [2020-07-28 19:01:58,156 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2020-07-28 19:01:58,156 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:58,159 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:58,160 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:01:58,160 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:58,160 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:58,161 INFO L82 PathProgramCache]: Analyzing trace with hash -501882354, now seen corresponding path program 1 times [2020-07-28 19:01:58,161 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:58,161 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [63063104] [2020-07-28 19:01:58,161 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:58,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:58,284 INFO L280 TraceCheckUtils]: 0: Hoare triple {2110#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,286 INFO L280 TraceCheckUtils]: 1: Hoare triple {2112#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,286 INFO L280 TraceCheckUtils]: 2: Hoare triple {2112#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,287 INFO L280 TraceCheckUtils]: 3: Hoare triple {2112#(= 1 ~waterLevel~0)} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,288 INFO L280 TraceCheckUtils]: 4: Hoare triple {2112#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~4; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,289 INFO L280 TraceCheckUtils]: 5: Hoare triple {2112#(= 1 ~waterLevel~0)} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,290 INFO L280 TraceCheckUtils]: 6: Hoare triple {2112#(= 1 ~waterLevel~0)} assume !false; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,291 INFO L280 TraceCheckUtils]: 7: Hoare triple {2112#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,292 INFO L280 TraceCheckUtils]: 8: Hoare triple {2112#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,292 INFO L280 TraceCheckUtils]: 9: Hoare triple {2112#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~9); {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,293 INFO L280 TraceCheckUtils]: 10: Hoare triple {2112#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,294 INFO L280 TraceCheckUtils]: 11: Hoare triple {2112#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~2); {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,295 INFO L280 TraceCheckUtils]: 12: Hoare triple {2112#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,296 INFO L280 TraceCheckUtils]: 13: Hoare triple {2112#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,296 INFO L280 TraceCheckUtils]: 14: Hoare triple {2112#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,297 INFO L280 TraceCheckUtils]: 15: Hoare triple {2112#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,298 INFO L280 TraceCheckUtils]: 16: Hoare triple {2112#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,299 INFO L280 TraceCheckUtils]: 17: Hoare triple {2112#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,300 INFO L280 TraceCheckUtils]: 18: Hoare triple {2112#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,301 INFO L280 TraceCheckUtils]: 19: Hoare triple {2112#(= 1 ~waterLevel~0)} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,302 INFO L280 TraceCheckUtils]: 20: Hoare triple {2112#(= 1 ~waterLevel~0)} assume 0 != isHighWaterLevel_~tmp~8;isHighWaterLevel_~tmp___0~1 := 0; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,302 INFO L280 TraceCheckUtils]: 21: Hoare triple {2112#(= 1 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,303 INFO L280 TraceCheckUtils]: 22: Hoare triple {2112#(= 1 ~waterLevel~0)} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,304 INFO L280 TraceCheckUtils]: 23: Hoare triple {2112#(= 1 ~waterLevel~0)} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~5); {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,305 INFO L280 TraceCheckUtils]: 24: Hoare triple {2112#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,306 INFO L280 TraceCheckUtils]: 25: Hoare triple {2112#(= 1 ~waterLevel~0)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {2112#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:01:58,307 INFO L280 TraceCheckUtils]: 26: Hoare triple {2112#(= 1 ~waterLevel~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {2113#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:01:58,308 INFO L280 TraceCheckUtils]: 27: Hoare triple {2113#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {2114#(= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} is VALID [2020-07-28 19:01:58,309 INFO L280 TraceCheckUtils]: 28: Hoare triple {2114#(= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {2111#false} is VALID [2020-07-28 19:01:58,309 INFO L280 TraceCheckUtils]: 29: Hoare triple {2111#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {2111#false} is VALID [2020-07-28 19:01:58,309 INFO L280 TraceCheckUtils]: 30: Hoare triple {2111#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {2111#false} is VALID [2020-07-28 19:01:58,309 INFO L280 TraceCheckUtils]: 31: Hoare triple {2111#false} assume !false; {2111#false} is VALID [2020-07-28 19:01:58,312 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:58,313 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [63063104] [2020-07-28 19:01:58,313 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:58,313 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:01:58,313 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [703770659] [2020-07-28 19:01:58,314 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2020-07-28 19:01:58,314 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:58,314 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:01:58,360 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:58,360 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:01:58,360 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:58,361 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:01:58,361 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:01:58,361 INFO L87 Difference]: Start difference. First operand 74 states and 104 transitions. Second operand 5 states. [2020-07-28 19:01:59,545 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:59,546 INFO L93 Difference]: Finished difference Result 373 states and 541 transitions. [2020-07-28 19:01:59,546 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:01:59,547 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2020-07-28 19:01:59,549 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:59,550 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:59,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 377 transitions. [2020-07-28 19:01:59,555 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:01:59,560 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 377 transitions. [2020-07-28 19:01:59,561 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 377 transitions. [2020-07-28 19:02:00,003 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 377 edges. 377 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:00,012 INFO L225 Difference]: With dead ends: 373 [2020-07-28 19:02:00,013 INFO L226 Difference]: Without dead ends: 305 [2020-07-28 19:02:00,014 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:00,015 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 305 states. [2020-07-28 19:02:00,229 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 305 to 121. [2020-07-28 19:02:00,230 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:00,230 INFO L82 GeneralOperation]: Start isEquivalent. First operand 305 states. Second operand 121 states. [2020-07-28 19:02:00,230 INFO L74 IsIncluded]: Start isIncluded. First operand 305 states. Second operand 121 states. [2020-07-28 19:02:00,230 INFO L87 Difference]: Start difference. First operand 305 states. Second operand 121 states. [2020-07-28 19:02:00,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:00,243 INFO L93 Difference]: Finished difference Result 305 states and 429 transitions. [2020-07-28 19:02:00,243 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 429 transitions. [2020-07-28 19:02:00,244 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:00,244 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:00,244 INFO L74 IsIncluded]: Start isIncluded. First operand 121 states. Second operand 305 states. [2020-07-28 19:02:00,245 INFO L87 Difference]: Start difference. First operand 121 states. Second operand 305 states. [2020-07-28 19:02:00,256 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:00,257 INFO L93 Difference]: Finished difference Result 305 states and 429 transitions. [2020-07-28 19:02:00,257 INFO L276 IsEmpty]: Start isEmpty. Operand 305 states and 429 transitions. [2020-07-28 19:02:00,258 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:00,258 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:00,258 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:00,259 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:00,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 121 states. [2020-07-28 19:02:00,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 121 states to 121 states and 167 transitions. [2020-07-28 19:02:00,263 INFO L78 Accepts]: Start accepts. Automaton has 121 states and 167 transitions. Word has length 32 [2020-07-28 19:02:00,264 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:00,264 INFO L479 AbstractCegarLoop]: Abstraction has 121 states and 167 transitions. [2020-07-28 19:02:00,264 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:00,264 INFO L276 IsEmpty]: Start isEmpty. Operand 121 states and 167 transitions. [2020-07-28 19:02:00,265 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:00,265 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:00,265 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:00,265 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:02:00,266 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:00,266 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:00,266 INFO L82 PathProgramCache]: Analyzing trace with hash -1572928884, now seen corresponding path program 1 times [2020-07-28 19:02:00,267 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:00,267 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [560064138] [2020-07-28 19:02:00,267 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:00,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:00,332 INFO L280 TraceCheckUtils]: 0: Hoare triple {3431#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {3433#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,334 INFO L280 TraceCheckUtils]: 1: Hoare triple {3433#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {3433#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,334 INFO L280 TraceCheckUtils]: 2: Hoare triple {3433#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {3433#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,335 INFO L280 TraceCheckUtils]: 3: Hoare triple {3433#(= 1 ~waterLevel~0)} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {3433#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,336 INFO L280 TraceCheckUtils]: 4: Hoare triple {3433#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~4; {3433#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,337 INFO L280 TraceCheckUtils]: 5: Hoare triple {3433#(= 1 ~waterLevel~0)} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3433#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,337 INFO L280 TraceCheckUtils]: 6: Hoare triple {3433#(= 1 ~waterLevel~0)} assume !false; {3433#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,338 INFO L280 TraceCheckUtils]: 7: Hoare triple {3433#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {3433#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,339 INFO L280 TraceCheckUtils]: 8: Hoare triple {3433#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {3433#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,340 INFO L280 TraceCheckUtils]: 9: Hoare triple {3433#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~9; {3433#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,341 INFO L280 TraceCheckUtils]: 10: Hoare triple {3433#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {3434#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,342 INFO L280 TraceCheckUtils]: 11: Hoare triple {3434#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {3434#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,342 INFO L280 TraceCheckUtils]: 12: Hoare triple {3434#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~2); {3434#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,343 INFO L280 TraceCheckUtils]: 13: Hoare triple {3434#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {3434#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,344 INFO L280 TraceCheckUtils]: 14: Hoare triple {3434#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {3434#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,344 INFO L280 TraceCheckUtils]: 15: Hoare triple {3434#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {3434#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,345 INFO L280 TraceCheckUtils]: 16: Hoare triple {3434#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {3434#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,346 INFO L280 TraceCheckUtils]: 17: Hoare triple {3434#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {3434#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,346 INFO L280 TraceCheckUtils]: 18: Hoare triple {3434#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {3434#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:00,347 INFO L280 TraceCheckUtils]: 19: Hoare triple {3434#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {3432#false} is VALID [2020-07-28 19:02:00,348 INFO L280 TraceCheckUtils]: 20: Hoare triple {3432#false} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {3432#false} is VALID [2020-07-28 19:02:00,348 INFO L280 TraceCheckUtils]: 21: Hoare triple {3432#false} assume 0 != isHighWaterLevel_~tmp~8;isHighWaterLevel_~tmp___0~1 := 0; {3432#false} is VALID [2020-07-28 19:02:00,348 INFO L280 TraceCheckUtils]: 22: Hoare triple {3432#false} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {3432#false} is VALID [2020-07-28 19:02:00,348 INFO L280 TraceCheckUtils]: 23: Hoare triple {3432#false} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {3432#false} is VALID [2020-07-28 19:02:00,348 INFO L280 TraceCheckUtils]: 24: Hoare triple {3432#false} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~5); {3432#false} is VALID [2020-07-28 19:02:00,349 INFO L280 TraceCheckUtils]: 25: Hoare triple {3432#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {3432#false} is VALID [2020-07-28 19:02:00,349 INFO L280 TraceCheckUtils]: 26: Hoare triple {3432#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {3432#false} is VALID [2020-07-28 19:02:00,349 INFO L280 TraceCheckUtils]: 27: Hoare triple {3432#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {3432#false} is VALID [2020-07-28 19:02:00,350 INFO L280 TraceCheckUtils]: 28: Hoare triple {3432#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {3432#false} is VALID [2020-07-28 19:02:00,350 INFO L280 TraceCheckUtils]: 29: Hoare triple {3432#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {3432#false} is VALID [2020-07-28 19:02:00,350 INFO L280 TraceCheckUtils]: 30: Hoare triple {3432#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {3432#false} is VALID [2020-07-28 19:02:00,350 INFO L280 TraceCheckUtils]: 31: Hoare triple {3432#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {3432#false} is VALID [2020-07-28 19:02:00,351 INFO L280 TraceCheckUtils]: 32: Hoare triple {3432#false} assume !false; {3432#false} is VALID [2020-07-28 19:02:00,353 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:00,353 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [560064138] [2020-07-28 19:02:00,353 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:00,354 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:02:00,354 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1321853508] [2020-07-28 19:02:00,354 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:00,355 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:00,355 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:00,397 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:00,397 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:00,398 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:00,398 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:00,398 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:00,399 INFO L87 Difference]: Start difference. First operand 121 states and 167 transitions. Second operand 4 states. [2020-07-28 19:02:01,045 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:01,045 INFO L93 Difference]: Finished difference Result 250 states and 352 transitions. [2020-07-28 19:02:01,046 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:02:01,046 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:01,046 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:01,046 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:01,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 241 transitions. [2020-07-28 19:02:01,050 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:01,052 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 241 transitions. [2020-07-28 19:02:01,053 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 241 transitions. [2020-07-28 19:02:01,335 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 241 edges. 241 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:01,339 INFO L225 Difference]: With dead ends: 250 [2020-07-28 19:02:01,339 INFO L226 Difference]: Without dead ends: 182 [2020-07-28 19:02:01,340 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:01,341 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182 states. [2020-07-28 19:02:01,705 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182 to 179. [2020-07-28 19:02:01,705 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:01,705 INFO L82 GeneralOperation]: Start isEquivalent. First operand 182 states. Second operand 179 states. [2020-07-28 19:02:01,705 INFO L74 IsIncluded]: Start isIncluded. First operand 182 states. Second operand 179 states. [2020-07-28 19:02:01,705 INFO L87 Difference]: Start difference. First operand 182 states. Second operand 179 states. [2020-07-28 19:02:01,711 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:01,712 INFO L93 Difference]: Finished difference Result 182 states and 250 transitions. [2020-07-28 19:02:01,712 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 250 transitions. [2020-07-28 19:02:01,712 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:01,712 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:01,713 INFO L74 IsIncluded]: Start isIncluded. First operand 179 states. Second operand 182 states. [2020-07-28 19:02:01,713 INFO L87 Difference]: Start difference. First operand 179 states. Second operand 182 states. [2020-07-28 19:02:01,718 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:01,719 INFO L93 Difference]: Finished difference Result 182 states and 250 transitions. [2020-07-28 19:02:01,719 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 250 transitions. [2020-07-28 19:02:01,719 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:01,719 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:01,719 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:01,720 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:01,720 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 179 states. [2020-07-28 19:02:01,725 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 248 transitions. [2020-07-28 19:02:01,725 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 248 transitions. Word has length 33 [2020-07-28 19:02:01,725 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:01,726 INFO L479 AbstractCegarLoop]: Abstraction has 179 states and 248 transitions. [2020-07-28 19:02:01,726 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:01,726 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 248 transitions. [2020-07-28 19:02:01,726 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:01,727 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:01,727 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:01,727 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:02:01,727 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:01,727 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:01,728 INFO L82 PathProgramCache]: Analyzing trace with hash 1710921162, now seen corresponding path program 1 times [2020-07-28 19:02:01,728 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:01,728 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1345698290] [2020-07-28 19:02:01,728 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:01,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:01,784 INFO L280 TraceCheckUtils]: 0: Hoare triple {4408#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {4408#true} is VALID [2020-07-28 19:02:01,784 INFO L280 TraceCheckUtils]: 1: Hoare triple {4408#true} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {4408#true} is VALID [2020-07-28 19:02:01,785 INFO L280 TraceCheckUtils]: 2: Hoare triple {4408#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {4408#true} is VALID [2020-07-28 19:02:01,785 INFO L280 TraceCheckUtils]: 3: Hoare triple {4408#true} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {4408#true} is VALID [2020-07-28 19:02:01,785 INFO L280 TraceCheckUtils]: 4: Hoare triple {4408#true} assume 0 != main_~tmp~4; {4408#true} is VALID [2020-07-28 19:02:01,785 INFO L280 TraceCheckUtils]: 5: Hoare triple {4408#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {4408#true} is VALID [2020-07-28 19:02:01,785 INFO L280 TraceCheckUtils]: 6: Hoare triple {4408#true} assume !false; {4408#true} is VALID [2020-07-28 19:02:01,786 INFO L280 TraceCheckUtils]: 7: Hoare triple {4408#true} assume test_~splverifierCounter~0 < 4; {4408#true} is VALID [2020-07-28 19:02:01,786 INFO L280 TraceCheckUtils]: 8: Hoare triple {4408#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {4408#true} is VALID [2020-07-28 19:02:01,786 INFO L280 TraceCheckUtils]: 9: Hoare triple {4408#true} assume 0 != test_~tmp~9; {4408#true} is VALID [2020-07-28 19:02:01,787 INFO L280 TraceCheckUtils]: 10: Hoare triple {4408#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {4408#true} is VALID [2020-07-28 19:02:01,787 INFO L280 TraceCheckUtils]: 11: Hoare triple {4408#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {4408#true} is VALID [2020-07-28 19:02:01,787 INFO L280 TraceCheckUtils]: 12: Hoare triple {4408#true} assume !(0 != test_~tmp___0~2); {4408#true} is VALID [2020-07-28 19:02:01,787 INFO L280 TraceCheckUtils]: 13: Hoare triple {4408#true} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {4408#true} is VALID [2020-07-28 19:02:01,788 INFO L280 TraceCheckUtils]: 14: Hoare triple {4408#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {4408#true} is VALID [2020-07-28 19:02:01,788 INFO L280 TraceCheckUtils]: 15: Hoare triple {4408#true} assume !(0 != ~pumpRunning~0); {4408#true} is VALID [2020-07-28 19:02:01,788 INFO L280 TraceCheckUtils]: 16: Hoare triple {4408#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {4408#true} is VALID [2020-07-28 19:02:01,788 INFO L280 TraceCheckUtils]: 17: Hoare triple {4408#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {4408#true} is VALID [2020-07-28 19:02:01,789 INFO L280 TraceCheckUtils]: 18: Hoare triple {4408#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {4408#true} is VALID [2020-07-28 19:02:01,790 INFO L280 TraceCheckUtils]: 19: Hoare triple {4408#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {4410#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:02:01,791 INFO L280 TraceCheckUtils]: 20: Hoare triple {4410#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {4411#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~8)} is VALID [2020-07-28 19:02:01,792 INFO L280 TraceCheckUtils]: 21: Hoare triple {4411#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~8)} assume 0 != isHighWaterLevel_~tmp~8;isHighWaterLevel_~tmp___0~1 := 0; {4409#false} is VALID [2020-07-28 19:02:01,792 INFO L280 TraceCheckUtils]: 22: Hoare triple {4409#false} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {4409#false} is VALID [2020-07-28 19:02:01,792 INFO L280 TraceCheckUtils]: 23: Hoare triple {4409#false} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {4409#false} is VALID [2020-07-28 19:02:01,792 INFO L280 TraceCheckUtils]: 24: Hoare triple {4409#false} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~5); {4409#false} is VALID [2020-07-28 19:02:01,793 INFO L280 TraceCheckUtils]: 25: Hoare triple {4409#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {4409#false} is VALID [2020-07-28 19:02:01,793 INFO L280 TraceCheckUtils]: 26: Hoare triple {4409#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {4409#false} is VALID [2020-07-28 19:02:01,793 INFO L280 TraceCheckUtils]: 27: Hoare triple {4409#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {4409#false} is VALID [2020-07-28 19:02:01,794 INFO L280 TraceCheckUtils]: 28: Hoare triple {4409#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {4409#false} is VALID [2020-07-28 19:02:01,794 INFO L280 TraceCheckUtils]: 29: Hoare triple {4409#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {4409#false} is VALID [2020-07-28 19:02:01,794 INFO L280 TraceCheckUtils]: 30: Hoare triple {4409#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {4409#false} is VALID [2020-07-28 19:02:01,794 INFO L280 TraceCheckUtils]: 31: Hoare triple {4409#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {4409#false} is VALID [2020-07-28 19:02:01,794 INFO L280 TraceCheckUtils]: 32: Hoare triple {4409#false} assume !false; {4409#false} is VALID [2020-07-28 19:02:01,796 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:01,797 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1345698290] [2020-07-28 19:02:01,797 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:01,797 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:01,797 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1259076126] [2020-07-28 19:02:01,798 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:01,798 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:01,799 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:01,843 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:01,843 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:01,844 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:01,844 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:01,844 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:01,844 INFO L87 Difference]: Start difference. First operand 179 states and 248 transitions. Second operand 4 states. [2020-07-28 19:02:02,911 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:02,911 INFO L93 Difference]: Finished difference Result 497 states and 700 transitions. [2020-07-28 19:02:02,911 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:02,911 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:02,911 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:02,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:02,913 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 264 transitions. [2020-07-28 19:02:02,913 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:02,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 264 transitions. [2020-07-28 19:02:02,915 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 264 transitions. [2020-07-28 19:02:03,220 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 264 edges. 264 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:03,231 INFO L225 Difference]: With dead ends: 497 [2020-07-28 19:02:03,231 INFO L226 Difference]: Without dead ends: 370 [2020-07-28 19:02:03,232 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:03,233 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 370 states. [2020-07-28 19:02:03,572 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 370 to 179. [2020-07-28 19:02:03,572 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:03,572 INFO L82 GeneralOperation]: Start isEquivalent. First operand 370 states. Second operand 179 states. [2020-07-28 19:02:03,572 INFO L74 IsIncluded]: Start isIncluded. First operand 370 states. Second operand 179 states. [2020-07-28 19:02:03,572 INFO L87 Difference]: Start difference. First operand 370 states. Second operand 179 states. [2020-07-28 19:02:03,583 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:03,583 INFO L93 Difference]: Finished difference Result 370 states and 518 transitions. [2020-07-28 19:02:03,583 INFO L276 IsEmpty]: Start isEmpty. Operand 370 states and 518 transitions. [2020-07-28 19:02:03,584 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:03,584 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:03,584 INFO L74 IsIncluded]: Start isIncluded. First operand 179 states. Second operand 370 states. [2020-07-28 19:02:03,584 INFO L87 Difference]: Start difference. First operand 179 states. Second operand 370 states. [2020-07-28 19:02:03,594 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:03,595 INFO L93 Difference]: Finished difference Result 370 states and 518 transitions. [2020-07-28 19:02:03,595 INFO L276 IsEmpty]: Start isEmpty. Operand 370 states and 518 transitions. [2020-07-28 19:02:03,596 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:03,596 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:03,596 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:03,596 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:03,596 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 179 states. [2020-07-28 19:02:03,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 179 states to 179 states and 246 transitions. [2020-07-28 19:02:03,600 INFO L78 Accepts]: Start accepts. Automaton has 179 states and 246 transitions. Word has length 33 [2020-07-28 19:02:03,600 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:03,600 INFO L479 AbstractCegarLoop]: Abstraction has 179 states and 246 transitions. [2020-07-28 19:02:03,600 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:03,600 INFO L276 IsEmpty]: Start isEmpty. Operand 179 states and 246 transitions. [2020-07-28 19:02:03,601 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:03,601 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:03,601 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:03,602 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:02:03,602 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:03,602 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:03,602 INFO L82 PathProgramCache]: Analyzing trace with hash 1969086600, now seen corresponding path program 1 times [2020-07-28 19:02:03,602 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:03,603 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2063243738] [2020-07-28 19:02:03,603 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:03,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:03,697 INFO L280 TraceCheckUtils]: 0: Hoare triple {6114#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {6114#true} is VALID [2020-07-28 19:02:03,697 INFO L280 TraceCheckUtils]: 1: Hoare triple {6114#true} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {6114#true} is VALID [2020-07-28 19:02:03,698 INFO L280 TraceCheckUtils]: 2: Hoare triple {6114#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {6116#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:02:03,699 INFO L280 TraceCheckUtils]: 3: Hoare triple {6116#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {6117#(= 1 ULTIMATE.start_main_~tmp~4)} is VALID [2020-07-28 19:02:03,699 INFO L280 TraceCheckUtils]: 4: Hoare triple {6117#(= 1 ULTIMATE.start_main_~tmp~4)} assume 0 != main_~tmp~4; {6114#true} is VALID [2020-07-28 19:02:03,699 INFO L280 TraceCheckUtils]: 5: Hoare triple {6114#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6114#true} is VALID [2020-07-28 19:02:03,700 INFO L280 TraceCheckUtils]: 6: Hoare triple {6114#true} assume !false; {6114#true} is VALID [2020-07-28 19:02:03,700 INFO L280 TraceCheckUtils]: 7: Hoare triple {6114#true} assume test_~splverifierCounter~0 < 4; {6114#true} is VALID [2020-07-28 19:02:03,700 INFO L280 TraceCheckUtils]: 8: Hoare triple {6114#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {6114#true} is VALID [2020-07-28 19:02:03,700 INFO L280 TraceCheckUtils]: 9: Hoare triple {6114#true} assume 0 != test_~tmp~9; {6114#true} is VALID [2020-07-28 19:02:03,701 INFO L280 TraceCheckUtils]: 10: Hoare triple {6114#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6114#true} is VALID [2020-07-28 19:02:03,701 INFO L280 TraceCheckUtils]: 11: Hoare triple {6114#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {6114#true} is VALID [2020-07-28 19:02:03,701 INFO L280 TraceCheckUtils]: 12: Hoare triple {6114#true} assume !(0 != test_~tmp___0~2); {6114#true} is VALID [2020-07-28 19:02:03,701 INFO L280 TraceCheckUtils]: 13: Hoare triple {6114#true} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {6114#true} is VALID [2020-07-28 19:02:03,701 INFO L280 TraceCheckUtils]: 14: Hoare triple {6114#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {6114#true} is VALID [2020-07-28 19:02:03,702 INFO L280 TraceCheckUtils]: 15: Hoare triple {6114#true} assume !(0 != ~pumpRunning~0); {6114#true} is VALID [2020-07-28 19:02:03,702 INFO L280 TraceCheckUtils]: 16: Hoare triple {6114#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {6114#true} is VALID [2020-07-28 19:02:03,702 INFO L280 TraceCheckUtils]: 17: Hoare triple {6114#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {6114#true} is VALID [2020-07-28 19:02:03,702 INFO L280 TraceCheckUtils]: 18: Hoare triple {6114#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {6114#true} is VALID [2020-07-28 19:02:03,702 INFO L280 TraceCheckUtils]: 19: Hoare triple {6114#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {6114#true} is VALID [2020-07-28 19:02:03,703 INFO L280 TraceCheckUtils]: 20: Hoare triple {6114#true} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {6114#true} is VALID [2020-07-28 19:02:03,703 INFO L280 TraceCheckUtils]: 21: Hoare triple {6114#true} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {6118#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))} is VALID [2020-07-28 19:02:03,704 INFO L280 TraceCheckUtils]: 22: Hoare triple {6118#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {6119#(not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))} is VALID [2020-07-28 19:02:03,705 INFO L280 TraceCheckUtils]: 23: Hoare triple {6119#(not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {6120#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~5))} is VALID [2020-07-28 19:02:03,706 INFO L280 TraceCheckUtils]: 24: Hoare triple {6120#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~5))} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~5); {6115#false} is VALID [2020-07-28 19:02:03,706 INFO L280 TraceCheckUtils]: 25: Hoare triple {6115#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {6115#false} is VALID [2020-07-28 19:02:03,706 INFO L280 TraceCheckUtils]: 26: Hoare triple {6115#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {6115#false} is VALID [2020-07-28 19:02:03,707 INFO L280 TraceCheckUtils]: 27: Hoare triple {6115#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {6115#false} is VALID [2020-07-28 19:02:03,707 INFO L280 TraceCheckUtils]: 28: Hoare triple {6115#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {6115#false} is VALID [2020-07-28 19:02:03,707 INFO L280 TraceCheckUtils]: 29: Hoare triple {6115#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {6115#false} is VALID [2020-07-28 19:02:03,707 INFO L280 TraceCheckUtils]: 30: Hoare triple {6115#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {6115#false} is VALID [2020-07-28 19:02:03,708 INFO L280 TraceCheckUtils]: 31: Hoare triple {6115#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {6115#false} is VALID [2020-07-28 19:02:03,708 INFO L280 TraceCheckUtils]: 32: Hoare triple {6115#false} assume !false; {6115#false} is VALID [2020-07-28 19:02:03,709 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:03,709 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2063243738] [2020-07-28 19:02:03,710 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:03,710 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2020-07-28 19:02:03,710 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [75958628] [2020-07-28 19:02:03,710 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 33 [2020-07-28 19:02:03,711 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:03,711 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:03,753 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:03,753 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:03,753 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:03,753 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:03,754 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:03,754 INFO L87 Difference]: Start difference. First operand 179 states and 246 transitions. Second operand 7 states. [2020-07-28 19:02:05,808 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:05,809 INFO L93 Difference]: Finished difference Result 624 states and 874 transitions. [2020-07-28 19:02:05,809 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 19:02:05,809 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 33 [2020-07-28 19:02:05,810 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:05,810 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:05,812 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 278 transitions. [2020-07-28 19:02:05,812 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:05,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 278 transitions. [2020-07-28 19:02:05,814 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 278 transitions. [2020-07-28 19:02:06,144 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 278 edges. 278 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:06,163 INFO L225 Difference]: With dead ends: 624 [2020-07-28 19:02:06,164 INFO L226 Difference]: Without dead ends: 451 [2020-07-28 19:02:06,165 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2020-07-28 19:02:06,165 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 451 states. [2020-07-28 19:02:06,615 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 451 to 188. [2020-07-28 19:02:06,616 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:06,616 INFO L82 GeneralOperation]: Start isEquivalent. First operand 451 states. Second operand 188 states. [2020-07-28 19:02:06,616 INFO L74 IsIncluded]: Start isIncluded. First operand 451 states. Second operand 188 states. [2020-07-28 19:02:06,616 INFO L87 Difference]: Start difference. First operand 451 states. Second operand 188 states. [2020-07-28 19:02:06,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:06,630 INFO L93 Difference]: Finished difference Result 451 states and 629 transitions. [2020-07-28 19:02:06,630 INFO L276 IsEmpty]: Start isEmpty. Operand 451 states and 629 transitions. [2020-07-28 19:02:06,631 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:06,632 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:06,632 INFO L74 IsIncluded]: Start isIncluded. First operand 188 states. Second operand 451 states. [2020-07-28 19:02:06,632 INFO L87 Difference]: Start difference. First operand 188 states. Second operand 451 states. [2020-07-28 19:02:06,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:06,646 INFO L93 Difference]: Finished difference Result 451 states and 629 transitions. [2020-07-28 19:02:06,646 INFO L276 IsEmpty]: Start isEmpty. Operand 451 states and 629 transitions. [2020-07-28 19:02:06,647 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:06,647 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:06,647 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:06,647 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:06,647 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 188 states. [2020-07-28 19:02:06,651 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 188 states to 188 states and 253 transitions. [2020-07-28 19:02:06,652 INFO L78 Accepts]: Start accepts. Automaton has 188 states and 253 transitions. Word has length 33 [2020-07-28 19:02:06,652 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:06,652 INFO L479 AbstractCegarLoop]: Abstraction has 188 states and 253 transitions. [2020-07-28 19:02:06,652 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:06,652 INFO L276 IsEmpty]: Start isEmpty. Operand 188 states and 253 transitions. [2020-07-28 19:02:06,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:02:06,653 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:06,653 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:06,653 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:02:06,654 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:06,654 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:06,654 INFO L82 PathProgramCache]: Analyzing trace with hash -558169663, now seen corresponding path program 1 times [2020-07-28 19:02:06,654 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:06,654 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1279682944] [2020-07-28 19:02:06,654 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:06,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:06,735 INFO L280 TraceCheckUtils]: 0: Hoare triple {8189#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,737 INFO L280 TraceCheckUtils]: 1: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,738 INFO L280 TraceCheckUtils]: 2: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,738 INFO L280 TraceCheckUtils]: 3: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,739 INFO L280 TraceCheckUtils]: 4: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~4; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,739 INFO L280 TraceCheckUtils]: 5: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,740 INFO L280 TraceCheckUtils]: 6: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume !false; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,741 INFO L280 TraceCheckUtils]: 7: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,741 INFO L280 TraceCheckUtils]: 8: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,742 INFO L280 TraceCheckUtils]: 9: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp~9; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,742 INFO L280 TraceCheckUtils]: 10: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,743 INFO L280 TraceCheckUtils]: 11: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,744 INFO L280 TraceCheckUtils]: 12: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~2); {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,744 INFO L280 TraceCheckUtils]: 13: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,745 INFO L280 TraceCheckUtils]: 14: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,746 INFO L280 TraceCheckUtils]: 15: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,746 INFO L280 TraceCheckUtils]: 16: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,747 INFO L280 TraceCheckUtils]: 17: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,747 INFO L280 TraceCheckUtils]: 18: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,748 INFO L280 TraceCheckUtils]: 19: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,749 INFO L280 TraceCheckUtils]: 20: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,750 INFO L280 TraceCheckUtils]: 21: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,750 INFO L280 TraceCheckUtils]: 22: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,751 INFO L280 TraceCheckUtils]: 23: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {8191#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:06,752 INFO L280 TraceCheckUtils]: 24: Hoare triple {8191#(= 0 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~5;havoc activatePump_#t~ret52, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {8192#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:06,753 INFO L280 TraceCheckUtils]: 25: Hoare triple {8192#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {8193#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} is VALID [2020-07-28 19:02:06,754 INFO L280 TraceCheckUtils]: 26: Hoare triple {8193#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} activatePump_#t~ret52 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret52 && activatePump_#t~ret52 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret52;havoc activatePump_#t~ret52; {8194#(= 0 ULTIMATE.start_activatePump_~tmp~7)} is VALID [2020-07-28 19:02:06,761 INFO L280 TraceCheckUtils]: 27: Hoare triple {8194#(= 0 ULTIMATE.start_activatePump_~tmp~7)} assume 0 != activatePump_~tmp~7; {8190#false} is VALID [2020-07-28 19:02:06,761 INFO L280 TraceCheckUtils]: 28: Hoare triple {8190#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {8190#false} is VALID [2020-07-28 19:02:06,761 INFO L280 TraceCheckUtils]: 29: Hoare triple {8190#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {8190#false} is VALID [2020-07-28 19:02:06,762 INFO L280 TraceCheckUtils]: 30: Hoare triple {8190#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {8190#false} is VALID [2020-07-28 19:02:06,762 INFO L280 TraceCheckUtils]: 31: Hoare triple {8190#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {8190#false} is VALID [2020-07-28 19:02:06,763 INFO L280 TraceCheckUtils]: 32: Hoare triple {8190#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {8190#false} is VALID [2020-07-28 19:02:06,763 INFO L280 TraceCheckUtils]: 33: Hoare triple {8190#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {8190#false} is VALID [2020-07-28 19:02:06,764 INFO L280 TraceCheckUtils]: 34: Hoare triple {8190#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {8190#false} is VALID [2020-07-28 19:02:06,764 INFO L280 TraceCheckUtils]: 35: Hoare triple {8190#false} assume !false; {8190#false} is VALID [2020-07-28 19:02:06,767 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:06,767 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1279682944] [2020-07-28 19:02:06,767 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:06,768 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:06,768 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [555302306] [2020-07-28 19:02:06,769 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 36 [2020-07-28 19:02:06,769 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:06,770 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:02:06,822 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:06,822 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:02:06,823 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:06,823 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:02:06,823 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:02:06,823 INFO L87 Difference]: Start difference. First operand 188 states and 253 transitions. Second operand 6 states. [2020-07-28 19:02:10,646 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:10,647 INFO L93 Difference]: Finished difference Result 1177 states and 1553 transitions. [2020-07-28 19:02:10,647 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2020-07-28 19:02:10,647 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 36 [2020-07-28 19:02:10,648 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:10,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:10,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 507 transitions. [2020-07-28 19:02:10,652 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:10,655 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 507 transitions. [2020-07-28 19:02:10,655 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 14 states and 507 transitions. [2020-07-28 19:02:11,279 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 507 edges. 507 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:11,357 INFO L225 Difference]: With dead ends: 1177 [2020-07-28 19:02:11,357 INFO L226 Difference]: Without dead ends: 995 [2020-07-28 19:02:11,358 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2020-07-28 19:02:11,360 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 995 states. [2020-07-28 19:02:12,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 995 to 356. [2020-07-28 19:02:12,245 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:12,245 INFO L82 GeneralOperation]: Start isEquivalent. First operand 995 states. Second operand 356 states. [2020-07-28 19:02:12,245 INFO L74 IsIncluded]: Start isIncluded. First operand 995 states. Second operand 356 states. [2020-07-28 19:02:12,245 INFO L87 Difference]: Start difference. First operand 995 states. Second operand 356 states. [2020-07-28 19:02:12,301 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:12,302 INFO L93 Difference]: Finished difference Result 995 states and 1287 transitions. [2020-07-28 19:02:12,302 INFO L276 IsEmpty]: Start isEmpty. Operand 995 states and 1287 transitions. [2020-07-28 19:02:12,304 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:12,304 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:12,305 INFO L74 IsIncluded]: Start isIncluded. First operand 356 states. Second operand 995 states. [2020-07-28 19:02:12,305 INFO L87 Difference]: Start difference. First operand 356 states. Second operand 995 states. [2020-07-28 19:02:12,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:12,369 INFO L93 Difference]: Finished difference Result 995 states and 1287 transitions. [2020-07-28 19:02:12,370 INFO L276 IsEmpty]: Start isEmpty. Operand 995 states and 1287 transitions. [2020-07-28 19:02:12,372 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:12,372 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:12,372 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:12,372 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:12,373 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 356 states. [2020-07-28 19:02:12,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 356 states to 356 states and 472 transitions. [2020-07-28 19:02:12,387 INFO L78 Accepts]: Start accepts. Automaton has 356 states and 472 transitions. Word has length 36 [2020-07-28 19:02:12,387 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:12,388 INFO L479 AbstractCegarLoop]: Abstraction has 356 states and 472 transitions. [2020-07-28 19:02:12,388 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:12,388 INFO L276 IsEmpty]: Start isEmpty. Operand 356 states and 472 transitions. [2020-07-28 19:02:12,390 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:02:12,390 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:12,391 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:12,391 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:02:12,391 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:12,391 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:12,391 INFO L82 PathProgramCache]: Analyzing trace with hash 121888707, now seen corresponding path program 1 times [2020-07-28 19:02:12,392 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:12,392 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1869549606] [2020-07-28 19:02:12,392 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:12,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:12,505 INFO L280 TraceCheckUtils]: 0: Hoare triple {12356#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {12356#true} is VALID [2020-07-28 19:02:12,505 INFO L280 TraceCheckUtils]: 1: Hoare triple {12356#true} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {12356#true} is VALID [2020-07-28 19:02:12,506 INFO L280 TraceCheckUtils]: 2: Hoare triple {12356#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {12356#true} is VALID [2020-07-28 19:02:12,506 INFO L280 TraceCheckUtils]: 3: Hoare triple {12356#true} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {12356#true} is VALID [2020-07-28 19:02:12,506 INFO L280 TraceCheckUtils]: 4: Hoare triple {12356#true} assume 0 != main_~tmp~4; {12356#true} is VALID [2020-07-28 19:02:12,508 INFO L280 TraceCheckUtils]: 5: Hoare triple {12356#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {12356#true} is VALID [2020-07-28 19:02:12,509 INFO L280 TraceCheckUtils]: 6: Hoare triple {12356#true} assume !false; {12356#true} is VALID [2020-07-28 19:02:12,509 INFO L280 TraceCheckUtils]: 7: Hoare triple {12356#true} assume test_~splverifierCounter~0 < 4; {12356#true} is VALID [2020-07-28 19:02:12,509 INFO L280 TraceCheckUtils]: 8: Hoare triple {12356#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {12356#true} is VALID [2020-07-28 19:02:12,509 INFO L280 TraceCheckUtils]: 9: Hoare triple {12356#true} assume 0 != test_~tmp~9; {12356#true} is VALID [2020-07-28 19:02:12,509 INFO L280 TraceCheckUtils]: 10: Hoare triple {12356#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {12356#true} is VALID [2020-07-28 19:02:12,510 INFO L280 TraceCheckUtils]: 11: Hoare triple {12356#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {12356#true} is VALID [2020-07-28 19:02:12,510 INFO L280 TraceCheckUtils]: 12: Hoare triple {12356#true} assume !(0 != test_~tmp___0~2); {12356#true} is VALID [2020-07-28 19:02:12,510 INFO L280 TraceCheckUtils]: 13: Hoare triple {12356#true} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {12356#true} is VALID [2020-07-28 19:02:12,510 INFO L280 TraceCheckUtils]: 14: Hoare triple {12356#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {12356#true} is VALID [2020-07-28 19:02:12,510 INFO L280 TraceCheckUtils]: 15: Hoare triple {12356#true} assume !(0 != ~pumpRunning~0); {12356#true} is VALID [2020-07-28 19:02:12,511 INFO L280 TraceCheckUtils]: 16: Hoare triple {12356#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {12356#true} is VALID [2020-07-28 19:02:12,511 INFO L280 TraceCheckUtils]: 17: Hoare triple {12356#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {12356#true} is VALID [2020-07-28 19:02:12,511 INFO L280 TraceCheckUtils]: 18: Hoare triple {12356#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {12356#true} is VALID [2020-07-28 19:02:12,516 INFO L280 TraceCheckUtils]: 19: Hoare triple {12356#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {12356#true} is VALID [2020-07-28 19:02:12,517 INFO L280 TraceCheckUtils]: 20: Hoare triple {12356#true} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {12356#true} is VALID [2020-07-28 19:02:12,517 INFO L280 TraceCheckUtils]: 21: Hoare triple {12356#true} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {12356#true} is VALID [2020-07-28 19:02:12,517 INFO L280 TraceCheckUtils]: 22: Hoare triple {12356#true} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {12356#true} is VALID [2020-07-28 19:02:12,517 INFO L280 TraceCheckUtils]: 23: Hoare triple {12356#true} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {12356#true} is VALID [2020-07-28 19:02:12,517 INFO L280 TraceCheckUtils]: 24: Hoare triple {12356#true} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~5;havoc activatePump_#t~ret52, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {12356#true} is VALID [2020-07-28 19:02:12,518 INFO L280 TraceCheckUtils]: 25: Hoare triple {12356#true} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {12356#true} is VALID [2020-07-28 19:02:12,518 INFO L280 TraceCheckUtils]: 26: Hoare triple {12356#true} activatePump_#t~ret52 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret52 && activatePump_#t~ret52 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret52;havoc activatePump_#t~ret52; {12356#true} is VALID [2020-07-28 19:02:12,519 INFO L280 TraceCheckUtils]: 27: Hoare triple {12356#true} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {12358#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:12,520 INFO L280 TraceCheckUtils]: 28: Hoare triple {12358#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {12358#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:12,521 INFO L280 TraceCheckUtils]: 29: Hoare triple {12358#(= 1 ~pumpRunning~0)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {12358#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:12,521 INFO L280 TraceCheckUtils]: 30: Hoare triple {12358#(= 1 ~pumpRunning~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {12358#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:12,522 INFO L280 TraceCheckUtils]: 31: Hoare triple {12358#(= 1 ~pumpRunning~0)} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {12358#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:12,522 INFO L280 TraceCheckUtils]: 32: Hoare triple {12358#(= 1 ~pumpRunning~0)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {12359#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:02:12,523 INFO L280 TraceCheckUtils]: 33: Hoare triple {12359#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {12360#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~0)} is VALID [2020-07-28 19:02:12,523 INFO L280 TraceCheckUtils]: 34: Hoare triple {12360#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {12357#false} is VALID [2020-07-28 19:02:12,524 INFO L280 TraceCheckUtils]: 35: Hoare triple {12357#false} assume !false; {12357#false} is VALID [2020-07-28 19:02:12,525 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:12,525 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1869549606] [2020-07-28 19:02:12,525 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:12,526 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:12,526 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [678011266] [2020-07-28 19:02:12,526 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 36 [2020-07-28 19:02:12,526 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:12,526 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:12,573 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:12,574 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:12,574 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:12,574 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:12,574 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:12,575 INFO L87 Difference]: Start difference. First operand 356 states and 472 transitions. Second operand 5 states. [2020-07-28 19:02:15,174 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:15,175 INFO L93 Difference]: Finished difference Result 930 states and 1259 transitions. [2020-07-28 19:02:15,175 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:15,175 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 36 [2020-07-28 19:02:15,175 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:15,175 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:15,177 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 269 transitions. [2020-07-28 19:02:15,177 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:15,178 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 269 transitions. [2020-07-28 19:02:15,178 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 269 transitions. [2020-07-28 19:02:15,492 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 269 edges. 269 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:15,518 INFO L225 Difference]: With dead ends: 930 [2020-07-28 19:02:15,518 INFO L226 Difference]: Without dead ends: 580 [2020-07-28 19:02:15,520 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:15,521 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 580 states. [2020-07-28 19:02:16,326 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 580 to 302. [2020-07-28 19:02:16,326 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:16,326 INFO L82 GeneralOperation]: Start isEquivalent. First operand 580 states. Second operand 302 states. [2020-07-28 19:02:16,326 INFO L74 IsIncluded]: Start isIncluded. First operand 580 states. Second operand 302 states. [2020-07-28 19:02:16,326 INFO L87 Difference]: Start difference. First operand 580 states. Second operand 302 states. [2020-07-28 19:02:16,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,348 INFO L93 Difference]: Finished difference Result 580 states and 763 transitions. [2020-07-28 19:02:16,348 INFO L276 IsEmpty]: Start isEmpty. Operand 580 states and 763 transitions. [2020-07-28 19:02:16,349 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:16,350 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:16,350 INFO L74 IsIncluded]: Start isIncluded. First operand 302 states. Second operand 580 states. [2020-07-28 19:02:16,350 INFO L87 Difference]: Start difference. First operand 302 states. Second operand 580 states. [2020-07-28 19:02:16,372 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,372 INFO L93 Difference]: Finished difference Result 580 states and 763 transitions. [2020-07-28 19:02:16,373 INFO L276 IsEmpty]: Start isEmpty. Operand 580 states and 763 transitions. [2020-07-28 19:02:16,374 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:16,374 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:16,374 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:16,375 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:16,375 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 302 states. [2020-07-28 19:02:16,383 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 302 states to 302 states and 389 transitions. [2020-07-28 19:02:16,383 INFO L78 Accepts]: Start accepts. Automaton has 302 states and 389 transitions. Word has length 36 [2020-07-28 19:02:16,384 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:16,384 INFO L479 AbstractCegarLoop]: Abstraction has 302 states and 389 transitions. [2020-07-28 19:02:16,384 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:16,384 INFO L276 IsEmpty]: Start isEmpty. Operand 302 states and 389 transitions. [2020-07-28 19:02:16,385 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2020-07-28 19:02:16,385 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:16,386 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:16,386 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-28 19:02:16,386 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:16,386 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:16,386 INFO L82 PathProgramCache]: Analyzing trace with hash -613249401, now seen corresponding path program 1 times [2020-07-28 19:02:16,387 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:16,387 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1520546178] [2020-07-28 19:02:16,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:16,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:16,480 INFO L280 TraceCheckUtils]: 0: Hoare triple {15268#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {15268#true} is VALID [2020-07-28 19:02:16,480 INFO L280 TraceCheckUtils]: 1: Hoare triple {15268#true} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {15268#true} is VALID [2020-07-28 19:02:16,481 INFO L280 TraceCheckUtils]: 2: Hoare triple {15268#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {15268#true} is VALID [2020-07-28 19:02:16,481 INFO L280 TraceCheckUtils]: 3: Hoare triple {15268#true} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {15268#true} is VALID [2020-07-28 19:02:16,481 INFO L280 TraceCheckUtils]: 4: Hoare triple {15268#true} assume 0 != main_~tmp~4; {15268#true} is VALID [2020-07-28 19:02:16,481 INFO L280 TraceCheckUtils]: 5: Hoare triple {15268#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {15268#true} is VALID [2020-07-28 19:02:16,481 INFO L280 TraceCheckUtils]: 6: Hoare triple {15268#true} assume !false; {15268#true} is VALID [2020-07-28 19:02:16,482 INFO L280 TraceCheckUtils]: 7: Hoare triple {15268#true} assume test_~splverifierCounter~0 < 4; {15268#true} is VALID [2020-07-28 19:02:16,482 INFO L280 TraceCheckUtils]: 8: Hoare triple {15268#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {15268#true} is VALID [2020-07-28 19:02:16,482 INFO L280 TraceCheckUtils]: 9: Hoare triple {15268#true} assume 0 != test_~tmp~9; {15268#true} is VALID [2020-07-28 19:02:16,482 INFO L280 TraceCheckUtils]: 10: Hoare triple {15268#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15268#true} is VALID [2020-07-28 19:02:16,483 INFO L280 TraceCheckUtils]: 11: Hoare triple {15268#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {15268#true} is VALID [2020-07-28 19:02:16,483 INFO L280 TraceCheckUtils]: 12: Hoare triple {15268#true} assume 0 != test_~tmp___0~2; {15268#true} is VALID [2020-07-28 19:02:16,485 INFO L280 TraceCheckUtils]: 13: Hoare triple {15268#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,486 INFO L280 TraceCheckUtils]: 14: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,486 INFO L280 TraceCheckUtils]: 15: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,487 INFO L280 TraceCheckUtils]: 16: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,487 INFO L280 TraceCheckUtils]: 17: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,488 INFO L280 TraceCheckUtils]: 18: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,489 INFO L280 TraceCheckUtils]: 19: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,490 INFO L280 TraceCheckUtils]: 20: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,491 INFO L280 TraceCheckUtils]: 21: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,492 INFO L280 TraceCheckUtils]: 22: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,492 INFO L280 TraceCheckUtils]: 23: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,493 INFO L280 TraceCheckUtils]: 24: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,493 INFO L280 TraceCheckUtils]: 25: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~5;havoc activatePump_#t~ret52, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,494 INFO L280 TraceCheckUtils]: 26: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,494 INFO L280 TraceCheckUtils]: 27: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} activatePump_#t~ret52 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret52 && activatePump_#t~ret52 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret52;havoc activatePump_#t~ret52; {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,495 INFO L280 TraceCheckUtils]: 28: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} assume 0 != activatePump_~tmp~7; {15270#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:16,495 INFO L280 TraceCheckUtils]: 29: Hoare triple {15270#(= 1 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {15271#(= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:16,496 INFO L280 TraceCheckUtils]: 30: Hoare triple {15271#(= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {15272#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0)} is VALID [2020-07-28 19:02:16,497 INFO L280 TraceCheckUtils]: 31: Hoare triple {15272#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {15269#false} is VALID [2020-07-28 19:02:16,497 INFO L280 TraceCheckUtils]: 32: Hoare triple {15269#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {15269#false} is VALID [2020-07-28 19:02:16,497 INFO L280 TraceCheckUtils]: 33: Hoare triple {15269#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {15269#false} is VALID [2020-07-28 19:02:16,498 INFO L280 TraceCheckUtils]: 34: Hoare triple {15269#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {15269#false} is VALID [2020-07-28 19:02:16,498 INFO L280 TraceCheckUtils]: 35: Hoare triple {15269#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {15269#false} is VALID [2020-07-28 19:02:16,498 INFO L280 TraceCheckUtils]: 36: Hoare triple {15269#false} assume !false; {15269#false} is VALID [2020-07-28 19:02:16,500 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:16,500 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1520546178] [2020-07-28 19:02:16,500 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:16,500 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:16,501 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [162268484] [2020-07-28 19:02:16,501 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 37 [2020-07-28 19:02:16,501 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:16,501 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:16,545 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 37 edges. 37 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:16,546 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:16,546 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:16,546 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:16,546 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:16,546 INFO L87 Difference]: Start difference. First operand 302 states and 389 transitions. Second operand 5 states. [2020-07-28 19:02:18,703 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:18,703 INFO L93 Difference]: Finished difference Result 732 states and 937 transitions. [2020-07-28 19:02:18,704 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:18,704 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 37 [2020-07-28 19:02:18,704 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:18,704 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:18,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 224 transitions. [2020-07-28 19:02:18,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:18,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 224 transitions. [2020-07-28 19:02:18,707 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 224 transitions. [2020-07-28 19:02:18,979 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 224 edges. 224 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:18,994 INFO L225 Difference]: With dead ends: 732 [2020-07-28 19:02:18,994 INFO L226 Difference]: Without dead ends: 436 [2020-07-28 19:02:18,995 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:18,995 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 436 states. [2020-07-28 19:02:19,809 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 436 to 282. [2020-07-28 19:02:19,809 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:19,809 INFO L82 GeneralOperation]: Start isEquivalent. First operand 436 states. Second operand 282 states. [2020-07-28 19:02:19,810 INFO L74 IsIncluded]: Start isIncluded. First operand 436 states. Second operand 282 states. [2020-07-28 19:02:19,810 INFO L87 Difference]: Start difference. First operand 436 states. Second operand 282 states. [2020-07-28 19:02:19,819 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:19,819 INFO L93 Difference]: Finished difference Result 436 states and 543 transitions. [2020-07-28 19:02:19,819 INFO L276 IsEmpty]: Start isEmpty. Operand 436 states and 543 transitions. [2020-07-28 19:02:19,820 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:19,820 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:19,820 INFO L74 IsIncluded]: Start isIncluded. First operand 282 states. Second operand 436 states. [2020-07-28 19:02:19,821 INFO L87 Difference]: Start difference. First operand 282 states. Second operand 436 states. [2020-07-28 19:02:19,832 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:19,832 INFO L93 Difference]: Finished difference Result 436 states and 543 transitions. [2020-07-28 19:02:19,832 INFO L276 IsEmpty]: Start isEmpty. Operand 436 states and 543 transitions. [2020-07-28 19:02:19,833 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:19,833 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:19,833 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:19,834 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:19,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 282 states. [2020-07-28 19:02:19,840 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 282 states to 282 states and 352 transitions. [2020-07-28 19:02:19,840 INFO L78 Accepts]: Start accepts. Automaton has 282 states and 352 transitions. Word has length 37 [2020-07-28 19:02:19,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:19,841 INFO L479 AbstractCegarLoop]: Abstraction has 282 states and 352 transitions. [2020-07-28 19:02:19,841 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:19,841 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 352 transitions. [2020-07-28 19:02:19,842 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2020-07-28 19:02:19,842 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:19,842 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:19,842 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:02:19,842 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:19,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:19,843 INFO L82 PathProgramCache]: Analyzing trace with hash -1278493487, now seen corresponding path program 1 times [2020-07-28 19:02:19,843 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:19,843 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1578237484] [2020-07-28 19:02:19,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:19,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:19,913 INFO L280 TraceCheckUtils]: 0: Hoare triple {17591#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {17591#true} is VALID [2020-07-28 19:02:19,913 INFO L280 TraceCheckUtils]: 1: Hoare triple {17591#true} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {17591#true} is VALID [2020-07-28 19:02:19,913 INFO L280 TraceCheckUtils]: 2: Hoare triple {17591#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {17591#true} is VALID [2020-07-28 19:02:19,914 INFO L280 TraceCheckUtils]: 3: Hoare triple {17591#true} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {17591#true} is VALID [2020-07-28 19:02:19,914 INFO L280 TraceCheckUtils]: 4: Hoare triple {17591#true} assume 0 != main_~tmp~4; {17591#true} is VALID [2020-07-28 19:02:19,914 INFO L280 TraceCheckUtils]: 5: Hoare triple {17591#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {17591#true} is VALID [2020-07-28 19:02:19,914 INFO L280 TraceCheckUtils]: 6: Hoare triple {17591#true} assume !false; {17591#true} is VALID [2020-07-28 19:02:19,914 INFO L280 TraceCheckUtils]: 7: Hoare triple {17591#true} assume test_~splverifierCounter~0 < 4; {17591#true} is VALID [2020-07-28 19:02:19,915 INFO L280 TraceCheckUtils]: 8: Hoare triple {17591#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {17591#true} is VALID [2020-07-28 19:02:19,915 INFO L280 TraceCheckUtils]: 9: Hoare triple {17591#true} assume !(0 != test_~tmp~9); {17591#true} is VALID [2020-07-28 19:02:19,915 INFO L280 TraceCheckUtils]: 10: Hoare triple {17591#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {17591#true} is VALID [2020-07-28 19:02:19,915 INFO L280 TraceCheckUtils]: 11: Hoare triple {17591#true} assume !(0 != test_~tmp___0~2); {17591#true} is VALID [2020-07-28 19:02:19,915 INFO L280 TraceCheckUtils]: 12: Hoare triple {17591#true} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {17591#true} is VALID [2020-07-28 19:02:19,916 INFO L280 TraceCheckUtils]: 13: Hoare triple {17591#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {17591#true} is VALID [2020-07-28 19:02:19,916 INFO L280 TraceCheckUtils]: 14: Hoare triple {17591#true} assume !(0 != ~pumpRunning~0); {17591#true} is VALID [2020-07-28 19:02:19,916 INFO L280 TraceCheckUtils]: 15: Hoare triple {17591#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {17591#true} is VALID [2020-07-28 19:02:19,916 INFO L280 TraceCheckUtils]: 16: Hoare triple {17591#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {17591#true} is VALID [2020-07-28 19:02:19,916 INFO L280 TraceCheckUtils]: 17: Hoare triple {17591#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {17591#true} is VALID [2020-07-28 19:02:19,917 INFO L280 TraceCheckUtils]: 18: Hoare triple {17591#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {17591#true} is VALID [2020-07-28 19:02:19,917 INFO L280 TraceCheckUtils]: 19: Hoare triple {17591#true} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {17591#true} is VALID [2020-07-28 19:02:19,922 INFO L280 TraceCheckUtils]: 20: Hoare triple {17591#true} assume 0 != isHighWaterLevel_~tmp~8;isHighWaterLevel_~tmp___0~1 := 0; {17593#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} is VALID [2020-07-28 19:02:19,922 INFO L280 TraceCheckUtils]: 21: Hoare triple {17593#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {17594#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:02:19,923 INFO L280 TraceCheckUtils]: 22: Hoare triple {17594#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {17595#(= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~5)} is VALID [2020-07-28 19:02:19,924 INFO L280 TraceCheckUtils]: 23: Hoare triple {17595#(= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~5)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~5;havoc activatePump_#t~ret52, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {17592#false} is VALID [2020-07-28 19:02:19,924 INFO L280 TraceCheckUtils]: 24: Hoare triple {17592#false} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {17592#false} is VALID [2020-07-28 19:02:19,924 INFO L280 TraceCheckUtils]: 25: Hoare triple {17592#false} activatePump_#t~ret52 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret52 && activatePump_#t~ret52 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret52;havoc activatePump_#t~ret52; {17592#false} is VALID [2020-07-28 19:02:19,924 INFO L280 TraceCheckUtils]: 26: Hoare triple {17592#false} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {17592#false} is VALID [2020-07-28 19:02:19,924 INFO L280 TraceCheckUtils]: 27: Hoare triple {17592#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {17592#false} is VALID [2020-07-28 19:02:19,925 INFO L280 TraceCheckUtils]: 28: Hoare triple {17592#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {17592#false} is VALID [2020-07-28 19:02:19,925 INFO L280 TraceCheckUtils]: 29: Hoare triple {17592#false} assume 0 != __utac_acc__Specification3_spec__1_~tmp~0; {17592#false} is VALID [2020-07-28 19:02:19,925 INFO L280 TraceCheckUtils]: 30: Hoare triple {17592#false} assume !false; {17592#false} is VALID [2020-07-28 19:02:19,925 INFO L280 TraceCheckUtils]: 31: Hoare triple {17592#false} assume test_~splverifierCounter~0 < 4; {17592#false} is VALID [2020-07-28 19:02:19,925 INFO L280 TraceCheckUtils]: 32: Hoare triple {17592#false} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {17592#false} is VALID [2020-07-28 19:02:19,926 INFO L280 TraceCheckUtils]: 33: Hoare triple {17592#false} assume !(0 != test_~tmp~9); {17592#false} is VALID [2020-07-28 19:02:19,926 INFO L280 TraceCheckUtils]: 34: Hoare triple {17592#false} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {17592#false} is VALID [2020-07-28 19:02:19,926 INFO L280 TraceCheckUtils]: 35: Hoare triple {17592#false} assume !(0 != test_~tmp___0~2); {17592#false} is VALID [2020-07-28 19:02:19,926 INFO L280 TraceCheckUtils]: 36: Hoare triple {17592#false} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {17592#false} is VALID [2020-07-28 19:02:19,926 INFO L280 TraceCheckUtils]: 37: Hoare triple {17592#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {17592#false} is VALID [2020-07-28 19:02:19,926 INFO L280 TraceCheckUtils]: 38: Hoare triple {17592#false} assume 0 != ~pumpRunning~0; {17592#false} is VALID [2020-07-28 19:02:19,927 INFO L280 TraceCheckUtils]: 39: Hoare triple {17592#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {17592#false} is VALID [2020-07-28 19:02:19,927 INFO L280 TraceCheckUtils]: 40: Hoare triple {17592#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {17592#false} is VALID [2020-07-28 19:02:19,927 INFO L280 TraceCheckUtils]: 41: Hoare triple {17592#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {17592#false} is VALID [2020-07-28 19:02:19,927 INFO L280 TraceCheckUtils]: 42: Hoare triple {17592#false} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {17592#false} is VALID [2020-07-28 19:02:19,927 INFO L280 TraceCheckUtils]: 43: Hoare triple {17592#false} processEnvironment_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret51 && processEnvironment_#t~ret51 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret51;havoc processEnvironment_#t~ret51; {17592#false} is VALID [2020-07-28 19:02:19,927 INFO L280 TraceCheckUtils]: 44: Hoare triple {17592#false} assume 0 != processEnvironment_~tmp~6;~pumpRunning~0 := 0; {17592#false} is VALID [2020-07-28 19:02:19,928 INFO L280 TraceCheckUtils]: 45: Hoare triple {17592#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {17592#false} is VALID [2020-07-28 19:02:19,928 INFO L280 TraceCheckUtils]: 46: Hoare triple {17592#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {17592#false} is VALID [2020-07-28 19:02:19,928 INFO L280 TraceCheckUtils]: 47: Hoare triple {17592#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {17592#false} is VALID [2020-07-28 19:02:19,928 INFO L280 TraceCheckUtils]: 48: Hoare triple {17592#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {17592#false} is VALID [2020-07-28 19:02:19,928 INFO L280 TraceCheckUtils]: 49: Hoare triple {17592#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {17592#false} is VALID [2020-07-28 19:02:19,928 INFO L280 TraceCheckUtils]: 50: Hoare triple {17592#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {17592#false} is VALID [2020-07-28 19:02:19,929 INFO L280 TraceCheckUtils]: 51: Hoare triple {17592#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {17592#false} is VALID [2020-07-28 19:02:19,929 INFO L280 TraceCheckUtils]: 52: Hoare triple {17592#false} assume !false; {17592#false} is VALID [2020-07-28 19:02:19,931 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:02:19,931 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1578237484] [2020-07-28 19:02:19,932 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:19,932 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:19,932 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1963203869] [2020-07-28 19:02:19,932 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 53 [2020-07-28 19:02:19,932 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:19,933 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:19,998 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:19,999 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:19,999 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:19,999 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:19,999 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:20,000 INFO L87 Difference]: Start difference. First operand 282 states and 352 transitions. Second operand 5 states. [2020-07-28 19:02:21,610 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:21,610 INFO L93 Difference]: Finished difference Result 653 states and 819 transitions. [2020-07-28 19:02:21,610 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:21,611 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 53 [2020-07-28 19:02:21,611 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:21,611 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:21,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 149 transitions. [2020-07-28 19:02:21,612 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:21,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 149 transitions. [2020-07-28 19:02:21,612 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 149 transitions. [2020-07-28 19:02:21,778 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 149 edges. 149 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:21,788 INFO L225 Difference]: With dead ends: 653 [2020-07-28 19:02:21,788 INFO L226 Difference]: Without dead ends: 377 [2020-07-28 19:02:21,789 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:21,790 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 377 states. [2020-07-28 19:02:22,716 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 377 to 282. [2020-07-28 19:02:22,716 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:22,717 INFO L82 GeneralOperation]: Start isEquivalent. First operand 377 states. Second operand 282 states. [2020-07-28 19:02:22,717 INFO L74 IsIncluded]: Start isIncluded. First operand 377 states. Second operand 282 states. [2020-07-28 19:02:22,717 INFO L87 Difference]: Start difference. First operand 377 states. Second operand 282 states. [2020-07-28 19:02:22,725 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:22,725 INFO L93 Difference]: Finished difference Result 377 states and 469 transitions. [2020-07-28 19:02:22,725 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 469 transitions. [2020-07-28 19:02:22,726 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:22,726 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:22,726 INFO L74 IsIncluded]: Start isIncluded. First operand 282 states. Second operand 377 states. [2020-07-28 19:02:22,726 INFO L87 Difference]: Start difference. First operand 282 states. Second operand 377 states. [2020-07-28 19:02:22,735 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:22,735 INFO L93 Difference]: Finished difference Result 377 states and 469 transitions. [2020-07-28 19:02:22,735 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 469 transitions. [2020-07-28 19:02:22,736 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:22,736 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:22,736 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:22,736 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:22,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 282 states. [2020-07-28 19:02:22,740 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 282 states to 282 states and 348 transitions. [2020-07-28 19:02:22,741 INFO L78 Accepts]: Start accepts. Automaton has 282 states and 348 transitions. Word has length 53 [2020-07-28 19:02:22,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:22,741 INFO L479 AbstractCegarLoop]: Abstraction has 282 states and 348 transitions. [2020-07-28 19:02:22,741 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:22,741 INFO L276 IsEmpty]: Start isEmpty. Operand 282 states and 348 transitions. [2020-07-28 19:02:22,741 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2020-07-28 19:02:22,742 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:22,742 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:22,742 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-28 19:02:22,742 INFO L427 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:22,742 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:22,742 INFO L82 PathProgramCache]: Analyzing trace with hash -1350880045, now seen corresponding path program 1 times [2020-07-28 19:02:22,743 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:22,743 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1709895985] [2020-07-28 19:02:22,743 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:22,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:22,802 INFO L280 TraceCheckUtils]: 0: Hoare triple {19668#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {19668#true} is VALID [2020-07-28 19:02:22,802 INFO L280 TraceCheckUtils]: 1: Hoare triple {19668#true} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {19668#true} is VALID [2020-07-28 19:02:22,802 INFO L280 TraceCheckUtils]: 2: Hoare triple {19668#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {19668#true} is VALID [2020-07-28 19:02:22,803 INFO L280 TraceCheckUtils]: 3: Hoare triple {19668#true} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {19668#true} is VALID [2020-07-28 19:02:22,803 INFO L280 TraceCheckUtils]: 4: Hoare triple {19668#true} assume 0 != main_~tmp~4; {19668#true} is VALID [2020-07-28 19:02:22,803 INFO L280 TraceCheckUtils]: 5: Hoare triple {19668#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {19668#true} is VALID [2020-07-28 19:02:22,805 INFO L280 TraceCheckUtils]: 6: Hoare triple {19668#true} assume !false; {19668#true} is VALID [2020-07-28 19:02:22,806 INFO L280 TraceCheckUtils]: 7: Hoare triple {19668#true} assume test_~splverifierCounter~0 < 4; {19668#true} is VALID [2020-07-28 19:02:22,806 INFO L280 TraceCheckUtils]: 8: Hoare triple {19668#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {19668#true} is VALID [2020-07-28 19:02:22,806 INFO L280 TraceCheckUtils]: 9: Hoare triple {19668#true} assume !(0 != test_~tmp~9); {19668#true} is VALID [2020-07-28 19:02:22,806 INFO L280 TraceCheckUtils]: 10: Hoare triple {19668#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {19668#true} is VALID [2020-07-28 19:02:22,806 INFO L280 TraceCheckUtils]: 11: Hoare triple {19668#true} assume !(0 != test_~tmp___0~2); {19668#true} is VALID [2020-07-28 19:02:22,807 INFO L280 TraceCheckUtils]: 12: Hoare triple {19668#true} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {19668#true} is VALID [2020-07-28 19:02:22,807 INFO L280 TraceCheckUtils]: 13: Hoare triple {19668#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {19668#true} is VALID [2020-07-28 19:02:22,807 INFO L280 TraceCheckUtils]: 14: Hoare triple {19668#true} assume !(0 != ~pumpRunning~0); {19668#true} is VALID [2020-07-28 19:02:22,807 INFO L280 TraceCheckUtils]: 15: Hoare triple {19668#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {19668#true} is VALID [2020-07-28 19:02:22,807 INFO L280 TraceCheckUtils]: 16: Hoare triple {19668#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {19668#true} is VALID [2020-07-28 19:02:22,808 INFO L280 TraceCheckUtils]: 17: Hoare triple {19668#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {19668#true} is VALID [2020-07-28 19:02:22,810 INFO L280 TraceCheckUtils]: 18: Hoare triple {19668#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {19670#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:02:22,811 INFO L280 TraceCheckUtils]: 19: Hoare triple {19670#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {19671#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~8)} is VALID [2020-07-28 19:02:22,812 INFO L280 TraceCheckUtils]: 20: Hoare triple {19671#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~8)} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {19669#false} is VALID [2020-07-28 19:02:22,812 INFO L280 TraceCheckUtils]: 21: Hoare triple {19669#false} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {19669#false} is VALID [2020-07-28 19:02:22,812 INFO L280 TraceCheckUtils]: 22: Hoare triple {19669#false} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {19669#false} is VALID [2020-07-28 19:02:22,812 INFO L280 TraceCheckUtils]: 23: Hoare triple {19669#false} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~5;havoc activatePump_#t~ret52, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {19669#false} is VALID [2020-07-28 19:02:22,812 INFO L280 TraceCheckUtils]: 24: Hoare triple {19669#false} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {19669#false} is VALID [2020-07-28 19:02:22,813 INFO L280 TraceCheckUtils]: 25: Hoare triple {19669#false} activatePump_#t~ret52 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret52 && activatePump_#t~ret52 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret52;havoc activatePump_#t~ret52; {19669#false} is VALID [2020-07-28 19:02:22,813 INFO L280 TraceCheckUtils]: 26: Hoare triple {19669#false} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {19669#false} is VALID [2020-07-28 19:02:22,813 INFO L280 TraceCheckUtils]: 27: Hoare triple {19669#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {19669#false} is VALID [2020-07-28 19:02:22,813 INFO L280 TraceCheckUtils]: 28: Hoare triple {19669#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {19669#false} is VALID [2020-07-28 19:02:22,813 INFO L280 TraceCheckUtils]: 29: Hoare triple {19669#false} assume 0 != __utac_acc__Specification3_spec__1_~tmp~0; {19669#false} is VALID [2020-07-28 19:02:22,814 INFO L280 TraceCheckUtils]: 30: Hoare triple {19669#false} assume !false; {19669#false} is VALID [2020-07-28 19:02:22,814 INFO L280 TraceCheckUtils]: 31: Hoare triple {19669#false} assume test_~splverifierCounter~0 < 4; {19669#false} is VALID [2020-07-28 19:02:22,814 INFO L280 TraceCheckUtils]: 32: Hoare triple {19669#false} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {19669#false} is VALID [2020-07-28 19:02:22,814 INFO L280 TraceCheckUtils]: 33: Hoare triple {19669#false} assume !(0 != test_~tmp~9); {19669#false} is VALID [2020-07-28 19:02:22,814 INFO L280 TraceCheckUtils]: 34: Hoare triple {19669#false} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {19669#false} is VALID [2020-07-28 19:02:22,815 INFO L280 TraceCheckUtils]: 35: Hoare triple {19669#false} assume !(0 != test_~tmp___0~2); {19669#false} is VALID [2020-07-28 19:02:22,815 INFO L280 TraceCheckUtils]: 36: Hoare triple {19669#false} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {19669#false} is VALID [2020-07-28 19:02:22,815 INFO L280 TraceCheckUtils]: 37: Hoare triple {19669#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {19669#false} is VALID [2020-07-28 19:02:22,815 INFO L280 TraceCheckUtils]: 38: Hoare triple {19669#false} assume 0 != ~pumpRunning~0; {19669#false} is VALID [2020-07-28 19:02:22,815 INFO L280 TraceCheckUtils]: 39: Hoare triple {19669#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19669#false} is VALID [2020-07-28 19:02:22,816 INFO L280 TraceCheckUtils]: 40: Hoare triple {19669#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {19669#false} is VALID [2020-07-28 19:02:22,816 INFO L280 TraceCheckUtils]: 41: Hoare triple {19669#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {19669#false} is VALID [2020-07-28 19:02:22,816 INFO L280 TraceCheckUtils]: 42: Hoare triple {19669#false} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {19669#false} is VALID [2020-07-28 19:02:22,816 INFO L280 TraceCheckUtils]: 43: Hoare triple {19669#false} processEnvironment_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret51 && processEnvironment_#t~ret51 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret51;havoc processEnvironment_#t~ret51; {19669#false} is VALID [2020-07-28 19:02:22,816 INFO L280 TraceCheckUtils]: 44: Hoare triple {19669#false} assume 0 != processEnvironment_~tmp~6;~pumpRunning~0 := 0; {19669#false} is VALID [2020-07-28 19:02:22,817 INFO L280 TraceCheckUtils]: 45: Hoare triple {19669#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {19669#false} is VALID [2020-07-28 19:02:22,817 INFO L280 TraceCheckUtils]: 46: Hoare triple {19669#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {19669#false} is VALID [2020-07-28 19:02:22,817 INFO L280 TraceCheckUtils]: 47: Hoare triple {19669#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {19669#false} is VALID [2020-07-28 19:02:22,817 INFO L280 TraceCheckUtils]: 48: Hoare triple {19669#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {19669#false} is VALID [2020-07-28 19:02:22,817 INFO L280 TraceCheckUtils]: 49: Hoare triple {19669#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {19669#false} is VALID [2020-07-28 19:02:22,818 INFO L280 TraceCheckUtils]: 50: Hoare triple {19669#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {19669#false} is VALID [2020-07-28 19:02:22,818 INFO L280 TraceCheckUtils]: 51: Hoare triple {19669#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {19669#false} is VALID [2020-07-28 19:02:22,818 INFO L280 TraceCheckUtils]: 52: Hoare triple {19669#false} assume !false; {19669#false} is VALID [2020-07-28 19:02:22,820 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:02:22,820 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1709895985] [2020-07-28 19:02:22,821 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:22,821 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:22,821 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1986185164] [2020-07-28 19:02:22,822 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 53 [2020-07-28 19:02:22,822 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:22,823 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:22,882 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:22,882 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:22,882 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:22,883 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:22,883 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:22,883 INFO L87 Difference]: Start difference. First operand 282 states and 348 transitions. Second operand 4 states. [2020-07-28 19:02:24,231 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:24,231 INFO L93 Difference]: Finished difference Result 600 states and 751 transitions. [2020-07-28 19:02:24,231 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:02:24,231 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 53 [2020-07-28 19:02:24,232 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:24,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:24,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 150 transitions. [2020-07-28 19:02:24,233 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:24,233 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 150 transitions. [2020-07-28 19:02:24,233 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 150 transitions. [2020-07-28 19:02:24,408 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 150 edges. 150 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:24,416 INFO L225 Difference]: With dead ends: 600 [2020-07-28 19:02:24,416 INFO L226 Difference]: Without dead ends: 324 [2020-07-28 19:02:24,417 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:24,417 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324 states. [2020-07-28 19:02:25,243 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324 to 240. [2020-07-28 19:02:25,244 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:25,244 INFO L82 GeneralOperation]: Start isEquivalent. First operand 324 states. Second operand 240 states. [2020-07-28 19:02:25,244 INFO L74 IsIncluded]: Start isIncluded. First operand 324 states. Second operand 240 states. [2020-07-28 19:02:25,244 INFO L87 Difference]: Start difference. First operand 324 states. Second operand 240 states. [2020-07-28 19:02:25,250 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:25,250 INFO L93 Difference]: Finished difference Result 324 states and 405 transitions. [2020-07-28 19:02:25,250 INFO L276 IsEmpty]: Start isEmpty. Operand 324 states and 405 transitions. [2020-07-28 19:02:25,250 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:25,250 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:25,251 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand 324 states. [2020-07-28 19:02:25,251 INFO L87 Difference]: Start difference. First operand 240 states. Second operand 324 states. [2020-07-28 19:02:25,258 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:25,258 INFO L93 Difference]: Finished difference Result 324 states and 405 transitions. [2020-07-28 19:02:25,258 INFO L276 IsEmpty]: Start isEmpty. Operand 324 states and 405 transitions. [2020-07-28 19:02:25,259 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:25,259 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:25,259 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:25,259 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:25,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 240 states. [2020-07-28 19:02:25,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 297 transitions. [2020-07-28 19:02:25,264 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 297 transitions. Word has length 53 [2020-07-28 19:02:25,264 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:25,265 INFO L479 AbstractCegarLoop]: Abstraction has 240 states and 297 transitions. [2020-07-28 19:02:25,265 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:25,265 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 297 transitions. [2020-07-28 19:02:25,265 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2020-07-28 19:02:25,265 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:25,266 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:25,266 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2020-07-28 19:02:25,266 INFO L427 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:25,266 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:25,267 INFO L82 PathProgramCache]: Analyzing trace with hash -1916178793, now seen corresponding path program 1 times [2020-07-28 19:02:25,267 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:25,267 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [811875485] [2020-07-28 19:02:25,267 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:25,296 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:25,364 INFO L280 TraceCheckUtils]: 0: Hoare triple {21498#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,365 INFO L280 TraceCheckUtils]: 1: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,366 INFO L280 TraceCheckUtils]: 2: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,367 INFO L280 TraceCheckUtils]: 3: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,368 INFO L280 TraceCheckUtils]: 4: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~4; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,369 INFO L280 TraceCheckUtils]: 5: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,369 INFO L280 TraceCheckUtils]: 6: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume !false; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,370 INFO L280 TraceCheckUtils]: 7: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,370 INFO L280 TraceCheckUtils]: 8: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,371 INFO L280 TraceCheckUtils]: 9: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp~9; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,371 INFO L280 TraceCheckUtils]: 10: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,372 INFO L280 TraceCheckUtils]: 11: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,372 INFO L280 TraceCheckUtils]: 12: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~2); {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,373 INFO L280 TraceCheckUtils]: 13: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,373 INFO L280 TraceCheckUtils]: 14: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,373 INFO L280 TraceCheckUtils]: 15: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,374 INFO L280 TraceCheckUtils]: 16: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,374 INFO L280 TraceCheckUtils]: 17: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,375 INFO L280 TraceCheckUtils]: 18: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,375 INFO L280 TraceCheckUtils]: 19: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,376 INFO L280 TraceCheckUtils]: 20: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,376 INFO L280 TraceCheckUtils]: 21: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,376 INFO L280 TraceCheckUtils]: 22: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,377 INFO L280 TraceCheckUtils]: 23: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,377 INFO L280 TraceCheckUtils]: 24: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~5;havoc activatePump_#t~ret52, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,378 INFO L280 TraceCheckUtils]: 25: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,378 INFO L280 TraceCheckUtils]: 26: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} activatePump_#t~ret52 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret52 && activatePump_#t~ret52 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret52;havoc activatePump_#t~ret52; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,378 INFO L280 TraceCheckUtils]: 27: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {21500#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,379 INFO L280 TraceCheckUtils]: 28: Hoare triple {21500#(= 0 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {21501#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:25,379 INFO L280 TraceCheckUtils]: 29: Hoare triple {21501#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {21502#(= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0)} is VALID [2020-07-28 19:02:25,380 INFO L280 TraceCheckUtils]: 30: Hoare triple {21502#(= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~0; {21499#false} is VALID [2020-07-28 19:02:25,380 INFO L280 TraceCheckUtils]: 31: Hoare triple {21499#false} assume !false; {21499#false} is VALID [2020-07-28 19:02:25,380 INFO L280 TraceCheckUtils]: 32: Hoare triple {21499#false} assume test_~splverifierCounter~0 < 4; {21499#false} is VALID [2020-07-28 19:02:25,380 INFO L280 TraceCheckUtils]: 33: Hoare triple {21499#false} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {21499#false} is VALID [2020-07-28 19:02:25,380 INFO L280 TraceCheckUtils]: 34: Hoare triple {21499#false} assume !(0 != test_~tmp~9); {21499#false} is VALID [2020-07-28 19:02:25,381 INFO L280 TraceCheckUtils]: 35: Hoare triple {21499#false} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {21499#false} is VALID [2020-07-28 19:02:25,381 INFO L280 TraceCheckUtils]: 36: Hoare triple {21499#false} assume !(0 != test_~tmp___0~2); {21499#false} is VALID [2020-07-28 19:02:25,381 INFO L280 TraceCheckUtils]: 37: Hoare triple {21499#false} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {21499#false} is VALID [2020-07-28 19:02:25,381 INFO L280 TraceCheckUtils]: 38: Hoare triple {21499#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {21499#false} is VALID [2020-07-28 19:02:25,381 INFO L280 TraceCheckUtils]: 39: Hoare triple {21499#false} assume 0 != ~pumpRunning~0; {21499#false} is VALID [2020-07-28 19:02:25,381 INFO L280 TraceCheckUtils]: 40: Hoare triple {21499#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {21499#false} is VALID [2020-07-28 19:02:25,382 INFO L280 TraceCheckUtils]: 41: Hoare triple {21499#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {21499#false} is VALID [2020-07-28 19:02:25,382 INFO L280 TraceCheckUtils]: 42: Hoare triple {21499#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {21499#false} is VALID [2020-07-28 19:02:25,382 INFO L280 TraceCheckUtils]: 43: Hoare triple {21499#false} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {21499#false} is VALID [2020-07-28 19:02:25,382 INFO L280 TraceCheckUtils]: 44: Hoare triple {21499#false} processEnvironment_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret51 && processEnvironment_#t~ret51 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret51;havoc processEnvironment_#t~ret51; {21499#false} is VALID [2020-07-28 19:02:25,382 INFO L280 TraceCheckUtils]: 45: Hoare triple {21499#false} assume 0 != processEnvironment_~tmp~6;~pumpRunning~0 := 0; {21499#false} is VALID [2020-07-28 19:02:25,383 INFO L280 TraceCheckUtils]: 46: Hoare triple {21499#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {21499#false} is VALID [2020-07-28 19:02:25,383 INFO L280 TraceCheckUtils]: 47: Hoare triple {21499#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {21499#false} is VALID [2020-07-28 19:02:25,383 INFO L280 TraceCheckUtils]: 48: Hoare triple {21499#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {21499#false} is VALID [2020-07-28 19:02:25,383 INFO L280 TraceCheckUtils]: 49: Hoare triple {21499#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {21499#false} is VALID [2020-07-28 19:02:25,383 INFO L280 TraceCheckUtils]: 50: Hoare triple {21499#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {21499#false} is VALID [2020-07-28 19:02:25,384 INFO L280 TraceCheckUtils]: 51: Hoare triple {21499#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {21499#false} is VALID [2020-07-28 19:02:25,384 INFO L280 TraceCheckUtils]: 52: Hoare triple {21499#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {21499#false} is VALID [2020-07-28 19:02:25,384 INFO L280 TraceCheckUtils]: 53: Hoare triple {21499#false} assume !false; {21499#false} is VALID [2020-07-28 19:02:25,387 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:25,388 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [811875485] [2020-07-28 19:02:25,388 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:25,388 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:25,388 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [167465402] [2020-07-28 19:02:25,389 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 54 [2020-07-28 19:02:25,389 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:25,389 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:25,446 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 54 edges. 54 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:25,447 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:25,447 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:25,447 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:25,447 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:25,447 INFO L87 Difference]: Start difference. First operand 240 states and 297 transitions. Second operand 5 states. [2020-07-28 19:02:27,247 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:27,247 INFO L93 Difference]: Finished difference Result 612 states and 756 transitions. [2020-07-28 19:02:27,247 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:27,247 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 54 [2020-07-28 19:02:27,248 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:27,248 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:27,249 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 232 transitions. [2020-07-28 19:02:27,249 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:27,250 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 232 transitions. [2020-07-28 19:02:27,250 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 232 transitions. [2020-07-28 19:02:27,534 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 232 edges. 232 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:27,543 INFO L225 Difference]: With dead ends: 612 [2020-07-28 19:02:27,543 INFO L226 Difference]: Without dead ends: 378 [2020-07-28 19:02:27,544 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:27,545 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 378 states. [2020-07-28 19:02:28,461 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 378 to 240. [2020-07-28 19:02:28,461 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:28,461 INFO L82 GeneralOperation]: Start isEquivalent. First operand 378 states. Second operand 240 states. [2020-07-28 19:02:28,461 INFO L74 IsIncluded]: Start isIncluded. First operand 378 states. Second operand 240 states. [2020-07-28 19:02:28,462 INFO L87 Difference]: Start difference. First operand 378 states. Second operand 240 states. [2020-07-28 19:02:28,470 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:28,470 INFO L93 Difference]: Finished difference Result 378 states and 461 transitions. [2020-07-28 19:02:28,470 INFO L276 IsEmpty]: Start isEmpty. Operand 378 states and 461 transitions. [2020-07-28 19:02:28,471 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:28,471 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:28,471 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand 378 states. [2020-07-28 19:02:28,471 INFO L87 Difference]: Start difference. First operand 240 states. Second operand 378 states. [2020-07-28 19:02:28,480 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:28,480 INFO L93 Difference]: Finished difference Result 378 states and 461 transitions. [2020-07-28 19:02:28,481 INFO L276 IsEmpty]: Start isEmpty. Operand 378 states and 461 transitions. [2020-07-28 19:02:28,481 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:28,481 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:28,482 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:28,482 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:28,482 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 240 states. [2020-07-28 19:02:28,487 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 293 transitions. [2020-07-28 19:02:28,487 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 293 transitions. Word has length 54 [2020-07-28 19:02:28,488 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:28,488 INFO L479 AbstractCegarLoop]: Abstraction has 240 states and 293 transitions. [2020-07-28 19:02:28,488 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:28,488 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 293 transitions. [2020-07-28 19:02:28,489 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2020-07-28 19:02:28,489 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:28,489 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:28,489 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2020-07-28 19:02:28,490 INFO L427 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:28,490 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:28,490 INFO L82 PathProgramCache]: Analyzing trace with hash 1094031012, now seen corresponding path program 1 times [2020-07-28 19:02:28,491 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:28,491 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [920451043] [2020-07-28 19:02:28,491 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:28,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:28,588 INFO L280 TraceCheckUtils]: 0: Hoare triple {23463#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,589 INFO L280 TraceCheckUtils]: 1: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,590 INFO L280 TraceCheckUtils]: 2: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,591 INFO L280 TraceCheckUtils]: 3: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,591 INFO L280 TraceCheckUtils]: 4: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~4; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,592 INFO L280 TraceCheckUtils]: 5: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,593 INFO L280 TraceCheckUtils]: 6: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume !false; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,594 INFO L280 TraceCheckUtils]: 7: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,594 INFO L280 TraceCheckUtils]: 8: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,595 INFO L280 TraceCheckUtils]: 9: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp~9; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,596 INFO L280 TraceCheckUtils]: 10: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,596 INFO L280 TraceCheckUtils]: 11: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,597 INFO L280 TraceCheckUtils]: 12: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~2); {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,598 INFO L280 TraceCheckUtils]: 13: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,601 INFO L280 TraceCheckUtils]: 14: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,606 INFO L280 TraceCheckUtils]: 15: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,607 INFO L280 TraceCheckUtils]: 16: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,609 INFO L280 TraceCheckUtils]: 17: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,609 INFO L280 TraceCheckUtils]: 18: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,610 INFO L280 TraceCheckUtils]: 19: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,611 INFO L280 TraceCheckUtils]: 20: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,612 INFO L280 TraceCheckUtils]: 21: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,613 INFO L280 TraceCheckUtils]: 22: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,614 INFO L280 TraceCheckUtils]: 23: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,615 INFO L280 TraceCheckUtils]: 24: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~5;havoc activatePump_#t~ret52, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,615 INFO L280 TraceCheckUtils]: 25: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,616 INFO L280 TraceCheckUtils]: 26: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} activatePump_#t~ret52 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret52 && activatePump_#t~ret52 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret52;havoc activatePump_#t~ret52; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,617 INFO L280 TraceCheckUtils]: 27: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,617 INFO L280 TraceCheckUtils]: 28: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,618 INFO L280 TraceCheckUtils]: 29: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,618 INFO L280 TraceCheckUtils]: 30: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,619 INFO L280 TraceCheckUtils]: 31: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,620 INFO L280 TraceCheckUtils]: 32: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume !(2 == __utac_acc__Specification3_spec__1_~tmp___0~0); {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,620 INFO L280 TraceCheckUtils]: 33: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume !false; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,621 INFO L280 TraceCheckUtils]: 34: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,622 INFO L280 TraceCheckUtils]: 35: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,622 INFO L280 TraceCheckUtils]: 36: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp~9); {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,623 INFO L280 TraceCheckUtils]: 37: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,623 INFO L280 TraceCheckUtils]: 38: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~2); {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,624 INFO L280 TraceCheckUtils]: 39: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,625 INFO L280 TraceCheckUtils]: 40: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,625 INFO L280 TraceCheckUtils]: 41: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,626 INFO L280 TraceCheckUtils]: 42: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,627 INFO L280 TraceCheckUtils]: 43: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {23465#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:28,628 INFO L280 TraceCheckUtils]: 44: Hoare triple {23465#(= 0 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {23466#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:28,629 INFO L280 TraceCheckUtils]: 45: Hoare triple {23466#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {23467#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} is VALID [2020-07-28 19:02:28,630 INFO L280 TraceCheckUtils]: 46: Hoare triple {23467#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} processEnvironment_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret51 && processEnvironment_#t~ret51 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret51;havoc processEnvironment_#t~ret51; {23468#(= 0 ULTIMATE.start_processEnvironment_~tmp~6)} is VALID [2020-07-28 19:02:28,631 INFO L280 TraceCheckUtils]: 47: Hoare triple {23468#(= 0 ULTIMATE.start_processEnvironment_~tmp~6)} assume 0 != processEnvironment_~tmp~6;~pumpRunning~0 := 0; {23464#false} is VALID [2020-07-28 19:02:28,631 INFO L280 TraceCheckUtils]: 48: Hoare triple {23464#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {23464#false} is VALID [2020-07-28 19:02:28,631 INFO L280 TraceCheckUtils]: 49: Hoare triple {23464#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {23464#false} is VALID [2020-07-28 19:02:28,631 INFO L280 TraceCheckUtils]: 50: Hoare triple {23464#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {23464#false} is VALID [2020-07-28 19:02:28,632 INFO L280 TraceCheckUtils]: 51: Hoare triple {23464#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {23464#false} is VALID [2020-07-28 19:02:28,632 INFO L280 TraceCheckUtils]: 52: Hoare triple {23464#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {23464#false} is VALID [2020-07-28 19:02:28,632 INFO L280 TraceCheckUtils]: 53: Hoare triple {23464#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {23464#false} is VALID [2020-07-28 19:02:28,633 INFO L280 TraceCheckUtils]: 54: Hoare triple {23464#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {23464#false} is VALID [2020-07-28 19:02:28,633 INFO L280 TraceCheckUtils]: 55: Hoare triple {23464#false} assume !false; {23464#false} is VALID [2020-07-28 19:02:28,636 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 19:02:28,636 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [920451043] [2020-07-28 19:02:28,637 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:28,637 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:28,637 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1467888426] [2020-07-28 19:02:28,638 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 56 [2020-07-28 19:02:28,638 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:28,639 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:02:28,706 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 48 edges. 48 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:28,706 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:02:28,707 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:28,707 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:02:28,707 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:02:28,708 INFO L87 Difference]: Start difference. First operand 240 states and 293 transitions. Second operand 6 states. [2020-07-28 19:02:30,915 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:30,915 INFO L93 Difference]: Finished difference Result 571 states and 706 transitions. [2020-07-28 19:02:30,915 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2020-07-28 19:02:30,915 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 56 [2020-07-28 19:02:30,915 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:30,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:30,917 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 307 transitions. [2020-07-28 19:02:30,917 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:30,918 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 307 transitions. [2020-07-28 19:02:30,918 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 307 transitions. [2020-07-28 19:02:31,281 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 307 edges. 307 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:31,293 INFO L225 Difference]: With dead ends: 571 [2020-07-28 19:02:31,293 INFO L226 Difference]: Without dead ends: 387 [2020-07-28 19:02:31,293 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 11 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=45, Invalid=87, Unknown=0, NotChecked=0, Total=132 [2020-07-28 19:02:31,294 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 387 states. [2020-07-28 19:02:32,075 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 387 to 240. [2020-07-28 19:02:32,075 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:32,075 INFO L82 GeneralOperation]: Start isEquivalent. First operand 387 states. Second operand 240 states. [2020-07-28 19:02:32,076 INFO L74 IsIncluded]: Start isIncluded. First operand 387 states. Second operand 240 states. [2020-07-28 19:02:32,076 INFO L87 Difference]: Start difference. First operand 387 states. Second operand 240 states. [2020-07-28 19:02:32,084 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:32,084 INFO L93 Difference]: Finished difference Result 387 states and 476 transitions. [2020-07-28 19:02:32,084 INFO L276 IsEmpty]: Start isEmpty. Operand 387 states and 476 transitions. [2020-07-28 19:02:32,085 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:32,085 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:32,085 INFO L74 IsIncluded]: Start isIncluded. First operand 240 states. Second operand 387 states. [2020-07-28 19:02:32,085 INFO L87 Difference]: Start difference. First operand 240 states. Second operand 387 states. [2020-07-28 19:02:32,100 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:32,100 INFO L93 Difference]: Finished difference Result 387 states and 476 transitions. [2020-07-28 19:02:32,100 INFO L276 IsEmpty]: Start isEmpty. Operand 387 states and 476 transitions. [2020-07-28 19:02:32,101 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:32,101 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:32,101 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:32,101 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:32,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 240 states. [2020-07-28 19:02:32,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 240 states to 240 states and 292 transitions. [2020-07-28 19:02:32,107 INFO L78 Accepts]: Start accepts. Automaton has 240 states and 292 transitions. Word has length 56 [2020-07-28 19:02:32,107 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:32,107 INFO L479 AbstractCegarLoop]: Abstraction has 240 states and 292 transitions. [2020-07-28 19:02:32,107 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:32,107 INFO L276 IsEmpty]: Start isEmpty. Operand 240 states and 292 transitions. [2020-07-28 19:02:32,108 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 78 [2020-07-28 19:02:32,108 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:32,108 INFO L422 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:32,108 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2020-07-28 19:02:32,108 INFO L427 AbstractCegarLoop]: === Iteration 16 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:32,109 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:32,109 INFO L82 PathProgramCache]: Analyzing trace with hash -1896433734, now seen corresponding path program 1 times [2020-07-28 19:02:32,109 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:32,109 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [204698826] [2020-07-28 19:02:32,109 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:32,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:32,241 INFO L280 TraceCheckUtils]: 0: Hoare triple {25392#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {25392#true} is VALID [2020-07-28 19:02:32,242 INFO L280 TraceCheckUtils]: 1: Hoare triple {25392#true} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {25392#true} is VALID [2020-07-28 19:02:32,243 INFO L280 TraceCheckUtils]: 2: Hoare triple {25392#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {25394#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:02:32,244 INFO L280 TraceCheckUtils]: 3: Hoare triple {25394#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {25395#(= 1 ULTIMATE.start_main_~tmp~4)} is VALID [2020-07-28 19:02:32,244 INFO L280 TraceCheckUtils]: 4: Hoare triple {25395#(= 1 ULTIMATE.start_main_~tmp~4)} assume 0 != main_~tmp~4; {25392#true} is VALID [2020-07-28 19:02:32,244 INFO L280 TraceCheckUtils]: 5: Hoare triple {25392#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {25392#true} is VALID [2020-07-28 19:02:32,244 INFO L280 TraceCheckUtils]: 6: Hoare triple {25392#true} assume !false; {25392#true} is VALID [2020-07-28 19:02:32,244 INFO L280 TraceCheckUtils]: 7: Hoare triple {25392#true} assume test_~splverifierCounter~0 < 4; {25392#true} is VALID [2020-07-28 19:02:32,244 INFO L280 TraceCheckUtils]: 8: Hoare triple {25392#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {25392#true} is VALID [2020-07-28 19:02:32,245 INFO L280 TraceCheckUtils]: 9: Hoare triple {25392#true} assume 0 != test_~tmp~9; {25392#true} is VALID [2020-07-28 19:02:32,245 INFO L280 TraceCheckUtils]: 10: Hoare triple {25392#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {25392#true} is VALID [2020-07-28 19:02:32,245 INFO L280 TraceCheckUtils]: 11: Hoare triple {25392#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {25392#true} is VALID [2020-07-28 19:02:32,245 INFO L280 TraceCheckUtils]: 12: Hoare triple {25392#true} assume 0 != test_~tmp___0~2; {25392#true} is VALID [2020-07-28 19:02:32,246 INFO L280 TraceCheckUtils]: 13: Hoare triple {25392#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {25396#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:32,247 INFO L280 TraceCheckUtils]: 14: Hoare triple {25396#(not (= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {25396#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:32,247 INFO L280 TraceCheckUtils]: 15: Hoare triple {25396#(not (= 0 ~methaneLevelCritical~0))} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25396#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:32,248 INFO L280 TraceCheckUtils]: 16: Hoare triple {25396#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0); {25396#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:32,248 INFO L280 TraceCheckUtils]: 17: Hoare triple {25396#(not (= 0 ~methaneLevelCritical~0))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {25396#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:32,249 INFO L280 TraceCheckUtils]: 18: Hoare triple {25396#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {25396#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:32,249 INFO L280 TraceCheckUtils]: 19: Hoare triple {25396#(not (= 0 ~methaneLevelCritical~0))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {25396#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:32,250 INFO L280 TraceCheckUtils]: 20: Hoare triple {25396#(not (= 0 ~methaneLevelCritical~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {25396#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:32,251 INFO L280 TraceCheckUtils]: 21: Hoare triple {25396#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {25396#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:32,251 INFO L280 TraceCheckUtils]: 22: Hoare triple {25396#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {25396#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:32,252 INFO L280 TraceCheckUtils]: 23: Hoare triple {25396#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {25396#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:32,252 INFO L280 TraceCheckUtils]: 24: Hoare triple {25396#(not (= 0 ~methaneLevelCritical~0))} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {25396#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:32,253 INFO L280 TraceCheckUtils]: 25: Hoare triple {25396#(not (= 0 ~methaneLevelCritical~0))} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~5;havoc activatePump_#t~ret52, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {25397#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} is VALID [2020-07-28 19:02:32,254 INFO L280 TraceCheckUtils]: 26: Hoare triple {25397#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {25398#(not (= 0 |ULTIMATE.start_isMethaneAlarm_#res|))} is VALID [2020-07-28 19:02:32,254 INFO L280 TraceCheckUtils]: 27: Hoare triple {25398#(not (= 0 |ULTIMATE.start_isMethaneAlarm_#res|))} activatePump_#t~ret52 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret52 && activatePump_#t~ret52 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret52;havoc activatePump_#t~ret52; {25399#(not (= 0 ULTIMATE.start_activatePump_~tmp~7))} is VALID [2020-07-28 19:02:32,255 INFO L280 TraceCheckUtils]: 28: Hoare triple {25399#(not (= 0 ULTIMATE.start_activatePump_~tmp~7))} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {25393#false} is VALID [2020-07-28 19:02:32,255 INFO L280 TraceCheckUtils]: 29: Hoare triple {25393#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {25393#false} is VALID [2020-07-28 19:02:32,255 INFO L280 TraceCheckUtils]: 30: Hoare triple {25393#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {25393#false} is VALID [2020-07-28 19:02:32,256 INFO L280 TraceCheckUtils]: 31: Hoare triple {25393#false} assume 0 != __utac_acc__Specification3_spec__1_~tmp~0; {25393#false} is VALID [2020-07-28 19:02:32,256 INFO L280 TraceCheckUtils]: 32: Hoare triple {25393#false} assume !false; {25393#false} is VALID [2020-07-28 19:02:32,256 INFO L280 TraceCheckUtils]: 33: Hoare triple {25393#false} assume test_~splverifierCounter~0 < 4; {25393#false} is VALID [2020-07-28 19:02:32,256 INFO L280 TraceCheckUtils]: 34: Hoare triple {25393#false} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {25393#false} is VALID [2020-07-28 19:02:32,257 INFO L280 TraceCheckUtils]: 35: Hoare triple {25393#false} assume !(0 != test_~tmp~9); {25393#false} is VALID [2020-07-28 19:02:32,257 INFO L280 TraceCheckUtils]: 36: Hoare triple {25393#false} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {25393#false} is VALID [2020-07-28 19:02:32,257 INFO L280 TraceCheckUtils]: 37: Hoare triple {25393#false} assume !(0 != test_~tmp___0~2); {25393#false} is VALID [2020-07-28 19:02:32,257 INFO L280 TraceCheckUtils]: 38: Hoare triple {25393#false} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {25393#false} is VALID [2020-07-28 19:02:32,257 INFO L280 TraceCheckUtils]: 39: Hoare triple {25393#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25393#false} is VALID [2020-07-28 19:02:32,257 INFO L280 TraceCheckUtils]: 40: Hoare triple {25393#false} assume 0 != ~pumpRunning~0; {25393#false} is VALID [2020-07-28 19:02:32,258 INFO L280 TraceCheckUtils]: 41: Hoare triple {25393#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25393#false} is VALID [2020-07-28 19:02:32,258 INFO L280 TraceCheckUtils]: 42: Hoare triple {25393#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {25393#false} is VALID [2020-07-28 19:02:32,258 INFO L280 TraceCheckUtils]: 43: Hoare triple {25393#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {25393#false} is VALID [2020-07-28 19:02:32,258 INFO L280 TraceCheckUtils]: 44: Hoare triple {25393#false} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {25393#false} is VALID [2020-07-28 19:02:32,258 INFO L280 TraceCheckUtils]: 45: Hoare triple {25393#false} processEnvironment_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret51 && processEnvironment_#t~ret51 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret51;havoc processEnvironment_#t~ret51; {25393#false} is VALID [2020-07-28 19:02:32,258 INFO L280 TraceCheckUtils]: 46: Hoare triple {25393#false} assume 0 != processEnvironment_~tmp~6;~pumpRunning~0 := 0; {25393#false} is VALID [2020-07-28 19:02:32,258 INFO L280 TraceCheckUtils]: 47: Hoare triple {25393#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {25393#false} is VALID [2020-07-28 19:02:32,259 INFO L280 TraceCheckUtils]: 48: Hoare triple {25393#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {25393#false} is VALID [2020-07-28 19:02:32,259 INFO L280 TraceCheckUtils]: 49: Hoare triple {25393#false} assume 0 != __utac_acc__Specification3_spec__1_~tmp~0; {25393#false} is VALID [2020-07-28 19:02:32,259 INFO L280 TraceCheckUtils]: 50: Hoare triple {25393#false} assume !false; {25393#false} is VALID [2020-07-28 19:02:32,259 INFO L280 TraceCheckUtils]: 51: Hoare triple {25393#false} assume test_~splverifierCounter~0 < 4; {25393#false} is VALID [2020-07-28 19:02:32,260 INFO L280 TraceCheckUtils]: 52: Hoare triple {25393#false} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {25393#false} is VALID [2020-07-28 19:02:32,260 INFO L280 TraceCheckUtils]: 53: Hoare triple {25393#false} assume !(0 != test_~tmp~9); {25393#false} is VALID [2020-07-28 19:02:32,260 INFO L280 TraceCheckUtils]: 54: Hoare triple {25393#false} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {25393#false} is VALID [2020-07-28 19:02:32,260 INFO L280 TraceCheckUtils]: 55: Hoare triple {25393#false} assume 0 != test_~tmp___0~2; {25393#false} is VALID [2020-07-28 19:02:32,261 INFO L280 TraceCheckUtils]: 56: Hoare triple {25393#false} assume 0 != ~methaneLevelCritical~0;~methaneLevelCritical~0 := 0; {25393#false} is VALID [2020-07-28 19:02:32,261 INFO L280 TraceCheckUtils]: 57: Hoare triple {25393#false} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {25393#false} is VALID [2020-07-28 19:02:32,261 INFO L280 TraceCheckUtils]: 58: Hoare triple {25393#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25393#false} is VALID [2020-07-28 19:02:32,261 INFO L280 TraceCheckUtils]: 59: Hoare triple {25393#false} assume !(0 != ~pumpRunning~0); {25393#false} is VALID [2020-07-28 19:02:32,261 INFO L280 TraceCheckUtils]: 60: Hoare triple {25393#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {25393#false} is VALID [2020-07-28 19:02:32,261 INFO L280 TraceCheckUtils]: 61: Hoare triple {25393#false} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {25393#false} is VALID [2020-07-28 19:02:32,261 INFO L280 TraceCheckUtils]: 62: Hoare triple {25393#false} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {25393#false} is VALID [2020-07-28 19:02:32,262 INFO L280 TraceCheckUtils]: 63: Hoare triple {25393#false} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {25393#false} is VALID [2020-07-28 19:02:32,262 INFO L280 TraceCheckUtils]: 64: Hoare triple {25393#false} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {25393#false} is VALID [2020-07-28 19:02:32,262 INFO L280 TraceCheckUtils]: 65: Hoare triple {25393#false} assume 0 != isHighWaterLevel_~tmp~8;isHighWaterLevel_~tmp___0~1 := 0; {25393#false} is VALID [2020-07-28 19:02:32,263 INFO L280 TraceCheckUtils]: 66: Hoare triple {25393#false} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {25393#false} is VALID [2020-07-28 19:02:32,263 INFO L280 TraceCheckUtils]: 67: Hoare triple {25393#false} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {25393#false} is VALID [2020-07-28 19:02:32,263 INFO L280 TraceCheckUtils]: 68: Hoare triple {25393#false} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~5); {25393#false} is VALID [2020-07-28 19:02:32,263 INFO L280 TraceCheckUtils]: 69: Hoare triple {25393#false} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {25393#false} is VALID [2020-07-28 19:02:32,264 INFO L280 TraceCheckUtils]: 70: Hoare triple {25393#false} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {25393#false} is VALID [2020-07-28 19:02:32,264 INFO L280 TraceCheckUtils]: 71: Hoare triple {25393#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {25393#false} is VALID [2020-07-28 19:02:32,264 INFO L280 TraceCheckUtils]: 72: Hoare triple {25393#false} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {25393#false} is VALID [2020-07-28 19:02:32,264 INFO L280 TraceCheckUtils]: 73: Hoare triple {25393#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {25393#false} is VALID [2020-07-28 19:02:32,265 INFO L280 TraceCheckUtils]: 74: Hoare triple {25393#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {25393#false} is VALID [2020-07-28 19:02:32,265 INFO L280 TraceCheckUtils]: 75: Hoare triple {25393#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {25393#false} is VALID [2020-07-28 19:02:32,265 INFO L280 TraceCheckUtils]: 76: Hoare triple {25393#false} assume !false; {25393#false} is VALID [2020-07-28 19:02:32,269 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2020-07-28 19:02:32,269 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [204698826] [2020-07-28 19:02:32,269 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:32,269 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2020-07-28 19:02:32,270 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1147156736] [2020-07-28 19:02:32,270 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 77 [2020-07-28 19:02:32,270 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:32,271 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2020-07-28 19:02:32,354 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:32,354 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2020-07-28 19:02:32,354 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:32,355 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2020-07-28 19:02:32,355 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:32,355 INFO L87 Difference]: Start difference. First operand 240 states and 292 transitions. Second operand 8 states. [2020-07-28 19:02:35,137 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:35,138 INFO L93 Difference]: Finished difference Result 609 states and 743 transitions. [2020-07-28 19:02:35,138 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2020-07-28 19:02:35,138 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 77 [2020-07-28 19:02:35,138 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:35,138 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:02:35,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 350 transitions. [2020-07-28 19:02:35,140 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:02:35,141 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 350 transitions. [2020-07-28 19:02:35,141 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 13 states and 350 transitions. [2020-07-28 19:02:35,602 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 350 edges. 350 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:35,615 INFO L225 Difference]: With dead ends: 609 [2020-07-28 19:02:35,615 INFO L226 Difference]: Without dead ends: 425 [2020-07-28 19:02:35,616 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 31 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=104, Invalid=202, Unknown=0, NotChecked=0, Total=306 [2020-07-28 19:02:35,616 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 425 states. [2020-07-28 19:02:36,420 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 425 to 232. [2020-07-28 19:02:36,421 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:36,421 INFO L82 GeneralOperation]: Start isEquivalent. First operand 425 states. Second operand 232 states. [2020-07-28 19:02:36,421 INFO L74 IsIncluded]: Start isIncluded. First operand 425 states. Second operand 232 states. [2020-07-28 19:02:36,421 INFO L87 Difference]: Start difference. First operand 425 states. Second operand 232 states. [2020-07-28 19:02:36,431 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:36,431 INFO L93 Difference]: Finished difference Result 425 states and 514 transitions. [2020-07-28 19:02:36,431 INFO L276 IsEmpty]: Start isEmpty. Operand 425 states and 514 transitions. [2020-07-28 19:02:36,432 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:36,432 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:36,432 INFO L74 IsIncluded]: Start isIncluded. First operand 232 states. Second operand 425 states. [2020-07-28 19:02:36,432 INFO L87 Difference]: Start difference. First operand 232 states. Second operand 425 states. [2020-07-28 19:02:36,442 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:36,442 INFO L93 Difference]: Finished difference Result 425 states and 514 transitions. [2020-07-28 19:02:36,442 INFO L276 IsEmpty]: Start isEmpty. Operand 425 states and 514 transitions. [2020-07-28 19:02:36,443 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:36,443 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:36,443 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:36,443 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:36,443 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 232 states. [2020-07-28 19:02:36,446 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 232 states to 232 states and 282 transitions. [2020-07-28 19:02:36,447 INFO L78 Accepts]: Start accepts. Automaton has 232 states and 282 transitions. Word has length 77 [2020-07-28 19:02:36,447 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:36,447 INFO L479 AbstractCegarLoop]: Abstraction has 232 states and 282 transitions. [2020-07-28 19:02:36,447 INFO L480 AbstractCegarLoop]: Interpolant automaton has 8 states. [2020-07-28 19:02:36,447 INFO L276 IsEmpty]: Start isEmpty. Operand 232 states and 282 transitions. [2020-07-28 19:02:36,448 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 80 [2020-07-28 19:02:36,448 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:36,448 INFO L422 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:36,448 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2020-07-28 19:02:36,449 INFO L427 AbstractCegarLoop]: === Iteration 17 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:36,449 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:36,449 INFO L82 PathProgramCache]: Analyzing trace with hash -98970795, now seen corresponding path program 1 times [2020-07-28 19:02:36,449 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:36,450 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1675521663] [2020-07-28 19:02:36,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:36,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:36,582 INFO L280 TraceCheckUtils]: 0: Hoare triple {27452#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {27454#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:36,583 INFO L280 TraceCheckUtils]: 1: Hoare triple {27454#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {27454#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:36,584 INFO L280 TraceCheckUtils]: 2: Hoare triple {27454#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {27454#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:36,584 INFO L280 TraceCheckUtils]: 3: Hoare triple {27454#(= 1 ~waterLevel~0)} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {27454#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:36,585 INFO L280 TraceCheckUtils]: 4: Hoare triple {27454#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~4; {27454#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:36,586 INFO L280 TraceCheckUtils]: 5: Hoare triple {27454#(= 1 ~waterLevel~0)} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {27454#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:36,586 INFO L280 TraceCheckUtils]: 6: Hoare triple {27454#(= 1 ~waterLevel~0)} assume !false; {27454#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:36,587 INFO L280 TraceCheckUtils]: 7: Hoare triple {27454#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {27454#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:36,588 INFO L280 TraceCheckUtils]: 8: Hoare triple {27454#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {27454#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:36,589 INFO L280 TraceCheckUtils]: 9: Hoare triple {27454#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~9; {27454#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:36,590 INFO L280 TraceCheckUtils]: 10: Hoare triple {27454#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,590 INFO L280 TraceCheckUtils]: 11: Hoare triple {27455#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,591 INFO L280 TraceCheckUtils]: 12: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,592 INFO L280 TraceCheckUtils]: 13: Hoare triple {27455#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,592 INFO L280 TraceCheckUtils]: 14: Hoare triple {27455#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,593 INFO L280 TraceCheckUtils]: 15: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,594 INFO L280 TraceCheckUtils]: 16: Hoare triple {27455#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,595 INFO L280 TraceCheckUtils]: 17: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,595 INFO L280 TraceCheckUtils]: 18: Hoare triple {27455#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,596 INFO L280 TraceCheckUtils]: 19: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,597 INFO L280 TraceCheckUtils]: 20: Hoare triple {27455#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,597 INFO L280 TraceCheckUtils]: 21: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,598 INFO L280 TraceCheckUtils]: 22: Hoare triple {27455#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,599 INFO L280 TraceCheckUtils]: 23: Hoare triple {27455#(<= ~waterLevel~0 2)} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,599 INFO L280 TraceCheckUtils]: 24: Hoare triple {27455#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~5;havoc activatePump_#t~ret52, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,600 INFO L280 TraceCheckUtils]: 25: Hoare triple {27455#(<= ~waterLevel~0 2)} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,600 INFO L280 TraceCheckUtils]: 26: Hoare triple {27455#(<= ~waterLevel~0 2)} activatePump_#t~ret52 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret52 && activatePump_#t~ret52 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret52;havoc activatePump_#t~ret52; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,601 INFO L280 TraceCheckUtils]: 27: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,602 INFO L280 TraceCheckUtils]: 28: Hoare triple {27455#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,602 INFO L280 TraceCheckUtils]: 29: Hoare triple {27455#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,603 INFO L280 TraceCheckUtils]: 30: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,604 INFO L280 TraceCheckUtils]: 31: Hoare triple {27455#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,604 INFO L280 TraceCheckUtils]: 32: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(2 == __utac_acc__Specification3_spec__1_~tmp___0~0); {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,605 INFO L280 TraceCheckUtils]: 33: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !false; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,606 INFO L280 TraceCheckUtils]: 34: Hoare triple {27455#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,606 INFO L280 TraceCheckUtils]: 35: Hoare triple {27455#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,607 INFO L280 TraceCheckUtils]: 36: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~9); {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,608 INFO L280 TraceCheckUtils]: 37: Hoare triple {27455#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,608 INFO L280 TraceCheckUtils]: 38: Hoare triple {27455#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___0~2; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,609 INFO L280 TraceCheckUtils]: 39: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,610 INFO L280 TraceCheckUtils]: 40: Hoare triple {27455#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,610 INFO L280 TraceCheckUtils]: 41: Hoare triple {27455#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,611 INFO L280 TraceCheckUtils]: 42: Hoare triple {27455#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:36,612 INFO L280 TraceCheckUtils]: 43: Hoare triple {27455#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,613 INFO L280 TraceCheckUtils]: 44: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,613 INFO L280 TraceCheckUtils]: 45: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,614 INFO L280 TraceCheckUtils]: 46: Hoare triple {27456#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,615 INFO L280 TraceCheckUtils]: 47: Hoare triple {27456#(<= ~waterLevel~0 1)} processEnvironment_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret51 && processEnvironment_#t~ret51 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret51;havoc processEnvironment_#t~ret51; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,616 INFO L280 TraceCheckUtils]: 48: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != processEnvironment_~tmp~6;~pumpRunning~0 := 0; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,617 INFO L280 TraceCheckUtils]: 49: Hoare triple {27456#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,618 INFO L280 TraceCheckUtils]: 50: Hoare triple {27456#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,619 INFO L280 TraceCheckUtils]: 51: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~0; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,619 INFO L280 TraceCheckUtils]: 52: Hoare triple {27456#(<= ~waterLevel~0 1)} assume !false; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,620 INFO L280 TraceCheckUtils]: 53: Hoare triple {27456#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,621 INFO L280 TraceCheckUtils]: 54: Hoare triple {27456#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,622 INFO L280 TraceCheckUtils]: 55: Hoare triple {27456#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp~9); {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,623 INFO L280 TraceCheckUtils]: 56: Hoare triple {27456#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,624 INFO L280 TraceCheckUtils]: 57: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___0~2; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,625 INFO L280 TraceCheckUtils]: 58: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != ~methaneLevelCritical~0;~methaneLevelCritical~0 := 0; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,626 INFO L280 TraceCheckUtils]: 59: Hoare triple {27456#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,627 INFO L280 TraceCheckUtils]: 60: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,628 INFO L280 TraceCheckUtils]: 61: Hoare triple {27456#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,629 INFO L280 TraceCheckUtils]: 62: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,630 INFO L280 TraceCheckUtils]: 63: Hoare triple {27456#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,631 INFO L280 TraceCheckUtils]: 64: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,632 INFO L280 TraceCheckUtils]: 65: Hoare triple {27456#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,633 INFO L280 TraceCheckUtils]: 66: Hoare triple {27456#(<= ~waterLevel~0 1)} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,633 INFO L280 TraceCheckUtils]: 67: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != isHighWaterLevel_~tmp~8;isHighWaterLevel_~tmp___0~1 := 0; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,634 INFO L280 TraceCheckUtils]: 68: Hoare triple {27456#(<= ~waterLevel~0 1)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,635 INFO L280 TraceCheckUtils]: 69: Hoare triple {27456#(<= ~waterLevel~0 1)} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,635 INFO L280 TraceCheckUtils]: 70: Hoare triple {27456#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~5); {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,636 INFO L280 TraceCheckUtils]: 71: Hoare triple {27456#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,636 INFO L280 TraceCheckUtils]: 72: Hoare triple {27456#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:36,637 INFO L280 TraceCheckUtils]: 73: Hoare triple {27456#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {27457#(not (= 2 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:02:36,638 INFO L280 TraceCheckUtils]: 74: Hoare triple {27457#(not (= 2 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {27458#(not (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 2))} is VALID [2020-07-28 19:02:36,640 INFO L280 TraceCheckUtils]: 75: Hoare triple {27458#(not (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 2))} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {27453#false} is VALID [2020-07-28 19:02:36,640 INFO L280 TraceCheckUtils]: 76: Hoare triple {27453#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {27453#false} is VALID [2020-07-28 19:02:36,640 INFO L280 TraceCheckUtils]: 77: Hoare triple {27453#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {27453#false} is VALID [2020-07-28 19:02:36,641 INFO L280 TraceCheckUtils]: 78: Hoare triple {27453#false} assume !false; {27453#false} is VALID [2020-07-28 19:02:36,653 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 32 proven. 10 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2020-07-28 19:02:36,654 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1675521663] [2020-07-28 19:02:36,654 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [567773758] [2020-07-28 19:02:36,654 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:02:36,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:36,834 INFO L263 TraceCheckSpWp]: Trace formula consists of 499 conjuncts, 7 conjunts are in the unsatisfiable core [2020-07-28 19:02:36,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:36,882 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:02:37,254 INFO L280 TraceCheckUtils]: 0: Hoare triple {27452#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(30);call #t~string26.base, #t~string26.offset := #Ultimate.allocOnStack(9);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(21);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(30);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(9);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(25);call #t~string41.base, #t~string41.offset := #Ultimate.allocOnStack(13);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string43.base, #t~string43.offset, 1);call write~init~int(77, #t~string43.base, 1 + #t~string43.offset, 1);call write~init~int(101, #t~string43.base, 2 + #t~string43.offset, 1);call write~init~int(116, #t~string43.base, 3 + #t~string43.offset, 1);call write~init~int(104, #t~string43.base, 4 + #t~string43.offset, 1);call write~init~int(58, #t~string43.base, 5 + #t~string43.offset, 1);call write~init~int(0, #t~string43.base, 6 + #t~string43.offset, 1);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string45.base, #t~string45.offset, 1);call write~init~int(82, #t~string45.base, 1 + #t~string45.offset, 1);call write~init~int(73, #t~string45.base, 2 + #t~string45.offset, 1);call write~init~int(84, #t~string45.base, 3 + #t~string45.offset, 1);call write~init~int(0, #t~string45.base, 4 + #t~string45.offset, 1);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string47.base, #t~string47.offset, 1);call write~init~int(75, #t~string47.base, 1 + #t~string47.offset, 1);call write~init~int(0, #t~string47.base, 2 + #t~string47.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string49.base, #t~string49.offset, 1);call write~init~int(0, #t~string49.base, 1 + #t~string49.offset, 1);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(13);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(110, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 2 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string59.base, #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(102, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 3 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string61.base, #t~string61.offset, 1);call write~init~int(80, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(117, #t~string61.base, 2 + #t~string61.offset, 1);call write~init~int(109, #t~string61.base, 3 + #t~string61.offset, 1);call write~init~int(112, #t~string61.base, 4 + #t~string61.offset, 1);call write~init~int(58, #t~string61.base, 5 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 6 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(110, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 2 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string65.base, #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(102, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 3 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string67.base, #t~string67.offset, 1);call write~init~int(32, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string69.base, #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 1 + #t~string69.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,255 INFO L280 TraceCheckUtils]: 1: Hoare triple {27456#(<= ~waterLevel~0 1)} havoc main_#res;havoc main_#t~ret39, main_~retValue_acc~5, main_~tmp~4;havoc main_~retValue_acc~5;havoc main_~tmp~4; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,256 INFO L280 TraceCheckUtils]: 2: Hoare triple {27456#(<= ~waterLevel~0 1)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,257 INFO L280 TraceCheckUtils]: 3: Hoare triple {27456#(<= ~waterLevel~0 1)} main_#t~ret39 := valid_product_#res;assume -2147483648 <= main_#t~ret39 && main_#t~ret39 <= 2147483647;main_~tmp~4 := main_#t~ret39;havoc main_#t~ret39; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,258 INFO L280 TraceCheckUtils]: 4: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~4; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,259 INFO L280 TraceCheckUtils]: 5: Hoare triple {27456#(<= ~waterLevel~0 1)} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~2, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~2;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,260 INFO L280 TraceCheckUtils]: 6: Hoare triple {27456#(<= ~waterLevel~0 1)} assume !false; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,261 INFO L280 TraceCheckUtils]: 7: Hoare triple {27456#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,262 INFO L280 TraceCheckUtils]: 8: Hoare triple {27456#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,263 INFO L280 TraceCheckUtils]: 9: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~9; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,264 INFO L280 TraceCheckUtils]: 10: Hoare triple {27456#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,265 INFO L280 TraceCheckUtils]: 11: Hoare triple {27455#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,266 INFO L280 TraceCheckUtils]: 12: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~2); {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,267 INFO L280 TraceCheckUtils]: 13: Hoare triple {27455#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,268 INFO L280 TraceCheckUtils]: 14: Hoare triple {27455#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,269 INFO L280 TraceCheckUtils]: 15: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,270 INFO L280 TraceCheckUtils]: 16: Hoare triple {27455#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,271 INFO L280 TraceCheckUtils]: 17: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,272 INFO L280 TraceCheckUtils]: 18: Hoare triple {27455#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,273 INFO L280 TraceCheckUtils]: 19: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,274 INFO L280 TraceCheckUtils]: 20: Hoare triple {27455#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,274 INFO L280 TraceCheckUtils]: 21: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~8);isHighWaterLevel_~tmp___0~1 := 1; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,275 INFO L280 TraceCheckUtils]: 22: Hoare triple {27455#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,276 INFO L280 TraceCheckUtils]: 23: Hoare triple {27455#(<= ~waterLevel~0 2)} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,281 INFO L280 TraceCheckUtils]: 24: Hoare triple {27455#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__methaneQuery_~tmp~5;havoc activatePump_#t~ret52, activatePump_~tmp~7;havoc activatePump_~tmp~7;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,282 INFO L280 TraceCheckUtils]: 25: Hoare triple {27455#(<= ~waterLevel~0 2)} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,283 INFO L280 TraceCheckUtils]: 26: Hoare triple {27455#(<= ~waterLevel~0 2)} activatePump_#t~ret52 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret52 && activatePump_#t~ret52 <= 2147483647;activatePump_~tmp~7 := activatePump_#t~ret52;havoc activatePump_#t~ret52; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,284 INFO L280 TraceCheckUtils]: 27: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != activatePump_~tmp~7);~pumpRunning~0 := 1; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,285 INFO L280 TraceCheckUtils]: 28: Hoare triple {27455#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,286 INFO L280 TraceCheckUtils]: 29: Hoare triple {27455#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,287 INFO L280 TraceCheckUtils]: 30: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,288 INFO L280 TraceCheckUtils]: 31: Hoare triple {27455#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,289 INFO L280 TraceCheckUtils]: 32: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(2 == __utac_acc__Specification3_spec__1_~tmp___0~0); {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,289 INFO L280 TraceCheckUtils]: 33: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !false; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,290 INFO L280 TraceCheckUtils]: 34: Hoare triple {27455#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,291 INFO L280 TraceCheckUtils]: 35: Hoare triple {27455#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,292 INFO L280 TraceCheckUtils]: 36: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~9); {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,293 INFO L280 TraceCheckUtils]: 37: Hoare triple {27455#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,294 INFO L280 TraceCheckUtils]: 38: Hoare triple {27455#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___0~2; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,294 INFO L280 TraceCheckUtils]: 39: Hoare triple {27455#(<= ~waterLevel~0 2)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,295 INFO L280 TraceCheckUtils]: 40: Hoare triple {27455#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,296 INFO L280 TraceCheckUtils]: 41: Hoare triple {27455#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,296 INFO L280 TraceCheckUtils]: 42: Hoare triple {27455#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {27455#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:37,297 INFO L280 TraceCheckUtils]: 43: Hoare triple {27455#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,298 INFO L280 TraceCheckUtils]: 44: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,299 INFO L280 TraceCheckUtils]: 45: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret53, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,299 INFO L280 TraceCheckUtils]: 46: Hoare triple {27456#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret53 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret53 && isMethaneAlarm_#t~ret53 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret53;havoc isMethaneAlarm_#t~ret53;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,300 INFO L280 TraceCheckUtils]: 47: Hoare triple {27456#(<= ~waterLevel~0 1)} processEnvironment_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret51 && processEnvironment_#t~ret51 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret51;havoc processEnvironment_#t~ret51; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,301 INFO L280 TraceCheckUtils]: 48: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != processEnvironment_~tmp~6;~pumpRunning~0 := 0; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,301 INFO L280 TraceCheckUtils]: 49: Hoare triple {27456#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,302 INFO L280 TraceCheckUtils]: 50: Hoare triple {27456#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,303 INFO L280 TraceCheckUtils]: 51: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~0; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,303 INFO L280 TraceCheckUtils]: 52: Hoare triple {27456#(<= ~waterLevel~0 1)} assume !false; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,304 INFO L280 TraceCheckUtils]: 53: Hoare triple {27456#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,304 INFO L280 TraceCheckUtils]: 54: Hoare triple {27456#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,305 INFO L280 TraceCheckUtils]: 55: Hoare triple {27456#(<= ~waterLevel~0 1)} assume !(0 != test_~tmp~9); {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,306 INFO L280 TraceCheckUtils]: 56: Hoare triple {27456#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~2 := test_#t~nondet72;havoc test_#t~nondet72; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,306 INFO L280 TraceCheckUtils]: 57: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___0~2; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,307 INFO L280 TraceCheckUtils]: 58: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != ~methaneLevelCritical~0;~methaneLevelCritical~0 := 0; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,308 INFO L280 TraceCheckUtils]: 59: Hoare triple {27456#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,308 INFO L280 TraceCheckUtils]: 60: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,309 INFO L280 TraceCheckUtils]: 61: Hoare triple {27456#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0); {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,310 INFO L280 TraceCheckUtils]: 62: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret51, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,310 INFO L280 TraceCheckUtils]: 63: Hoare triple {27456#(<= ~waterLevel~0 1)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret50, processEnvironment__wrappee__methaneQuery_~tmp~5;havoc processEnvironment__wrappee__methaneQuery_~tmp~5; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,311 INFO L280 TraceCheckUtils]: 64: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret70, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~8, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~8;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,312 INFO L280 TraceCheckUtils]: 65: Hoare triple {27456#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,312 INFO L280 TraceCheckUtils]: 66: Hoare triple {27456#(<= ~waterLevel~0 1)} isHighWaterLevel_#t~ret70 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret70 && isHighWaterLevel_#t~ret70 <= 2147483647;isHighWaterLevel_~tmp~8 := isHighWaterLevel_#t~ret70;havoc isHighWaterLevel_#t~ret70; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,313 INFO L280 TraceCheckUtils]: 67: Hoare triple {27456#(<= ~waterLevel~0 1)} assume 0 != isHighWaterLevel_~tmp~8;isHighWaterLevel_~tmp___0~1 := 0; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,314 INFO L280 TraceCheckUtils]: 68: Hoare triple {27456#(<= ~waterLevel~0 1)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,314 INFO L280 TraceCheckUtils]: 69: Hoare triple {27456#(<= ~waterLevel~0 1)} processEnvironment__wrappee__methaneQuery_#t~ret50 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret50 && processEnvironment__wrappee__methaneQuery_#t~ret50 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~5 := processEnvironment__wrappee__methaneQuery_#t~ret50;havoc processEnvironment__wrappee__methaneQuery_#t~ret50; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,315 INFO L280 TraceCheckUtils]: 70: Hoare triple {27456#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~5); {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,316 INFO L280 TraceCheckUtils]: 71: Hoare triple {27456#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret0, __utac_acc__Specification3_spec__1_#t~ret1, __utac_acc__Specification3_spec__1_#t~ret2, __utac_acc__Specification3_spec__1_~tmp~0, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~0;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,316 INFO L280 TraceCheckUtils]: 72: Hoare triple {27456#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret0 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret0 && __utac_acc__Specification3_spec__1_#t~ret0 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~0 := __utac_acc__Specification3_spec__1_#t~ret0;havoc __utac_acc__Specification3_spec__1_#t~ret0; {27456#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:37,317 INFO L280 TraceCheckUtils]: 73: Hoare triple {27456#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~0);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {27681#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:02:37,318 INFO L280 TraceCheckUtils]: 74: Hoare triple {27681#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification3_spec__1_#t~ret1 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret1 && __utac_acc__Specification3_spec__1_#t~ret1 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret1;havoc __utac_acc__Specification3_spec__1_#t~ret1; {27685#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} is VALID [2020-07-28 19:02:37,319 INFO L280 TraceCheckUtils]: 75: Hoare triple {27685#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {27453#false} is VALID [2020-07-28 19:02:37,319 INFO L280 TraceCheckUtils]: 76: Hoare triple {27453#false} __utac_acc__Specification3_spec__1_#t~ret2 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret2 && __utac_acc__Specification3_spec__1_#t~ret2 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret2;havoc __utac_acc__Specification3_spec__1_#t~ret2; {27453#false} is VALID [2020-07-28 19:02:37,320 INFO L280 TraceCheckUtils]: 77: Hoare triple {27453#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {27453#false} is VALID [2020-07-28 19:02:37,320 INFO L280 TraceCheckUtils]: 78: Hoare triple {27453#false} assume !false; {27453#false} is VALID [2020-07-28 19:02:37,336 INFO L134 CoverageAnalysis]: Checked inductivity of 52 backedges. 32 proven. 6 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2020-07-28 19:02:37,337 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:02:37,338 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 8 [2020-07-28 19:02:37,338 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [627614569] [2020-07-28 19:02:37,339 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 79 [2020-07-28 19:02:37,340 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:37,340 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states. [2020-07-28 19:02:37,496 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 84 edges. 84 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:37,497 INFO L459 AbstractCegarLoop]: Interpolant automaton has 9 states [2020-07-28 19:02:37,497 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:37,498 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2020-07-28 19:02:37,498 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:02:37,498 INFO L87 Difference]: Start difference. First operand 232 states and 282 transitions. Second operand 9 states. [2020-07-28 19:02:42,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:42,497 INFO L93 Difference]: Finished difference Result 815 states and 1010 transitions. [2020-07-28 19:02:42,497 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2020-07-28 19:02:42,497 INFO L78 Accepts]: Start accepts. Automaton has 9 states. Word has length 79 [2020-07-28 19:02:42,498 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:42,498 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-28 19:02:42,502 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 400 transitions. [2020-07-28 19:02:42,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9 states. [2020-07-28 19:02:42,507 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 400 transitions. [2020-07-28 19:02:42,507 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 13 states and 400 transitions. [2020-07-28 19:02:43,024 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 400 edges. 400 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:43,024 INFO L225 Difference]: With dead ends: 815 [2020-07-28 19:02:43,024 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:02:43,028 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 77 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 41 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=89, Invalid=183, Unknown=0, NotChecked=0, Total=272 [2020-07-28 19:02:43,028 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:02:43,028 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:02:43,028 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:43,028 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:43,028 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:43,029 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:43,029 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:43,029 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:43,029 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:43,029 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:43,030 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:43,030 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:43,030 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:43,030 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:43,030 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:43,030 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:43,030 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:43,031 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:43,031 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:43,031 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:43,031 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:02:43,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:02:43,031 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 79 [2020-07-28 19:02:43,031 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:43,031 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:02:43,031 INFO L480 AbstractCegarLoop]: Interpolant automaton has 9 states. [2020-07-28 19:02:43,032 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:43,032 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:43,240 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2020-07-28 19:02:43,245 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:02:43,380 WARN L193 SmtUtils]: Spent 124.00 ms on a formula simplification. DAG size of input: 103 DAG size of output: 79 [2020-07-28 19:02:43,669 WARN L193 SmtUtils]: Spent 222.00 ms on a formula simplification. DAG size of input: 147 DAG size of output: 123 [2020-07-28 19:02:43,943 WARN L193 SmtUtils]: Spent 264.00 ms on a formula simplification. DAG size of input: 170 DAG size of output: 139 [2020-07-28 19:02:45,286 WARN L193 SmtUtils]: Spent 1.11 s on a formula simplification. DAG size of input: 393 DAG size of output: 311 [2020-07-28 19:02:45,524 WARN L193 SmtUtils]: Spent 232.00 ms on a formula simplification. DAG size of input: 195 DAG size of output: 140 [2020-07-28 19:02:46,202 WARN L193 SmtUtils]: Spent 666.00 ms on a formula simplification. DAG size of input: 393 DAG size of output: 311 [2020-07-28 19:02:46,579 WARN L193 SmtUtils]: Spent 368.00 ms on a formula simplification. DAG size of input: 253 DAG size of output: 210 [2020-07-28 19:02:46,783 WARN L193 SmtUtils]: Spent 197.00 ms on a formula simplification. DAG size of input: 243 DAG size of output: 196 [2020-07-28 19:02:46,955 WARN L193 SmtUtils]: Spent 162.00 ms on a formula simplification. DAG size of input: 209 DAG size of output: 172 [2020-07-28 19:02:47,362 WARN L193 SmtUtils]: Spent 403.00 ms on a formula simplification. DAG size of input: 322 DAG size of output: 258 [2020-07-28 19:02:47,748 WARN L193 SmtUtils]: Spent 357.00 ms on a formula simplification. DAG size of input: 76 DAG size of output: 59 [2020-07-28 19:02:48,034 WARN L193 SmtUtils]: Spent 274.00 ms on a formula simplification. DAG size of input: 62 DAG size of output: 41 [2020-07-28 19:02:48,769 WARN L193 SmtUtils]: Spent 727.00 ms on a formula simplification. DAG size of input: 117 DAG size of output: 67 [2020-07-28 19:02:49,683 WARN L193 SmtUtils]: Spent 892.00 ms on a formula simplification. DAG size of input: 134 DAG size of output: 74 [2020-07-28 19:02:49,969 WARN L193 SmtUtils]: Spent 244.00 ms on a formula simplification. DAG size of input: 80 DAG size of output: 30 [2020-07-28 19:02:50,225 WARN L193 SmtUtils]: Spent 251.00 ms on a formula simplification. DAG size of input: 85 DAG size of output: 34 [2020-07-28 19:02:50,498 WARN L193 SmtUtils]: Spent 256.00 ms on a formula simplification. DAG size of input: 68 DAG size of output: 44 [2020-07-28 19:02:53,396 WARN L193 SmtUtils]: Spent 2.88 s on a formula simplification. DAG size of input: 298 DAG size of output: 68 [2020-07-28 19:02:54,328 WARN L193 SmtUtils]: Spent 911.00 ms on a formula simplification. DAG size of input: 130 DAG size of output: 48 [2020-07-28 19:02:57,337 WARN L193 SmtUtils]: Spent 3.00 s on a formula simplification. DAG size of input: 298 DAG size of output: 68 [2020-07-28 19:02:59,294 WARN L193 SmtUtils]: Spent 1.95 s on a formula simplification. DAG size of input: 203 DAG size of output: 75 [2020-07-28 19:03:00,661 WARN L193 SmtUtils]: Spent 1.35 s on a formula simplification. DAG size of input: 190 DAG size of output: 74 [2020-07-28 19:03:02,041 WARN L193 SmtUtils]: Spent 1.37 s on a formula simplification. DAG size of input: 168 DAG size of output: 57 [2020-07-28 19:03:04,024 WARN L193 SmtUtils]: Spent 1.98 s on a formula simplification. DAG size of input: 252 DAG size of output: 51 [2020-07-28 19:03:04,087 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 957) no Hoare annotation was computed. [2020-07-28 19:03:04,087 INFO L268 CegarLoopResult]: For program point L498(lines 498 502) no Hoare annotation was computed. [2020-07-28 19:03:04,087 INFO L268 CegarLoopResult]: For program point L498-1(lines 690 696) no Hoare annotation was computed. [2020-07-28 19:03:04,088 INFO L264 CegarLoopResult]: At program point L697(lines 697 703) the Hoare annotation is: (let ((.cse17 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|)) (.cse24 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse25 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse26 (= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~5))) (let ((.cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse18 (= 0 ULTIMATE.start_processEnvironment_~tmp~6)) (.cse4 (not .cse26)) (.cse5 (not .cse25)) (.cse7 (not .cse24)) (.cse9 (= 0 ULTIMATE.start_activatePump_~tmp~7)) (.cse11 (<= ~waterLevel~0 2)) (.cse12 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse19 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse20 (= 1 ~pumpRunning~0)) (.cse14 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~8)) (.cse1 (= 1 ~methaneLevelCritical~0)) (.cse8 (not .cse17)) (.cse16 (<= ~waterLevel~0 1)) (.cse15 (= 0 ~methaneLevelCritical~0)) (.cse21 (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse10 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse22 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp~8)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not (= 0 ~systemActive~0))) (.cse6 (= 1 ULTIMATE.start_main_~tmp~4)) (.cse13 (= 0 ~pumpRunning~0)) (.cse23 (= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (not .cse9) .cse10 .cse11 .cse12 .cse13 .cse14) (and .cse15 .cse10 .cse2 .cse3 .cse6 .cse13 .cse8 .cse16) (and .cse15 .cse10 .cse17 .cse2 .cse3 .cse9 .cse6 .cse18 .cse16 .cse19 .cse20) (and .cse0 .cse10 .cse1 .cse2 .cse3 .cse9 .cse6 .cse8 .cse18 .cse16 .cse20) (and (<= 2 ~waterLevel~0) .cse17 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse15 .cse10 .cse9 .cse11 .cse12 .cse19 .cse20 .cse14) (and .cse21 .cse10 .cse1 .cse22 .cse2 .cse3 .cse6 .cse13 .cse23) (and .cse10 .cse1 .cse2 .cse3 .cse6 .cse13 .cse8 .cse16) (and .cse15 .cse21 .cse24 .cse10 .cse22 .cse2 .cse3 .cse6 .cse13 .cse25 .cse26 .cse23)))) [2020-07-28 19:03:04,088 INFO L264 CegarLoopResult]: At program point L697-1(lines 697 703) the Hoare annotation is: false [2020-07-28 19:03:04,088 INFO L264 CegarLoopResult]: At program point L697-2(lines 697 703) the Hoare annotation is: false [2020-07-28 19:03:04,089 INFO L264 CegarLoopResult]: At program point L103(lines 1 960) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (not (= 0 ~systemActive~0)) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0)) [2020-07-28 19:03:04,089 INFO L268 CegarLoopResult]: For program point L897(lines 896 943) no Hoare annotation was computed. [2020-07-28 19:03:04,089 INFO L268 CegarLoopResult]: For program point L898(lines 898 902) no Hoare annotation was computed. [2020-07-28 19:03:04,089 INFO L268 CegarLoopResult]: For program point L569(lines 569 576) no Hoare annotation was computed. [2020-07-28 19:03:04,089 INFO L271 CegarLoopResult]: At program point L569-1(lines 569 576) the Hoare annotation is: true [2020-07-28 19:03:04,089 INFO L268 CegarLoopResult]: For program point L867(lines 867 871) no Hoare annotation was computed. [2020-07-28 19:03:04,089 INFO L268 CegarLoopResult]: For program point L867-2(lines 867 871) no Hoare annotation was computed. [2020-07-28 19:03:04,090 INFO L268 CegarLoopResult]: For program point L867-3(lines 867 871) no Hoare annotation was computed. [2020-07-28 19:03:04,090 INFO L268 CegarLoopResult]: For program point L867-5(lines 867 871) no Hoare annotation was computed. [2020-07-28 19:03:04,090 INFO L268 CegarLoopResult]: For program point L669(lines 669 675) no Hoare annotation was computed. [2020-07-28 19:03:04,090 INFO L268 CegarLoopResult]: For program point L867-6(lines 867 871) no Hoare annotation was computed. [2020-07-28 19:03:04,090 INFO L268 CegarLoopResult]: For program point L669-1(lines 669 675) no Hoare annotation was computed. [2020-07-28 19:03:04,090 INFO L268 CegarLoopResult]: For program point L669-2(lines 669 675) no Hoare annotation was computed. [2020-07-28 19:03:04,091 INFO L268 CegarLoopResult]: For program point L867-8(lines 867 871) no Hoare annotation was computed. [2020-07-28 19:03:04,091 INFO L268 CegarLoopResult]: For program point L669-3(lines 669 675) no Hoare annotation was computed. [2020-07-28 19:03:04,091 INFO L268 CegarLoopResult]: For program point L867-9(lines 867 871) no Hoare annotation was computed. [2020-07-28 19:03:04,091 INFO L268 CegarLoopResult]: For program point L669-4(lines 669 675) no Hoare annotation was computed. [2020-07-28 19:03:04,091 INFO L268 CegarLoopResult]: For program point L867-11(lines 867 871) no Hoare annotation was computed. [2020-07-28 19:03:04,091 INFO L268 CegarLoopResult]: For program point L669-5(lines 669 675) no Hoare annotation was computed. [2020-07-28 19:03:04,092 INFO L268 CegarLoopResult]: For program point L867-12(lines 867 871) no Hoare annotation was computed. [2020-07-28 19:03:04,092 INFO L268 CegarLoopResult]: For program point L867-14(lines 867 871) no Hoare annotation was computed. [2020-07-28 19:03:04,092 INFO L268 CegarLoopResult]: For program point L867-15(lines 867 871) no Hoare annotation was computed. [2020-07-28 19:03:04,092 INFO L268 CegarLoopResult]: For program point L867-17(lines 867 871) no Hoare annotation was computed. [2020-07-28 19:03:04,092 INFO L268 CegarLoopResult]: For program point L934(lines 934 938) no Hoare annotation was computed. [2020-07-28 19:03:04,093 INFO L264 CegarLoopResult]: At program point L934-2(lines 690 696) the Hoare annotation is: (let ((.cse6 (= 1 ~waterLevel~0)) (.cse9 (<= 2 ~waterLevel~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (not (= 0 ~systemActive~0))) (.cse11 (= 0 ULTIMATE.start_activatePump_~tmp~7)) (.cse13 (= 1 ~pumpRunning~0))) (let ((.cse7 (or (and .cse1 .cse3 .cse11 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~5)) .cse6 .cse13) (and .cse9 .cse1 .cse3 .cse11 .cse13))) (.cse12 (= 0 ULTIMATE.start_processEnvironment_~tmp~6)) (.cse10 (= 1 ~methaneLevelCritical~0)) (.cse14 (not (= 0 |ULTIMATE.start_isMethaneAlarm_#res|))) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse8 (<= ~waterLevel~0 2)) (.cse4 (= 1 ULTIMATE.start_main_~tmp~4)) (.cse5 (= 0 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse2 .cse8 .cse4) (and .cse9 .cse1 .cse10 .cse2 .cse3 .cse8 .cse4 .cse5) (and .cse7 .cse10 .cse2 .cse8 .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse11 .cse4 .cse12 (<= ~waterLevel~0 1) .cse13) (and .cse1 .cse10 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse10 .cse2 .cse3 .cse11 .cse8 .cse4 .cse12 .cse13) (and .cse1 .cse10 .cse2 .cse3 .cse8 .cse4 .cse5 .cse14) (and .cse0 .cse1 .cse2 .cse3 .cse8 .cse4 .cse5 .cse14) (and .cse0 .cse9 .cse1 .cse2 .cse3 .cse8 .cse4 .cse5)))) [2020-07-28 19:03:04,093 INFO L268 CegarLoopResult]: For program point L604(lines 604 608) no Hoare annotation was computed. [2020-07-28 19:03:04,093 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 957) no Hoare annotation was computed. [2020-07-28 19:03:04,094 INFO L264 CegarLoopResult]: At program point L111(lines 106 114) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0)) [2020-07-28 19:03:04,094 INFO L264 CegarLoopResult]: At program point L674(lines 665 678) the Hoare annotation is: false [2020-07-28 19:03:04,094 INFO L264 CegarLoopResult]: At program point L674-1(lines 665 678) the Hoare annotation is: (let ((.cse11 (<= 2 ~waterLevel~0)) (.cse12 (<= ~waterLevel~0 2)) (.cse13 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse2 (= 1 ~methaneLevelCritical~0)) (.cse10 (<= ~waterLevel~0 1)) (.cse9 (not (= 0 |ULTIMATE.start_isMethaneAlarm_#res|))) (.cse0 (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse8 (= 0 ~methaneLevelCritical~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (not (= 0 ~systemActive~0))) (.cse4 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse5 (= 1 ULTIMATE.start_main_~tmp~4)) (.cse6 (= 0 ~pumpRunning~0)) (.cse7 (= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse8 .cse1 .cse4 .cse3 .cse5 .cse6 .cse9 .cse10) (and .cse11 .cse1 .cse2 .cse3 .cse4 .cse12 .cse13 .cse5 .cse6) (and .cse8 .cse11 .cse1 .cse4 .cse3 .cse12 .cse5 .cse13 .cse6) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse10 .cse9) (and .cse0 .cse8 .cse1 .cse3 .cse4 .cse5 .cse6 .cse7))) [2020-07-28 19:03:04,094 INFO L264 CegarLoopResult]: At program point L674-2(lines 665 678) the Hoare annotation is: false [2020-07-28 19:03:04,094 INFO L264 CegarLoopResult]: At program point L674-3(lines 665 678) the Hoare annotation is: false [2020-07-28 19:03:04,095 INFO L264 CegarLoopResult]: At program point L674-4(lines 665 678) the Hoare annotation is: false [2020-07-28 19:03:04,095 INFO L264 CegarLoopResult]: At program point L674-5(lines 665 678) the Hoare annotation is: false [2020-07-28 19:03:04,095 INFO L268 CegarLoopResult]: For program point L906(lines 906 912) no Hoare annotation was computed. [2020-07-28 19:03:04,095 INFO L264 CegarLoopResult]: At program point L906-1(lines 906 912) the Hoare annotation is: (let ((.cse0 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|))) (let ((.cse8 (= 1 ~waterLevel~0)) (.cse19 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)) (.cse11 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0)) (.cse17 (<= ~waterLevel~0 1)) (.cse12 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse21 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse6 (= 0 ULTIMATE.start_activatePump_~tmp~7)) (.cse16 (not .cse0)) (.cse20 (= 0 ULTIMATE.start_processEnvironment_~tmp~6)) (.cse7 (= 1 ~pumpRunning~0)) (.cse14 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse15 (= 1 ~methaneLevelCritical~0)) (.cse18 (= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0)) (.cse1 (= 0 ~methaneLevelCritical~0)) (.cse2 (<= 2 ~waterLevel~0)) (.cse3 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse5 (not (= 0 ~systemActive~0))) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (= 1 ULTIMATE.start_main_~tmp~4)) (.cse13 (= 0 ~pumpRunning~0))) (or (and .cse0 (or (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse1 .cse3 .cse5 .cse4 .cse6 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~5)) .cse8 .cse7)) .cse9 .cse10 .cse11 .cse12) (and .cse1 .cse3 .cse4 .cse5 .cse10 .cse13 .cse8) (and .cse14 .cse3 .cse15 .cse4 .cse5 .cse10 .cse13 .cse16 .cse17 .cse18) (and .cse0 .cse4 .cse5 .cse10 .cse19 .cse20 .cse17 .cse21 .cse1 .cse3 .cse6 .cse11 .cse12 .cse7) (and .cse14 (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse3 .cse15 .cse5 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp~8) .cse4 .cse10 .cse13 .cse18 .cse8) (and .cse1 .cse3 .cse4 .cse5 .cse10 .cse19 .cse13 .cse11 .cse16 .cse17 .cse12 .cse21) (and .cse14 .cse3 .cse15 .cse4 .cse5 .cse6 .cse9 .cse10 .cse16 .cse20 .cse18 .cse7) (and .cse14 .cse2 .cse3 .cse15 .cse4 .cse5 .cse9 .cse10 .cse13 .cse18) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse9 .cse10 .cse13)))) [2020-07-28 19:03:04,095 INFO L264 CegarLoopResult]: At program point L873(lines 858 876) the Hoare annotation is: false [2020-07-28 19:03:04,096 INFO L264 CegarLoopResult]: At program point L873-1(lines 858 876) the Hoare annotation is: (let ((.cse13 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse15 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (let ((.cse1 (<= 2 ~waterLevel~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (not .cse15)) (.cse7 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse10 (not .cse13)) (.cse11 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~8)) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse18 (<= ~waterLevel~0 1)) (.cse19 (not (= 0 |ULTIMATE.start_isMethaneAlarm_#res|))) (.cse12 (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse17 (= 1 ~methaneLevelCritical~0)) (.cse14 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp~8)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse4 (not (= 0 ~systemActive~0))) (.cse8 (= 1 ULTIMATE.start_main_~tmp~4)) (.cse9 (= 0 ~pumpRunning~0)) (.cse16 (= 1 ~waterLevel~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse12 .cse0 .cse13 .cse2 .cse14 .cse3 .cse4 .cse8 .cse9 .cse15 .cse16) (and .cse1 .cse2 .cse17 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse12 .cse0 .cse13 .cse2 .cse14 .cse4 .cse3 .cse8 .cse15 .cse9 .cse18 .cse19) (and .cse12 .cse2 .cse13 .cse17 .cse3 .cse4 .cse14 .cse8 .cse9 .cse15 .cse18 .cse19) (and .cse12 .cse13 .cse2 .cse17 .cse14 .cse3 .cse4 .cse8 .cse9 .cse15 .cse16)))) [2020-07-28 19:03:04,096 INFO L264 CegarLoopResult]: At program point L873-2(lines 858 876) the Hoare annotation is: false [2020-07-28 19:03:04,096 INFO L264 CegarLoopResult]: At program point L873-3(lines 858 876) the Hoare annotation is: false [2020-07-28 19:03:04,096 INFO L264 CegarLoopResult]: At program point L873-4(lines 858 876) the Hoare annotation is: false [2020-07-28 19:03:04,097 INFO L264 CegarLoopResult]: At program point L873-5(lines 858 876) the Hoare annotation is: false [2020-07-28 19:03:04,097 INFO L264 CegarLoopResult]: At program point L809(lines 802 812) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse5 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse2 (not (= 0 ~systemActive~0))) (.cse3 (= 0 ULTIMATE.start_activatePump_~tmp~7)) (.cse4 (= 1 ULTIMATE.start_main_~tmp~4)) (.cse6 (<= ~waterLevel~0 1)) (.cse7 (= 1 ~pumpRunning~0))) (or (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 (= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4 (not .cse5) .cse6 .cse7) (and (= 0 ~methaneLevelCritical~0) .cse0 .cse5 .cse1 .cse2 .cse3 .cse4 .cse6 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse7))) [2020-07-28 19:03:04,097 INFO L264 CegarLoopResult]: At program point L809-1(lines 802 812) the Hoare annotation is: false [2020-07-28 19:03:04,097 INFO L264 CegarLoopResult]: At program point L809-2(lines 802 812) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse7 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|)) (.cse1 (not (= 0 ~systemActive~0))) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~5))) (.cse4 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~4)) (.cse6 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse8 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse11 (= 0 ~pumpRunning~0)) (.cse12 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~8))) (or (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 (= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (not .cse7) .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse0 .cse7 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= 0 ~methaneLevelCritical~0) .cse8 .cse9 .cse10 .cse11 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse12))) [2020-07-28 19:03:04,098 INFO L264 CegarLoopResult]: At program point L809-3(lines 802 812) the Hoare annotation is: false [2020-07-28 19:03:04,098 INFO L264 CegarLoopResult]: At program point L809-4(lines 802 812) the Hoare annotation is: false [2020-07-28 19:03:04,098 INFO L264 CegarLoopResult]: At program point L809-5(lines 802 812) the Hoare annotation is: false [2020-07-28 19:03:04,098 INFO L264 CegarLoopResult]: At program point L809-6(lines 802 812) the Hoare annotation is: false [2020-07-28 19:03:04,098 INFO L264 CegarLoopResult]: At program point L809-7(lines 802 812) the Hoare annotation is: false [2020-07-28 19:03:04,099 INFO L271 CegarLoopResult]: At program point L578(lines 559 581) the Hoare annotation is: true [2020-07-28 19:03:04,099 INFO L264 CegarLoopResult]: At program point L545(lines 541 547) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (= 1 ULTIMATE.start_main_~tmp~4) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0)) [2020-07-28 19:03:04,099 INFO L264 CegarLoopResult]: At program point L809-8(lines 802 812) the Hoare annotation is: false [2020-07-28 19:03:04,099 INFO L264 CegarLoopResult]: At program point L944(lines 895 945) the Hoare annotation is: false [2020-07-28 19:03:04,099 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:03:04,100 INFO L268 CegarLoopResult]: For program point L53(lines 53 73) no Hoare annotation was computed. [2020-07-28 19:03:04,100 INFO L268 CegarLoopResult]: For program point L53-2(lines 53 73) no Hoare annotation was computed. [2020-07-28 19:03:04,100 INFO L268 CegarLoopResult]: For program point L53-4(lines 53 73) no Hoare annotation was computed. [2020-07-28 19:03:04,100 INFO L268 CegarLoopResult]: For program point L748(lines 748 765) no Hoare annotation was computed. [2020-07-28 19:03:04,100 INFO L268 CegarLoopResult]: For program point L748-1(lines 748 765) no Hoare annotation was computed. [2020-07-28 19:03:04,100 INFO L268 CegarLoopResult]: For program point L748-2(lines 748 765) no Hoare annotation was computed. [2020-07-28 19:03:04,101 INFO L268 CegarLoopResult]: For program point L616(lines 616 620) no Hoare annotation was computed. [2020-07-28 19:03:04,101 INFO L268 CegarLoopResult]: For program point L916(lines 916 922) no Hoare annotation was computed. [2020-07-28 19:03:04,101 INFO L264 CegarLoopResult]: At program point L916-1(lines 916 922) the Hoare annotation is: (let ((.cse6 (= 1 ~waterLevel~0)) (.cse9 (<= 2 ~waterLevel~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (not (= 0 ~systemActive~0))) (.cse11 (= 0 ULTIMATE.start_activatePump_~tmp~7)) (.cse13 (= 1 ~pumpRunning~0))) (let ((.cse7 (or (and .cse1 .cse3 .cse11 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~5)) .cse6 .cse13) (and .cse9 .cse1 .cse3 .cse11 .cse13))) (.cse12 (= 0 ULTIMATE.start_processEnvironment_~tmp~6)) (.cse10 (= 1 ~methaneLevelCritical~0)) (.cse14 (not (= 0 |ULTIMATE.start_isMethaneAlarm_#res|))) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse8 (<= ~waterLevel~0 2)) (.cse4 (= 1 ULTIMATE.start_main_~tmp~4)) (.cse5 (= 0 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse7 .cse2 .cse8 .cse4) (and .cse9 .cse1 .cse10 .cse2 .cse3 .cse8 .cse4 .cse5) (and .cse7 .cse10 .cse2 .cse8 .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse11 .cse4 .cse12 (<= ~waterLevel~0 1) .cse13) (and .cse1 .cse10 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse10 .cse2 .cse3 .cse11 .cse8 .cse4 .cse12 .cse13) (and .cse1 .cse10 .cse2 .cse3 .cse8 .cse4 .cse5 .cse14) (and .cse0 .cse1 .cse2 .cse3 .cse8 .cse4 .cse5 .cse14) (and .cse0 .cse9 .cse1 .cse2 .cse3 .cse8 .cse4 .cse5)))) [2020-07-28 19:03:04,101 INFO L268 CegarLoopResult]: For program point L784(lines 784 790) no Hoare annotation was computed. [2020-07-28 19:03:04,102 INFO L268 CegarLoopResult]: For program point L784-2(lines 784 790) no Hoare annotation was computed. [2020-07-28 19:03:04,102 INFO L268 CegarLoopResult]: For program point L784-4(lines 784 790) no Hoare annotation was computed. [2020-07-28 19:03:04,102 INFO L268 CegarLoopResult]: For program point L784-6(lines 784 790) no Hoare annotation was computed. [2020-07-28 19:03:04,102 INFO L268 CegarLoopResult]: For program point L784-8(lines 784 790) no Hoare annotation was computed. [2020-07-28 19:03:04,102 INFO L268 CegarLoopResult]: For program point L784-10(lines 784 790) no Hoare annotation was computed. [2020-07-28 19:03:04,102 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:03:04,103 INFO L264 CegarLoopResult]: At program point L818(lines 813 821) the Hoare annotation is: (and (<= 2 ~waterLevel~0) (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (not (= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~5)) (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (= 1 ULTIMATE.start_main_~tmp~4) (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (= 0 ~methaneLevelCritical~0) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 0 ULTIMATE.start_activatePump_~tmp~7) (<= ~waterLevel~0 2) (= 1 |ULTIMATE.start_isPumpRunning_#res|) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 1 ~pumpRunning~0) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~8)) [2020-07-28 19:03:04,103 INFO L264 CegarLoopResult]: At program point L818-1(lines 813 821) the Hoare annotation is: false [2020-07-28 19:03:04,103 INFO L268 CegarLoopResult]: For program point L752(lines 752 760) no Hoare annotation was computed. [2020-07-28 19:03:04,103 INFO L264 CegarLoopResult]: At program point L818-2(lines 813 821) the Hoare annotation is: false [2020-07-28 19:03:04,103 INFO L268 CegarLoopResult]: For program point L752-1(lines 752 760) no Hoare annotation was computed. [2020-07-28 19:03:04,103 INFO L268 CegarLoopResult]: For program point L752-2(lines 752 760) no Hoare annotation was computed. [2020-07-28 19:03:04,104 INFO L268 CegarLoopResult]: For program point L59(lines 59 72) no Hoare annotation was computed. [2020-07-28 19:03:04,104 INFO L264 CegarLoopResult]: At program point L59-1(lines 1 960) the Hoare annotation is: (let ((.cse15 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|))) (let ((.cse13 (= 0 ULTIMATE.start_processEnvironment_~tmp~6)) (.cse14 (= 1 ~pumpRunning~0)) (.cse6 (= 1 ~waterLevel~0)) (.cse7 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse8 (= 1 ~methaneLevelCritical~0)) (.cse16 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~5))) (.cse17 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse18 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse12 (= 0 ULTIMATE.start_activatePump_~tmp~7)) (.cse19 (<= ~waterLevel~0 2)) (.cse20 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse11 (= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0)) (.cse23 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~8)) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not (= 0 ~systemActive~0))) (.cse4 (= 1 ULTIMATE.start_main_~tmp~4)) (.cse24 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)) (.cse5 (= 0 ~pumpRunning~0)) (.cse21 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0)) (.cse9 (not .cse15)) (.cse10 (<= ~waterLevel~0 1)) (.cse22 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse25 (<= |ULTIMATE.start_getWaterLevel_#res| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse8 .cse2 .cse3 .cse4 .cse5 .cse9 .cse10 .cse11) (and .cse7 .cse1 .cse8 .cse2 .cse3 .cse12 .cse4 .cse9 .cse13 .cse10 .cse11 .cse14) (and (<= 2 ~waterLevel~0) .cse15 .cse2 .cse3 .cse16 .cse17 .cse4 .cse18 .cse0 .cse1 .cse12 .cse19 .cse20 .cse21 .cse22 .cse14 .cse23) (and .cse15 .cse2 .cse3 .cse4 .cse24 .cse13 .cse10 .cse25 .cse0 .cse1 .cse12 .cse21 .cse22 .cse14) (and .cse7 (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse1 .cse8 .cse3 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp~8) .cse2 .cse4 .cse5 .cse11 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse16 .cse17 .cse4 .cse18 .cse9 (not .cse12) .cse1 .cse19 .cse20 .cse5 .cse11 .cse23) (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse24 .cse5 .cse21 .cse9 .cse10 .cse22 .cse25)))) [2020-07-28 19:03:04,104 INFO L268 CegarLoopResult]: For program point L59-2(lines 59 72) no Hoare annotation was computed. [2020-07-28 19:03:04,105 INFO L264 CegarLoopResult]: At program point L59-3(lines 1 960) the Hoare annotation is: false [2020-07-28 19:03:04,105 INFO L268 CegarLoopResult]: For program point L59-4(lines 59 72) no Hoare annotation was computed. [2020-07-28 19:03:04,105 INFO L264 CegarLoopResult]: At program point L59-5(lines 1 960) the Hoare annotation is: false [2020-07-28 19:03:04,105 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:03:04,105 INFO L268 CegarLoopResult]: For program point L722(lines 722 739) no Hoare annotation was computed. [2020-07-28 19:03:04,105 INFO L268 CegarLoopResult]: For program point L722-1(lines 722 739) no Hoare annotation was computed. [2020-07-28 19:03:04,106 INFO L268 CegarLoopResult]: For program point L722-2(lines 722 739) no Hoare annotation was computed. [2020-07-28 19:03:04,106 INFO L268 CegarLoopResult]: For program point L722-3(lines 722 739) no Hoare annotation was computed. [2020-07-28 19:03:04,106 INFO L268 CegarLoopResult]: For program point L722-4(lines 722 739) no Hoare annotation was computed. [2020-07-28 19:03:04,106 INFO L268 CegarLoopResult]: For program point L722-5(lines 722 739) no Hoare annotation was computed. [2020-07-28 19:03:04,106 INFO L264 CegarLoopResult]: At program point L690(lines 689 708) the Hoare annotation is: (let ((.cse8 (= 0 ULTIMATE.start_activatePump_~tmp~7)) (.cse9 (<= ~waterLevel~0 1)) (.cse10 (= 1 ~pumpRunning~0)) (.cse6 (= 1 ~waterLevel~0)) (.cse7 (= 1 ~methaneLevelCritical~0)) (.cse13 (not (= 0 |ULTIMATE.start_isMethaneAlarm_#res|))) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse11 (<= 2 ~waterLevel~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not (= 0 ~systemActive~0))) (.cse12 (<= ~waterLevel~0 2)) (.cse4 (= 1 ULTIMATE.start_main_~tmp~4)) (.cse5 (= 0 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse7 .cse2 .cse3 .cse8 .cse4 .cse9 .cse10) (and .cse0 .cse1 .cse2 .cse3 .cse8 .cse4 .cse9 .cse10) (and .cse11 .cse1 .cse7 .cse2 .cse3 .cse12 .cse4 .cse5) (and .cse1 .cse7 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse7 .cse2 .cse3 .cse12 .cse4 .cse5 .cse13) (and .cse0 .cse1 .cse2 .cse3 .cse12 .cse4 .cse5 .cse13) (and .cse0 .cse11 .cse1 .cse2 .cse3 .cse12 .cse4 .cse5))) [2020-07-28 19:03:04,107 INFO L268 CegarLoopResult]: For program point L690-1(lines 690 696) no Hoare annotation was computed. [2020-07-28 19:03:04,107 INFO L264 CegarLoopResult]: At program point L690-2(lines 689 708) the Hoare annotation is: false [2020-07-28 19:03:04,107 INFO L264 CegarLoopResult]: At program point L690-3(lines 689 708) the Hoare annotation is: false [2020-07-28 19:03:04,107 INFO L268 CegarLoopResult]: For program point L63(lines 63 69) no Hoare annotation was computed. [2020-07-28 19:03:04,107 INFO L268 CegarLoopResult]: For program point L63-2(lines 63 69) no Hoare annotation was computed. [2020-07-28 19:03:04,107 INFO L268 CegarLoopResult]: For program point L63-4(lines 63 69) no Hoare annotation was computed. [2020-07-28 19:03:04,108 INFO L268 CegarLoopResult]: For program point L592(lines 592 596) no Hoare annotation was computed. [2020-07-28 19:03:04,108 INFO L268 CegarLoopResult]: For program point L592-3(lines 592 596) no Hoare annotation was computed. [2020-07-28 19:03:04,108 INFO L268 CegarLoopResult]: For program point L592-6(lines 592 596) no Hoare annotation was computed. [2020-07-28 19:03:04,108 INFO L264 CegarLoopResult]: At program point L494-2(lines 494 508) the Hoare annotation is: false [2020-07-28 19:03:04,108 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:03:04,108 INFO L268 CegarLoopResult]: For program point L957(line 957) no Hoare annotation was computed. [2020-07-28 19:03:04,109 INFO L268 CegarLoopResult]: For program point L957-1(line 957) no Hoare annotation was computed. [2020-07-28 19:03:04,109 INFO L268 CegarLoopResult]: For program point L957-2(line 957) no Hoare annotation was computed. [2020-07-28 19:03:04,109 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 957) no Hoare annotation was computed. [2020-07-28 19:03:04,109 INFO L268 CegarLoopResult]: For program point L726(lines 726 734) no Hoare annotation was computed. [2020-07-28 19:03:04,109 INFO L268 CegarLoopResult]: For program point L726-1(lines 726 734) no Hoare annotation was computed. [2020-07-28 19:03:04,110 INFO L268 CegarLoopResult]: For program point L726-2(lines 726 734) no Hoare annotation was computed. [2020-07-28 19:03:04,110 INFO L268 CegarLoopResult]: For program point L726-3(lines 726 734) no Hoare annotation was computed. [2020-07-28 19:03:04,110 INFO L268 CegarLoopResult]: For program point L726-4(lines 726 734) no Hoare annotation was computed. [2020-07-28 19:03:04,110 INFO L268 CegarLoopResult]: For program point L726-5(lines 726 734) no Hoare annotation was computed. [2020-07-28 19:03:04,110 INFO L268 CegarLoopResult]: For program point L495(line 495) no Hoare annotation was computed. [2020-07-28 19:03:04,111 INFO L264 CegarLoopResult]: At program point L661(lines 656 664) the Hoare annotation is: (let ((.cse8 (= 0 ~pumpRunning~0)) (.cse12 (<= ~waterLevel~0 1)) (.cse13 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse11 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|)) (.cse0 (not (= 0 ~systemActive~0))) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse4 (= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~5)) (.cse3 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse2 (= 1 ULTIMATE.start_main_~tmp~4)) (.cse7 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse5 (= 0 ~methaneLevelCritical~0)) (.cse6 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse14 (= 0 ULTIMATE.start_activatePump_~tmp~7)) (.cse9 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~0)) (.cse10 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse15 (= 1 ~pumpRunning~0))) (or (and (= 1 |ULTIMATE.start_getWaterLevel_#res|) .cse0 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp~8) .cse1 .cse2 .cse3 .cse4 (= 1 ~waterLevel~0) .cse5 (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse5 .cse6 .cse1 .cse0 .cse2 .cse8 .cse9 (not .cse11) .cse12 .cse10 .cse13) (and .cse11 .cse1 .cse0 .cse2 (= 0 ULTIMATE.start_processEnvironment_~tmp~6) .cse12 .cse13 .cse5 .cse6 .cse14 .cse9 .cse10 .cse15) (and (<= 2 ~waterLevel~0) .cse11 .cse0 .cse1 (not .cse4) (not .cse3) .cse2 (not .cse7) .cse5 .cse6 .cse14 (<= ~waterLevel~0 2) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse9 .cse10 .cse15 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~8)))) [2020-07-28 19:03:04,111 INFO L264 CegarLoopResult]: At program point L661-1(lines 656 664) the Hoare annotation is: false [2020-07-28 19:03:04,111 INFO L264 CegarLoopResult]: At program point L661-2(lines 656 664) the Hoare annotation is: false [2020-07-28 19:03:04,111 INFO L268 CegarLoopResult]: For program point L926(lines 926 939) no Hoare annotation was computed. [2020-07-28 19:03:04,111 INFO L264 CegarLoopResult]: At program point L629(lines 624 632) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse2 (not (= 0 ~systemActive~0))) (.cse3 (= 0 ULTIMATE.start_activatePump_~tmp~7)) (.cse4 (= 1 ULTIMATE.start_main_~tmp~4)) (.cse5 (<= ~waterLevel~0 1)) (.cse6 (= 1 ~pumpRunning~0))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse6) (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 (= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2020-07-28 19:03:04,112 INFO L264 CegarLoopResult]: At program point L629-1(lines 624 632) the Hoare annotation is: false [2020-07-28 19:03:04,112 INFO L264 CegarLoopResult]: At program point L629-2(lines 624 632) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (not (= 0 ~systemActive~0))) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~5))) (.cse4 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~4)) (.cse6 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse8 (<= ~waterLevel~0 2)) (.cse9 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse10 (= 0 ~pumpRunning~0)) (.cse11 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~8))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= 0 ~methaneLevelCritical~0) .cse7 .cse8 .cse9 .cse10 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse11) (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 (= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11))) [2020-07-28 19:03:04,113 INFO L264 CegarLoopResult]: At program point L629-3(lines 624 632) the Hoare annotation is: (let ((.cse21 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|)) (.cse26 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse24 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse25 (= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~5))) (let ((.cse16 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp~8)) (.cse17 (= 1 ~waterLevel~0)) (.cse15 (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse22 (= 0 ULTIMATE.start_processEnvironment_~tmp~6)) (.cse4 (not .cse25)) (.cse5 (not .cse24)) (.cse7 (not .cse26)) (.cse18 (= 0 ~methaneLevelCritical~0)) (.cse9 (= 0 ULTIMATE.start_activatePump_~tmp~7)) (.cse11 (<= ~waterLevel~0 2)) (.cse12 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse20 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse23 (= 1 ~pumpRunning~0)) (.cse14 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~8)) (.cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse10 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 ~methaneLevelCritical~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not (= 0 ~systemActive~0))) (.cse6 (= 1 ULTIMATE.start_main_~tmp~4)) (.cse13 (= 0 ~pumpRunning~0)) (.cse8 (not .cse21)) (.cse19 (<= ~waterLevel~0 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 (not .cse9) .cse10 .cse11 .cse12 .cse13 .cse14) (and .cse0 .cse15 .cse10 .cse1 .cse3 .cse2 .cse16 .cse6 .cse13 .cse17) (and .cse18 .cse10 .cse2 .cse3 .cse6 .cse13 .cse8 .cse19 .cse20) (and .cse18 .cse10 .cse21 .cse2 .cse3 .cse9 .cse6 .cse22 .cse19 .cse20 .cse23) (and .cse3 .cse2 .cse16 .cse6 .cse24 .cse25 .cse17 .cse15 .cse18 .cse10 .cse26 .cse13 .cse20) (and .cse0 .cse10 .cse1 .cse2 .cse3 .cse9 .cse6 .cse8 .cse22 .cse19 .cse23) (and (<= 2 ~waterLevel~0) .cse21 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse18 .cse10 .cse9 .cse11 .cse12 .cse20 .cse23 .cse14) (and .cse0 .cse10 .cse1 .cse2 .cse3 .cse6 .cse13 .cse8 .cse19)))) [2020-07-28 19:03:04,113 INFO L264 CegarLoopResult]: At program point L629-4(lines 624 632) the Hoare annotation is: false [2020-07-28 19:03:04,113 INFO L264 CegarLoopResult]: At program point L629-5(lines 624 632) the Hoare annotation is: false [2020-07-28 19:03:04,113 INFO L264 CegarLoopResult]: At program point L629-6(lines 624 632) the Hoare annotation is: false [2020-07-28 19:03:04,113 INFO L264 CegarLoopResult]: At program point L629-7(lines 624 632) the Hoare annotation is: false [2020-07-28 19:03:04,113 INFO L264 CegarLoopResult]: At program point L629-8(lines 624 632) the Hoare annotation is: false [2020-07-28 19:03:04,114 INFO L264 CegarLoopResult]: At program point L629-9(lines 624 632) the Hoare annotation is: false [2020-07-28 19:03:04,114 INFO L264 CegarLoopResult]: At program point L629-10(lines 624 632) the Hoare annotation is: false [2020-07-28 19:03:04,114 INFO L264 CegarLoopResult]: At program point L629-11(lines 624 632) the Hoare annotation is: false [2020-07-28 19:03:04,119 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:03:04,119 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:03:04,128 WARN L170 areAnnotationChecker]: L569 has no Hoare annotation [2020-07-28 19:03:04,129 WARN L170 areAnnotationChecker]: L569 has no Hoare annotation [2020-07-28 19:03:04,129 WARN L170 areAnnotationChecker]: L569 has no Hoare annotation [2020-07-28 19:03:04,131 WARN L170 areAnnotationChecker]: L897 has no Hoare annotation [2020-07-28 19:03:04,132 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:03:04,132 WARN L170 areAnnotationChecker]: L690-1 has no Hoare annotation [2020-07-28 19:03:04,132 WARN L170 areAnnotationChecker]: L897 has no Hoare annotation [2020-07-28 19:03:04,132 WARN L170 areAnnotationChecker]: L897 has no Hoare annotation [2020-07-28 19:03:04,132 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:03:04,132 WARN L170 areAnnotationChecker]: L690-1 has no Hoare annotation [2020-07-28 19:03:04,132 WARN L170 areAnnotationChecker]: L690-1 has no Hoare annotation [2020-07-28 19:03:04,132 WARN L170 areAnnotationChecker]: L898 has no Hoare annotation [2020-07-28 19:03:04,132 WARN L170 areAnnotationChecker]: L592-3 has no Hoare annotation [2020-07-28 19:03:04,132 WARN L170 areAnnotationChecker]: L592-3 has no Hoare annotation [2020-07-28 19:03:04,132 WARN L170 areAnnotationChecker]: L748-1 has no Hoare annotation [2020-07-28 19:03:04,133 WARN L170 areAnnotationChecker]: L906 has no Hoare annotation [2020-07-28 19:03:04,133 WARN L170 areAnnotationChecker]: L906 has no Hoare annotation [2020-07-28 19:03:04,133 WARN L170 areAnnotationChecker]: L748-1 has no Hoare annotation [2020-07-28 19:03:04,133 WARN L170 areAnnotationChecker]: L748-1 has no Hoare annotation [2020-07-28 19:03:04,133 WARN L170 areAnnotationChecker]: L604 has no Hoare annotation [2020-07-28 19:03:04,133 WARN L170 areAnnotationChecker]: L604 has no Hoare annotation [2020-07-28 19:03:04,134 WARN L170 areAnnotationChecker]: L916 has no Hoare annotation [2020-07-28 19:03:04,134 WARN L170 areAnnotationChecker]: L722-3 has no Hoare annotation [2020-07-28 19:03:04,134 WARN L170 areAnnotationChecker]: L722-3 has no Hoare annotation [2020-07-28 19:03:04,134 WARN L170 areAnnotationChecker]: L53-2 has no Hoare annotation [2020-07-28 19:03:04,134 WARN L170 areAnnotationChecker]: L916 has no Hoare annotation [2020-07-28 19:03:04,134 WARN L170 areAnnotationChecker]: L916 has no Hoare annotation [2020-07-28 19:03:04,134 WARN L170 areAnnotationChecker]: L752-1 has no Hoare annotation [2020-07-28 19:03:04,134 WARN L170 areAnnotationChecker]: L669-3 has no Hoare annotation [2020-07-28 19:03:04,135 WARN L170 areAnnotationChecker]: L669-3 has no Hoare annotation [2020-07-28 19:03:04,135 WARN L170 areAnnotationChecker]: L53-2 has no Hoare annotation [2020-07-28 19:03:04,135 WARN L170 areAnnotationChecker]: L53-2 has no Hoare annotation [2020-07-28 19:03:04,135 WARN L170 areAnnotationChecker]: L616 has no Hoare annotation [2020-07-28 19:03:04,135 WARN L170 areAnnotationChecker]: L616 has no Hoare annotation [2020-07-28 19:03:04,135 WARN L170 areAnnotationChecker]: L926 has no Hoare annotation [2020-07-28 19:03:04,135 WARN L170 areAnnotationChecker]: L752-1 has no Hoare annotation [2020-07-28 19:03:04,136 WARN L170 areAnnotationChecker]: L752-1 has no Hoare annotation [2020-07-28 19:03:04,136 WARN L170 areAnnotationChecker]: L867-9 has no Hoare annotation [2020-07-28 19:03:04,136 WARN L170 areAnnotationChecker]: L59-2 has no Hoare annotation [2020-07-28 19:03:04,136 WARN L170 areAnnotationChecker]: L926 has no Hoare annotation [2020-07-28 19:03:04,136 WARN L170 areAnnotationChecker]: L926 has no Hoare annotation [2020-07-28 19:03:04,136 WARN L170 areAnnotationChecker]: L722-2 has no Hoare annotation [2020-07-28 19:03:04,136 WARN L170 areAnnotationChecker]: L722-2 has no Hoare annotation [2020-07-28 19:03:04,136 WARN L170 areAnnotationChecker]: L867-9 has no Hoare annotation [2020-07-28 19:03:04,137 WARN L170 areAnnotationChecker]: L867-9 has no Hoare annotation [2020-07-28 19:03:04,137 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2020-07-28 19:03:04,137 WARN L170 areAnnotationChecker]: L59-2 has no Hoare annotation [2020-07-28 19:03:04,137 WARN L170 areAnnotationChecker]: L59-2 has no Hoare annotation [2020-07-28 19:03:04,137 WARN L170 areAnnotationChecker]: L592 has no Hoare annotation [2020-07-28 19:03:04,140 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2020-07-28 19:03:04,140 WARN L170 areAnnotationChecker]: L934 has no Hoare annotation [2020-07-28 19:03:04,140 WARN L170 areAnnotationChecker]: L669-2 has no Hoare annotation [2020-07-28 19:03:04,140 WARN L170 areAnnotationChecker]: L669-2 has no Hoare annotation [2020-07-28 19:03:04,140 WARN L170 areAnnotationChecker]: L867-11 has no Hoare annotation [2020-07-28 19:03:04,140 WARN L170 areAnnotationChecker]: L495 has no Hoare annotation [2020-07-28 19:03:04,140 WARN L170 areAnnotationChecker]: L63-2 has no Hoare annotation [2020-07-28 19:03:04,140 WARN L170 areAnnotationChecker]: L592 has no Hoare annotation [2020-07-28 19:03:04,140 WARN L170 areAnnotationChecker]: L592 has no Hoare annotation [2020-07-28 19:03:04,141 WARN L170 areAnnotationChecker]: L748 has no Hoare annotation [2020-07-28 19:03:04,143 WARN L170 areAnnotationChecker]: L867-6 has no Hoare annotation [2020-07-28 19:03:04,143 WARN L170 areAnnotationChecker]: L726-3 has no Hoare annotation [2020-07-28 19:03:04,143 WARN L170 areAnnotationChecker]: L498 has no Hoare annotation [2020-07-28 19:03:04,143 WARN L170 areAnnotationChecker]: L498 has no Hoare annotation [2020-07-28 19:03:04,143 WARN L170 areAnnotationChecker]: L63-2 has no Hoare annotation [2020-07-28 19:03:04,143 WARN L170 areAnnotationChecker]: L63-2 has no Hoare annotation [2020-07-28 19:03:04,143 WARN L170 areAnnotationChecker]: L748 has no Hoare annotation [2020-07-28 19:03:04,144 WARN L170 areAnnotationChecker]: L748 has no Hoare annotation [2020-07-28 19:03:04,146 WARN L170 areAnnotationChecker]: L867-6 has no Hoare annotation [2020-07-28 19:03:04,146 WARN L170 areAnnotationChecker]: L867-6 has no Hoare annotation [2020-07-28 19:03:04,146 WARN L170 areAnnotationChecker]: L726-3 has no Hoare annotation [2020-07-28 19:03:04,146 WARN L170 areAnnotationChecker]: L726-3 has no Hoare annotation [2020-07-28 19:03:04,146 WARN L170 areAnnotationChecker]: L498-1 has no Hoare annotation [2020-07-28 19:03:04,146 WARN L170 areAnnotationChecker]: L498-1 has no Hoare annotation [2020-07-28 19:03:04,146 WARN L170 areAnnotationChecker]: L957-1 has no Hoare annotation [2020-07-28 19:03:04,146 WARN L170 areAnnotationChecker]: L957-1 has no Hoare annotation [2020-07-28 19:03:04,147 WARN L170 areAnnotationChecker]: L722-1 has no Hoare annotation [2020-07-28 19:03:04,148 WARN L170 areAnnotationChecker]: L722-1 has no Hoare annotation [2020-07-28 19:03:04,148 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:03:04,148 WARN L170 areAnnotationChecker]: L867-8 has no Hoare annotation [2020-07-28 19:03:04,148 WARN L170 areAnnotationChecker]: L592-6 has no Hoare annotation [2020-07-28 19:03:04,148 WARN L170 areAnnotationChecker]: L592-6 has no Hoare annotation [2020-07-28 19:03:04,148 WARN L170 areAnnotationChecker]: L748-2 has no Hoare annotation [2020-07-28 19:03:04,148 WARN L170 areAnnotationChecker]: L752 has no Hoare annotation [2020-07-28 19:03:04,148 WARN L170 areAnnotationChecker]: L669-1 has no Hoare annotation [2020-07-28 19:03:04,148 WARN L170 areAnnotationChecker]: L669-1 has no Hoare annotation [2020-07-28 19:03:04,148 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:03:04,148 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:03:04,148 WARN L170 areAnnotationChecker]: L726-2 has no Hoare annotation [2020-07-28 19:03:04,149 WARN L170 areAnnotationChecker]: L784-6 has no Hoare annotation [2020-07-28 19:03:04,149 WARN L170 areAnnotationChecker]: L748-2 has no Hoare annotation [2020-07-28 19:03:04,149 WARN L170 areAnnotationChecker]: L748-2 has no Hoare annotation [2020-07-28 19:03:04,149 WARN L170 areAnnotationChecker]: L752 has no Hoare annotation [2020-07-28 19:03:04,149 WARN L170 areAnnotationChecker]: L752 has no Hoare annotation [2020-07-28 19:03:04,149 WARN L170 areAnnotationChecker]: L867-3 has no Hoare annotation [2020-07-28 19:03:04,149 WARN L170 areAnnotationChecker]: L59 has no Hoare annotation [2020-07-28 19:03:04,149 WARN L170 areAnnotationChecker]: L726-2 has no Hoare annotation [2020-07-28 19:03:04,149 WARN L170 areAnnotationChecker]: L726-2 has no Hoare annotation [2020-07-28 19:03:04,149 WARN L170 areAnnotationChecker]: L784-6 has no Hoare annotation [2020-07-28 19:03:04,149 WARN L170 areAnnotationChecker]: L784-6 has no Hoare annotation [2020-07-28 19:03:04,150 WARN L170 areAnnotationChecker]: L722-5 has no Hoare annotation [2020-07-28 19:03:04,150 WARN L170 areAnnotationChecker]: L722-5 has no Hoare annotation [2020-07-28 19:03:04,150 WARN L170 areAnnotationChecker]: L53-4 has no Hoare annotation [2020-07-28 19:03:04,150 WARN L170 areAnnotationChecker]: L722 has no Hoare annotation [2020-07-28 19:03:04,150 WARN L170 areAnnotationChecker]: L722 has no Hoare annotation [2020-07-28 19:03:04,150 WARN L170 areAnnotationChecker]: L867-3 has no Hoare annotation [2020-07-28 19:03:04,150 WARN L170 areAnnotationChecker]: L867-3 has no Hoare annotation [2020-07-28 19:03:04,150 WARN L170 areAnnotationChecker]: L59 has no Hoare annotation [2020-07-28 19:03:04,150 WARN L170 areAnnotationChecker]: L59 has no Hoare annotation [2020-07-28 19:03:04,150 WARN L170 areAnnotationChecker]: L752-2 has no Hoare annotation [2020-07-28 19:03:04,150 WARN L170 areAnnotationChecker]: L669-5 has no Hoare annotation [2020-07-28 19:03:04,150 WARN L170 areAnnotationChecker]: L669-5 has no Hoare annotation [2020-07-28 19:03:04,150 WARN L170 areAnnotationChecker]: L53-4 has no Hoare annotation [2020-07-28 19:03:04,151 WARN L170 areAnnotationChecker]: L53-4 has no Hoare annotation [2020-07-28 19:03:04,151 WARN L170 areAnnotationChecker]: L669 has no Hoare annotation [2020-07-28 19:03:04,151 WARN L170 areAnnotationChecker]: L669 has no Hoare annotation [2020-07-28 19:03:04,151 WARN L170 areAnnotationChecker]: L867-5 has no Hoare annotation [2020-07-28 19:03:04,151 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2020-07-28 19:03:04,151 WARN L170 areAnnotationChecker]: L784-4 has no Hoare annotation [2020-07-28 19:03:04,151 WARN L170 areAnnotationChecker]: L752-2 has no Hoare annotation [2020-07-28 19:03:04,151 WARN L170 areAnnotationChecker]: L752-2 has no Hoare annotation [2020-07-28 19:03:04,151 WARN L170 areAnnotationChecker]: L867-15 has no Hoare annotation [2020-07-28 19:03:04,151 WARN L170 areAnnotationChecker]: L59-4 has no Hoare annotation [2020-07-28 19:03:04,151 WARN L170 areAnnotationChecker]: L867 has no Hoare annotation [2020-07-28 19:03:04,151 WARN L170 areAnnotationChecker]: L726-1 has no Hoare annotation [2020-07-28 19:03:04,152 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2020-07-28 19:03:04,152 WARN L170 areAnnotationChecker]: L63 has no Hoare annotation [2020-07-28 19:03:04,152 WARN L170 areAnnotationChecker]: L784-4 has no Hoare annotation [2020-07-28 19:03:04,152 WARN L170 areAnnotationChecker]: L784-4 has no Hoare annotation [2020-07-28 19:03:04,152 WARN L170 areAnnotationChecker]: L722-4 has no Hoare annotation [2020-07-28 19:03:04,152 WARN L170 areAnnotationChecker]: L722-4 has no Hoare annotation [2020-07-28 19:03:04,152 WARN L170 areAnnotationChecker]: L867-15 has no Hoare annotation [2020-07-28 19:03:04,152 WARN L170 areAnnotationChecker]: L867-15 has no Hoare annotation [2020-07-28 19:03:04,152 WARN L170 areAnnotationChecker]: L59-4 has no Hoare annotation [2020-07-28 19:03:04,152 WARN L170 areAnnotationChecker]: L59-4 has no Hoare annotation [2020-07-28 19:03:04,152 WARN L170 areAnnotationChecker]: L867 has no Hoare annotation [2020-07-28 19:03:04,152 WARN L170 areAnnotationChecker]: L867 has no Hoare annotation [2020-07-28 19:03:04,153 WARN L170 areAnnotationChecker]: L726-1 has no Hoare annotation [2020-07-28 19:03:04,153 WARN L170 areAnnotationChecker]: L726-1 has no Hoare annotation [2020-07-28 19:03:04,153 WARN L170 areAnnotationChecker]: L957 has no Hoare annotation [2020-07-28 19:03:04,153 WARN L170 areAnnotationChecker]: L957 has no Hoare annotation [2020-07-28 19:03:04,153 WARN L170 areAnnotationChecker]: L669-4 has no Hoare annotation [2020-07-28 19:03:04,153 WARN L170 areAnnotationChecker]: L669-4 has no Hoare annotation [2020-07-28 19:03:04,153 WARN L170 areAnnotationChecker]: L867-17 has no Hoare annotation [2020-07-28 19:03:04,153 WARN L170 areAnnotationChecker]: L63-4 has no Hoare annotation [2020-07-28 19:03:04,153 WARN L170 areAnnotationChecker]: L867-2 has no Hoare annotation [2020-07-28 19:03:04,155 WARN L170 areAnnotationChecker]: L867-12 has no Hoare annotation [2020-07-28 19:03:04,155 WARN L170 areAnnotationChecker]: L726-5 has no Hoare annotation [2020-07-28 19:03:04,155 WARN L170 areAnnotationChecker]: L63-4 has no Hoare annotation [2020-07-28 19:03:04,155 WARN L170 areAnnotationChecker]: L63-4 has no Hoare annotation [2020-07-28 19:03:04,155 WARN L170 areAnnotationChecker]: L726 has no Hoare annotation [2020-07-28 19:03:04,155 WARN L170 areAnnotationChecker]: L784-2 has no Hoare annotation [2020-07-28 19:03:04,155 WARN L170 areAnnotationChecker]: L867-12 has no Hoare annotation [2020-07-28 19:03:04,155 WARN L170 areAnnotationChecker]: L867-12 has no Hoare annotation [2020-07-28 19:03:04,155 WARN L170 areAnnotationChecker]: L726-5 has no Hoare annotation [2020-07-28 19:03:04,155 WARN L170 areAnnotationChecker]: L726-5 has no Hoare annotation [2020-07-28 19:03:04,155 WARN L170 areAnnotationChecker]: L957-2 has no Hoare annotation [2020-07-28 19:03:04,155 WARN L170 areAnnotationChecker]: L957-2 has no Hoare annotation [2020-07-28 19:03:04,156 WARN L170 areAnnotationChecker]: L726 has no Hoare annotation [2020-07-28 19:03:04,156 WARN L170 areAnnotationChecker]: L726 has no Hoare annotation [2020-07-28 19:03:04,156 WARN L170 areAnnotationChecker]: L784-2 has no Hoare annotation [2020-07-28 19:03:04,156 WARN L170 areAnnotationChecker]: L784-2 has no Hoare annotation [2020-07-28 19:03:04,156 WARN L170 areAnnotationChecker]: L867-14 has no Hoare annotation [2020-07-28 19:03:04,156 WARN L170 areAnnotationChecker]: L726-4 has no Hoare annotation [2020-07-28 19:03:04,156 WARN L170 areAnnotationChecker]: L784-10 has no Hoare annotation [2020-07-28 19:03:04,156 WARN L170 areAnnotationChecker]: L784 has no Hoare annotation [2020-07-28 19:03:04,156 WARN L170 areAnnotationChecker]: L726-4 has no Hoare annotation [2020-07-28 19:03:04,156 WARN L170 areAnnotationChecker]: L726-4 has no Hoare annotation [2020-07-28 19:03:04,156 WARN L170 areAnnotationChecker]: L784-10 has no Hoare annotation [2020-07-28 19:03:04,156 WARN L170 areAnnotationChecker]: L784-10 has no Hoare annotation [2020-07-28 19:03:04,157 WARN L170 areAnnotationChecker]: L784 has no Hoare annotation [2020-07-28 19:03:04,157 WARN L170 areAnnotationChecker]: L784 has no Hoare annotation [2020-07-28 19:03:04,157 WARN L170 areAnnotationChecker]: L784-8 has no Hoare annotation [2020-07-28 19:03:04,157 WARN L170 areAnnotationChecker]: L784-8 has no Hoare annotation [2020-07-28 19:03:04,157 WARN L170 areAnnotationChecker]: L784-8 has no Hoare annotation [2020-07-28 19:03:04,157 INFO L163 areAnnotationChecker]: CFG has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:03:04,221 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:03:04 BoogieIcfgContainer [2020-07-28 19:03:04,222 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:03:04,222 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:03:04,223 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:03:04,223 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:03:04,224 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:01:54" (3/4) ... [2020-07-28 19:03:04,227 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:03:04,254 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:03:04,255 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:03:04,256 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:03:04,258 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:03:04,259 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:03:04,260 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:03:04,261 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:03:04,309 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == methaneLevelCritical && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel [2020-07-28 19:03:04,309 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == methaneLevelCritical && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel [2020-07-28 19:03:04,310 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) || (((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result)) && waterLevel <= 1) && 1 == tmp)) || (((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && !(0 == \result)) && 0 == tmp) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning)) || ((((((((((((((((2 <= waterLevel && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == \result) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) && 0 == tmp)) || (((((((((((((0 == \result && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && tmp___0 <= 1) && 0 == tmp) && waterLevel <= 1) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((((((1 == \result && 1 == \result) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == tmp) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && 1 == tmp) && 1 == waterLevel)) || (((((((((((((((1 == \result && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && !(0 == \result)) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == tmp) && 0 == tmp)) || (((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && tmp___0 <= 1) && 0 == pumpRunning) && 0 == tmp) && !(0 == \result)) && waterLevel <= 1) && 0 == \result) && \result <= 1) [2020-07-28 19:03:04,311 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0 == \result && (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == pumpRunning) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == tmp) && !(0 == tmp)) && 1 == waterLevel) && 1 == pumpRunning))) && waterLevel <= 2) && 1 == tmp) && 0 == tmp) && 0 == \result) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel)) || (((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result)) && waterLevel <= 1) && 1 == tmp)) || (((((((((((((0 == \result && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && tmp___0 <= 1) && 0 == tmp) && waterLevel <= 1) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((((((1 == \result && 1 == \result) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == tmp) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && 1 == tmp) && 1 == waterLevel)) || (((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && tmp___0 <= 1) && 0 == pumpRunning) && 0 == tmp) && !(0 == \result)) && waterLevel <= 1) && 0 == \result) && \result <= 1)) || (((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && waterLevel <= 2) && 1 == tmp) && !(0 == \result)) && 0 == tmp) && 1 == tmp) && 1 == pumpRunning)) || (((((((((1 == \result && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && 1 == tmp)) || (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) [2020-07-28 19:03:04,312 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) || ((((0 == methaneLevelCritical && ((((((0 == splverifierCounter && !(0 == systemActive)) && 0 == tmp) && !(0 == tmp)) && 1 == waterLevel) && 1 == pumpRunning) || ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 0 == tmp) && 1 == pumpRunning))) && 1 == \result) && waterLevel <= 2) && 1 == tmp)) || (((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning)) || ((((((((((0 == splverifierCounter && !(0 == systemActive)) && 0 == tmp) && !(0 == tmp)) && 1 == waterLevel) && 1 == pumpRunning) || ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 0 == tmp) && 1 == pumpRunning)) && 1 == methaneLevelCritical) && 1 == \result) && waterLevel <= 2) && 1 == tmp)) || ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && 0 == tmp) && waterLevel <= 1) && 1 == pumpRunning)) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && waterLevel <= 2) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning)) || (((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result))) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result))) || (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) [2020-07-28 19:03:04,314 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) || ((((0 == methaneLevelCritical && ((((((0 == splverifierCounter && !(0 == systemActive)) && 0 == tmp) && !(0 == tmp)) && 1 == waterLevel) && 1 == pumpRunning) || ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 0 == tmp) && 1 == pumpRunning))) && 1 == \result) && waterLevel <= 2) && 1 == tmp)) || (((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning)) || ((((((((((0 == splverifierCounter && !(0 == systemActive)) && 0 == tmp) && !(0 == tmp)) && 1 == waterLevel) && 1 == pumpRunning) || ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 0 == tmp) && 1 == pumpRunning)) && 1 == methaneLevelCritical) && 1 == \result) && waterLevel <= 2) && 1 == tmp)) || ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && 0 == tmp) && waterLevel <= 1) && 1 == pumpRunning)) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && waterLevel <= 2) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning)) || (((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result))) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result))) || (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) [2020-07-28 19:03:04,314 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) || (((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && waterLevel <= 1) && 1 == pumpRunning)) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && waterLevel <= 1) && 1 == pumpRunning)) || (((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning)) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel)) || (((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result))) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result))) || (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) [2020-07-28 19:03:04,315 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((1 == \result && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && !(0 == \result)) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result)) && waterLevel <= 1)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && 0 == tmp) && waterLevel <= 1) && 0 == \result) && 1 == pumpRunning)) || ((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && !(0 == \result)) && 0 == tmp) && waterLevel <= 1) && 1 == pumpRunning)) || (((((((((((((((2 <= waterLevel && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == \result) && 0 == \result) && 1 == pumpRunning) && 0 == tmp)) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel)) || (((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result)) && waterLevel <= 1)) || (((((((((((0 == methaneLevelCritical && 1 == \result) && 0 == tmp___0) && 0 == splverifierCounter) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 0 == \result) && 0 == tmp) && 1 == waterLevel) [2020-07-28 19:03:04,317 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((((((1 == \result && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && !(0 == \result)) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) || (((((((((1 == \result && 1 == \result) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result)) && waterLevel <= 1) && 0 == \result)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && 0 == tmp) && waterLevel <= 1) && 0 == \result) && 1 == pumpRunning)) || ((((((((((((!(0 == systemActive) && 1 == \result) && 1 == tmp) && 1 == tmp) && 0 == \result) && 0 == tmp) && 1 == waterLevel) && 1 == \result) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp___0) && 0 == pumpRunning) && 0 == \result)) || ((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && !(0 == \result)) && 0 == tmp) && waterLevel <= 1) && 1 == pumpRunning)) || (((((((((((((((2 <= waterLevel && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == \result) && 0 == \result) && 1 == pumpRunning) && 0 == tmp)) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result)) && waterLevel <= 1) [2020-07-28 19:03:04,318 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && waterLevel <= 1) && 0 == \result) && 1 == pumpRunning) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && waterLevel <= 1) && 1 == pumpRunning) [2020-07-28 19:03:04,319 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && !(0 == \result)) && waterLevel <= 1) && 1 == pumpRunning) || (((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && waterLevel <= 1) && 0 == \result) && 1 == pumpRunning) [2020-07-28 19:03:04,323 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) || ((((((((1 == \result && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result)) && waterLevel <= 1)) || ((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == \result) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && 0 == pumpRunning)) || ((((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == \result) && 0 == pumpRunning)) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result))) || (((((((1 == \result && 0 == methaneLevelCritical) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) [2020-07-28 19:03:04,326 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((1 == \result && !(0 == systemActive)) && 1 == tmp) && 1 == \result) && 1 == tmp) && 0 == \result) && 0 == tmp) && 1 == waterLevel) && 0 == methaneLevelCritical) && 1 == \result) && 0 == splverifierCounter) && 0 == tmp___0) && 0 == pumpRunning) && 0 == tmp) && 0 == \result) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 0 == tmp) && !(0 == \result)) && waterLevel <= 1) && 0 == \result) && \result <= 1)) || ((((((((((((0 == \result && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && waterLevel <= 1) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((((((((((((2 <= waterLevel && 0 == \result) && !(0 == systemActive)) && 1 == \result) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == \result) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) && 0 == tmp) [2020-07-28 19:03:04,327 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && !(0 == \result)) && 0 == \result) && 1 == tmp) && 0 == pumpRunning) && !(0 == tmp___0)) && 0 == tmp) || ((((((((((1 == \result && 0 == methaneLevelCritical) && 0 == tmp___0) && 0 == splverifierCounter) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 0 == \result) && 1 == waterLevel)) || (((((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && !(0 == \result)) && 0 == \result) && 1 == tmp) && 0 == pumpRunning) && !(0 == tmp___0)) && 0 == tmp)) || (((((((((((1 == \result && 0 == methaneLevelCritical) && 0 == tmp___0) && 0 == splverifierCounter) && 1 == tmp) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result))) || (((((((((((1 == \result && 0 == splverifierCounter) && 0 == tmp___0) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 1 == tmp) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && !(0 == \result))) || ((((((((((1 == \result && 0 == tmp___0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 0 == \result) && 1 == waterLevel) [2020-07-28 19:03:04,328 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((2 <= waterLevel && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 1 == \result) && 0 == \result) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) && 0 == tmp [2020-07-28 19:03:04,332 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((2 <= waterLevel && !(0 == systemActive)) && 1 == \result) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == \result) && 0 == tmp) || (((((((((((((1 == \result && 2 <= waterLevel) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == \result) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) [2020-07-28 19:03:04,333 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((1 == \result && 2 <= waterLevel) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == \result) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && !(0 == \result)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) || ((((((((((((((2 <= waterLevel && 0 == \result) && !(0 == systemActive)) && 1 == \result) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == \result) && 0 == tmp) [2020-07-28 19:03:04,432 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:03:04,432 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:03:04,434 INFO L168 Benchmark]: Toolchain (without parser) took 73098.55 ms. Allocated memory was 1.0 GB in the beginning and 1.9 GB in the end (delta: 896.0 MB). Free memory was 960.2 MB in the beginning and 1.5 GB in the end (delta: -561.5 MB). Peak memory consumption was 334.5 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:04,435 INFO L168 Benchmark]: CDTParser took 0.59 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:03:04,435 INFO L168 Benchmark]: CACSL2BoogieTranslator took 697.68 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 127.9 MB). Free memory was 960.2 MB in the beginning and 1.1 GB in the end (delta: -148.4 MB). Peak memory consumption was 26.3 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:04,436 INFO L168 Benchmark]: Boogie Procedure Inliner took 102.33 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:04,436 INFO L168 Benchmark]: Boogie Preprocessor took 88.73 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:04,437 INFO L168 Benchmark]: RCFGBuilder took 1951.43 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 901.1 MB in the end (delta: 194.2 MB). Peak memory consumption was 194.2 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:04,437 INFO L168 Benchmark]: TraceAbstraction took 70039.93 ms. Allocated memory was 1.2 GB in the beginning and 1.9 GB in the end (delta: 768.1 MB). Free memory was 894.4 MB in the beginning and 1.5 GB in the end (delta: -649.3 MB). Peak memory consumption was 118.8 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:04,437 INFO L168 Benchmark]: Witness Printer took 210.07 ms. Allocated memory is still 1.9 GB. Free memory was 1.5 GB in the beginning and 1.5 GB in the end (delta: 21.9 MB). Peak memory consumption was 21.9 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:04,441 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.59 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 697.68 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 127.9 MB). Free memory was 960.2 MB in the beginning and 1.1 GB in the end (delta: -148.4 MB). Peak memory consumption was 26.3 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 102.33 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 88.73 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1951.43 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 901.1 MB in the end (delta: 194.2 MB). Peak memory consumption was 194.2 MB. Max. memory is 11.5 GB. * TraceAbstraction took 70039.93 ms. Allocated memory was 1.2 GB in the beginning and 1.9 GB in the end (delta: 768.1 MB). Free memory was 894.4 MB in the beginning and 1.5 GB in the end (delta: -649.3 MB). Peak memory consumption was 118.8 MB. Max. memory is 11.5 GB. * Witness Printer took 210.07 ms. Allocated memory is still 1.9 GB. Free memory was 1.5 GB in the beginning and 1.5 GB in the end (delta: 21.9 MB). Peak memory consumption was 21.9 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 957]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 957]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 957]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: ((((((((((((((((1 == \result && !(0 == systemActive)) && 1 == tmp) && 1 == \result) && 1 == tmp) && 0 == \result) && 0 == tmp) && 1 == waterLevel) && 0 == methaneLevelCritical) && 1 == \result) && 0 == splverifierCounter) && 0 == tmp___0) && 0 == pumpRunning) && 0 == tmp) && 0 == \result) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 0 == tmp) && !(0 == \result)) && waterLevel <= 1) && 0 == \result) && \result <= 1)) || ((((((((((((0 == \result && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && waterLevel <= 1) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((((((((((((2 <= waterLevel && 0 == \result) && !(0 == systemActive)) && 1 == \result) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == \result) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) && 0 == tmp) - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: (((((((((((((2 <= waterLevel && !(0 == systemActive)) && 1 == \result) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == \result) && 0 == tmp) || (((((((((((((1 == \result && 2 <= waterLevel) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == \result) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: ((((((((((((((((((((1 == \result && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && !(0 == \result)) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) || (((((((((1 == \result && 1 == \result) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result)) && waterLevel <= 1) && 0 == \result)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && 0 == tmp) && waterLevel <= 1) && 0 == \result) && 1 == pumpRunning)) || ((((((((((((!(0 == systemActive) && 1 == \result) && 1 == tmp) && 1 == tmp) && 0 == \result) && 0 == tmp) && 1 == waterLevel) && 1 == \result) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp___0) && 0 == pumpRunning) && 0 == \result)) || ((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && !(0 == \result)) && 0 == tmp) && waterLevel <= 1) && 1 == pumpRunning)) || (((((((((((((((2 <= waterLevel && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == \result) && 0 == \result) && 1 == pumpRunning) && 0 == tmp)) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result)) && waterLevel <= 1) - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) || (((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result)) && waterLevel <= 1) && 1 == tmp)) || (((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && !(0 == \result)) && 0 == tmp) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning)) || ((((((((((((((((2 <= waterLevel && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == \result) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) && 0 == tmp)) || (((((((((((((0 == \result && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && tmp___0 <= 1) && 0 == tmp) && waterLevel <= 1) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((((((1 == \result && 1 == \result) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == tmp) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && 1 == tmp) && 1 == waterLevel)) || (((((((((((((((1 == \result && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && !(0 == \result)) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == tmp) && 0 == tmp)) || (((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && tmp___0 <= 1) && 0 == pumpRunning) && 0 == tmp) && !(0 == \result)) && waterLevel <= 1) && 0 == \result) && \result <= 1) - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 559]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel - InvariantResult [Line: 494]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 541]: Loop Invariant Derived loop invariant: ((((0 == methaneLevelCritical && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && waterLevel <= 1) && 0 == \result) && 1 == pumpRunning) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && waterLevel <= 1) && 1 == pumpRunning) - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: (((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && !(0 == \result)) && waterLevel <= 1) && 1 == pumpRunning) || (((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && waterLevel <= 1) && 0 == \result) && 1 == pumpRunning) - InvariantResult [Line: 665]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 665]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: ((((((((((((((1 == \result && 2 <= waterLevel) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == \result) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && !(0 == \result)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) || ((((((((((((((2 <= waterLevel && 0 == \result) && !(0 == systemActive)) && 1 == \result) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == \result) && 0 == tmp) - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 895]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 802]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 106]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel - InvariantResult [Line: 690]: Loop Invariant Derived loop invariant: ((((((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) || ((((0 == methaneLevelCritical && ((((((0 == splverifierCounter && !(0 == systemActive)) && 0 == tmp) && !(0 == tmp)) && 1 == waterLevel) && 1 == pumpRunning) || ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 0 == tmp) && 1 == pumpRunning))) && 1 == \result) && waterLevel <= 2) && 1 == tmp)) || (((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning)) || ((((((((((0 == splverifierCounter && !(0 == systemActive)) && 0 == tmp) && !(0 == tmp)) && 1 == waterLevel) && 1 == pumpRunning) || ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 0 == tmp) && 1 == pumpRunning)) && 1 == methaneLevelCritical) && 1 == \result) && waterLevel <= 2) && 1 == tmp)) || ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && 0 == tmp) && waterLevel <= 1) && 1 == pumpRunning)) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && waterLevel <= 2) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning)) || (((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result))) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result))) || (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) - InvariantResult [Line: 665]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 665]: Loop Invariant Derived loop invariant: (((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) || ((((((((1 == \result && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result)) && waterLevel <= 1)) || ((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == \result) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && 0 == pumpRunning)) || ((((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == \result) && 0 == pumpRunning)) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result))) || (((((((1 == \result && 0 == methaneLevelCritical) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) - InvariantResult [Line: 665]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 665]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 916]: Loop Invariant Derived loop invariant: ((((((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) || ((((0 == methaneLevelCritical && ((((((0 == splverifierCounter && !(0 == systemActive)) && 0 == tmp) && !(0 == tmp)) && 1 == waterLevel) && 1 == pumpRunning) || ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 0 == tmp) && 1 == pumpRunning))) && 1 == \result) && waterLevel <= 2) && 1 == tmp)) || (((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning)) || ((((((((((0 == splverifierCounter && !(0 == systemActive)) && 0 == tmp) && !(0 == tmp)) && 1 == waterLevel) && 1 == pumpRunning) || ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 0 == tmp) && 1 == pumpRunning)) && 1 == methaneLevelCritical) && 1 == \result) && waterLevel <= 2) && 1 == tmp)) || ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && 0 == tmp) && waterLevel <= 1) && 1 == pumpRunning)) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel)) || ((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && waterLevel <= 2) && 1 == tmp) && 0 == tmp) && 1 == pumpRunning)) || (((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result))) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result))) || (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) - InvariantResult [Line: 858]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 697]: Loop Invariant Derived loop invariant: ((((((((((((((((((((1 == \result && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && !(0 == \result)) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 0 == tmp) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result)) && waterLevel <= 1)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && 0 == tmp) && waterLevel <= 1) && 0 == \result) && 1 == pumpRunning)) || ((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && !(0 == \result)) && 0 == tmp) && waterLevel <= 1) && 1 == pumpRunning)) || (((((((((((((((2 <= waterLevel && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == \result) && 0 == \result) && 1 == pumpRunning) && 0 == tmp)) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel)) || (((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result)) && waterLevel <= 1)) || (((((((((((0 == methaneLevelCritical && 1 == \result) && 0 == tmp___0) && 0 == splverifierCounter) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 0 == \result) && 0 == tmp) && 1 == waterLevel) - InvariantResult [Line: 569]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 697]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 697]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 906]: Loop Invariant Derived loop invariant: ((((((((((((0 == \result && (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == pumpRunning) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == tmp) && !(0 == tmp)) && 1 == waterLevel) && 1 == pumpRunning))) && waterLevel <= 2) && 1 == tmp) && 0 == tmp) && 0 == \result) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel)) || (((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result)) && waterLevel <= 1) && 1 == tmp)) || (((((((((((((0 == \result && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && tmp___0 <= 1) && 0 == tmp) && waterLevel <= 1) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((((((1 == \result && 1 == \result) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == systemActive)) && 1 == tmp) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && 1 == tmp) && 1 == waterLevel)) || (((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && tmp___0 <= 1) && 0 == pumpRunning) && 0 == tmp) && !(0 == \result)) && waterLevel <= 1) && 0 == \result) && \result <= 1)) || (((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && waterLevel <= 2) && 1 == tmp) && !(0 == \result)) && 0 == tmp) && 1 == tmp) && 1 == pumpRunning)) || (((((((((1 == \result && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && 1 == tmp)) || (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) - InvariantResult [Line: 858]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 656]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 858]: Loop Invariant Derived loop invariant: (((((((((((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && !(0 == \result)) && 0 == \result) && 1 == tmp) && 0 == pumpRunning) && !(0 == tmp___0)) && 0 == tmp) || ((((((((((1 == \result && 0 == methaneLevelCritical) && 0 == tmp___0) && 0 == splverifierCounter) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 0 == \result) && 1 == waterLevel)) || (((((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && !(0 == \result)) && 0 == \result) && 1 == tmp) && 0 == pumpRunning) && !(0 == tmp___0)) && 0 == tmp)) || (((((((((((1 == \result && 0 == methaneLevelCritical) && 0 == tmp___0) && 0 == splverifierCounter) && 1 == tmp) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result))) || (((((((((((1 == \result && 0 == splverifierCounter) && 0 == tmp___0) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 1 == tmp) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && !(0 == \result))) || ((((((((((1 == \result && 0 == tmp___0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 0 == \result) && 1 == waterLevel) - InvariantResult [Line: 689]: Loop Invariant Derived loop invariant: ((((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) || (((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && waterLevel <= 1) && 1 == pumpRunning)) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && waterLevel <= 1) && 1 == pumpRunning)) || (((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning)) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel)) || (((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result))) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && !(0 == \result))) || (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) - InvariantResult [Line: 813]: Loop Invariant Derived loop invariant: ((((((((((((((((2 <= waterLevel && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == tmp)) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 1 == \result) && 0 == \result) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) && 0 == tmp - InvariantResult [Line: 858]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 813]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 858]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 689]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 813]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 858]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 689]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 135 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 48.9s, OverallIterations: 17, TraceHistogramMax: 3, AutomataDifference: 35.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 20.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1971 SDtfs, 3350 SDslu, 3663 SDs, 0 SdLazy, 623 SolverSat, 123 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.9s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 231 GetRequests, 123 SyntacticMatches, 0 SemanticMatches, 108 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 123 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=356occurred in iteration=9, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 8.9s AutomataMinimizationTime, 17 MinimizatonAttempts, 2371 StatesRemovedByMinimization, 13 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 58 LocationsWithAnnotation, 58 PreInvPairs, 320 NumberOfFragments, 3160 HoareAnnotationTreeSize, 58 FomulaSimplifications, 74967044 FormulaSimplificationTreeSizeReduction, 4.1s HoareSimplificationTime, 58 FomulaSimplificationsInter, 4160804 FormulaSimplificationTreeSizeReductionInter, 16.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 2.0s InterpolantComputationTime, 778 NumberOfCodeBlocks, 778 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 760 ConstructedInterpolants, 0 QuantifiedInterpolants, 83206 SizeOfPredicates, 4 NumberOfNonLiveVariables, 499 ConjunctsInSsa, 7 ConjunctsInUnsatCore, 18 InterpolantComputations, 16 PerfectInterpolantSequences, 196/212 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...