./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 81d3a03e2badb1d355e733e1f917b69305964186 .......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:01:53,031 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:01:53,034 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:01:53,052 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:01:53,053 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:01:53,055 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:01:53,057 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:01:53,067 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:01:53,072 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:01:53,075 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:01:53,077 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:01:53,079 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:01:53,079 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:01:53,081 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:01:53,083 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:01:53,084 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:01:53,085 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:01:53,086 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:01:53,089 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:01:53,093 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:01:53,098 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:01:53,102 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:01:53,104 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:01:53,105 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:01:53,108 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:01:53,108 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:01:53,108 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:01:53,110 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:01:53,110 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:01:53,111 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:01:53,111 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:01:53,112 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:01:53,113 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:01:53,114 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:01:53,115 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:01:53,116 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:01:53,116 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:01:53,117 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:01:53,117 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:01:53,118 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:01:53,119 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:01:53,120 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:01:53,157 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:01:53,157 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:01:53,158 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:01:53,159 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:01:53,159 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:01:53,159 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:01:53,159 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:01:53,160 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:01:53,160 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:01:53,160 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:01:53,162 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:01:53,162 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:01:53,162 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:01:53,163 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:01:53,163 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:01:53,163 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:01:53,163 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:01:53,164 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:01:53,164 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:01:53,164 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:01:53,164 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:01:53,164 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:01:53,165 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:01:53,165 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:01:53,165 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:01:53,166 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:01:53,166 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:01:53,166 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:01:53,167 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:01:53,167 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 81d3a03e2badb1d355e733e1f917b69305964186 [2020-07-28 19:01:53,495 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:01:53,510 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:01:53,514 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:01:53,515 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:01:53,516 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:01:53,517 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c [2020-07-28 19:01:53,586 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f5f7ee526/07491220b4af401dbc90894059976ccb/FLAGf97ee2c4d [2020-07-28 19:01:54,216 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:01:54,217 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product49.cil.c [2020-07-28 19:01:54,233 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f5f7ee526/07491220b4af401dbc90894059976ccb/FLAGf97ee2c4d [2020-07-28 19:01:54,483 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f5f7ee526/07491220b4af401dbc90894059976ccb [2020-07-28 19:01:54,486 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:01:54,491 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:01:54,497 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:01:54,497 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:01:54,501 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:01:54,504 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:01:54" (1/1) ... [2020-07-28 19:01:54,507 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4cb0c87d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:54, skipping insertion in model container [2020-07-28 19:01:54,508 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:01:54" (1/1) ... [2020-07-28 19:01:54,517 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:01:54,581 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:01:54,976 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:01:54,995 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:01:55,180 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:01:55,230 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:01:55,231 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:55 WrapperNode [2020-07-28 19:01:55,231 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:01:55,233 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:01:55,233 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:01:55,233 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:01:55,242 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:55" (1/1) ... [2020-07-28 19:01:55,262 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:55" (1/1) ... [2020-07-28 19:01:55,327 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:01:55,333 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:01:55,333 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:01:55,333 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:01:55,347 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:55" (1/1) ... [2020-07-28 19:01:55,347 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:55" (1/1) ... [2020-07-28 19:01:55,355 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:55" (1/1) ... [2020-07-28 19:01:55,356 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:55" (1/1) ... [2020-07-28 19:01:55,389 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:55" (1/1) ... [2020-07-28 19:01:55,400 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:55" (1/1) ... [2020-07-28 19:01:55,404 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:55" (1/1) ... [2020-07-28 19:01:55,409 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:01:55,410 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:01:55,410 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:01:55,410 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:01:55,411 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:55" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:01:55,475 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:01:55,475 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:01:55,476 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:01:55,476 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:01:57,078 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:01:57,079 INFO L295 CfgBuilder]: Removed 162 assume(true) statements. [2020-07-28 19:01:57,085 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:01:57 BoogieIcfgContainer [2020-07-28 19:01:57,085 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:01:57,087 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:01:57,087 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:01:57,091 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:01:57,092 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:01:54" (1/3) ... [2020-07-28 19:01:57,093 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d26f81 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:01:57, skipping insertion in model container [2020-07-28 19:01:57,093 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:55" (2/3) ... [2020-07-28 19:01:57,094 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5d26f81 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:01:57, skipping insertion in model container [2020-07-28 19:01:57,094 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:01:57" (3/3) ... [2020-07-28 19:01:57,096 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product49.cil.c [2020-07-28 19:01:57,109 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:01:57,118 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:01:57,135 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:01:57,164 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:01:57,165 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:01:57,165 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:01:57,165 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:01:57,166 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:01:57,166 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:01:57,166 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:01:57,167 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:01:57,189 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states. [2020-07-28 19:01:57,198 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-28 19:01:57,198 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:57,200 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:57,201 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:57,207 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:57,208 INFO L82 PathProgramCache]: Analyzing trace with hash 641779472, now seen corresponding path program 1 times [2020-07-28 19:01:57,221 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:57,222 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [14176083] [2020-07-28 19:01:57,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:57,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:57,558 INFO L280 TraceCheckUtils]: 0: Hoare triple {126#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {126#true} is VALID [2020-07-28 19:01:57,559 INFO L280 TraceCheckUtils]: 1: Hoare triple {126#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {126#true} is VALID [2020-07-28 19:01:57,559 INFO L280 TraceCheckUtils]: 2: Hoare triple {126#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {126#true} is VALID [2020-07-28 19:01:57,560 INFO L280 TraceCheckUtils]: 3: Hoare triple {126#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {126#true} is VALID [2020-07-28 19:01:57,560 INFO L280 TraceCheckUtils]: 4: Hoare triple {126#true} assume 0 != main_~tmp~9; {126#true} is VALID [2020-07-28 19:01:57,561 INFO L280 TraceCheckUtils]: 5: Hoare triple {126#true} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {126#true} is VALID [2020-07-28 19:01:57,566 INFO L280 TraceCheckUtils]: 6: Hoare triple {126#true} assume !true; {127#false} is VALID [2020-07-28 19:01:57,566 INFO L280 TraceCheckUtils]: 7: Hoare triple {127#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {127#false} is VALID [2020-07-28 19:01:57,567 INFO L280 TraceCheckUtils]: 8: Hoare triple {127#false} assume !(0 != ~pumpRunning~0); {127#false} is VALID [2020-07-28 19:01:57,567 INFO L280 TraceCheckUtils]: 9: Hoare triple {127#false} assume !(0 != ~systemActive~0); {127#false} is VALID [2020-07-28 19:01:57,567 INFO L280 TraceCheckUtils]: 10: Hoare triple {127#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {127#false} is VALID [2020-07-28 19:01:57,568 INFO L280 TraceCheckUtils]: 11: Hoare triple {127#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {127#false} is VALID [2020-07-28 19:01:57,571 INFO L280 TraceCheckUtils]: 12: Hoare triple {127#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {127#false} is VALID [2020-07-28 19:01:57,572 INFO L280 TraceCheckUtils]: 13: Hoare triple {127#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {127#false} is VALID [2020-07-28 19:01:57,572 INFO L280 TraceCheckUtils]: 14: Hoare triple {127#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {127#false} is VALID [2020-07-28 19:01:57,573 INFO L280 TraceCheckUtils]: 15: Hoare triple {127#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {127#false} is VALID [2020-07-28 19:01:57,573 INFO L280 TraceCheckUtils]: 16: Hoare triple {127#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {127#false} is VALID [2020-07-28 19:01:57,574 INFO L280 TraceCheckUtils]: 17: Hoare triple {127#false} assume !false; {127#false} is VALID [2020-07-28 19:01:57,580 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:57,581 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [14176083] [2020-07-28 19:01:57,583 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:57,583 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:01:57,584 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [258319063] [2020-07-28 19:01:57,590 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:01:57,593 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:57,597 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:01:57,639 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:57,639 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:01:57,639 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:57,649 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:01:57,650 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:01:57,652 INFO L87 Difference]: Start difference. First operand 123 states. Second operand 2 states. [2020-07-28 19:01:57,954 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:57,955 INFO L93 Difference]: Finished difference Result 240 states and 365 transitions. [2020-07-28 19:01:57,955 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:01:57,956 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:01:57,956 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:57,957 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:01:57,973 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 365 transitions. [2020-07-28 19:01:57,974 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:01:57,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 365 transitions. [2020-07-28 19:01:57,982 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 365 transitions. [2020-07-28 19:01:58,498 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 365 edges. 365 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:58,516 INFO L225 Difference]: With dead ends: 240 [2020-07-28 19:01:58,517 INFO L226 Difference]: Without dead ends: 119 [2020-07-28 19:01:58,521 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:01:58,540 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 119 states. [2020-07-28 19:01:58,580 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 119 to 119. [2020-07-28 19:01:58,580 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:58,581 INFO L82 GeneralOperation]: Start isEquivalent. First operand 119 states. Second operand 119 states. [2020-07-28 19:01:58,581 INFO L74 IsIncluded]: Start isIncluded. First operand 119 states. Second operand 119 states. [2020-07-28 19:01:58,582 INFO L87 Difference]: Start difference. First operand 119 states. Second operand 119 states. [2020-07-28 19:01:58,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:58,591 INFO L93 Difference]: Finished difference Result 119 states and 174 transitions. [2020-07-28 19:01:58,591 INFO L276 IsEmpty]: Start isEmpty. Operand 119 states and 174 transitions. [2020-07-28 19:01:58,593 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:58,593 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:58,594 INFO L74 IsIncluded]: Start isIncluded. First operand 119 states. Second operand 119 states. [2020-07-28 19:01:58,594 INFO L87 Difference]: Start difference. First operand 119 states. Second operand 119 states. [2020-07-28 19:01:58,601 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:58,602 INFO L93 Difference]: Finished difference Result 119 states and 174 transitions. [2020-07-28 19:01:58,602 INFO L276 IsEmpty]: Start isEmpty. Operand 119 states and 174 transitions. [2020-07-28 19:01:58,604 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:58,604 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:58,604 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:58,605 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:58,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 119 states. [2020-07-28 19:01:58,611 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 119 states to 119 states and 174 transitions. [2020-07-28 19:01:58,613 INFO L78 Accepts]: Start accepts. Automaton has 119 states and 174 transitions. Word has length 18 [2020-07-28 19:01:58,614 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:58,614 INFO L479 AbstractCegarLoop]: Abstraction has 119 states and 174 transitions. [2020-07-28 19:01:58,614 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:01:58,615 INFO L276 IsEmpty]: Start isEmpty. Operand 119 states and 174 transitions. [2020-07-28 19:01:58,616 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 19:01:58,616 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:58,616 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:58,617 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:01:58,617 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:58,617 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:58,618 INFO L82 PathProgramCache]: Analyzing trace with hash 1103918604, now seen corresponding path program 1 times [2020-07-28 19:01:58,618 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:58,618 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1579164506] [2020-07-28 19:01:58,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:58,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:58,781 INFO L280 TraceCheckUtils]: 0: Hoare triple {857#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {857#true} is VALID [2020-07-28 19:01:58,782 INFO L280 TraceCheckUtils]: 1: Hoare triple {857#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {857#true} is VALID [2020-07-28 19:01:58,783 INFO L280 TraceCheckUtils]: 2: Hoare triple {857#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {857#true} is VALID [2020-07-28 19:01:58,784 INFO L280 TraceCheckUtils]: 3: Hoare triple {857#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {857#true} is VALID [2020-07-28 19:01:58,784 INFO L280 TraceCheckUtils]: 4: Hoare triple {857#true} assume 0 != main_~tmp~9; {857#true} is VALID [2020-07-28 19:01:58,785 INFO L280 TraceCheckUtils]: 5: Hoare triple {857#true} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {859#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:01:58,786 INFO L280 TraceCheckUtils]: 6: Hoare triple {859#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {859#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:01:58,787 INFO L280 TraceCheckUtils]: 7: Hoare triple {859#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {858#false} is VALID [2020-07-28 19:01:58,788 INFO L280 TraceCheckUtils]: 8: Hoare triple {858#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {858#false} is VALID [2020-07-28 19:01:58,788 INFO L280 TraceCheckUtils]: 9: Hoare triple {858#false} assume !(0 != ~pumpRunning~0); {858#false} is VALID [2020-07-28 19:01:58,788 INFO L280 TraceCheckUtils]: 10: Hoare triple {858#false} assume !(0 != ~systemActive~0); {858#false} is VALID [2020-07-28 19:01:58,788 INFO L280 TraceCheckUtils]: 11: Hoare triple {858#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {858#false} is VALID [2020-07-28 19:01:58,789 INFO L280 TraceCheckUtils]: 12: Hoare triple {858#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {858#false} is VALID [2020-07-28 19:01:58,789 INFO L280 TraceCheckUtils]: 13: Hoare triple {858#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {858#false} is VALID [2020-07-28 19:01:58,790 INFO L280 TraceCheckUtils]: 14: Hoare triple {858#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {858#false} is VALID [2020-07-28 19:01:58,791 INFO L280 TraceCheckUtils]: 15: Hoare triple {858#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {858#false} is VALID [2020-07-28 19:01:58,791 INFO L280 TraceCheckUtils]: 16: Hoare triple {858#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {858#false} is VALID [2020-07-28 19:01:58,791 INFO L280 TraceCheckUtils]: 17: Hoare triple {858#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {858#false} is VALID [2020-07-28 19:01:58,792 INFO L280 TraceCheckUtils]: 18: Hoare triple {858#false} assume !false; {858#false} is VALID [2020-07-28 19:01:58,792 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:58,793 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1579164506] [2020-07-28 19:01:58,793 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:58,793 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:01:58,793 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1186597698] [2020-07-28 19:01:58,797 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:01:58,798 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:58,798 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:01:58,828 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:58,828 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:01:58,828 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:58,829 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:01:58,829 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:58,830 INFO L87 Difference]: Start difference. First operand 119 states and 174 transitions. Second operand 3 states. [2020-07-28 19:01:59,087 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:59,088 INFO L93 Difference]: Finished difference Result 119 states and 174 transitions. [2020-07-28 19:01:59,088 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:01:59,088 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:01:59,089 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:01:59,089 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:59,092 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 174 transitions. [2020-07-28 19:01:59,093 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:01:59,096 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 174 transitions. [2020-07-28 19:01:59,096 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 174 transitions. [2020-07-28 19:01:59,321 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 174 edges. 174 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:59,323 INFO L225 Difference]: With dead ends: 119 [2020-07-28 19:01:59,324 INFO L226 Difference]: Without dead ends: 49 [2020-07-28 19:01:59,325 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:01:59,326 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2020-07-28 19:01:59,344 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 49. [2020-07-28 19:01:59,345 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:01:59,345 INFO L82 GeneralOperation]: Start isEquivalent. First operand 49 states. Second operand 49 states. [2020-07-28 19:01:59,345 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand 49 states. [2020-07-28 19:01:59,345 INFO L87 Difference]: Start difference. First operand 49 states. Second operand 49 states. [2020-07-28 19:01:59,347 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:59,348 INFO L93 Difference]: Finished difference Result 49 states and 71 transitions. [2020-07-28 19:01:59,348 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 71 transitions. [2020-07-28 19:01:59,348 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:59,349 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:59,349 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand 49 states. [2020-07-28 19:01:59,349 INFO L87 Difference]: Start difference. First operand 49 states. Second operand 49 states. [2020-07-28 19:01:59,351 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:01:59,351 INFO L93 Difference]: Finished difference Result 49 states and 71 transitions. [2020-07-28 19:01:59,352 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 71 transitions. [2020-07-28 19:01:59,352 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:01:59,352 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:01:59,352 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:01:59,352 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:01:59,353 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49 states. [2020-07-28 19:01:59,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 71 transitions. [2020-07-28 19:01:59,355 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 71 transitions. Word has length 19 [2020-07-28 19:01:59,355 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:01:59,355 INFO L479 AbstractCegarLoop]: Abstraction has 49 states and 71 transitions. [2020-07-28 19:01:59,355 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:01:59,356 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 71 transitions. [2020-07-28 19:01:59,356 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 19:01:59,356 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:01:59,356 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:01:59,357 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:01:59,357 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:01:59,357 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:01:59,357 INFO L82 PathProgramCache]: Analyzing trace with hash 1148023213, now seen corresponding path program 1 times [2020-07-28 19:01:59,358 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:01:59,358 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [484951079] [2020-07-28 19:01:59,358 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:01:59,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:01:59,475 INFO L280 TraceCheckUtils]: 0: Hoare triple {1188#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {1190#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:59,476 INFO L280 TraceCheckUtils]: 1: Hoare triple {1190#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {1190#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:01:59,477 INFO L280 TraceCheckUtils]: 2: Hoare triple {1190#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {1191#(= |ULTIMATE.start_valid_product_#res| ~systemActive~0)} is VALID [2020-07-28 19:01:59,478 INFO L280 TraceCheckUtils]: 3: Hoare triple {1191#(= |ULTIMATE.start_valid_product_#res| ~systemActive~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {1192#(= ULTIMATE.start_main_~tmp~9 ~systemActive~0)} is VALID [2020-07-28 19:01:59,478 INFO L280 TraceCheckUtils]: 4: Hoare triple {1192#(= ULTIMATE.start_main_~tmp~9 ~systemActive~0)} assume 0 != main_~tmp~9; {1193#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:01:59,479 INFO L280 TraceCheckUtils]: 5: Hoare triple {1193#(not (= 0 ~systemActive~0))} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1193#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:01:59,480 INFO L280 TraceCheckUtils]: 6: Hoare triple {1193#(not (= 0 ~systemActive~0))} assume !false; {1193#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:01:59,481 INFO L280 TraceCheckUtils]: 7: Hoare triple {1193#(not (= 0 ~systemActive~0))} assume test_~splverifierCounter~0 < 4; {1193#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:01:59,487 INFO L280 TraceCheckUtils]: 8: Hoare triple {1193#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {1193#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:01:59,488 INFO L280 TraceCheckUtils]: 9: Hoare triple {1193#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp~4); {1193#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:01:59,489 INFO L280 TraceCheckUtils]: 10: Hoare triple {1193#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {1193#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:01:59,489 INFO L280 TraceCheckUtils]: 11: Hoare triple {1193#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___0~2); {1193#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:01:59,490 INFO L280 TraceCheckUtils]: 12: Hoare triple {1193#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {1193#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:01:59,491 INFO L280 TraceCheckUtils]: 13: Hoare triple {1193#(not (= 0 ~systemActive~0))} assume 0 != test_~tmp___2~0; {1193#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:01:59,492 INFO L280 TraceCheckUtils]: 14: Hoare triple {1193#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {1193#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:01:59,493 INFO L280 TraceCheckUtils]: 15: Hoare triple {1193#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {1189#false} is VALID [2020-07-28 19:01:59,493 INFO L280 TraceCheckUtils]: 16: Hoare triple {1189#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {1189#false} is VALID [2020-07-28 19:01:59,494 INFO L280 TraceCheckUtils]: 17: Hoare triple {1189#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {1189#false} is VALID [2020-07-28 19:01:59,494 INFO L280 TraceCheckUtils]: 18: Hoare triple {1189#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {1189#false} is VALID [2020-07-28 19:01:59,494 INFO L280 TraceCheckUtils]: 19: Hoare triple {1189#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {1189#false} is VALID [2020-07-28 19:01:59,494 INFO L280 TraceCheckUtils]: 20: Hoare triple {1189#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {1189#false} is VALID [2020-07-28 19:01:59,495 INFO L280 TraceCheckUtils]: 21: Hoare triple {1189#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {1189#false} is VALID [2020-07-28 19:01:59,495 INFO L280 TraceCheckUtils]: 22: Hoare triple {1189#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {1189#false} is VALID [2020-07-28 19:01:59,496 INFO L280 TraceCheckUtils]: 23: Hoare triple {1189#false} assume !false; {1189#false} is VALID [2020-07-28 19:01:59,497 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:01:59,497 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [484951079] [2020-07-28 19:01:59,497 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:01:59,498 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:01:59,498 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [585056686] [2020-07-28 19:01:59,499 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 24 [2020-07-28 19:01:59,499 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:01:59,499 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:01:59,534 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:01:59,534 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:01:59,534 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:01:59,534 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:01:59,535 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:01:59,535 INFO L87 Difference]: Start difference. First operand 49 states and 71 transitions. Second operand 6 states. [2020-07-28 19:02:00,028 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:00,028 INFO L93 Difference]: Finished difference Result 92 states and 136 transitions. [2020-07-28 19:02:00,029 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:00,029 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 24 [2020-07-28 19:02:00,029 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:00,029 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:00,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 136 transitions. [2020-07-28 19:02:00,032 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:00,034 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 136 transitions. [2020-07-28 19:02:00,034 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 136 transitions. [2020-07-28 19:02:00,200 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 136 edges. 136 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:00,201 INFO L225 Difference]: With dead ends: 92 [2020-07-28 19:02:00,201 INFO L226 Difference]: Without dead ends: 49 [2020-07-28 19:02:00,202 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:00,203 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49 states. [2020-07-28 19:02:00,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49 to 49. [2020-07-28 19:02:00,240 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:00,240 INFO L82 GeneralOperation]: Start isEquivalent. First operand 49 states. Second operand 49 states. [2020-07-28 19:02:00,240 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand 49 states. [2020-07-28 19:02:00,241 INFO L87 Difference]: Start difference. First operand 49 states. Second operand 49 states. [2020-07-28 19:02:00,244 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:00,244 INFO L93 Difference]: Finished difference Result 49 states and 70 transitions. [2020-07-28 19:02:00,244 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 70 transitions. [2020-07-28 19:02:00,245 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:00,245 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:00,245 INFO L74 IsIncluded]: Start isIncluded. First operand 49 states. Second operand 49 states. [2020-07-28 19:02:00,245 INFO L87 Difference]: Start difference. First operand 49 states. Second operand 49 states. [2020-07-28 19:02:00,254 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:00,254 INFO L93 Difference]: Finished difference Result 49 states and 70 transitions. [2020-07-28 19:02:00,255 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 70 transitions. [2020-07-28 19:02:00,255 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:00,255 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:00,255 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:00,255 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:00,256 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 49 states. [2020-07-28 19:02:00,258 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49 states to 49 states and 70 transitions. [2020-07-28 19:02:00,258 INFO L78 Accepts]: Start accepts. Automaton has 49 states and 70 transitions. Word has length 24 [2020-07-28 19:02:00,258 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:00,258 INFO L479 AbstractCegarLoop]: Abstraction has 49 states and 70 transitions. [2020-07-28 19:02:00,258 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:00,259 INFO L276 IsEmpty]: Start isEmpty. Operand 49 states and 70 transitions. [2020-07-28 19:02:00,259 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2020-07-28 19:02:00,259 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:00,259 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:00,260 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:02:00,260 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:00,260 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:00,260 INFO L82 PathProgramCache]: Analyzing trace with hash -43063729, now seen corresponding path program 1 times [2020-07-28 19:02:00,260 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:00,261 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [587850042] [2020-07-28 19:02:00,261 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:00,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:00,321 INFO L280 TraceCheckUtils]: 0: Hoare triple {1487#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,322 INFO L280 TraceCheckUtils]: 1: Hoare triple {1489#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,323 INFO L280 TraceCheckUtils]: 2: Hoare triple {1489#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,323 INFO L280 TraceCheckUtils]: 3: Hoare triple {1489#(= 0 ~pumpRunning~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,324 INFO L280 TraceCheckUtils]: 4: Hoare triple {1489#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~9; {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,324 INFO L280 TraceCheckUtils]: 5: Hoare triple {1489#(= 0 ~pumpRunning~0)} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,325 INFO L280 TraceCheckUtils]: 6: Hoare triple {1489#(= 0 ~pumpRunning~0)} assume !false; {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,325 INFO L280 TraceCheckUtils]: 7: Hoare triple {1489#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,326 INFO L280 TraceCheckUtils]: 8: Hoare triple {1489#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,327 INFO L280 TraceCheckUtils]: 9: Hoare triple {1489#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~4); {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,327 INFO L280 TraceCheckUtils]: 10: Hoare triple {1489#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,328 INFO L280 TraceCheckUtils]: 11: Hoare triple {1489#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~2); {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,329 INFO L280 TraceCheckUtils]: 12: Hoare triple {1489#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,329 INFO L280 TraceCheckUtils]: 13: Hoare triple {1489#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,330 INFO L280 TraceCheckUtils]: 14: Hoare triple {1489#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,330 INFO L280 TraceCheckUtils]: 15: Hoare triple {1489#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,331 INFO L280 TraceCheckUtils]: 16: Hoare triple {1489#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret0, processEnvironment__wrappee__highWaterSensor_~tmp~0;havoc processEnvironment__wrappee__highWaterSensor_~tmp~0; {1489#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:00,332 INFO L280 TraceCheckUtils]: 17: Hoare triple {1489#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {1488#false} is VALID [2020-07-28 19:02:00,332 INFO L280 TraceCheckUtils]: 18: Hoare triple {1488#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {1488#false} is VALID [2020-07-28 19:02:00,332 INFO L280 TraceCheckUtils]: 19: Hoare triple {1488#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {1488#false} is VALID [2020-07-28 19:02:00,333 INFO L280 TraceCheckUtils]: 20: Hoare triple {1488#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {1488#false} is VALID [2020-07-28 19:02:00,333 INFO L280 TraceCheckUtils]: 21: Hoare triple {1488#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {1488#false} is VALID [2020-07-28 19:02:00,333 INFO L280 TraceCheckUtils]: 22: Hoare triple {1488#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {1488#false} is VALID [2020-07-28 19:02:00,334 INFO L280 TraceCheckUtils]: 23: Hoare triple {1488#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {1488#false} is VALID [2020-07-28 19:02:00,334 INFO L280 TraceCheckUtils]: 24: Hoare triple {1488#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {1488#false} is VALID [2020-07-28 19:02:00,334 INFO L280 TraceCheckUtils]: 25: Hoare triple {1488#false} assume !false; {1488#false} is VALID [2020-07-28 19:02:00,335 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:00,336 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [587850042] [2020-07-28 19:02:00,336 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:00,336 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:02:00,336 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1949557046] [2020-07-28 19:02:00,337 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:02:00,337 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:00,337 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:02:00,367 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:00,367 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:02:00,368 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:00,368 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:02:00,368 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:00,368 INFO L87 Difference]: Start difference. First operand 49 states and 70 transitions. Second operand 3 states. [2020-07-28 19:02:00,613 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:00,613 INFO L93 Difference]: Finished difference Result 115 states and 167 transitions. [2020-07-28 19:02:00,613 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:02:00,613 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:02:00,614 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:00,614 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:00,616 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 167 transitions. [2020-07-28 19:02:00,616 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:00,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 167 transitions. [2020-07-28 19:02:00,619 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 167 transitions. [2020-07-28 19:02:00,820 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 167 edges. 167 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:00,822 INFO L225 Difference]: With dead ends: 115 [2020-07-28 19:02:00,822 INFO L226 Difference]: Without dead ends: 72 [2020-07-28 19:02:00,823 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:00,823 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 72 states. [2020-07-28 19:02:00,905 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 72 to 70. [2020-07-28 19:02:00,905 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:00,905 INFO L82 GeneralOperation]: Start isEquivalent. First operand 72 states. Second operand 70 states. [2020-07-28 19:02:00,906 INFO L74 IsIncluded]: Start isIncluded. First operand 72 states. Second operand 70 states. [2020-07-28 19:02:00,906 INFO L87 Difference]: Start difference. First operand 72 states. Second operand 70 states. [2020-07-28 19:02:00,909 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:00,909 INFO L93 Difference]: Finished difference Result 72 states and 100 transitions. [2020-07-28 19:02:00,909 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 100 transitions. [2020-07-28 19:02:00,910 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:00,910 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:00,910 INFO L74 IsIncluded]: Start isIncluded. First operand 70 states. Second operand 72 states. [2020-07-28 19:02:00,910 INFO L87 Difference]: Start difference. First operand 70 states. Second operand 72 states. [2020-07-28 19:02:00,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:00,913 INFO L93 Difference]: Finished difference Result 72 states and 100 transitions. [2020-07-28 19:02:00,913 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 100 transitions. [2020-07-28 19:02:00,913 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:00,913 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:00,913 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:00,914 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:00,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 70 states. [2020-07-28 19:02:00,916 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 70 states to 70 states and 99 transitions. [2020-07-28 19:02:00,916 INFO L78 Accepts]: Start accepts. Automaton has 70 states and 99 transitions. Word has length 26 [2020-07-28 19:02:00,916 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:00,917 INFO L479 AbstractCegarLoop]: Abstraction has 70 states and 99 transitions. [2020-07-28 19:02:00,917 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:02:00,917 INFO L276 IsEmpty]: Start isEmpty. Operand 70 states and 99 transitions. [2020-07-28 19:02:00,917 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2020-07-28 19:02:00,918 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:00,921 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:00,921 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:02:00,922 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:00,925 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:00,925 INFO L82 PathProgramCache]: Analyzing trace with hash -743213728, now seen corresponding path program 1 times [2020-07-28 19:02:00,925 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:00,926 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1533390442] [2020-07-28 19:02:00,926 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:00,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:01,107 INFO L280 TraceCheckUtils]: 0: Hoare triple {1885#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {1885#true} is VALID [2020-07-28 19:02:01,107 INFO L280 TraceCheckUtils]: 1: Hoare triple {1885#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {1885#true} is VALID [2020-07-28 19:02:01,108 INFO L280 TraceCheckUtils]: 2: Hoare triple {1885#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {1885#true} is VALID [2020-07-28 19:02:01,108 INFO L280 TraceCheckUtils]: 3: Hoare triple {1885#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {1885#true} is VALID [2020-07-28 19:02:01,108 INFO L280 TraceCheckUtils]: 4: Hoare triple {1885#true} assume 0 != main_~tmp~9; {1885#true} is VALID [2020-07-28 19:02:01,109 INFO L280 TraceCheckUtils]: 5: Hoare triple {1885#true} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1885#true} is VALID [2020-07-28 19:02:01,109 INFO L280 TraceCheckUtils]: 6: Hoare triple {1885#true} assume !false; {1885#true} is VALID [2020-07-28 19:02:01,109 INFO L280 TraceCheckUtils]: 7: Hoare triple {1885#true} assume test_~splverifierCounter~0 < 4; {1885#true} is VALID [2020-07-28 19:02:01,110 INFO L280 TraceCheckUtils]: 8: Hoare triple {1885#true} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {1885#true} is VALID [2020-07-28 19:02:01,110 INFO L280 TraceCheckUtils]: 9: Hoare triple {1885#true} assume !(0 != test_~tmp~4); {1885#true} is VALID [2020-07-28 19:02:01,110 INFO L280 TraceCheckUtils]: 10: Hoare triple {1885#true} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {1885#true} is VALID [2020-07-28 19:02:01,111 INFO L280 TraceCheckUtils]: 11: Hoare triple {1885#true} assume !(0 != test_~tmp___0~2); {1885#true} is VALID [2020-07-28 19:02:01,111 INFO L280 TraceCheckUtils]: 12: Hoare triple {1885#true} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {1885#true} is VALID [2020-07-28 19:02:01,111 INFO L280 TraceCheckUtils]: 13: Hoare triple {1885#true} assume 0 != test_~tmp___2~0; {1885#true} is VALID [2020-07-28 19:02:01,111 INFO L280 TraceCheckUtils]: 14: Hoare triple {1885#true} assume !(0 != ~pumpRunning~0); {1885#true} is VALID [2020-07-28 19:02:01,112 INFO L280 TraceCheckUtils]: 15: Hoare triple {1885#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {1885#true} is VALID [2020-07-28 19:02:01,112 INFO L280 TraceCheckUtils]: 16: Hoare triple {1885#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret0, processEnvironment__wrappee__highWaterSensor_~tmp~0;havoc processEnvironment__wrappee__highWaterSensor_~tmp~0; {1885#true} is VALID [2020-07-28 19:02:01,112 INFO L280 TraceCheckUtils]: 17: Hoare triple {1885#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret19, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {1885#true} is VALID [2020-07-28 19:02:01,113 INFO L280 TraceCheckUtils]: 18: Hoare triple {1885#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {1885#true} is VALID [2020-07-28 19:02:01,113 INFO L280 TraceCheckUtils]: 19: Hoare triple {1885#true} isHighWaterLevel_#t~ret19 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret19 && isHighWaterLevel_#t~ret19 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret19;havoc isHighWaterLevel_#t~ret19; {1885#true} is VALID [2020-07-28 19:02:01,116 INFO L280 TraceCheckUtils]: 20: Hoare triple {1885#true} assume 0 != isHighWaterLevel_~tmp~2;isHighWaterLevel_~tmp___0~0 := 0; {1887#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0)} is VALID [2020-07-28 19:02:01,118 INFO L280 TraceCheckUtils]: 21: Hoare triple {1887#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0)} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {1888#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:02:01,119 INFO L280 TraceCheckUtils]: 22: Hoare triple {1888#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__highWaterSensor_#t~ret0 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret0 && processEnvironment__wrappee__highWaterSensor_#t~ret0 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~0 := processEnvironment__wrappee__highWaterSensor_#t~ret0;havoc processEnvironment__wrappee__highWaterSensor_#t~ret0; {1889#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0)} is VALID [2020-07-28 19:02:01,119 INFO L280 TraceCheckUtils]: 23: Hoare triple {1889#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~0;~pumpRunning~0 := 1; {1886#false} is VALID [2020-07-28 19:02:01,120 INFO L280 TraceCheckUtils]: 24: Hoare triple {1886#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {1886#false} is VALID [2020-07-28 19:02:01,120 INFO L280 TraceCheckUtils]: 25: Hoare triple {1886#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {1886#false} is VALID [2020-07-28 19:02:01,120 INFO L280 TraceCheckUtils]: 26: Hoare triple {1886#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {1886#false} is VALID [2020-07-28 19:02:01,121 INFO L280 TraceCheckUtils]: 27: Hoare triple {1886#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {1886#false} is VALID [2020-07-28 19:02:01,121 INFO L280 TraceCheckUtils]: 28: Hoare triple {1886#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {1886#false} is VALID [2020-07-28 19:02:01,121 INFO L280 TraceCheckUtils]: 29: Hoare triple {1886#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {1886#false} is VALID [2020-07-28 19:02:01,122 INFO L280 TraceCheckUtils]: 30: Hoare triple {1886#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {1886#false} is VALID [2020-07-28 19:02:01,122 INFO L280 TraceCheckUtils]: 31: Hoare triple {1886#false} assume !false; {1886#false} is VALID [2020-07-28 19:02:01,124 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:01,124 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1533390442] [2020-07-28 19:02:01,125 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:01,125 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:01,125 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2115050001] [2020-07-28 19:02:01,125 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2020-07-28 19:02:01,126 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:01,126 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:01,176 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:01,177 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:01,177 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:01,177 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:01,177 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:01,178 INFO L87 Difference]: Start difference. First operand 70 states and 99 transitions. Second operand 5 states. [2020-07-28 19:02:01,917 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:01,917 INFO L93 Difference]: Finished difference Result 187 states and 263 transitions. [2020-07-28 19:02:01,918 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:02:01,918 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2020-07-28 19:02:01,918 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:01,918 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:01,921 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 203 transitions. [2020-07-28 19:02:01,921 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:01,924 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 203 transitions. [2020-07-28 19:02:01,924 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 203 transitions. [2020-07-28 19:02:02,137 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 203 edges. 203 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:02,140 INFO L225 Difference]: With dead ends: 187 [2020-07-28 19:02:02,140 INFO L226 Difference]: Without dead ends: 123 [2020-07-28 19:02:02,140 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:02,141 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123 states. [2020-07-28 19:02:02,225 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123 to 76. [2020-07-28 19:02:02,225 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:02,226 INFO L82 GeneralOperation]: Start isEquivalent. First operand 123 states. Second operand 76 states. [2020-07-28 19:02:02,226 INFO L74 IsIncluded]: Start isIncluded. First operand 123 states. Second operand 76 states. [2020-07-28 19:02:02,226 INFO L87 Difference]: Start difference. First operand 123 states. Second operand 76 states. [2020-07-28 19:02:02,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:02,230 INFO L93 Difference]: Finished difference Result 123 states and 168 transitions. [2020-07-28 19:02:02,230 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 168 transitions. [2020-07-28 19:02:02,231 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:02,231 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:02,231 INFO L74 IsIncluded]: Start isIncluded. First operand 76 states. Second operand 123 states. [2020-07-28 19:02:02,231 INFO L87 Difference]: Start difference. First operand 76 states. Second operand 123 states. [2020-07-28 19:02:02,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:02,235 INFO L93 Difference]: Finished difference Result 123 states and 168 transitions. [2020-07-28 19:02:02,235 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 168 transitions. [2020-07-28 19:02:02,236 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:02,236 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:02,236 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:02,236 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:02,236 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 76 states. [2020-07-28 19:02:02,239 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 105 transitions. [2020-07-28 19:02:02,239 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 105 transitions. Word has length 32 [2020-07-28 19:02:02,239 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:02,239 INFO L479 AbstractCegarLoop]: Abstraction has 76 states and 105 transitions. [2020-07-28 19:02:02,240 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:02,240 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 105 transitions. [2020-07-28 19:02:02,240 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2020-07-28 19:02:02,240 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:02,241 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:02,241 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:02:02,241 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:02,241 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:02,241 INFO L82 PathProgramCache]: Analyzing trace with hash -1870609821, now seen corresponding path program 1 times [2020-07-28 19:02:02,242 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:02,242 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [848589713] [2020-07-28 19:02:02,242 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:02,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:02,332 INFO L280 TraceCheckUtils]: 0: Hoare triple {2499#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,333 INFO L280 TraceCheckUtils]: 1: Hoare triple {2501#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,333 INFO L280 TraceCheckUtils]: 2: Hoare triple {2501#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,334 INFO L280 TraceCheckUtils]: 3: Hoare triple {2501#(= 1 ~waterLevel~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,335 INFO L280 TraceCheckUtils]: 4: Hoare triple {2501#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~9; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,335 INFO L280 TraceCheckUtils]: 5: Hoare triple {2501#(= 1 ~waterLevel~0)} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,336 INFO L280 TraceCheckUtils]: 6: Hoare triple {2501#(= 1 ~waterLevel~0)} assume !false; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,338 INFO L280 TraceCheckUtils]: 7: Hoare triple {2501#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,339 INFO L280 TraceCheckUtils]: 8: Hoare triple {2501#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,340 INFO L280 TraceCheckUtils]: 9: Hoare triple {2501#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~4); {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,340 INFO L280 TraceCheckUtils]: 10: Hoare triple {2501#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,341 INFO L280 TraceCheckUtils]: 11: Hoare triple {2501#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~2); {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,342 INFO L280 TraceCheckUtils]: 12: Hoare triple {2501#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,342 INFO L280 TraceCheckUtils]: 13: Hoare triple {2501#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,343 INFO L280 TraceCheckUtils]: 14: Hoare triple {2501#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,343 INFO L280 TraceCheckUtils]: 15: Hoare triple {2501#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,344 INFO L280 TraceCheckUtils]: 16: Hoare triple {2501#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret0, processEnvironment__wrappee__highWaterSensor_~tmp~0;havoc processEnvironment__wrappee__highWaterSensor_~tmp~0; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,345 INFO L280 TraceCheckUtils]: 17: Hoare triple {2501#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret19, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,345 INFO L280 TraceCheckUtils]: 18: Hoare triple {2501#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,346 INFO L280 TraceCheckUtils]: 19: Hoare triple {2501#(= 1 ~waterLevel~0)} isHighWaterLevel_#t~ret19 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret19 && isHighWaterLevel_#t~ret19 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret19;havoc isHighWaterLevel_#t~ret19; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,346 INFO L280 TraceCheckUtils]: 20: Hoare triple {2501#(= 1 ~waterLevel~0)} assume 0 != isHighWaterLevel_~tmp~2;isHighWaterLevel_~tmp___0~0 := 0; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,347 INFO L280 TraceCheckUtils]: 21: Hoare triple {2501#(= 1 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,348 INFO L280 TraceCheckUtils]: 22: Hoare triple {2501#(= 1 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret0 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret0 && processEnvironment__wrappee__highWaterSensor_#t~ret0 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~0 := processEnvironment__wrappee__highWaterSensor_#t~ret0;havoc processEnvironment__wrappee__highWaterSensor_#t~ret0; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,348 INFO L280 TraceCheckUtils]: 23: Hoare triple {2501#(= 1 ~waterLevel~0)} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~0); {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,349 INFO L280 TraceCheckUtils]: 24: Hoare triple {2501#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,349 INFO L280 TraceCheckUtils]: 25: Hoare triple {2501#(= 1 ~waterLevel~0)} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {2501#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:02,350 INFO L280 TraceCheckUtils]: 26: Hoare triple {2501#(= 1 ~waterLevel~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {2502#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:02:02,351 INFO L280 TraceCheckUtils]: 27: Hoare triple {2502#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {2503#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3)} is VALID [2020-07-28 19:02:02,352 INFO L280 TraceCheckUtils]: 28: Hoare triple {2503#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {2500#false} is VALID [2020-07-28 19:02:02,352 INFO L280 TraceCheckUtils]: 29: Hoare triple {2500#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {2500#false} is VALID [2020-07-28 19:02:02,352 INFO L280 TraceCheckUtils]: 30: Hoare triple {2500#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {2500#false} is VALID [2020-07-28 19:02:02,352 INFO L280 TraceCheckUtils]: 31: Hoare triple {2500#false} assume !false; {2500#false} is VALID [2020-07-28 19:02:02,354 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:02,355 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [848589713] [2020-07-28 19:02:02,355 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:02,355 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:02,355 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1687354740] [2020-07-28 19:02:02,356 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2020-07-28 19:02:02,356 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:02,356 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:02,395 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:02,395 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:02,395 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:02,395 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:02,395 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:02,396 INFO L87 Difference]: Start difference. First operand 76 states and 105 transitions. Second operand 5 states. [2020-07-28 19:02:03,461 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:03,462 INFO L93 Difference]: Finished difference Result 381 states and 542 transitions. [2020-07-28 19:02:03,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:03,462 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2020-07-28 19:02:03,463 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:03,463 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:03,467 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 345 transitions. [2020-07-28 19:02:03,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:03,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 345 transitions. [2020-07-28 19:02:03,471 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 345 transitions. [2020-07-28 19:02:03,884 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 345 edges. 345 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:03,892 INFO L225 Difference]: With dead ends: 381 [2020-07-28 19:02:03,892 INFO L226 Difference]: Without dead ends: 311 [2020-07-28 19:02:03,893 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:03,894 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 311 states. [2020-07-28 19:02:04,084 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 311 to 123. [2020-07-28 19:02:04,084 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:04,084 INFO L82 GeneralOperation]: Start isEquivalent. First operand 311 states. Second operand 123 states. [2020-07-28 19:02:04,085 INFO L74 IsIncluded]: Start isIncluded. First operand 311 states. Second operand 123 states. [2020-07-28 19:02:04,085 INFO L87 Difference]: Start difference. First operand 311 states. Second operand 123 states. [2020-07-28 19:02:04,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:04,096 INFO L93 Difference]: Finished difference Result 311 states and 429 transitions. [2020-07-28 19:02:04,096 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 429 transitions. [2020-07-28 19:02:04,097 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:04,097 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:04,097 INFO L74 IsIncluded]: Start isIncluded. First operand 123 states. Second operand 311 states. [2020-07-28 19:02:04,097 INFO L87 Difference]: Start difference. First operand 123 states. Second operand 311 states. [2020-07-28 19:02:04,108 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:04,108 INFO L93 Difference]: Finished difference Result 311 states and 429 transitions. [2020-07-28 19:02:04,109 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 429 transitions. [2020-07-28 19:02:04,109 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:04,109 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:04,110 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:04,110 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:04,110 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 123 states. [2020-07-28 19:02:04,114 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 167 transitions. [2020-07-28 19:02:04,114 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 167 transitions. Word has length 32 [2020-07-28 19:02:04,114 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:04,114 INFO L479 AbstractCegarLoop]: Abstraction has 123 states and 167 transitions. [2020-07-28 19:02:04,114 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:04,114 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 167 transitions. [2020-07-28 19:02:04,115 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:04,115 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:04,115 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:04,115 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:02:04,116 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:04,116 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:04,116 INFO L82 PathProgramCache]: Analyzing trace with hash 1353310945, now seen corresponding path program 1 times [2020-07-28 19:02:04,116 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:04,116 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1108889910] [2020-07-28 19:02:04,117 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:04,140 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:04,185 INFO L280 TraceCheckUtils]: 0: Hoare triple {3810#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {3812#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,191 INFO L280 TraceCheckUtils]: 1: Hoare triple {3812#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {3812#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,192 INFO L280 TraceCheckUtils]: 2: Hoare triple {3812#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {3812#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,197 INFO L280 TraceCheckUtils]: 3: Hoare triple {3812#(= 1 ~waterLevel~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {3812#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,197 INFO L280 TraceCheckUtils]: 4: Hoare triple {3812#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~9; {3812#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,204 INFO L280 TraceCheckUtils]: 5: Hoare triple {3812#(= 1 ~waterLevel~0)} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3812#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,204 INFO L280 TraceCheckUtils]: 6: Hoare triple {3812#(= 1 ~waterLevel~0)} assume !false; {3812#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,209 INFO L280 TraceCheckUtils]: 7: Hoare triple {3812#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {3812#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,210 INFO L280 TraceCheckUtils]: 8: Hoare triple {3812#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {3812#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,211 INFO L280 TraceCheckUtils]: 9: Hoare triple {3812#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~4; {3812#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,226 INFO L280 TraceCheckUtils]: 10: Hoare triple {3812#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {3813#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,227 INFO L280 TraceCheckUtils]: 11: Hoare triple {3813#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {3813#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,227 INFO L280 TraceCheckUtils]: 12: Hoare triple {3813#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~2); {3813#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,228 INFO L280 TraceCheckUtils]: 13: Hoare triple {3813#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {3813#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,229 INFO L280 TraceCheckUtils]: 14: Hoare triple {3813#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {3813#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,229 INFO L280 TraceCheckUtils]: 15: Hoare triple {3813#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {3813#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,230 INFO L280 TraceCheckUtils]: 16: Hoare triple {3813#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {3813#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,230 INFO L280 TraceCheckUtils]: 17: Hoare triple {3813#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret0, processEnvironment__wrappee__highWaterSensor_~tmp~0;havoc processEnvironment__wrappee__highWaterSensor_~tmp~0; {3813#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,232 INFO L280 TraceCheckUtils]: 18: Hoare triple {3813#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret19, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {3813#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:04,232 INFO L280 TraceCheckUtils]: 19: Hoare triple {3813#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {3811#false} is VALID [2020-07-28 19:02:04,233 INFO L280 TraceCheckUtils]: 20: Hoare triple {3811#false} isHighWaterLevel_#t~ret19 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret19 && isHighWaterLevel_#t~ret19 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret19;havoc isHighWaterLevel_#t~ret19; {3811#false} is VALID [2020-07-28 19:02:04,233 INFO L280 TraceCheckUtils]: 21: Hoare triple {3811#false} assume 0 != isHighWaterLevel_~tmp~2;isHighWaterLevel_~tmp___0~0 := 0; {3811#false} is VALID [2020-07-28 19:02:04,233 INFO L280 TraceCheckUtils]: 22: Hoare triple {3811#false} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {3811#false} is VALID [2020-07-28 19:02:04,233 INFO L280 TraceCheckUtils]: 23: Hoare triple {3811#false} processEnvironment__wrappee__highWaterSensor_#t~ret0 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret0 && processEnvironment__wrappee__highWaterSensor_#t~ret0 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~0 := processEnvironment__wrappee__highWaterSensor_#t~ret0;havoc processEnvironment__wrappee__highWaterSensor_#t~ret0; {3811#false} is VALID [2020-07-28 19:02:04,233 INFO L280 TraceCheckUtils]: 24: Hoare triple {3811#false} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~0); {3811#false} is VALID [2020-07-28 19:02:04,234 INFO L280 TraceCheckUtils]: 25: Hoare triple {3811#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {3811#false} is VALID [2020-07-28 19:02:04,234 INFO L280 TraceCheckUtils]: 26: Hoare triple {3811#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {3811#false} is VALID [2020-07-28 19:02:04,234 INFO L280 TraceCheckUtils]: 27: Hoare triple {3811#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {3811#false} is VALID [2020-07-28 19:02:04,235 INFO L280 TraceCheckUtils]: 28: Hoare triple {3811#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {3811#false} is VALID [2020-07-28 19:02:04,236 INFO L280 TraceCheckUtils]: 29: Hoare triple {3811#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {3811#false} is VALID [2020-07-28 19:02:04,236 INFO L280 TraceCheckUtils]: 30: Hoare triple {3811#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {3811#false} is VALID [2020-07-28 19:02:04,236 INFO L280 TraceCheckUtils]: 31: Hoare triple {3811#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {3811#false} is VALID [2020-07-28 19:02:04,236 INFO L280 TraceCheckUtils]: 32: Hoare triple {3811#false} assume !false; {3811#false} is VALID [2020-07-28 19:02:04,238 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:04,238 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1108889910] [2020-07-28 19:02:04,239 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:04,239 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:02:04,239 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1419866464] [2020-07-28 19:02:04,239 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:04,240 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:04,240 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:04,282 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:04,282 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:04,282 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:04,283 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:04,283 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:04,283 INFO L87 Difference]: Start difference. First operand 123 states and 167 transitions. Second operand 4 states. [2020-07-28 19:02:04,961 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:04,962 INFO L93 Difference]: Finished difference Result 254 states and 351 transitions. [2020-07-28 19:02:04,962 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:02:04,962 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:04,963 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:04,963 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:04,965 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 219 transitions. [2020-07-28 19:02:04,966 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:04,968 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 219 transitions. [2020-07-28 19:02:04,968 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 219 transitions. [2020-07-28 19:02:05,203 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 219 edges. 219 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:05,207 INFO L225 Difference]: With dead ends: 254 [2020-07-28 19:02:05,207 INFO L226 Difference]: Without dead ends: 184 [2020-07-28 19:02:05,208 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:05,208 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2020-07-28 19:02:05,444 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 181. [2020-07-28 19:02:05,444 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:05,444 INFO L82 GeneralOperation]: Start isEquivalent. First operand 184 states. Second operand 181 states. [2020-07-28 19:02:05,445 INFO L74 IsIncluded]: Start isIncluded. First operand 184 states. Second operand 181 states. [2020-07-28 19:02:05,445 INFO L87 Difference]: Start difference. First operand 184 states. Second operand 181 states. [2020-07-28 19:02:05,459 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:05,460 INFO L93 Difference]: Finished difference Result 184 states and 248 transitions. [2020-07-28 19:02:05,461 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 248 transitions. [2020-07-28 19:02:05,462 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:05,465 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:05,465 INFO L74 IsIncluded]: Start isIncluded. First operand 181 states. Second operand 184 states. [2020-07-28 19:02:05,465 INFO L87 Difference]: Start difference. First operand 181 states. Second operand 184 states. [2020-07-28 19:02:05,470 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:05,470 INFO L93 Difference]: Finished difference Result 184 states and 248 transitions. [2020-07-28 19:02:05,470 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 248 transitions. [2020-07-28 19:02:05,471 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:05,471 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:05,471 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:05,471 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:05,471 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 181 states. [2020-07-28 19:02:05,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 181 states to 181 states and 246 transitions. [2020-07-28 19:02:05,475 INFO L78 Accepts]: Start accepts. Automaton has 181 states and 246 transitions. Word has length 33 [2020-07-28 19:02:05,475 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:05,476 INFO L479 AbstractCegarLoop]: Abstraction has 181 states and 246 transitions. [2020-07-28 19:02:05,476 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:05,476 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 246 transitions. [2020-07-28 19:02:05,476 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:05,477 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:05,477 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:05,477 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:02:05,477 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:05,477 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:05,478 INFO L82 PathProgramCache]: Analyzing trace with hash 342193695, now seen corresponding path program 1 times [2020-07-28 19:02:05,478 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:05,478 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1405717766] [2020-07-28 19:02:05,478 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:05,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:05,539 INFO L280 TraceCheckUtils]: 0: Hoare triple {4771#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {4771#true} is VALID [2020-07-28 19:02:05,540 INFO L280 TraceCheckUtils]: 1: Hoare triple {4771#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {4771#true} is VALID [2020-07-28 19:02:05,540 INFO L280 TraceCheckUtils]: 2: Hoare triple {4771#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {4771#true} is VALID [2020-07-28 19:02:05,540 INFO L280 TraceCheckUtils]: 3: Hoare triple {4771#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {4771#true} is VALID [2020-07-28 19:02:05,541 INFO L280 TraceCheckUtils]: 4: Hoare triple {4771#true} assume 0 != main_~tmp~9; {4771#true} is VALID [2020-07-28 19:02:05,541 INFO L280 TraceCheckUtils]: 5: Hoare triple {4771#true} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {4771#true} is VALID [2020-07-28 19:02:05,541 INFO L280 TraceCheckUtils]: 6: Hoare triple {4771#true} assume !false; {4771#true} is VALID [2020-07-28 19:02:05,541 INFO L280 TraceCheckUtils]: 7: Hoare triple {4771#true} assume test_~splverifierCounter~0 < 4; {4771#true} is VALID [2020-07-28 19:02:05,541 INFO L280 TraceCheckUtils]: 8: Hoare triple {4771#true} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {4771#true} is VALID [2020-07-28 19:02:05,542 INFO L280 TraceCheckUtils]: 9: Hoare triple {4771#true} assume 0 != test_~tmp~4; {4771#true} is VALID [2020-07-28 19:02:05,542 INFO L280 TraceCheckUtils]: 10: Hoare triple {4771#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {4771#true} is VALID [2020-07-28 19:02:05,542 INFO L280 TraceCheckUtils]: 11: Hoare triple {4771#true} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {4771#true} is VALID [2020-07-28 19:02:05,542 INFO L280 TraceCheckUtils]: 12: Hoare triple {4771#true} assume !(0 != test_~tmp___0~2); {4771#true} is VALID [2020-07-28 19:02:05,542 INFO L280 TraceCheckUtils]: 13: Hoare triple {4771#true} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {4771#true} is VALID [2020-07-28 19:02:05,543 INFO L280 TraceCheckUtils]: 14: Hoare triple {4771#true} assume 0 != test_~tmp___2~0; {4771#true} is VALID [2020-07-28 19:02:05,543 INFO L280 TraceCheckUtils]: 15: Hoare triple {4771#true} assume !(0 != ~pumpRunning~0); {4771#true} is VALID [2020-07-28 19:02:05,543 INFO L280 TraceCheckUtils]: 16: Hoare triple {4771#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {4771#true} is VALID [2020-07-28 19:02:05,543 INFO L280 TraceCheckUtils]: 17: Hoare triple {4771#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret0, processEnvironment__wrappee__highWaterSensor_~tmp~0;havoc processEnvironment__wrappee__highWaterSensor_~tmp~0; {4771#true} is VALID [2020-07-28 19:02:05,543 INFO L280 TraceCheckUtils]: 18: Hoare triple {4771#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret19, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {4771#true} is VALID [2020-07-28 19:02:05,544 INFO L280 TraceCheckUtils]: 19: Hoare triple {4771#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {4773#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:02:05,545 INFO L280 TraceCheckUtils]: 20: Hoare triple {4773#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret19 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret19 && isHighWaterLevel_#t~ret19 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret19;havoc isHighWaterLevel_#t~ret19; {4774#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)} is VALID [2020-07-28 19:02:05,546 INFO L280 TraceCheckUtils]: 21: Hoare triple {4774#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)} assume 0 != isHighWaterLevel_~tmp~2;isHighWaterLevel_~tmp___0~0 := 0; {4772#false} is VALID [2020-07-28 19:02:05,546 INFO L280 TraceCheckUtils]: 22: Hoare triple {4772#false} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {4772#false} is VALID [2020-07-28 19:02:05,546 INFO L280 TraceCheckUtils]: 23: Hoare triple {4772#false} processEnvironment__wrappee__highWaterSensor_#t~ret0 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret0 && processEnvironment__wrappee__highWaterSensor_#t~ret0 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~0 := processEnvironment__wrappee__highWaterSensor_#t~ret0;havoc processEnvironment__wrappee__highWaterSensor_#t~ret0; {4772#false} is VALID [2020-07-28 19:02:05,546 INFO L280 TraceCheckUtils]: 24: Hoare triple {4772#false} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~0); {4772#false} is VALID [2020-07-28 19:02:05,546 INFO L280 TraceCheckUtils]: 25: Hoare triple {4772#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {4772#false} is VALID [2020-07-28 19:02:05,547 INFO L280 TraceCheckUtils]: 26: Hoare triple {4772#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {4772#false} is VALID [2020-07-28 19:02:05,547 INFO L280 TraceCheckUtils]: 27: Hoare triple {4772#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {4772#false} is VALID [2020-07-28 19:02:05,547 INFO L280 TraceCheckUtils]: 28: Hoare triple {4772#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {4772#false} is VALID [2020-07-28 19:02:05,547 INFO L280 TraceCheckUtils]: 29: Hoare triple {4772#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {4772#false} is VALID [2020-07-28 19:02:05,548 INFO L280 TraceCheckUtils]: 30: Hoare triple {4772#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {4772#false} is VALID [2020-07-28 19:02:05,548 INFO L280 TraceCheckUtils]: 31: Hoare triple {4772#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {4772#false} is VALID [2020-07-28 19:02:05,548 INFO L280 TraceCheckUtils]: 32: Hoare triple {4772#false} assume !false; {4772#false} is VALID [2020-07-28 19:02:05,549 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:05,549 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1405717766] [2020-07-28 19:02:05,550 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:05,550 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:05,550 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [778559898] [2020-07-28 19:02:05,550 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:05,551 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:05,551 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:05,588 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:05,588 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:05,588 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:05,589 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:05,589 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:05,589 INFO L87 Difference]: Start difference. First operand 181 states and 246 transitions. Second operand 4 states. [2020-07-28 19:02:06,474 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:06,475 INFO L93 Difference]: Finished difference Result 428 states and 593 transitions. [2020-07-28 19:02:06,475 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:06,475 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:06,476 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:06,476 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:06,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 229 transitions. [2020-07-28 19:02:06,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:06,479 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 229 transitions. [2020-07-28 19:02:06,480 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 229 transitions. [2020-07-28 19:02:06,726 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 229 edges. 229 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:06,735 INFO L225 Difference]: With dead ends: 428 [2020-07-28 19:02:06,735 INFO L226 Difference]: Without dead ends: 299 [2020-07-28 19:02:06,736 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:06,737 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 299 states. [2020-07-28 19:02:07,043 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 299 to 175. [2020-07-28 19:02:07,043 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:07,044 INFO L82 GeneralOperation]: Start isEquivalent. First operand 299 states. Second operand 175 states. [2020-07-28 19:02:07,044 INFO L74 IsIncluded]: Start isIncluded. First operand 299 states. Second operand 175 states. [2020-07-28 19:02:07,044 INFO L87 Difference]: Start difference. First operand 299 states. Second operand 175 states. [2020-07-28 19:02:07,052 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:07,052 INFO L93 Difference]: Finished difference Result 299 states and 412 transitions. [2020-07-28 19:02:07,052 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 412 transitions. [2020-07-28 19:02:07,053 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:07,053 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:07,053 INFO L74 IsIncluded]: Start isIncluded. First operand 175 states. Second operand 299 states. [2020-07-28 19:02:07,054 INFO L87 Difference]: Start difference. First operand 175 states. Second operand 299 states. [2020-07-28 19:02:07,061 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:07,061 INFO L93 Difference]: Finished difference Result 299 states and 412 transitions. [2020-07-28 19:02:07,061 INFO L276 IsEmpty]: Start isEmpty. Operand 299 states and 412 transitions. [2020-07-28 19:02:07,062 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:07,062 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:07,062 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:07,063 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:07,063 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 175 states. [2020-07-28 19:02:07,067 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 175 states to 175 states and 238 transitions. [2020-07-28 19:02:07,067 INFO L78 Accepts]: Start accepts. Automaton has 175 states and 238 transitions. Word has length 33 [2020-07-28 19:02:07,067 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:07,067 INFO L479 AbstractCegarLoop]: Abstraction has 175 states and 238 transitions. [2020-07-28 19:02:07,067 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:07,067 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 238 transitions. [2020-07-28 19:02:07,068 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:07,068 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:07,068 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:07,068 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:02:07,069 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:07,069 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:07,069 INFO L82 PathProgramCache]: Analyzing trace with hash 1727755226, now seen corresponding path program 1 times [2020-07-28 19:02:07,069 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:07,070 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1132213895] [2020-07-28 19:02:07,070 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:07,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:07,182 INFO L280 TraceCheckUtils]: 0: Hoare triple {6191#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {6191#true} is VALID [2020-07-28 19:02:07,182 INFO L280 TraceCheckUtils]: 1: Hoare triple {6191#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {6191#true} is VALID [2020-07-28 19:02:07,183 INFO L280 TraceCheckUtils]: 2: Hoare triple {6191#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {6193#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:02:07,184 INFO L280 TraceCheckUtils]: 3: Hoare triple {6193#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {6194#(= 1 ULTIMATE.start_main_~tmp~9)} is VALID [2020-07-28 19:02:07,184 INFO L280 TraceCheckUtils]: 4: Hoare triple {6194#(= 1 ULTIMATE.start_main_~tmp~9)} assume 0 != main_~tmp~9; {6191#true} is VALID [2020-07-28 19:02:07,185 INFO L280 TraceCheckUtils]: 5: Hoare triple {6191#true} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6191#true} is VALID [2020-07-28 19:02:07,185 INFO L280 TraceCheckUtils]: 6: Hoare triple {6191#true} assume !false; {6191#true} is VALID [2020-07-28 19:02:07,185 INFO L280 TraceCheckUtils]: 7: Hoare triple {6191#true} assume test_~splverifierCounter~0 < 4; {6191#true} is VALID [2020-07-28 19:02:07,185 INFO L280 TraceCheckUtils]: 8: Hoare triple {6191#true} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {6191#true} is VALID [2020-07-28 19:02:07,185 INFO L280 TraceCheckUtils]: 9: Hoare triple {6191#true} assume 0 != test_~tmp~4; {6191#true} is VALID [2020-07-28 19:02:07,186 INFO L280 TraceCheckUtils]: 10: Hoare triple {6191#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6191#true} is VALID [2020-07-28 19:02:07,186 INFO L280 TraceCheckUtils]: 11: Hoare triple {6191#true} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {6191#true} is VALID [2020-07-28 19:02:07,186 INFO L280 TraceCheckUtils]: 12: Hoare triple {6191#true} assume !(0 != test_~tmp___0~2); {6191#true} is VALID [2020-07-28 19:02:07,187 INFO L280 TraceCheckUtils]: 13: Hoare triple {6191#true} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {6191#true} is VALID [2020-07-28 19:02:07,187 INFO L280 TraceCheckUtils]: 14: Hoare triple {6191#true} assume 0 != test_~tmp___2~0; {6191#true} is VALID [2020-07-28 19:02:07,187 INFO L280 TraceCheckUtils]: 15: Hoare triple {6191#true} assume !(0 != ~pumpRunning~0); {6191#true} is VALID [2020-07-28 19:02:07,187 INFO L280 TraceCheckUtils]: 16: Hoare triple {6191#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {6191#true} is VALID [2020-07-28 19:02:07,187 INFO L280 TraceCheckUtils]: 17: Hoare triple {6191#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret0, processEnvironment__wrappee__highWaterSensor_~tmp~0;havoc processEnvironment__wrappee__highWaterSensor_~tmp~0; {6191#true} is VALID [2020-07-28 19:02:07,188 INFO L280 TraceCheckUtils]: 18: Hoare triple {6191#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret19, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {6191#true} is VALID [2020-07-28 19:02:07,188 INFO L280 TraceCheckUtils]: 19: Hoare triple {6191#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {6191#true} is VALID [2020-07-28 19:02:07,188 INFO L280 TraceCheckUtils]: 20: Hoare triple {6191#true} isHighWaterLevel_#t~ret19 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret19 && isHighWaterLevel_#t~ret19 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret19;havoc isHighWaterLevel_#t~ret19; {6191#true} is VALID [2020-07-28 19:02:07,188 INFO L280 TraceCheckUtils]: 21: Hoare triple {6191#true} assume !(0 != isHighWaterLevel_~tmp~2);isHighWaterLevel_~tmp___0~0 := 1; {6191#true} is VALID [2020-07-28 19:02:07,189 INFO L280 TraceCheckUtils]: 22: Hoare triple {6191#true} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {6191#true} is VALID [2020-07-28 19:02:07,189 INFO L280 TraceCheckUtils]: 23: Hoare triple {6191#true} processEnvironment__wrappee__highWaterSensor_#t~ret0 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret0 && processEnvironment__wrappee__highWaterSensor_#t~ret0 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~0 := processEnvironment__wrappee__highWaterSensor_#t~ret0;havoc processEnvironment__wrappee__highWaterSensor_#t~ret0; {6191#true} is VALID [2020-07-28 19:02:07,190 INFO L280 TraceCheckUtils]: 24: Hoare triple {6191#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~0;~pumpRunning~0 := 1; {6195#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:02:07,191 INFO L280 TraceCheckUtils]: 25: Hoare triple {6195#(not (= 0 ~pumpRunning~0))} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {6195#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:02:07,192 INFO L280 TraceCheckUtils]: 26: Hoare triple {6195#(not (= 0 ~pumpRunning~0))} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {6195#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:02:07,192 INFO L280 TraceCheckUtils]: 27: Hoare triple {6195#(not (= 0 ~pumpRunning~0))} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {6195#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:02:07,193 INFO L280 TraceCheckUtils]: 28: Hoare triple {6195#(not (= 0 ~pumpRunning~0))} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {6195#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:02:07,194 INFO L280 TraceCheckUtils]: 29: Hoare triple {6195#(not (= 0 ~pumpRunning~0))} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {6196#(not (= 0 |ULTIMATE.start_isPumpRunning_#res|))} is VALID [2020-07-28 19:02:07,195 INFO L280 TraceCheckUtils]: 30: Hoare triple {6196#(not (= 0 |ULTIMATE.start_isPumpRunning_#res|))} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {6197#(not (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~1 0))} is VALID [2020-07-28 19:02:07,196 INFO L280 TraceCheckUtils]: 31: Hoare triple {6197#(not (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~1 0))} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {6192#false} is VALID [2020-07-28 19:02:07,196 INFO L280 TraceCheckUtils]: 32: Hoare triple {6192#false} assume !false; {6192#false} is VALID [2020-07-28 19:02:07,197 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:07,198 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1132213895] [2020-07-28 19:02:07,198 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:07,198 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2020-07-28 19:02:07,199 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [142783465] [2020-07-28 19:02:07,199 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 33 [2020-07-28 19:02:07,199 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:07,199 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:07,243 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:07,243 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:07,243 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:07,244 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:07,244 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:07,244 INFO L87 Difference]: Start difference. First operand 175 states and 238 transitions. Second operand 7 states. [2020-07-28 19:02:09,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:09,096 INFO L93 Difference]: Finished difference Result 514 states and 710 transitions. [2020-07-28 19:02:09,096 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2020-07-28 19:02:09,097 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 33 [2020-07-28 19:02:09,097 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:09,097 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:09,099 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 297 transitions. [2020-07-28 19:02:09,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:09,104 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 297 transitions. [2020-07-28 19:02:09,105 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 297 transitions. [2020-07-28 19:02:09,453 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 297 edges. 297 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:09,464 INFO L225 Difference]: With dead ends: 514 [2020-07-28 19:02:09,464 INFO L226 Difference]: Without dead ends: 345 [2020-07-28 19:02:09,465 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=74, Invalid=136, Unknown=0, NotChecked=0, Total=210 [2020-07-28 19:02:09,466 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 345 states. [2020-07-28 19:02:09,806 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 345 to 154. [2020-07-28 19:02:09,807 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:09,807 INFO L82 GeneralOperation]: Start isEquivalent. First operand 345 states. Second operand 154 states. [2020-07-28 19:02:09,807 INFO L74 IsIncluded]: Start isIncluded. First operand 345 states. Second operand 154 states. [2020-07-28 19:02:09,807 INFO L87 Difference]: Start difference. First operand 345 states. Second operand 154 states. [2020-07-28 19:02:09,822 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:09,822 INFO L93 Difference]: Finished difference Result 345 states and 463 transitions. [2020-07-28 19:02:09,822 INFO L276 IsEmpty]: Start isEmpty. Operand 345 states and 463 transitions. [2020-07-28 19:02:09,823 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:09,823 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:09,824 INFO L74 IsIncluded]: Start isIncluded. First operand 154 states. Second operand 345 states. [2020-07-28 19:02:09,824 INFO L87 Difference]: Start difference. First operand 154 states. Second operand 345 states. [2020-07-28 19:02:09,837 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:09,837 INFO L93 Difference]: Finished difference Result 345 states and 463 transitions. [2020-07-28 19:02:09,838 INFO L276 IsEmpty]: Start isEmpty. Operand 345 states and 463 transitions. [2020-07-28 19:02:09,839 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:09,839 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:09,840 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:09,840 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:09,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 154 states. [2020-07-28 19:02:09,846 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154 states to 154 states and 202 transitions. [2020-07-28 19:02:09,846 INFO L78 Accepts]: Start accepts. Automaton has 154 states and 202 transitions. Word has length 33 [2020-07-28 19:02:09,847 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:09,847 INFO L479 AbstractCegarLoop]: Abstraction has 154 states and 202 transitions. [2020-07-28 19:02:09,847 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:09,847 INFO L276 IsEmpty]: Start isEmpty. Operand 154 states and 202 transitions. [2020-07-28 19:02:09,851 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:09,851 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:09,853 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:09,853 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:02:09,854 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:09,854 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:09,854 INFO L82 PathProgramCache]: Analyzing trace with hash 600359133, now seen corresponding path program 1 times [2020-07-28 19:02:09,855 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:09,855 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [601238417] [2020-07-28 19:02:09,856 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:09,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:10,001 INFO L280 TraceCheckUtils]: 0: Hoare triple {7813#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {7813#true} is VALID [2020-07-28 19:02:10,002 INFO L280 TraceCheckUtils]: 1: Hoare triple {7813#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {7813#true} is VALID [2020-07-28 19:02:10,004 INFO L280 TraceCheckUtils]: 2: Hoare triple {7813#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {7815#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:02:10,008 INFO L280 TraceCheckUtils]: 3: Hoare triple {7815#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {7816#(= 1 ULTIMATE.start_main_~tmp~9)} is VALID [2020-07-28 19:02:10,008 INFO L280 TraceCheckUtils]: 4: Hoare triple {7816#(= 1 ULTIMATE.start_main_~tmp~9)} assume 0 != main_~tmp~9; {7813#true} is VALID [2020-07-28 19:02:10,009 INFO L280 TraceCheckUtils]: 5: Hoare triple {7813#true} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {7813#true} is VALID [2020-07-28 19:02:10,009 INFO L280 TraceCheckUtils]: 6: Hoare triple {7813#true} assume !false; {7813#true} is VALID [2020-07-28 19:02:10,009 INFO L280 TraceCheckUtils]: 7: Hoare triple {7813#true} assume test_~splverifierCounter~0 < 4; {7813#true} is VALID [2020-07-28 19:02:10,009 INFO L280 TraceCheckUtils]: 8: Hoare triple {7813#true} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {7813#true} is VALID [2020-07-28 19:02:10,009 INFO L280 TraceCheckUtils]: 9: Hoare triple {7813#true} assume 0 != test_~tmp~4; {7813#true} is VALID [2020-07-28 19:02:10,010 INFO L280 TraceCheckUtils]: 10: Hoare triple {7813#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {7813#true} is VALID [2020-07-28 19:02:10,010 INFO L280 TraceCheckUtils]: 11: Hoare triple {7813#true} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {7813#true} is VALID [2020-07-28 19:02:10,010 INFO L280 TraceCheckUtils]: 12: Hoare triple {7813#true} assume !(0 != test_~tmp___0~2); {7813#true} is VALID [2020-07-28 19:02:10,010 INFO L280 TraceCheckUtils]: 13: Hoare triple {7813#true} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {7813#true} is VALID [2020-07-28 19:02:10,013 INFO L280 TraceCheckUtils]: 14: Hoare triple {7813#true} assume 0 != test_~tmp___2~0; {7813#true} is VALID [2020-07-28 19:02:10,014 INFO L280 TraceCheckUtils]: 15: Hoare triple {7813#true} assume !(0 != ~pumpRunning~0); {7813#true} is VALID [2020-07-28 19:02:10,014 INFO L280 TraceCheckUtils]: 16: Hoare triple {7813#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {7813#true} is VALID [2020-07-28 19:02:10,014 INFO L280 TraceCheckUtils]: 17: Hoare triple {7813#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret0, processEnvironment__wrappee__highWaterSensor_~tmp~0;havoc processEnvironment__wrappee__highWaterSensor_~tmp~0; {7813#true} is VALID [2020-07-28 19:02:10,014 INFO L280 TraceCheckUtils]: 18: Hoare triple {7813#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret19, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {7813#true} is VALID [2020-07-28 19:02:10,015 INFO L280 TraceCheckUtils]: 19: Hoare triple {7813#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {7813#true} is VALID [2020-07-28 19:02:10,015 INFO L280 TraceCheckUtils]: 20: Hoare triple {7813#true} isHighWaterLevel_#t~ret19 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret19 && isHighWaterLevel_#t~ret19 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret19;havoc isHighWaterLevel_#t~ret19; {7813#true} is VALID [2020-07-28 19:02:10,027 INFO L280 TraceCheckUtils]: 21: Hoare triple {7813#true} assume !(0 != isHighWaterLevel_~tmp~2);isHighWaterLevel_~tmp___0~0 := 1; {7817#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))} is VALID [2020-07-28 19:02:10,029 INFO L280 TraceCheckUtils]: 22: Hoare triple {7817#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {7818#(not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))} is VALID [2020-07-28 19:02:10,030 INFO L280 TraceCheckUtils]: 23: Hoare triple {7818#(not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))} processEnvironment__wrappee__highWaterSensor_#t~ret0 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret0 && processEnvironment__wrappee__highWaterSensor_#t~ret0 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~0 := processEnvironment__wrappee__highWaterSensor_#t~ret0;havoc processEnvironment__wrappee__highWaterSensor_#t~ret0; {7819#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0))} is VALID [2020-07-28 19:02:10,033 INFO L280 TraceCheckUtils]: 24: Hoare triple {7819#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0))} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~0); {7814#false} is VALID [2020-07-28 19:02:10,034 INFO L280 TraceCheckUtils]: 25: Hoare triple {7814#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {7814#false} is VALID [2020-07-28 19:02:10,034 INFO L280 TraceCheckUtils]: 26: Hoare triple {7814#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {7814#false} is VALID [2020-07-28 19:02:10,034 INFO L280 TraceCheckUtils]: 27: Hoare triple {7814#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {7814#false} is VALID [2020-07-28 19:02:10,034 INFO L280 TraceCheckUtils]: 28: Hoare triple {7814#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {7814#false} is VALID [2020-07-28 19:02:10,034 INFO L280 TraceCheckUtils]: 29: Hoare triple {7814#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {7814#false} is VALID [2020-07-28 19:02:10,035 INFO L280 TraceCheckUtils]: 30: Hoare triple {7814#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {7814#false} is VALID [2020-07-28 19:02:10,035 INFO L280 TraceCheckUtils]: 31: Hoare triple {7814#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {7814#false} is VALID [2020-07-28 19:02:10,035 INFO L280 TraceCheckUtils]: 32: Hoare triple {7814#false} assume !false; {7814#false} is VALID [2020-07-28 19:02:10,036 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:10,039 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [601238417] [2020-07-28 19:02:10,039 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:10,039 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2020-07-28 19:02:10,039 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [873261973] [2020-07-28 19:02:10,040 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 33 [2020-07-28 19:02:10,040 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:10,040 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:10,082 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:10,082 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:10,083 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:10,083 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:10,083 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:10,084 INFO L87 Difference]: Start difference. First operand 154 states and 202 transitions. Second operand 7 states. [2020-07-28 19:02:11,547 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:11,548 INFO L93 Difference]: Finished difference Result 391 states and 522 transitions. [2020-07-28 19:02:11,548 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:11,548 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 33 [2020-07-28 19:02:11,548 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:11,548 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:11,550 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 189 transitions. [2020-07-28 19:02:11,550 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:11,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 189 transitions. [2020-07-28 19:02:11,551 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 189 transitions. [2020-07-28 19:02:11,769 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 189 edges. 189 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:11,776 INFO L225 Difference]: With dead ends: 391 [2020-07-28 19:02:11,776 INFO L226 Difference]: Without dead ends: 243 [2020-07-28 19:02:11,777 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2020-07-28 19:02:11,777 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243 states. [2020-07-28 19:02:12,079 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 243 to 142. [2020-07-28 19:02:12,080 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:12,080 INFO L82 GeneralOperation]: Start isEquivalent. First operand 243 states. Second operand 142 states. [2020-07-28 19:02:12,080 INFO L74 IsIncluded]: Start isIncluded. First operand 243 states. Second operand 142 states. [2020-07-28 19:02:12,080 INFO L87 Difference]: Start difference. First operand 243 states. Second operand 142 states. [2020-07-28 19:02:12,085 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:12,086 INFO L93 Difference]: Finished difference Result 243 states and 323 transitions. [2020-07-28 19:02:12,086 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 323 transitions. [2020-07-28 19:02:12,087 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:12,087 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:12,087 INFO L74 IsIncluded]: Start isIncluded. First operand 142 states. Second operand 243 states. [2020-07-28 19:02:12,087 INFO L87 Difference]: Start difference. First operand 142 states. Second operand 243 states. [2020-07-28 19:02:12,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:12,094 INFO L93 Difference]: Finished difference Result 243 states and 323 transitions. [2020-07-28 19:02:12,094 INFO L276 IsEmpty]: Start isEmpty. Operand 243 states and 323 transitions. [2020-07-28 19:02:12,095 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:12,095 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:12,095 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:12,095 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:12,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 142 states. [2020-07-28 19:02:12,098 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 142 states to 142 states and 183 transitions. [2020-07-28 19:02:12,099 INFO L78 Accepts]: Start accepts. Automaton has 142 states and 183 transitions. Word has length 33 [2020-07-28 19:02:12,099 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:12,099 INFO L479 AbstractCegarLoop]: Abstraction has 142 states and 183 transitions. [2020-07-28 19:02:12,099 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:12,099 INFO L276 IsEmpty]: Start isEmpty. Operand 142 states and 183 transitions. [2020-07-28 19:02:12,100 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2020-07-28 19:02:12,100 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:12,101 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:12,101 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-28 19:02:12,101 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:12,102 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:12,102 INFO L82 PathProgramCache]: Analyzing trace with hash 241491333, now seen corresponding path program 1 times [2020-07-28 19:02:12,102 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:12,102 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [119959828] [2020-07-28 19:02:12,103 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:12,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:12,211 INFO L280 TraceCheckUtils]: 0: Hoare triple {9038#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {9038#true} is VALID [2020-07-28 19:02:12,212 INFO L280 TraceCheckUtils]: 1: Hoare triple {9038#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {9038#true} is VALID [2020-07-28 19:02:12,213 INFO L280 TraceCheckUtils]: 2: Hoare triple {9038#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {9040#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:02:12,214 INFO L280 TraceCheckUtils]: 3: Hoare triple {9040#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {9041#(= 1 ULTIMATE.start_main_~tmp~9)} is VALID [2020-07-28 19:02:12,214 INFO L280 TraceCheckUtils]: 4: Hoare triple {9041#(= 1 ULTIMATE.start_main_~tmp~9)} assume 0 != main_~tmp~9; {9038#true} is VALID [2020-07-28 19:02:12,214 INFO L280 TraceCheckUtils]: 5: Hoare triple {9038#true} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {9038#true} is VALID [2020-07-28 19:02:12,214 INFO L280 TraceCheckUtils]: 6: Hoare triple {9038#true} assume !false; {9038#true} is VALID [2020-07-28 19:02:12,215 INFO L280 TraceCheckUtils]: 7: Hoare triple {9038#true} assume test_~splverifierCounter~0 < 4; {9038#true} is VALID [2020-07-28 19:02:12,215 INFO L280 TraceCheckUtils]: 8: Hoare triple {9038#true} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {9038#true} is VALID [2020-07-28 19:02:12,215 INFO L280 TraceCheckUtils]: 9: Hoare triple {9038#true} assume !(0 != test_~tmp~4); {9038#true} is VALID [2020-07-28 19:02:12,215 INFO L280 TraceCheckUtils]: 10: Hoare triple {9038#true} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {9038#true} is VALID [2020-07-28 19:02:12,217 INFO L280 TraceCheckUtils]: 11: Hoare triple {9038#true} assume !(0 != test_~tmp___0~2); {9038#true} is VALID [2020-07-28 19:02:12,217 INFO L280 TraceCheckUtils]: 12: Hoare triple {9038#true} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {9038#true} is VALID [2020-07-28 19:02:12,217 INFO L280 TraceCheckUtils]: 13: Hoare triple {9038#true} assume 0 != test_~tmp___2~0; {9038#true} is VALID [2020-07-28 19:02:12,217 INFO L280 TraceCheckUtils]: 14: Hoare triple {9038#true} assume !(0 != ~pumpRunning~0); {9038#true} is VALID [2020-07-28 19:02:12,218 INFO L280 TraceCheckUtils]: 15: Hoare triple {9038#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {9038#true} is VALID [2020-07-28 19:02:12,218 INFO L280 TraceCheckUtils]: 16: Hoare triple {9038#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret0, processEnvironment__wrappee__highWaterSensor_~tmp~0;havoc processEnvironment__wrappee__highWaterSensor_~tmp~0; {9038#true} is VALID [2020-07-28 19:02:12,219 INFO L280 TraceCheckUtils]: 17: Hoare triple {9038#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret19, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {9038#true} is VALID [2020-07-28 19:02:12,220 INFO L280 TraceCheckUtils]: 18: Hoare triple {9038#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~6 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {9042#(not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))} is VALID [2020-07-28 19:02:12,221 INFO L280 TraceCheckUtils]: 19: Hoare triple {9042#(not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))} isHighWaterLevel_#t~ret19 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret19 && isHighWaterLevel_#t~ret19 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret19;havoc isHighWaterLevel_#t~ret19; {9043#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2))} is VALID [2020-07-28 19:02:12,222 INFO L280 TraceCheckUtils]: 20: Hoare triple {9043#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2))} assume !(0 != isHighWaterLevel_~tmp~2);isHighWaterLevel_~tmp___0~0 := 1; {9039#false} is VALID [2020-07-28 19:02:12,222 INFO L280 TraceCheckUtils]: 21: Hoare triple {9039#false} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {9039#false} is VALID [2020-07-28 19:02:12,222 INFO L280 TraceCheckUtils]: 22: Hoare triple {9039#false} processEnvironment__wrappee__highWaterSensor_#t~ret0 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret0 && processEnvironment__wrappee__highWaterSensor_#t~ret0 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~0 := processEnvironment__wrappee__highWaterSensor_#t~ret0;havoc processEnvironment__wrappee__highWaterSensor_#t~ret0; {9039#false} is VALID [2020-07-28 19:02:12,223 INFO L280 TraceCheckUtils]: 23: Hoare triple {9039#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~0;~pumpRunning~0 := 1; {9039#false} is VALID [2020-07-28 19:02:12,223 INFO L280 TraceCheckUtils]: 24: Hoare triple {9039#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {9039#false} is VALID [2020-07-28 19:02:12,223 INFO L280 TraceCheckUtils]: 25: Hoare triple {9039#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {9039#false} is VALID [2020-07-28 19:02:12,224 INFO L280 TraceCheckUtils]: 26: Hoare triple {9039#false} assume 0 != __utac_acc__Specification3_spec__1_~tmp~5; {9039#false} is VALID [2020-07-28 19:02:12,225 INFO L280 TraceCheckUtils]: 27: Hoare triple {9039#false} assume !false; {9039#false} is VALID [2020-07-28 19:02:12,225 INFO L280 TraceCheckUtils]: 28: Hoare triple {9039#false} assume test_~splverifierCounter~0 < 4; {9039#false} is VALID [2020-07-28 19:02:12,225 INFO L280 TraceCheckUtils]: 29: Hoare triple {9039#false} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {9039#false} is VALID [2020-07-28 19:02:12,225 INFO L280 TraceCheckUtils]: 30: Hoare triple {9039#false} assume !(0 != test_~tmp~4); {9039#false} is VALID [2020-07-28 19:02:12,225 INFO L280 TraceCheckUtils]: 31: Hoare triple {9039#false} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {9039#false} is VALID [2020-07-28 19:02:12,226 INFO L280 TraceCheckUtils]: 32: Hoare triple {9039#false} assume !(0 != test_~tmp___0~2); {9039#false} is VALID [2020-07-28 19:02:12,226 INFO L280 TraceCheckUtils]: 33: Hoare triple {9039#false} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {9039#false} is VALID [2020-07-28 19:02:12,226 INFO L280 TraceCheckUtils]: 34: Hoare triple {9039#false} assume 0 != test_~tmp___2~0; {9039#false} is VALID [2020-07-28 19:02:12,227 INFO L280 TraceCheckUtils]: 35: Hoare triple {9039#false} assume 0 != ~pumpRunning~0; {9039#false} is VALID [2020-07-28 19:02:12,227 INFO L280 TraceCheckUtils]: 36: Hoare triple {9039#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {9039#false} is VALID [2020-07-28 19:02:12,227 INFO L280 TraceCheckUtils]: 37: Hoare triple {9039#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {9039#false} is VALID [2020-07-28 19:02:12,227 INFO L280 TraceCheckUtils]: 38: Hoare triple {9039#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret20, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~3, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~3;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~7;havoc isLowWaterSensorDry_~retValue_acc~7;isLowWaterSensorDry_~retValue_acc~7 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~7; {9039#false} is VALID [2020-07-28 19:02:12,227 INFO L280 TraceCheckUtils]: 39: Hoare triple {9039#false} isLowWaterLevel_#t~ret20 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret20 && isLowWaterLevel_#t~ret20 <= 2147483647;isLowWaterLevel_~tmp~3 := isLowWaterLevel_#t~ret20;havoc isLowWaterLevel_#t~ret20; {9039#false} is VALID [2020-07-28 19:02:12,228 INFO L280 TraceCheckUtils]: 40: Hoare triple {9039#false} assume 0 != isLowWaterLevel_~tmp~3;isLowWaterLevel_~tmp___0~1 := 0; {9039#false} is VALID [2020-07-28 19:02:12,228 INFO L280 TraceCheckUtils]: 41: Hoare triple {9039#false} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {9039#false} is VALID [2020-07-28 19:02:12,228 INFO L280 TraceCheckUtils]: 42: Hoare triple {9039#false} processEnvironment_#t~ret1 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret1 && processEnvironment_#t~ret1 <= 2147483647;processEnvironment_~tmp~1 := processEnvironment_#t~ret1;havoc processEnvironment_#t~ret1; {9039#false} is VALID [2020-07-28 19:02:12,230 INFO L280 TraceCheckUtils]: 43: Hoare triple {9039#false} assume 0 != processEnvironment_~tmp~1;~pumpRunning~0 := 0; {9039#false} is VALID [2020-07-28 19:02:12,230 INFO L280 TraceCheckUtils]: 44: Hoare triple {9039#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {9039#false} is VALID [2020-07-28 19:02:12,231 INFO L280 TraceCheckUtils]: 45: Hoare triple {9039#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {9039#false} is VALID [2020-07-28 19:02:12,231 INFO L280 TraceCheckUtils]: 46: Hoare triple {9039#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {9039#false} is VALID [2020-07-28 19:02:12,231 INFO L280 TraceCheckUtils]: 47: Hoare triple {9039#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {9039#false} is VALID [2020-07-28 19:02:12,232 INFO L280 TraceCheckUtils]: 48: Hoare triple {9039#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {9039#false} is VALID [2020-07-28 19:02:12,232 INFO L280 TraceCheckUtils]: 49: Hoare triple {9039#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {9039#false} is VALID [2020-07-28 19:02:12,232 INFO L280 TraceCheckUtils]: 50: Hoare triple {9039#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {9039#false} is VALID [2020-07-28 19:02:12,232 INFO L280 TraceCheckUtils]: 51: Hoare triple {9039#false} assume !false; {9039#false} is VALID [2020-07-28 19:02:12,235 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:02:12,236 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [119959828] [2020-07-28 19:02:12,236 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:12,236 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-28 19:02:12,236 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [988245555] [2020-07-28 19:02:12,237 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 52 [2020-07-28 19:02:12,237 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:12,237 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:02:12,295 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:12,296 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:02:12,296 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:12,297 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:02:12,297 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:02:12,297 INFO L87 Difference]: Start difference. First operand 142 states and 183 transitions. Second operand 6 states. [2020-07-28 19:02:13,324 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:13,325 INFO L93 Difference]: Finished difference Result 285 states and 375 transitions. [2020-07-28 19:02:13,325 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:02:13,325 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 52 [2020-07-28 19:02:13,325 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:13,325 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:13,327 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 148 transitions. [2020-07-28 19:02:13,327 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:13,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 148 transitions. [2020-07-28 19:02:13,328 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 148 transitions. [2020-07-28 19:02:13,512 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 148 edges. 148 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:13,516 INFO L225 Difference]: With dead ends: 285 [2020-07-28 19:02:13,516 INFO L226 Difference]: Without dead ends: 175 [2020-07-28 19:02:13,517 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:02:13,517 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 175 states. [2020-07-28 19:02:13,810 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 175 to 126. [2020-07-28 19:02:13,810 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:13,810 INFO L82 GeneralOperation]: Start isEquivalent. First operand 175 states. Second operand 126 states. [2020-07-28 19:02:13,810 INFO L74 IsIncluded]: Start isIncluded. First operand 175 states. Second operand 126 states. [2020-07-28 19:02:13,810 INFO L87 Difference]: Start difference. First operand 175 states. Second operand 126 states. [2020-07-28 19:02:13,813 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:13,813 INFO L93 Difference]: Finished difference Result 175 states and 229 transitions. [2020-07-28 19:02:13,813 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 229 transitions. [2020-07-28 19:02:13,814 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:13,814 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:13,814 INFO L74 IsIncluded]: Start isIncluded. First operand 126 states. Second operand 175 states. [2020-07-28 19:02:13,814 INFO L87 Difference]: Start difference. First operand 126 states. Second operand 175 states. [2020-07-28 19:02:13,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:13,817 INFO L93 Difference]: Finished difference Result 175 states and 229 transitions. [2020-07-28 19:02:13,818 INFO L276 IsEmpty]: Start isEmpty. Operand 175 states and 229 transitions. [2020-07-28 19:02:13,818 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:13,818 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:13,819 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:13,819 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:13,819 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 126 states. [2020-07-28 19:02:13,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 126 states to 126 states and 163 transitions. [2020-07-28 19:02:13,821 INFO L78 Accepts]: Start accepts. Automaton has 126 states and 163 transitions. Word has length 52 [2020-07-28 19:02:13,821 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:13,821 INFO L479 AbstractCegarLoop]: Abstraction has 126 states and 163 transitions. [2020-07-28 19:02:13,821 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:13,821 INFO L276 IsEmpty]: Start isEmpty. Operand 126 states and 163 transitions. [2020-07-28 19:02:13,822 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2020-07-28 19:02:13,822 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:13,822 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:13,823 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:02:13,823 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:13,823 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:13,823 INFO L82 PathProgramCache]: Analyzing trace with hash -330933439, now seen corresponding path program 1 times [2020-07-28 19:02:13,823 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:13,824 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1286866690] [2020-07-28 19:02:13,824 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:13,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:13,905 INFO L280 TraceCheckUtils]: 0: Hoare triple {9956#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,906 INFO L280 TraceCheckUtils]: 1: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,907 INFO L280 TraceCheckUtils]: 2: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,908 INFO L280 TraceCheckUtils]: 3: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,908 INFO L280 TraceCheckUtils]: 4: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~9; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,909 INFO L280 TraceCheckUtils]: 5: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,912 INFO L280 TraceCheckUtils]: 6: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume !false; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,913 INFO L280 TraceCheckUtils]: 7: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,914 INFO L280 TraceCheckUtils]: 8: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,914 INFO L280 TraceCheckUtils]: 9: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp~4; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,915 INFO L280 TraceCheckUtils]: 10: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,916 INFO L280 TraceCheckUtils]: 11: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,916 INFO L280 TraceCheckUtils]: 12: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~2); {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,917 INFO L280 TraceCheckUtils]: 13: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,918 INFO L280 TraceCheckUtils]: 14: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,918 INFO L280 TraceCheckUtils]: 15: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,919 INFO L280 TraceCheckUtils]: 16: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,920 INFO L280 TraceCheckUtils]: 17: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret0, processEnvironment__wrappee__highWaterSensor_~tmp~0;havoc processEnvironment__wrappee__highWaterSensor_~tmp~0; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,920 INFO L280 TraceCheckUtils]: 18: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret19, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,921 INFO L280 TraceCheckUtils]: 19: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,921 INFO L280 TraceCheckUtils]: 20: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret19 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret19 && isHighWaterLevel_#t~ret19 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret19;havoc isHighWaterLevel_#t~ret19; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,922 INFO L280 TraceCheckUtils]: 21: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~2);isHighWaterLevel_~tmp___0~0 := 1; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,923 INFO L280 TraceCheckUtils]: 22: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,923 INFO L280 TraceCheckUtils]: 23: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} processEnvironment__wrappee__highWaterSensor_#t~ret0 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret0 && processEnvironment__wrappee__highWaterSensor_#t~ret0 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~0 := processEnvironment__wrappee__highWaterSensor_#t~ret0;havoc processEnvironment__wrappee__highWaterSensor_#t~ret0; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,924 INFO L280 TraceCheckUtils]: 24: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~0;~pumpRunning~0 := 1; {9958#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:13,924 INFO L280 TraceCheckUtils]: 25: Hoare triple {9958#(= 0 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {9959#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:13,925 INFO L280 TraceCheckUtils]: 26: Hoare triple {9959#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {9960#(= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5)} is VALID [2020-07-28 19:02:13,926 INFO L280 TraceCheckUtils]: 27: Hoare triple {9960#(= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~5; {9957#false} is VALID [2020-07-28 19:02:13,926 INFO L280 TraceCheckUtils]: 28: Hoare triple {9957#false} assume !false; {9957#false} is VALID [2020-07-28 19:02:13,926 INFO L280 TraceCheckUtils]: 29: Hoare triple {9957#false} assume test_~splverifierCounter~0 < 4; {9957#false} is VALID [2020-07-28 19:02:13,926 INFO L280 TraceCheckUtils]: 30: Hoare triple {9957#false} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {9957#false} is VALID [2020-07-28 19:02:13,927 INFO L280 TraceCheckUtils]: 31: Hoare triple {9957#false} assume !(0 != test_~tmp~4); {9957#false} is VALID [2020-07-28 19:02:13,927 INFO L280 TraceCheckUtils]: 32: Hoare triple {9957#false} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {9957#false} is VALID [2020-07-28 19:02:13,927 INFO L280 TraceCheckUtils]: 33: Hoare triple {9957#false} assume !(0 != test_~tmp___0~2); {9957#false} is VALID [2020-07-28 19:02:13,927 INFO L280 TraceCheckUtils]: 34: Hoare triple {9957#false} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {9957#false} is VALID [2020-07-28 19:02:13,928 INFO L280 TraceCheckUtils]: 35: Hoare triple {9957#false} assume 0 != test_~tmp___2~0; {9957#false} is VALID [2020-07-28 19:02:13,928 INFO L280 TraceCheckUtils]: 36: Hoare triple {9957#false} assume 0 != ~pumpRunning~0; {9957#false} is VALID [2020-07-28 19:02:13,928 INFO L280 TraceCheckUtils]: 37: Hoare triple {9957#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {9957#false} is VALID [2020-07-28 19:02:13,928 INFO L280 TraceCheckUtils]: 38: Hoare triple {9957#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {9957#false} is VALID [2020-07-28 19:02:13,928 INFO L280 TraceCheckUtils]: 39: Hoare triple {9957#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret20, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~3, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~3;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~7;havoc isLowWaterSensorDry_~retValue_acc~7;isLowWaterSensorDry_~retValue_acc~7 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~7; {9957#false} is VALID [2020-07-28 19:02:13,929 INFO L280 TraceCheckUtils]: 40: Hoare triple {9957#false} isLowWaterLevel_#t~ret20 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret20 && isLowWaterLevel_#t~ret20 <= 2147483647;isLowWaterLevel_~tmp~3 := isLowWaterLevel_#t~ret20;havoc isLowWaterLevel_#t~ret20; {9957#false} is VALID [2020-07-28 19:02:13,929 INFO L280 TraceCheckUtils]: 41: Hoare triple {9957#false} assume 0 != isLowWaterLevel_~tmp~3;isLowWaterLevel_~tmp___0~1 := 0; {9957#false} is VALID [2020-07-28 19:02:13,929 INFO L280 TraceCheckUtils]: 42: Hoare triple {9957#false} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {9957#false} is VALID [2020-07-28 19:02:13,930 INFO L280 TraceCheckUtils]: 43: Hoare triple {9957#false} processEnvironment_#t~ret1 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret1 && processEnvironment_#t~ret1 <= 2147483647;processEnvironment_~tmp~1 := processEnvironment_#t~ret1;havoc processEnvironment_#t~ret1; {9957#false} is VALID [2020-07-28 19:02:13,930 INFO L280 TraceCheckUtils]: 44: Hoare triple {9957#false} assume 0 != processEnvironment_~tmp~1;~pumpRunning~0 := 0; {9957#false} is VALID [2020-07-28 19:02:13,930 INFO L280 TraceCheckUtils]: 45: Hoare triple {9957#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {9957#false} is VALID [2020-07-28 19:02:13,931 INFO L280 TraceCheckUtils]: 46: Hoare triple {9957#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {9957#false} is VALID [2020-07-28 19:02:13,931 INFO L280 TraceCheckUtils]: 47: Hoare triple {9957#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {9957#false} is VALID [2020-07-28 19:02:13,931 INFO L280 TraceCheckUtils]: 48: Hoare triple {9957#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {9957#false} is VALID [2020-07-28 19:02:13,931 INFO L280 TraceCheckUtils]: 49: Hoare triple {9957#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {9957#false} is VALID [2020-07-28 19:02:13,931 INFO L280 TraceCheckUtils]: 50: Hoare triple {9957#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {9957#false} is VALID [2020-07-28 19:02:13,932 INFO L280 TraceCheckUtils]: 51: Hoare triple {9957#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {9957#false} is VALID [2020-07-28 19:02:13,932 INFO L280 TraceCheckUtils]: 52: Hoare triple {9957#false} assume !false; {9957#false} is VALID [2020-07-28 19:02:13,935 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:13,936 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1286866690] [2020-07-28 19:02:13,936 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:13,936 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:13,937 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1860264168] [2020-07-28 19:02:13,937 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 53 [2020-07-28 19:02:13,937 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:13,938 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:14,016 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:14,016 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:14,016 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:14,016 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:14,017 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:14,017 INFO L87 Difference]: Start difference. First operand 126 states and 163 transitions. Second operand 5 states. [2020-07-28 19:02:15,971 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:15,971 INFO L93 Difference]: Finished difference Result 656 states and 844 transitions. [2020-07-28 19:02:15,972 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 19:02:15,972 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 53 [2020-07-28 19:02:15,972 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:15,972 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:15,973 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 312 transitions. [2020-07-28 19:02:15,974 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:15,975 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 312 transitions. [2020-07-28 19:02:15,975 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 312 transitions. [2020-07-28 19:02:16,360 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 312 edges. 312 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:16,376 INFO L225 Difference]: With dead ends: 656 [2020-07-28 19:02:16,377 INFO L226 Difference]: Without dead ends: 536 [2020-07-28 19:02:16,377 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:02:16,378 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 536 states. [2020-07-28 19:02:17,028 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 536 to 244. [2020-07-28 19:02:17,028 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:17,029 INFO L82 GeneralOperation]: Start isEquivalent. First operand 536 states. Second operand 244 states. [2020-07-28 19:02:17,029 INFO L74 IsIncluded]: Start isIncluded. First operand 536 states. Second operand 244 states. [2020-07-28 19:02:17,029 INFO L87 Difference]: Start difference. First operand 536 states. Second operand 244 states. [2020-07-28 19:02:17,044 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:17,045 INFO L93 Difference]: Finished difference Result 536 states and 676 transitions. [2020-07-28 19:02:17,045 INFO L276 IsEmpty]: Start isEmpty. Operand 536 states and 676 transitions. [2020-07-28 19:02:17,046 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:17,046 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:17,047 INFO L74 IsIncluded]: Start isIncluded. First operand 244 states. Second operand 536 states. [2020-07-28 19:02:17,047 INFO L87 Difference]: Start difference. First operand 244 states. Second operand 536 states. [2020-07-28 19:02:17,061 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:17,061 INFO L93 Difference]: Finished difference Result 536 states and 676 transitions. [2020-07-28 19:02:17,062 INFO L276 IsEmpty]: Start isEmpty. Operand 536 states and 676 transitions. [2020-07-28 19:02:17,063 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:17,063 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:17,063 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:17,063 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:17,063 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 244 states. [2020-07-28 19:02:17,068 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244 states to 244 states and 310 transitions. [2020-07-28 19:02:17,068 INFO L78 Accepts]: Start accepts. Automaton has 244 states and 310 transitions. Word has length 53 [2020-07-28 19:02:17,068 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:17,068 INFO L479 AbstractCegarLoop]: Abstraction has 244 states and 310 transitions. [2020-07-28 19:02:17,068 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:17,069 INFO L276 IsEmpty]: Start isEmpty. Operand 244 states and 310 transitions. [2020-07-28 19:02:17,069 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2020-07-28 19:02:17,069 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:17,070 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:17,070 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-28 19:02:17,070 INFO L427 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:17,070 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:17,071 INFO L82 PathProgramCache]: Analyzing trace with hash -454216901, now seen corresponding path program 1 times [2020-07-28 19:02:17,071 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:17,071 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [906100487] [2020-07-28 19:02:17,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:17,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:17,147 INFO L280 TraceCheckUtils]: 0: Hoare triple {12250#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {12250#true} is VALID [2020-07-28 19:02:17,147 INFO L280 TraceCheckUtils]: 1: Hoare triple {12250#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {12250#true} is VALID [2020-07-28 19:02:17,147 INFO L280 TraceCheckUtils]: 2: Hoare triple {12250#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {12250#true} is VALID [2020-07-28 19:02:17,148 INFO L280 TraceCheckUtils]: 3: Hoare triple {12250#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {12250#true} is VALID [2020-07-28 19:02:17,148 INFO L280 TraceCheckUtils]: 4: Hoare triple {12250#true} assume 0 != main_~tmp~9; {12250#true} is VALID [2020-07-28 19:02:17,148 INFO L280 TraceCheckUtils]: 5: Hoare triple {12250#true} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {12250#true} is VALID [2020-07-28 19:02:17,148 INFO L280 TraceCheckUtils]: 6: Hoare triple {12250#true} assume !false; {12250#true} is VALID [2020-07-28 19:02:17,148 INFO L280 TraceCheckUtils]: 7: Hoare triple {12250#true} assume test_~splverifierCounter~0 < 4; {12250#true} is VALID [2020-07-28 19:02:17,149 INFO L280 TraceCheckUtils]: 8: Hoare triple {12250#true} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {12250#true} is VALID [2020-07-28 19:02:17,149 INFO L280 TraceCheckUtils]: 9: Hoare triple {12250#true} assume 0 != test_~tmp~4; {12250#true} is VALID [2020-07-28 19:02:17,149 INFO L280 TraceCheckUtils]: 10: Hoare triple {12250#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {12250#true} is VALID [2020-07-28 19:02:17,149 INFO L280 TraceCheckUtils]: 11: Hoare triple {12250#true} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {12250#true} is VALID [2020-07-28 19:02:17,149 INFO L280 TraceCheckUtils]: 12: Hoare triple {12250#true} assume 0 != test_~tmp___0~2; {12250#true} is VALID [2020-07-28 19:02:17,150 INFO L280 TraceCheckUtils]: 13: Hoare triple {12250#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {12250#true} is VALID [2020-07-28 19:02:17,150 INFO L280 TraceCheckUtils]: 14: Hoare triple {12250#true} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {12250#true} is VALID [2020-07-28 19:02:17,150 INFO L280 TraceCheckUtils]: 15: Hoare triple {12250#true} assume 0 != test_~tmp___2~0; {12250#true} is VALID [2020-07-28 19:02:17,151 INFO L280 TraceCheckUtils]: 16: Hoare triple {12250#true} assume !(0 != ~pumpRunning~0); {12250#true} is VALID [2020-07-28 19:02:17,151 INFO L280 TraceCheckUtils]: 17: Hoare triple {12250#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {12250#true} is VALID [2020-07-28 19:02:17,151 INFO L280 TraceCheckUtils]: 18: Hoare triple {12250#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret0, processEnvironment__wrappee__highWaterSensor_~tmp~0;havoc processEnvironment__wrappee__highWaterSensor_~tmp~0; {12250#true} is VALID [2020-07-28 19:02:17,151 INFO L280 TraceCheckUtils]: 19: Hoare triple {12250#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret19, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {12250#true} is VALID [2020-07-28 19:02:17,152 INFO L280 TraceCheckUtils]: 20: Hoare triple {12250#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {12250#true} is VALID [2020-07-28 19:02:17,152 INFO L280 TraceCheckUtils]: 21: Hoare triple {12250#true} isHighWaterLevel_#t~ret19 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret19 && isHighWaterLevel_#t~ret19 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret19;havoc isHighWaterLevel_#t~ret19; {12250#true} is VALID [2020-07-28 19:02:17,152 INFO L280 TraceCheckUtils]: 22: Hoare triple {12250#true} assume !(0 != isHighWaterLevel_~tmp~2);isHighWaterLevel_~tmp___0~0 := 1; {12250#true} is VALID [2020-07-28 19:02:17,153 INFO L280 TraceCheckUtils]: 23: Hoare triple {12250#true} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {12250#true} is VALID [2020-07-28 19:02:17,153 INFO L280 TraceCheckUtils]: 24: Hoare triple {12250#true} processEnvironment__wrappee__highWaterSensor_#t~ret0 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret0 && processEnvironment__wrappee__highWaterSensor_#t~ret0 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~0 := processEnvironment__wrappee__highWaterSensor_#t~ret0;havoc processEnvironment__wrappee__highWaterSensor_#t~ret0; {12250#true} is VALID [2020-07-28 19:02:17,153 INFO L280 TraceCheckUtils]: 25: Hoare triple {12250#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~0;~pumpRunning~0 := 1; {12250#true} is VALID [2020-07-28 19:02:17,153 INFO L280 TraceCheckUtils]: 26: Hoare triple {12250#true} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {12250#true} is VALID [2020-07-28 19:02:17,153 INFO L280 TraceCheckUtils]: 27: Hoare triple {12250#true} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {12250#true} is VALID [2020-07-28 19:02:17,154 INFO L280 TraceCheckUtils]: 28: Hoare triple {12250#true} assume 0 != __utac_acc__Specification3_spec__1_~tmp~5; {12250#true} is VALID [2020-07-28 19:02:17,154 INFO L280 TraceCheckUtils]: 29: Hoare triple {12250#true} assume !false; {12250#true} is VALID [2020-07-28 19:02:17,154 INFO L280 TraceCheckUtils]: 30: Hoare triple {12250#true} assume test_~splverifierCounter~0 < 4; {12250#true} is VALID [2020-07-28 19:02:17,154 INFO L280 TraceCheckUtils]: 31: Hoare triple {12250#true} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {12250#true} is VALID [2020-07-28 19:02:17,154 INFO L280 TraceCheckUtils]: 32: Hoare triple {12250#true} assume !(0 != test_~tmp~4); {12250#true} is VALID [2020-07-28 19:02:17,155 INFO L280 TraceCheckUtils]: 33: Hoare triple {12250#true} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {12250#true} is VALID [2020-07-28 19:02:17,155 INFO L280 TraceCheckUtils]: 34: Hoare triple {12250#true} assume !(0 != test_~tmp___0~2); {12250#true} is VALID [2020-07-28 19:02:17,155 INFO L280 TraceCheckUtils]: 35: Hoare triple {12250#true} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {12250#true} is VALID [2020-07-28 19:02:17,156 INFO L280 TraceCheckUtils]: 36: Hoare triple {12250#true} assume 0 != test_~tmp___2~0; {12250#true} is VALID [2020-07-28 19:02:17,156 INFO L280 TraceCheckUtils]: 37: Hoare triple {12250#true} assume 0 != ~pumpRunning~0; {12250#true} is VALID [2020-07-28 19:02:17,157 INFO L280 TraceCheckUtils]: 38: Hoare triple {12250#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {12250#true} is VALID [2020-07-28 19:02:17,157 INFO L280 TraceCheckUtils]: 39: Hoare triple {12250#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {12250#true} is VALID [2020-07-28 19:02:17,157 INFO L280 TraceCheckUtils]: 40: Hoare triple {12250#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret20, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~3, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~3;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~7;havoc isLowWaterSensorDry_~retValue_acc~7;isLowWaterSensorDry_~retValue_acc~7 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~7; {12250#true} is VALID [2020-07-28 19:02:17,157 INFO L280 TraceCheckUtils]: 41: Hoare triple {12250#true} isLowWaterLevel_#t~ret20 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret20 && isLowWaterLevel_#t~ret20 <= 2147483647;isLowWaterLevel_~tmp~3 := isLowWaterLevel_#t~ret20;havoc isLowWaterLevel_#t~ret20; {12250#true} is VALID [2020-07-28 19:02:17,158 INFO L280 TraceCheckUtils]: 42: Hoare triple {12250#true} assume 0 != isLowWaterLevel_~tmp~3;isLowWaterLevel_~tmp___0~1 := 0; {12252#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~1)} is VALID [2020-07-28 19:02:17,159 INFO L280 TraceCheckUtils]: 43: Hoare triple {12252#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~1)} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {12253#(= 0 |ULTIMATE.start_isLowWaterLevel_#res|)} is VALID [2020-07-28 19:02:17,160 INFO L280 TraceCheckUtils]: 44: Hoare triple {12253#(= 0 |ULTIMATE.start_isLowWaterLevel_#res|)} processEnvironment_#t~ret1 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret1 && processEnvironment_#t~ret1 <= 2147483647;processEnvironment_~tmp~1 := processEnvironment_#t~ret1;havoc processEnvironment_#t~ret1; {12254#(= 0 ULTIMATE.start_processEnvironment_~tmp~1)} is VALID [2020-07-28 19:02:17,160 INFO L280 TraceCheckUtils]: 45: Hoare triple {12254#(= 0 ULTIMATE.start_processEnvironment_~tmp~1)} assume 0 != processEnvironment_~tmp~1;~pumpRunning~0 := 0; {12251#false} is VALID [2020-07-28 19:02:17,161 INFO L280 TraceCheckUtils]: 46: Hoare triple {12251#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {12251#false} is VALID [2020-07-28 19:02:17,161 INFO L280 TraceCheckUtils]: 47: Hoare triple {12251#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {12251#false} is VALID [2020-07-28 19:02:17,161 INFO L280 TraceCheckUtils]: 48: Hoare triple {12251#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {12251#false} is VALID [2020-07-28 19:02:17,162 INFO L280 TraceCheckUtils]: 49: Hoare triple {12251#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {12251#false} is VALID [2020-07-28 19:02:17,162 INFO L280 TraceCheckUtils]: 50: Hoare triple {12251#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {12251#false} is VALID [2020-07-28 19:02:17,162 INFO L280 TraceCheckUtils]: 51: Hoare triple {12251#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {12251#false} is VALID [2020-07-28 19:02:17,162 INFO L280 TraceCheckUtils]: 52: Hoare triple {12251#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {12251#false} is VALID [2020-07-28 19:02:17,163 INFO L280 TraceCheckUtils]: 53: Hoare triple {12251#false} assume !false; {12251#false} is VALID [2020-07-28 19:02:17,165 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 19:02:17,165 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [906100487] [2020-07-28 19:02:17,166 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:17,166 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:17,166 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1884466308] [2020-07-28 19:02:17,166 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 54 [2020-07-28 19:02:17,167 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:17,167 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:17,230 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 47 edges. 47 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:17,231 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:17,231 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:17,231 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:17,231 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:17,232 INFO L87 Difference]: Start difference. First operand 244 states and 310 transitions. Second operand 5 states. [2020-07-28 19:02:18,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:18,791 INFO L93 Difference]: Finished difference Result 516 states and 670 transitions. [2020-07-28 19:02:18,791 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:02:18,791 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 54 [2020-07-28 19:02:18,792 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:18,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:18,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 177 transitions. [2020-07-28 19:02:18,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:18,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 177 transitions. [2020-07-28 19:02:18,794 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 177 transitions. [2020-07-28 19:02:19,018 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 177 edges. 177 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:19,025 INFO L225 Difference]: With dead ends: 516 [2020-07-28 19:02:19,026 INFO L226 Difference]: Without dead ends: 330 [2020-07-28 19:02:19,026 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:19,027 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 330 states. [2020-07-28 19:02:19,650 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 330 to 250. [2020-07-28 19:02:19,651 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:19,651 INFO L82 GeneralOperation]: Start isEquivalent. First operand 330 states. Second operand 250 states. [2020-07-28 19:02:19,651 INFO L74 IsIncluded]: Start isIncluded. First operand 330 states. Second operand 250 states. [2020-07-28 19:02:19,651 INFO L87 Difference]: Start difference. First operand 330 states. Second operand 250 states. [2020-07-28 19:02:19,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:19,658 INFO L93 Difference]: Finished difference Result 330 states and 426 transitions. [2020-07-28 19:02:19,658 INFO L276 IsEmpty]: Start isEmpty. Operand 330 states and 426 transitions. [2020-07-28 19:02:19,658 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:19,658 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:19,659 INFO L74 IsIncluded]: Start isIncluded. First operand 250 states. Second operand 330 states. [2020-07-28 19:02:19,659 INFO L87 Difference]: Start difference. First operand 250 states. Second operand 330 states. [2020-07-28 19:02:19,665 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:19,665 INFO L93 Difference]: Finished difference Result 330 states and 426 transitions. [2020-07-28 19:02:19,665 INFO L276 IsEmpty]: Start isEmpty. Operand 330 states and 426 transitions. [2020-07-28 19:02:19,666 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:19,666 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:19,666 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:19,666 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:19,666 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 250 states. [2020-07-28 19:02:19,672 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 250 states to 250 states and 316 transitions. [2020-07-28 19:02:19,672 INFO L78 Accepts]: Start accepts. Automaton has 250 states and 316 transitions. Word has length 54 [2020-07-28 19:02:19,672 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:19,672 INFO L479 AbstractCegarLoop]: Abstraction has 250 states and 316 transitions. [2020-07-28 19:02:19,673 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:19,673 INFO L276 IsEmpty]: Start isEmpty. Operand 250 states and 316 transitions. [2020-07-28 19:02:19,674 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2020-07-28 19:02:19,674 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:19,674 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:19,674 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2020-07-28 19:02:19,675 INFO L427 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:19,675 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:19,675 INFO L82 PathProgramCache]: Analyzing trace with hash -196051463, now seen corresponding path program 1 times [2020-07-28 19:02:19,676 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:19,676 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1013442808] [2020-07-28 19:02:19,676 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:19,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:19,780 INFO L280 TraceCheckUtils]: 0: Hoare triple {13953#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {13953#true} is VALID [2020-07-28 19:02:19,780 INFO L280 TraceCheckUtils]: 1: Hoare triple {13953#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {13953#true} is VALID [2020-07-28 19:02:19,781 INFO L280 TraceCheckUtils]: 2: Hoare triple {13953#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {13955#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:02:19,782 INFO L280 TraceCheckUtils]: 3: Hoare triple {13955#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {13956#(= 1 ULTIMATE.start_main_~tmp~9)} is VALID [2020-07-28 19:02:19,782 INFO L280 TraceCheckUtils]: 4: Hoare triple {13956#(= 1 ULTIMATE.start_main_~tmp~9)} assume 0 != main_~tmp~9; {13953#true} is VALID [2020-07-28 19:02:19,782 INFO L280 TraceCheckUtils]: 5: Hoare triple {13953#true} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {13953#true} is VALID [2020-07-28 19:02:19,782 INFO L280 TraceCheckUtils]: 6: Hoare triple {13953#true} assume !false; {13953#true} is VALID [2020-07-28 19:02:19,782 INFO L280 TraceCheckUtils]: 7: Hoare triple {13953#true} assume test_~splverifierCounter~0 < 4; {13953#true} is VALID [2020-07-28 19:02:19,782 INFO L280 TraceCheckUtils]: 8: Hoare triple {13953#true} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {13953#true} is VALID [2020-07-28 19:02:19,783 INFO L280 TraceCheckUtils]: 9: Hoare triple {13953#true} assume 0 != test_~tmp~4; {13953#true} is VALID [2020-07-28 19:02:19,783 INFO L280 TraceCheckUtils]: 10: Hoare triple {13953#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13953#true} is VALID [2020-07-28 19:02:19,783 INFO L280 TraceCheckUtils]: 11: Hoare triple {13953#true} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {13953#true} is VALID [2020-07-28 19:02:19,783 INFO L280 TraceCheckUtils]: 12: Hoare triple {13953#true} assume 0 != test_~tmp___0~2; {13953#true} is VALID [2020-07-28 19:02:19,788 INFO L280 TraceCheckUtils]: 13: Hoare triple {13953#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,790 INFO L280 TraceCheckUtils]: 14: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,792 INFO L280 TraceCheckUtils]: 15: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume 0 != test_~tmp___2~0; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,798 INFO L280 TraceCheckUtils]: 16: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0); {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,799 INFO L280 TraceCheckUtils]: 17: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,800 INFO L280 TraceCheckUtils]: 18: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret0, processEnvironment__wrappee__highWaterSensor_~tmp~0;havoc processEnvironment__wrappee__highWaterSensor_~tmp~0; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,801 INFO L280 TraceCheckUtils]: 19: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret19, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,801 INFO L280 TraceCheckUtils]: 20: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,802 INFO L280 TraceCheckUtils]: 21: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_#t~ret19 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret19 && isHighWaterLevel_#t~ret19 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret19;havoc isHighWaterLevel_#t~ret19; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,803 INFO L280 TraceCheckUtils]: 22: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != isHighWaterLevel_~tmp~2);isHighWaterLevel_~tmp___0~0 := 1; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,803 INFO L280 TraceCheckUtils]: 23: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,804 INFO L280 TraceCheckUtils]: 24: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} processEnvironment__wrappee__highWaterSensor_#t~ret0 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret0 && processEnvironment__wrappee__highWaterSensor_#t~ret0 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~0 := processEnvironment__wrappee__highWaterSensor_#t~ret0;havoc processEnvironment__wrappee__highWaterSensor_#t~ret0; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,804 INFO L280 TraceCheckUtils]: 25: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~0;~pumpRunning~0 := 1; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,805 INFO L280 TraceCheckUtils]: 26: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,806 INFO L280 TraceCheckUtils]: 27: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,806 INFO L280 TraceCheckUtils]: 28: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume 0 != __utac_acc__Specification3_spec__1_~tmp~5; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,807 INFO L280 TraceCheckUtils]: 29: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume !false; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,807 INFO L280 TraceCheckUtils]: 30: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume test_~splverifierCounter~0 < 4; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,808 INFO L280 TraceCheckUtils]: 31: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,809 INFO L280 TraceCheckUtils]: 32: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != test_~tmp~4); {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,809 INFO L280 TraceCheckUtils]: 33: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,810 INFO L280 TraceCheckUtils]: 34: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != test_~tmp___0~2); {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,810 INFO L280 TraceCheckUtils]: 35: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,811 INFO L280 TraceCheckUtils]: 36: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume 0 != test_~tmp___2~0; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,811 INFO L280 TraceCheckUtils]: 37: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume 0 != ~pumpRunning~0; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,812 INFO L280 TraceCheckUtils]: 38: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,813 INFO L280 TraceCheckUtils]: 39: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,815 INFO L280 TraceCheckUtils]: 40: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret20, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~3, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~3;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~7;havoc isLowWaterSensorDry_~retValue_acc~7;isLowWaterSensorDry_~retValue_acc~7 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~7; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,816 INFO L280 TraceCheckUtils]: 41: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} isLowWaterLevel_#t~ret20 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret20 && isLowWaterLevel_#t~ret20 <= 2147483647;isLowWaterLevel_~tmp~3 := isLowWaterLevel_#t~ret20;havoc isLowWaterLevel_#t~ret20; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,817 INFO L280 TraceCheckUtils]: 42: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != isLowWaterLevel_~tmp~3);isLowWaterLevel_~tmp___0~1 := 1; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,817 INFO L280 TraceCheckUtils]: 43: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,818 INFO L280 TraceCheckUtils]: 44: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} processEnvironment_#t~ret1 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret1 && processEnvironment_#t~ret1 <= 2147483647;processEnvironment_~tmp~1 := processEnvironment_#t~ret1;havoc processEnvironment_#t~ret1; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,818 INFO L280 TraceCheckUtils]: 45: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} assume 0 != processEnvironment_~tmp~1;~pumpRunning~0 := 0; {13957#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:19,819 INFO L280 TraceCheckUtils]: 46: Hoare triple {13957#(not (= 0 ~methaneLevelCritical~0))} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {13958#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} is VALID [2020-07-28 19:02:19,820 INFO L280 TraceCheckUtils]: 47: Hoare triple {13958#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {13959#(not (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5))} is VALID [2020-07-28 19:02:19,821 INFO L280 TraceCheckUtils]: 48: Hoare triple {13959#(not (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5))} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {13954#false} is VALID [2020-07-28 19:02:19,821 INFO L280 TraceCheckUtils]: 49: Hoare triple {13954#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {13954#false} is VALID [2020-07-28 19:02:19,821 INFO L280 TraceCheckUtils]: 50: Hoare triple {13954#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {13954#false} is VALID [2020-07-28 19:02:19,821 INFO L280 TraceCheckUtils]: 51: Hoare triple {13954#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {13954#false} is VALID [2020-07-28 19:02:19,821 INFO L280 TraceCheckUtils]: 52: Hoare triple {13954#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {13954#false} is VALID [2020-07-28 19:02:19,822 INFO L280 TraceCheckUtils]: 53: Hoare triple {13954#false} assume !false; {13954#false} is VALID [2020-07-28 19:02:19,826 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 19:02:19,827 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1013442808] [2020-07-28 19:02:19,827 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [656144195] [2020-07-28 19:02:19,827 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:02:19,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:19,953 INFO L263 TraceCheckSpWp]: Trace formula consists of 414 conjuncts, 5 conjunts are in the unsatisfiable core [2020-07-28 19:02:19,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:19,984 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:02:20,203 INFO L280 TraceCheckUtils]: 0: Hoare triple {13953#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {13953#true} is VALID [2020-07-28 19:02:20,204 INFO L280 TraceCheckUtils]: 1: Hoare triple {13953#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {13953#true} is VALID [2020-07-28 19:02:20,204 INFO L280 TraceCheckUtils]: 2: Hoare triple {13953#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {13953#true} is VALID [2020-07-28 19:02:20,204 INFO L280 TraceCheckUtils]: 3: Hoare triple {13953#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {13953#true} is VALID [2020-07-28 19:02:20,205 INFO L280 TraceCheckUtils]: 4: Hoare triple {13953#true} assume 0 != main_~tmp~9; {13953#true} is VALID [2020-07-28 19:02:20,205 INFO L280 TraceCheckUtils]: 5: Hoare triple {13953#true} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {13953#true} is VALID [2020-07-28 19:02:20,205 INFO L280 TraceCheckUtils]: 6: Hoare triple {13953#true} assume !false; {13953#true} is VALID [2020-07-28 19:02:20,205 INFO L280 TraceCheckUtils]: 7: Hoare triple {13953#true} assume test_~splverifierCounter~0 < 4; {13953#true} is VALID [2020-07-28 19:02:20,205 INFO L280 TraceCheckUtils]: 8: Hoare triple {13953#true} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {13953#true} is VALID [2020-07-28 19:02:20,205 INFO L280 TraceCheckUtils]: 9: Hoare triple {13953#true} assume 0 != test_~tmp~4; {13953#true} is VALID [2020-07-28 19:02:20,206 INFO L280 TraceCheckUtils]: 10: Hoare triple {13953#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13953#true} is VALID [2020-07-28 19:02:20,206 INFO L280 TraceCheckUtils]: 11: Hoare triple {13953#true} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {13953#true} is VALID [2020-07-28 19:02:20,206 INFO L280 TraceCheckUtils]: 12: Hoare triple {13953#true} assume 0 != test_~tmp___0~2; {13953#true} is VALID [2020-07-28 19:02:20,207 INFO L280 TraceCheckUtils]: 13: Hoare triple {13953#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,208 INFO L280 TraceCheckUtils]: 14: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,209 INFO L280 TraceCheckUtils]: 15: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,209 INFO L280 TraceCheckUtils]: 16: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,210 INFO L280 TraceCheckUtils]: 17: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,211 INFO L280 TraceCheckUtils]: 18: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret0, processEnvironment__wrappee__highWaterSensor_~tmp~0;havoc processEnvironment__wrappee__highWaterSensor_~tmp~0; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,211 INFO L280 TraceCheckUtils]: 19: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret19, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,212 INFO L280 TraceCheckUtils]: 20: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,213 INFO L280 TraceCheckUtils]: 21: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret19 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret19 && isHighWaterLevel_#t~ret19 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret19;havoc isHighWaterLevel_#t~ret19; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,213 INFO L280 TraceCheckUtils]: 22: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~2);isHighWaterLevel_~tmp___0~0 := 1; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,214 INFO L280 TraceCheckUtils]: 23: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,215 INFO L280 TraceCheckUtils]: 24: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} processEnvironment__wrappee__highWaterSensor_#t~ret0 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret0 && processEnvironment__wrappee__highWaterSensor_#t~ret0 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~0 := processEnvironment__wrappee__highWaterSensor_#t~ret0;havoc processEnvironment__wrappee__highWaterSensor_#t~ret0; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,215 INFO L280 TraceCheckUtils]: 25: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~0;~pumpRunning~0 := 1; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,216 INFO L280 TraceCheckUtils]: 26: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,217 INFO L280 TraceCheckUtils]: 27: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,217 INFO L280 TraceCheckUtils]: 28: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~5; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,218 INFO L280 TraceCheckUtils]: 29: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume !false; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,219 INFO L280 TraceCheckUtils]: 30: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,219 INFO L280 TraceCheckUtils]: 31: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,220 INFO L280 TraceCheckUtils]: 32: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp~4); {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,221 INFO L280 TraceCheckUtils]: 33: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,222 INFO L280 TraceCheckUtils]: 34: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~2); {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,222 INFO L280 TraceCheckUtils]: 35: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,223 INFO L280 TraceCheckUtils]: 36: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,224 INFO L280 TraceCheckUtils]: 37: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,225 INFO L280 TraceCheckUtils]: 38: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,225 INFO L280 TraceCheckUtils]: 39: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,226 INFO L280 TraceCheckUtils]: 40: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret20, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~3, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~3;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~7;havoc isLowWaterSensorDry_~retValue_acc~7;isLowWaterSensorDry_~retValue_acc~7 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~7; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,227 INFO L280 TraceCheckUtils]: 41: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} isLowWaterLevel_#t~ret20 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret20 && isLowWaterLevel_#t~ret20 <= 2147483647;isLowWaterLevel_~tmp~3 := isLowWaterLevel_#t~ret20;havoc isLowWaterLevel_#t~ret20; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,228 INFO L280 TraceCheckUtils]: 42: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume !(0 != isLowWaterLevel_~tmp~3);isLowWaterLevel_~tmp___0~1 := 1; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,228 INFO L280 TraceCheckUtils]: 43: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,229 INFO L280 TraceCheckUtils]: 44: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} processEnvironment_#t~ret1 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret1 && processEnvironment_#t~ret1 <= 2147483647;processEnvironment_~tmp~1 := processEnvironment_#t~ret1;havoc processEnvironment_#t~ret1; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,230 INFO L280 TraceCheckUtils]: 45: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} assume 0 != processEnvironment_~tmp~1;~pumpRunning~0 := 0; {14002#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:20,231 INFO L280 TraceCheckUtils]: 46: Hoare triple {14002#(<= 1 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {14102#(<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:20,232 INFO L280 TraceCheckUtils]: 47: Hoare triple {14102#(<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {14106#(<= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5)} is VALID [2020-07-28 19:02:20,234 INFO L280 TraceCheckUtils]: 48: Hoare triple {14106#(<= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {13954#false} is VALID [2020-07-28 19:02:20,234 INFO L280 TraceCheckUtils]: 49: Hoare triple {13954#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {13954#false} is VALID [2020-07-28 19:02:20,234 INFO L280 TraceCheckUtils]: 50: Hoare triple {13954#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {13954#false} is VALID [2020-07-28 19:02:20,234 INFO L280 TraceCheckUtils]: 51: Hoare triple {13954#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {13954#false} is VALID [2020-07-28 19:02:20,234 INFO L280 TraceCheckUtils]: 52: Hoare triple {13954#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {13954#false} is VALID [2020-07-28 19:02:20,235 INFO L280 TraceCheckUtils]: 53: Hoare triple {13954#false} assume !false; {13954#false} is VALID [2020-07-28 19:02:20,239 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 19:02:20,240 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:02:20,240 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 5] total 10 [2020-07-28 19:02:20,240 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [781680403] [2020-07-28 19:02:20,241 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 54 [2020-07-28 19:02:20,241 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:20,241 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states. [2020-07-28 19:02:20,345 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 87 edges. 87 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:20,346 INFO L459 AbstractCegarLoop]: Interpolant automaton has 10 states [2020-07-28 19:02:20,346 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:20,346 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2020-07-28 19:02:20,346 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=20, Invalid=70, Unknown=0, NotChecked=0, Total=90 [2020-07-28 19:02:20,347 INFO L87 Difference]: Start difference. First operand 250 states and 316 transitions. Second operand 10 states. [2020-07-28 19:02:22,635 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:22,636 INFO L93 Difference]: Finished difference Result 608 states and 764 transitions. [2020-07-28 19:02:22,636 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 19:02:22,636 INFO L78 Accepts]: Start accepts. Automaton has 10 states. Word has length 54 [2020-07-28 19:02:22,636 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:22,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2020-07-28 19:02:22,639 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 218 transitions. [2020-07-28 19:02:22,640 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10 states. [2020-07-28 19:02:22,642 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 218 transitions. [2020-07-28 19:02:22,643 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 218 transitions. [2020-07-28 19:02:22,912 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 218 edges. 218 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:22,925 INFO L225 Difference]: With dead ends: 608 [2020-07-28 19:02:22,926 INFO L226 Difference]: Without dead ends: 364 [2020-07-28 19:02:22,927 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 55 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 13 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=64, Invalid=146, Unknown=0, NotChecked=0, Total=210 [2020-07-28 19:02:22,929 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 364 states. [2020-07-28 19:02:23,595 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 364 to 236. [2020-07-28 19:02:23,596 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:23,596 INFO L82 GeneralOperation]: Start isEquivalent. First operand 364 states. Second operand 236 states. [2020-07-28 19:02:23,596 INFO L74 IsIncluded]: Start isIncluded. First operand 364 states. Second operand 236 states. [2020-07-28 19:02:23,596 INFO L87 Difference]: Start difference. First operand 364 states. Second operand 236 states. [2020-07-28 19:02:23,608 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:23,609 INFO L93 Difference]: Finished difference Result 364 states and 445 transitions. [2020-07-28 19:02:23,609 INFO L276 IsEmpty]: Start isEmpty. Operand 364 states and 445 transitions. [2020-07-28 19:02:23,610 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:23,611 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:23,611 INFO L74 IsIncluded]: Start isIncluded. First operand 236 states. Second operand 364 states. [2020-07-28 19:02:23,611 INFO L87 Difference]: Start difference. First operand 236 states. Second operand 364 states. [2020-07-28 19:02:23,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:23,624 INFO L93 Difference]: Finished difference Result 364 states and 445 transitions. [2020-07-28 19:02:23,624 INFO L276 IsEmpty]: Start isEmpty. Operand 364 states and 445 transitions. [2020-07-28 19:02:23,626 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:23,626 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:23,626 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:23,626 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:23,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 236 states. [2020-07-28 19:02:23,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 236 states to 236 states and 289 transitions. [2020-07-28 19:02:23,634 INFO L78 Accepts]: Start accepts. Automaton has 236 states and 289 transitions. Word has length 54 [2020-07-28 19:02:23,634 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:23,635 INFO L479 AbstractCegarLoop]: Abstraction has 236 states and 289 transitions. [2020-07-28 19:02:23,635 INFO L480 AbstractCegarLoop]: Interpolant automaton has 10 states. [2020-07-28 19:02:23,635 INFO L276 IsEmpty]: Start isEmpty. Operand 236 states and 289 transitions. [2020-07-28 19:02:23,636 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2020-07-28 19:02:23,636 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:23,636 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:23,850 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2020-07-28 19:02:23,851 INFO L427 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:23,851 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:23,851 INFO L82 PathProgramCache]: Analyzing trace with hash 1751298828, now seen corresponding path program 1 times [2020-07-28 19:02:23,851 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:23,852 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2022047297] [2020-07-28 19:02:23,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:23,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:24,056 INFO L280 TraceCheckUtils]: 0: Hoare triple {15996#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {15998#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:24,059 INFO L280 TraceCheckUtils]: 1: Hoare triple {15998#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {15998#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:24,059 INFO L280 TraceCheckUtils]: 2: Hoare triple {15998#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {15998#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:24,060 INFO L280 TraceCheckUtils]: 3: Hoare triple {15998#(= 1 ~waterLevel~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {15998#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:24,061 INFO L280 TraceCheckUtils]: 4: Hoare triple {15998#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~9; {15998#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:24,061 INFO L280 TraceCheckUtils]: 5: Hoare triple {15998#(= 1 ~waterLevel~0)} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {15998#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:24,062 INFO L280 TraceCheckUtils]: 6: Hoare triple {15998#(= 1 ~waterLevel~0)} assume !false; {15998#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:24,063 INFO L280 TraceCheckUtils]: 7: Hoare triple {15998#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {15998#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:24,063 INFO L280 TraceCheckUtils]: 8: Hoare triple {15998#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {15998#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:24,064 INFO L280 TraceCheckUtils]: 9: Hoare triple {15998#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~4; {15998#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:24,065 INFO L280 TraceCheckUtils]: 10: Hoare triple {15998#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,067 INFO L280 TraceCheckUtils]: 11: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,068 INFO L280 TraceCheckUtils]: 12: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___0~2); {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,069 INFO L280 TraceCheckUtils]: 13: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,070 INFO L280 TraceCheckUtils]: 14: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != test_~tmp___2~0; {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,071 INFO L280 TraceCheckUtils]: 15: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,071 INFO L280 TraceCheckUtils]: 16: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,072 INFO L280 TraceCheckUtils]: 17: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret0, processEnvironment__wrappee__highWaterSensor_~tmp~0;havoc processEnvironment__wrappee__highWaterSensor_~tmp~0; {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,073 INFO L280 TraceCheckUtils]: 18: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret19, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,074 INFO L280 TraceCheckUtils]: 19: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,074 INFO L280 TraceCheckUtils]: 20: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_#t~ret19 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret19 && isHighWaterLevel_#t~ret19 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret19;havoc isHighWaterLevel_#t~ret19; {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,075 INFO L280 TraceCheckUtils]: 21: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != isHighWaterLevel_~tmp~2);isHighWaterLevel_~tmp___0~0 := 1; {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,076 INFO L280 TraceCheckUtils]: 22: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,077 INFO L280 TraceCheckUtils]: 23: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} processEnvironment__wrappee__highWaterSensor_#t~ret0 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret0 && processEnvironment__wrappee__highWaterSensor_#t~ret0 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~0 := processEnvironment__wrappee__highWaterSensor_#t~ret0;havoc processEnvironment__wrappee__highWaterSensor_#t~ret0; {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,078 INFO L280 TraceCheckUtils]: 24: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~0;~pumpRunning~0 := 1; {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,078 INFO L280 TraceCheckUtils]: 25: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,079 INFO L280 TraceCheckUtils]: 26: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:24,083 INFO L280 TraceCheckUtils]: 27: Hoare triple {15999#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {16000#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:02:24,084 INFO L280 TraceCheckUtils]: 28: Hoare triple {16000#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {16001#(and (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 2) (< 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3))} is VALID [2020-07-28 19:02:24,086 INFO L280 TraceCheckUtils]: 29: Hoare triple {16001#(and (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 2) (< 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3))} assume !(2 == __utac_acc__Specification3_spec__1_~tmp___0~3); {15997#false} is VALID [2020-07-28 19:02:24,086 INFO L280 TraceCheckUtils]: 30: Hoare triple {15997#false} assume !false; {15997#false} is VALID [2020-07-28 19:02:24,086 INFO L280 TraceCheckUtils]: 31: Hoare triple {15997#false} assume test_~splverifierCounter~0 < 4; {15997#false} is VALID [2020-07-28 19:02:24,086 INFO L280 TraceCheckUtils]: 32: Hoare triple {15997#false} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {15997#false} is VALID [2020-07-28 19:02:24,086 INFO L280 TraceCheckUtils]: 33: Hoare triple {15997#false} assume !(0 != test_~tmp~4); {15997#false} is VALID [2020-07-28 19:02:24,086 INFO L280 TraceCheckUtils]: 34: Hoare triple {15997#false} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {15997#false} is VALID [2020-07-28 19:02:24,087 INFO L280 TraceCheckUtils]: 35: Hoare triple {15997#false} assume !(0 != test_~tmp___0~2); {15997#false} is VALID [2020-07-28 19:02:24,087 INFO L280 TraceCheckUtils]: 36: Hoare triple {15997#false} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {15997#false} is VALID [2020-07-28 19:02:24,087 INFO L280 TraceCheckUtils]: 37: Hoare triple {15997#false} assume 0 != test_~tmp___2~0; {15997#false} is VALID [2020-07-28 19:02:24,087 INFO L280 TraceCheckUtils]: 38: Hoare triple {15997#false} assume 0 != ~pumpRunning~0; {15997#false} is VALID [2020-07-28 19:02:24,087 INFO L280 TraceCheckUtils]: 39: Hoare triple {15997#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15997#false} is VALID [2020-07-28 19:02:24,087 INFO L280 TraceCheckUtils]: 40: Hoare triple {15997#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {15997#false} is VALID [2020-07-28 19:02:24,087 INFO L280 TraceCheckUtils]: 41: Hoare triple {15997#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret20, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~3, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~3;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~7;havoc isLowWaterSensorDry_~retValue_acc~7;isLowWaterSensorDry_~retValue_acc~7 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~7; {15997#false} is VALID [2020-07-28 19:02:24,088 INFO L280 TraceCheckUtils]: 42: Hoare triple {15997#false} isLowWaterLevel_#t~ret20 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret20 && isLowWaterLevel_#t~ret20 <= 2147483647;isLowWaterLevel_~tmp~3 := isLowWaterLevel_#t~ret20;havoc isLowWaterLevel_#t~ret20; {15997#false} is VALID [2020-07-28 19:02:24,088 INFO L280 TraceCheckUtils]: 43: Hoare triple {15997#false} assume !(0 != isLowWaterLevel_~tmp~3);isLowWaterLevel_~tmp___0~1 := 1; {15997#false} is VALID [2020-07-28 19:02:24,088 INFO L280 TraceCheckUtils]: 44: Hoare triple {15997#false} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {15997#false} is VALID [2020-07-28 19:02:24,089 INFO L280 TraceCheckUtils]: 45: Hoare triple {15997#false} processEnvironment_#t~ret1 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret1 && processEnvironment_#t~ret1 <= 2147483647;processEnvironment_~tmp~1 := processEnvironment_#t~ret1;havoc processEnvironment_#t~ret1; {15997#false} is VALID [2020-07-28 19:02:24,089 INFO L280 TraceCheckUtils]: 46: Hoare triple {15997#false} assume 0 != processEnvironment_~tmp~1;~pumpRunning~0 := 0; {15997#false} is VALID [2020-07-28 19:02:24,089 INFO L280 TraceCheckUtils]: 47: Hoare triple {15997#false} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {15997#false} is VALID [2020-07-28 19:02:24,089 INFO L280 TraceCheckUtils]: 48: Hoare triple {15997#false} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {15997#false} is VALID [2020-07-28 19:02:24,090 INFO L280 TraceCheckUtils]: 49: Hoare triple {15997#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {15997#false} is VALID [2020-07-28 19:02:24,090 INFO L280 TraceCheckUtils]: 50: Hoare triple {15997#false} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {15997#false} is VALID [2020-07-28 19:02:24,090 INFO L280 TraceCheckUtils]: 51: Hoare triple {15997#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {15997#false} is VALID [2020-07-28 19:02:24,090 INFO L280 TraceCheckUtils]: 52: Hoare triple {15997#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {15997#false} is VALID [2020-07-28 19:02:24,090 INFO L280 TraceCheckUtils]: 53: Hoare triple {15997#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {15997#false} is VALID [2020-07-28 19:02:24,090 INFO L280 TraceCheckUtils]: 54: Hoare triple {15997#false} assume !false; {15997#false} is VALID [2020-07-28 19:02:24,095 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:24,095 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2022047297] [2020-07-28 19:02:24,096 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:24,096 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:24,098 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1356519501] [2020-07-28 19:02:24,099 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 55 [2020-07-28 19:02:24,099 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:24,099 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:02:24,165 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 55 edges. 55 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:24,165 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:02:24,166 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:24,166 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:02:24,166 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:02:24,166 INFO L87 Difference]: Start difference. First operand 236 states and 289 transitions. Second operand 6 states. [2020-07-28 19:02:28,954 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:28,954 INFO L93 Difference]: Finished difference Result 1210 states and 1521 transitions. [2020-07-28 19:02:28,954 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2020-07-28 19:02:28,955 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 55 [2020-07-28 19:02:28,955 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:28,955 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:28,960 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 457 transitions. [2020-07-28 19:02:28,960 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:28,966 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 457 transitions. [2020-07-28 19:02:28,967 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states and 457 transitions. [2020-07-28 19:02:29,598 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 457 edges. 457 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:29,647 INFO L225 Difference]: With dead ends: 1210 [2020-07-28 19:02:29,647 INFO L226 Difference]: Without dead ends: 1030 [2020-07-28 19:02:29,648 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=93, Unknown=0, NotChecked=0, Total=132 [2020-07-28 19:02:29,650 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1030 states. [2020-07-28 19:02:30,855 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1030 to 396. [2020-07-28 19:02:30,856 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:30,856 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1030 states. Second operand 396 states. [2020-07-28 19:02:30,856 INFO L74 IsIncluded]: Start isIncluded. First operand 1030 states. Second operand 396 states. [2020-07-28 19:02:30,856 INFO L87 Difference]: Start difference. First operand 1030 states. Second operand 396 states. [2020-07-28 19:02:30,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:30,915 INFO L93 Difference]: Finished difference Result 1030 states and 1263 transitions. [2020-07-28 19:02:30,915 INFO L276 IsEmpty]: Start isEmpty. Operand 1030 states and 1263 transitions. [2020-07-28 19:02:30,918 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:30,918 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:30,918 INFO L74 IsIncluded]: Start isIncluded. First operand 396 states. Second operand 1030 states. [2020-07-28 19:02:30,918 INFO L87 Difference]: Start difference. First operand 396 states. Second operand 1030 states. [2020-07-28 19:02:30,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:30,987 INFO L93 Difference]: Finished difference Result 1030 states and 1263 transitions. [2020-07-28 19:02:30,987 INFO L276 IsEmpty]: Start isEmpty. Operand 1030 states and 1263 transitions. [2020-07-28 19:02:30,990 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:30,990 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:30,990 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:30,991 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:30,991 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 396 states. [2020-07-28 19:02:31,009 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 396 states to 396 states and 480 transitions. [2020-07-28 19:02:31,010 INFO L78 Accepts]: Start accepts. Automaton has 396 states and 480 transitions. Word has length 55 [2020-07-28 19:02:31,010 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:31,010 INFO L479 AbstractCegarLoop]: Abstraction has 396 states and 480 transitions. [2020-07-28 19:02:31,010 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:31,011 INFO L276 IsEmpty]: Start isEmpty. Operand 396 states and 480 transitions. [2020-07-28 19:02:31,012 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2020-07-28 19:02:31,013 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:31,013 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:31,014 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2020-07-28 19:02:31,014 INFO L427 AbstractCegarLoop]: === Iteration 16 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:31,015 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:31,015 INFO L82 PathProgramCache]: Analyzing trace with hash -632394713, now seen corresponding path program 1 times [2020-07-28 19:02:31,016 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:31,016 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2080188097] [2020-07-28 19:02:31,016 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:31,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:31,136 INFO L280 TraceCheckUtils]: 0: Hoare triple {20220#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {20222#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:31,136 INFO L280 TraceCheckUtils]: 1: Hoare triple {20222#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {20222#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:31,137 INFO L280 TraceCheckUtils]: 2: Hoare triple {20222#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {20222#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:31,138 INFO L280 TraceCheckUtils]: 3: Hoare triple {20222#(= 1 ~waterLevel~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {20222#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:31,138 INFO L280 TraceCheckUtils]: 4: Hoare triple {20222#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~9; {20222#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:31,139 INFO L280 TraceCheckUtils]: 5: Hoare triple {20222#(= 1 ~waterLevel~0)} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {20222#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:31,139 INFO L280 TraceCheckUtils]: 6: Hoare triple {20222#(= 1 ~waterLevel~0)} assume !false; {20222#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:31,140 INFO L280 TraceCheckUtils]: 7: Hoare triple {20222#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {20222#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:31,140 INFO L280 TraceCheckUtils]: 8: Hoare triple {20222#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {20222#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:31,141 INFO L280 TraceCheckUtils]: 9: Hoare triple {20222#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~4; {20222#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:31,141 INFO L280 TraceCheckUtils]: 10: Hoare triple {20222#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,142 INFO L280 TraceCheckUtils]: 11: Hoare triple {20223#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,143 INFO L280 TraceCheckUtils]: 12: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___0~2; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,143 INFO L280 TraceCheckUtils]: 13: Hoare triple {20223#(<= ~waterLevel~0 2)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,144 INFO L280 TraceCheckUtils]: 14: Hoare triple {20223#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,144 INFO L280 TraceCheckUtils]: 15: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,145 INFO L280 TraceCheckUtils]: 16: Hoare triple {20223#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,145 INFO L280 TraceCheckUtils]: 17: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,146 INFO L280 TraceCheckUtils]: 18: Hoare triple {20223#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret0, processEnvironment__wrappee__highWaterSensor_~tmp~0;havoc processEnvironment__wrappee__highWaterSensor_~tmp~0; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,146 INFO L280 TraceCheckUtils]: 19: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret19, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,147 INFO L280 TraceCheckUtils]: 20: Hoare triple {20223#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,148 INFO L280 TraceCheckUtils]: 21: Hoare triple {20223#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret19 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret19 && isHighWaterLevel_#t~ret19 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret19;havoc isHighWaterLevel_#t~ret19; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,148 INFO L280 TraceCheckUtils]: 22: Hoare triple {20223#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~2);isHighWaterLevel_~tmp___0~0 := 1; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,149 INFO L280 TraceCheckUtils]: 23: Hoare triple {20223#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,149 INFO L280 TraceCheckUtils]: 24: Hoare triple {20223#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret0 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret0 && processEnvironment__wrappee__highWaterSensor_#t~ret0 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~0 := processEnvironment__wrappee__highWaterSensor_#t~ret0;havoc processEnvironment__wrappee__highWaterSensor_#t~ret0; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,150 INFO L280 TraceCheckUtils]: 25: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~0;~pumpRunning~0 := 1; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,151 INFO L280 TraceCheckUtils]: 26: Hoare triple {20223#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,151 INFO L280 TraceCheckUtils]: 27: Hoare triple {20223#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,152 INFO L280 TraceCheckUtils]: 28: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~5; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,152 INFO L280 TraceCheckUtils]: 29: Hoare triple {20223#(<= ~waterLevel~0 2)} assume !false; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,153 INFO L280 TraceCheckUtils]: 30: Hoare triple {20223#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,154 INFO L280 TraceCheckUtils]: 31: Hoare triple {20223#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,154 INFO L280 TraceCheckUtils]: 32: Hoare triple {20223#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~4); {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,155 INFO L280 TraceCheckUtils]: 33: Hoare triple {20223#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,155 INFO L280 TraceCheckUtils]: 34: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___0~2; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,156 INFO L280 TraceCheckUtils]: 35: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != ~methaneLevelCritical~0;~methaneLevelCritical~0 := 0; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,157 INFO L280 TraceCheckUtils]: 36: Hoare triple {20223#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,157 INFO L280 TraceCheckUtils]: 37: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,158 INFO L280 TraceCheckUtils]: 38: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,159 INFO L280 TraceCheckUtils]: 39: Hoare triple {20223#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,160 INFO L280 TraceCheckUtils]: 40: Hoare triple {20224#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,160 INFO L280 TraceCheckUtils]: 41: Hoare triple {20224#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret20, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~3, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~3;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~7;havoc isLowWaterSensorDry_~retValue_acc~7;isLowWaterSensorDry_~retValue_acc~7 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~7; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,161 INFO L280 TraceCheckUtils]: 42: Hoare triple {20224#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret20 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret20 && isLowWaterLevel_#t~ret20 <= 2147483647;isLowWaterLevel_~tmp~3 := isLowWaterLevel_#t~ret20;havoc isLowWaterLevel_#t~ret20; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,161 INFO L280 TraceCheckUtils]: 43: Hoare triple {20224#(<= ~waterLevel~0 1)} assume !(0 != isLowWaterLevel_~tmp~3);isLowWaterLevel_~tmp___0~1 := 1; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,162 INFO L280 TraceCheckUtils]: 44: Hoare triple {20224#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,162 INFO L280 TraceCheckUtils]: 45: Hoare triple {20224#(<= ~waterLevel~0 1)} processEnvironment_#t~ret1 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret1 && processEnvironment_#t~ret1 <= 2147483647;processEnvironment_~tmp~1 := processEnvironment_#t~ret1;havoc processEnvironment_#t~ret1; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,163 INFO L280 TraceCheckUtils]: 46: Hoare triple {20224#(<= ~waterLevel~0 1)} assume 0 != processEnvironment_~tmp~1;~pumpRunning~0 := 0; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,164 INFO L280 TraceCheckUtils]: 47: Hoare triple {20224#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,180 INFO L280 TraceCheckUtils]: 48: Hoare triple {20224#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,181 INFO L280 TraceCheckUtils]: 49: Hoare triple {20224#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {20225#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:02:31,182 INFO L280 TraceCheckUtils]: 50: Hoare triple {20225#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {20226#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)} is VALID [2020-07-28 19:02:31,183 INFO L280 TraceCheckUtils]: 51: Hoare triple {20226#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {20221#false} is VALID [2020-07-28 19:02:31,183 INFO L280 TraceCheckUtils]: 52: Hoare triple {20221#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {20221#false} is VALID [2020-07-28 19:02:31,183 INFO L280 TraceCheckUtils]: 53: Hoare triple {20221#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {20221#false} is VALID [2020-07-28 19:02:31,183 INFO L280 TraceCheckUtils]: 54: Hoare triple {20221#false} assume !false; {20221#false} is VALID [2020-07-28 19:02:31,188 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 5 proven. 4 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 19:02:31,189 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2080188097] [2020-07-28 19:02:31,189 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [537821832] [2020-07-28 19:02:31,189 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:02:31,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:31,298 INFO L263 TraceCheckSpWp]: Trace formula consists of 416 conjuncts, 7 conjunts are in the unsatisfiable core [2020-07-28 19:02:31,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:31,328 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:02:31,526 INFO L280 TraceCheckUtils]: 0: Hoare triple {20220#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string4.base, #t~string4.offset := #Ultimate.allocOnStack(13);call #t~string6.base, #t~string6.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string6.base, #t~string6.offset, 1);call write~init~int(110, #t~string6.base, 1 + #t~string6.offset, 1);call write~init~int(0, #t~string6.base, 2 + #t~string6.offset, 1);call #t~string8.base, #t~string8.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string8.base, #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 1 + #t~string8.offset, 1);call write~init~int(102, #t~string8.base, 2 + #t~string8.offset, 1);call write~init~int(0, #t~string8.base, 3 + #t~string8.offset, 1);call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string10.base, #t~string10.offset, 1);call write~init~int(80, #t~string10.base, 1 + #t~string10.offset, 1);call write~init~int(117, #t~string10.base, 2 + #t~string10.offset, 1);call write~init~int(109, #t~string10.base, 3 + #t~string10.offset, 1);call write~init~int(112, #t~string10.base, 4 + #t~string10.offset, 1);call write~init~int(58, #t~string10.base, 5 + #t~string10.offset, 1);call write~init~int(0, #t~string10.base, 6 + #t~string10.offset, 1);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string16.base, #t~string16.offset, 1);call write~init~int(32, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 2 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string18.base, #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 1 + #t~string18.offset, 1);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(13);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string31.base, #t~string31.offset, 1);call write~init~int(77, #t~string31.base, 1 + #t~string31.offset, 1);call write~init~int(101, #t~string31.base, 2 + #t~string31.offset, 1);call write~init~int(116, #t~string31.base, 3 + #t~string31.offset, 1);call write~init~int(104, #t~string31.base, 4 + #t~string31.offset, 1);call write~init~int(58, #t~string31.base, 5 + #t~string31.offset, 1);call write~init~int(0, #t~string31.base, 6 + #t~string31.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string33.base, #t~string33.offset, 1);call write~init~int(82, #t~string33.base, 1 + #t~string33.offset, 1);call write~init~int(73, #t~string33.base, 2 + #t~string33.offset, 1);call write~init~int(84, #t~string33.base, 3 + #t~string33.offset, 1);call write~init~int(0, #t~string33.base, 4 + #t~string33.offset, 1);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string35.base, #t~string35.offset, 1);call write~init~int(75, #t~string35.base, 1 + #t~string35.offset, 1);call write~init~int(0, #t~string35.base, 2 + #t~string35.offset, 1);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string37.base, #t~string37.offset, 1);call write~init~int(0, #t~string37.base, 1 + #t~string37.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(30);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(9);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(21);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(30);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(9);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(21);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(30);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(9);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(25);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(30);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(9);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,527 INFO L280 TraceCheckUtils]: 1: Hoare triple {20224#(<= ~waterLevel~0 1)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~9;havoc main_~retValue_acc~13;havoc main_~tmp~9; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,528 INFO L280 TraceCheckUtils]: 2: Hoare triple {20224#(<= ~waterLevel~0 1)} havoc valid_product_#res;havoc valid_product_~retValue_acc~9;havoc valid_product_~retValue_acc~9;valid_product_~retValue_acc~9 := 1;valid_product_#res := valid_product_~retValue_acc~9; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,529 INFO L280 TraceCheckUtils]: 3: Hoare triple {20224#(<= ~waterLevel~0 1)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~9 := main_#t~ret74;havoc main_#t~ret74; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,529 INFO L280 TraceCheckUtils]: 4: Hoare triple {20224#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~9; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,529 INFO L280 TraceCheckUtils]: 5: Hoare triple {20224#(<= ~waterLevel~0 1)} havoc test_#t~nondet21, test_#t~nondet22, test_#t~nondet23, test_#t~nondet24, test_~splverifierCounter~0, test_~tmp~4, test_~tmp___0~2, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~4;havoc test_~tmp___0~2;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,530 INFO L280 TraceCheckUtils]: 6: Hoare triple {20224#(<= ~waterLevel~0 1)} assume !false; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,534 INFO L280 TraceCheckUtils]: 7: Hoare triple {20224#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,535 INFO L280 TraceCheckUtils]: 8: Hoare triple {20224#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,536 INFO L280 TraceCheckUtils]: 9: Hoare triple {20224#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~4; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,537 INFO L280 TraceCheckUtils]: 10: Hoare triple {20224#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,538 INFO L280 TraceCheckUtils]: 11: Hoare triple {20223#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,538 INFO L280 TraceCheckUtils]: 12: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___0~2; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,539 INFO L280 TraceCheckUtils]: 13: Hoare triple {20223#(<= ~waterLevel~0 2)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,540 INFO L280 TraceCheckUtils]: 14: Hoare triple {20223#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,540 INFO L280 TraceCheckUtils]: 15: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,541 INFO L280 TraceCheckUtils]: 16: Hoare triple {20223#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,542 INFO L280 TraceCheckUtils]: 17: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,542 INFO L280 TraceCheckUtils]: 18: Hoare triple {20223#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret0, processEnvironment__wrappee__highWaterSensor_~tmp~0;havoc processEnvironment__wrappee__highWaterSensor_~tmp~0; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,543 INFO L280 TraceCheckUtils]: 19: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret19, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~2, isHighWaterLevel_~tmp___0~0;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~2;havoc isHighWaterLevel_~tmp___0~0;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~6;havoc isHighWaterSensorDry_~retValue_acc~6; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,543 INFO L280 TraceCheckUtils]: 20: Hoare triple {20223#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~6 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~6; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,544 INFO L280 TraceCheckUtils]: 21: Hoare triple {20223#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret19 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret19 && isHighWaterLevel_#t~ret19 <= 2147483647;isHighWaterLevel_~tmp~2 := isHighWaterLevel_#t~ret19;havoc isHighWaterLevel_#t~ret19; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,544 INFO L280 TraceCheckUtils]: 22: Hoare triple {20223#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~2);isHighWaterLevel_~tmp___0~0 := 1; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,545 INFO L280 TraceCheckUtils]: 23: Hoare triple {20223#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~0;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,546 INFO L280 TraceCheckUtils]: 24: Hoare triple {20223#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret0 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret0 && processEnvironment__wrappee__highWaterSensor_#t~ret0 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~0 := processEnvironment__wrappee__highWaterSensor_#t~ret0;havoc processEnvironment__wrappee__highWaterSensor_#t~ret0; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,546 INFO L280 TraceCheckUtils]: 25: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~0;~pumpRunning~0 := 1; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,547 INFO L280 TraceCheckUtils]: 26: Hoare triple {20223#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,547 INFO L280 TraceCheckUtils]: 27: Hoare triple {20223#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,548 INFO L280 TraceCheckUtils]: 28: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~5; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,548 INFO L280 TraceCheckUtils]: 29: Hoare triple {20223#(<= ~waterLevel~0 2)} assume !false; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,549 INFO L280 TraceCheckUtils]: 30: Hoare triple {20223#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,550 INFO L280 TraceCheckUtils]: 31: Hoare triple {20223#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet21 && test_#t~nondet21 <= 2147483647;test_~tmp~4 := test_#t~nondet21;havoc test_#t~nondet21; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,550 INFO L280 TraceCheckUtils]: 32: Hoare triple {20223#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~4); {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,551 INFO L280 TraceCheckUtils]: 33: Hoare triple {20223#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet22 && test_#t~nondet22 <= 2147483647;test_~tmp___0~2 := test_#t~nondet22;havoc test_#t~nondet22; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,551 INFO L280 TraceCheckUtils]: 34: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___0~2; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,552 INFO L280 TraceCheckUtils]: 35: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != ~methaneLevelCritical~0;~methaneLevelCritical~0 := 0; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,554 INFO L280 TraceCheckUtils]: 36: Hoare triple {20223#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet23 && test_#t~nondet23 <= 2147483647;test_~tmp___2~0 := test_#t~nondet23;havoc test_#t~nondet23; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,554 INFO L280 TraceCheckUtils]: 37: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,555 INFO L280 TraceCheckUtils]: 38: Hoare triple {20223#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {20223#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:31,556 INFO L280 TraceCheckUtils]: 39: Hoare triple {20223#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,556 INFO L280 TraceCheckUtils]: 40: Hoare triple {20224#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret1, processEnvironment_~tmp~1;havoc processEnvironment_~tmp~1; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,557 INFO L280 TraceCheckUtils]: 41: Hoare triple {20224#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret20, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~3, isLowWaterLevel_~tmp___0~1;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~3;havoc isLowWaterLevel_~tmp___0~1;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~7;havoc isLowWaterSensorDry_~retValue_acc~7;isLowWaterSensorDry_~retValue_acc~7 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~7; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,557 INFO L280 TraceCheckUtils]: 42: Hoare triple {20224#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret20 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret20 && isLowWaterLevel_#t~ret20 <= 2147483647;isLowWaterLevel_~tmp~3 := isLowWaterLevel_#t~ret20;havoc isLowWaterLevel_#t~ret20; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,558 INFO L280 TraceCheckUtils]: 43: Hoare triple {20224#(<= ~waterLevel~0 1)} assume !(0 != isLowWaterLevel_~tmp~3);isLowWaterLevel_~tmp___0~1 := 1; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,559 INFO L280 TraceCheckUtils]: 44: Hoare triple {20224#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~1;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,559 INFO L280 TraceCheckUtils]: 45: Hoare triple {20224#(<= ~waterLevel~0 1)} processEnvironment_#t~ret1 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret1 && processEnvironment_#t~ret1 <= 2147483647;processEnvironment_~tmp~1 := processEnvironment_#t~ret1;havoc processEnvironment_#t~ret1; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,560 INFO L280 TraceCheckUtils]: 46: Hoare triple {20224#(<= ~waterLevel~0 1)} assume 0 != processEnvironment_~tmp~1;~pumpRunning~0 := 0; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,560 INFO L280 TraceCheckUtils]: 47: Hoare triple {20224#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~4;havoc isMethaneLevelCritical_~retValue_acc~4;isMethaneLevelCritical_~retValue_acc~4 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~4; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,561 INFO L280 TraceCheckUtils]: 48: Hoare triple {20224#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret25 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret25 && __utac_acc__Specification3_spec__1_#t~ret25 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret25;havoc __utac_acc__Specification3_spec__1_#t~ret25; {20224#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:31,562 INFO L280 TraceCheckUtils]: 49: Hoare triple {20224#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~5);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~5;havoc getWaterLevel_~retValue_acc~5;getWaterLevel_~retValue_acc~5 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~5; {20225#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:02:31,562 INFO L280 TraceCheckUtils]: 50: Hoare triple {20225#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification3_spec__1_#t~ret26 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret26 && __utac_acc__Specification3_spec__1_#t~ret26 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret26;havoc __utac_acc__Specification3_spec__1_#t~ret26; {20226#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)} is VALID [2020-07-28 19:02:31,563 INFO L280 TraceCheckUtils]: 51: Hoare triple {20226#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {20221#false} is VALID [2020-07-28 19:02:31,563 INFO L280 TraceCheckUtils]: 52: Hoare triple {20221#false} __utac_acc__Specification3_spec__1_#t~ret27 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret27 && __utac_acc__Specification3_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; {20221#false} is VALID [2020-07-28 19:02:31,564 INFO L280 TraceCheckUtils]: 53: Hoare triple {20221#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {20221#false} is VALID [2020-07-28 19:02:31,564 INFO L280 TraceCheckUtils]: 54: Hoare triple {20221#false} assume !false; {20221#false} is VALID [2020-07-28 19:02:31,569 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 5 proven. 4 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 19:02:31,569 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:02:31,569 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 6 [2020-07-28 19:02:31,570 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1099415915] [2020-07-28 19:02:31,570 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 55 [2020-07-28 19:02:31,570 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:31,571 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:31,649 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 62 edges. 62 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:31,649 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:31,650 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:31,650 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:31,650 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:31,651 INFO L87 Difference]: Start difference. First operand 396 states and 480 transitions. Second operand 7 states. [2020-07-28 19:02:35,817 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:35,818 INFO L93 Difference]: Finished difference Result 1335 states and 1641 transitions. [2020-07-28 19:02:35,818 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2020-07-28 19:02:35,818 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 55 [2020-07-28 19:02:35,818 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:35,819 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:35,823 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 371 transitions. [2020-07-28 19:02:35,823 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:35,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 371 transitions. [2020-07-28 19:02:35,828 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 371 transitions. [2020-07-28 19:02:36,257 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 371 edges. 371 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:36,258 INFO L225 Difference]: With dead ends: 1335 [2020-07-28 19:02:36,258 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:02:36,260 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 66 GetRequests, 55 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=97, Unknown=0, NotChecked=0, Total=156 [2020-07-28 19:02:36,260 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:02:36,261 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:02:36,261 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:36,261 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:36,261 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:36,261 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:36,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:36,261 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:36,261 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:36,262 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:36,262 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:36,262 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:36,262 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:36,262 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:36,262 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:36,262 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:36,262 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:36,262 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:36,263 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:36,263 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:36,263 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:02:36,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:02:36,263 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 55 [2020-07-28 19:02:36,263 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:36,263 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:02:36,263 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:36,263 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:36,264 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:36,464 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2020-07-28 19:02:36,468 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:02:37,314 WARN L193 SmtUtils]: Spent 837.00 ms on a formula simplification. DAG size of input: 269 DAG size of output: 229 [2020-07-28 19:02:37,600 WARN L193 SmtUtils]: Spent 275.00 ms on a formula simplification. DAG size of input: 165 DAG size of output: 108 [2020-07-28 19:02:37,937 WARN L193 SmtUtils]: Spent 249.00 ms on a formula simplification. DAG size of input: 152 DAG size of output: 112 [2020-07-28 19:02:38,212 WARN L193 SmtUtils]: Spent 261.00 ms on a formula simplification. DAG size of input: 178 DAG size of output: 118 [2020-07-28 19:02:38,714 WARN L193 SmtUtils]: Spent 489.00 ms on a formula simplification. DAG size of input: 265 DAG size of output: 204 [2020-07-28 19:02:39,502 WARN L193 SmtUtils]: Spent 775.00 ms on a formula simplification. DAG size of input: 336 DAG size of output: 278 [2020-07-28 19:02:39,724 WARN L193 SmtUtils]: Spent 141.00 ms on a formula simplification. DAG size of input: 189 DAG size of output: 148 [2020-07-28 19:02:39,887 WARN L193 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 167 DAG size of output: 113 [2020-07-28 19:02:40,183 WARN L193 SmtUtils]: Spent 281.00 ms on a formula simplification. DAG size of input: 252 DAG size of output: 208 [2020-07-28 19:02:41,761 WARN L193 SmtUtils]: Spent 1.55 s on a formula simplification. DAG size of input: 221 DAG size of output: 44 [2020-07-28 19:02:42,288 WARN L193 SmtUtils]: Spent 509.00 ms on a formula simplification. DAG size of input: 96 DAG size of output: 32 [2020-07-28 19:02:42,545 WARN L193 SmtUtils]: Spent 243.00 ms on a formula simplification. DAG size of input: 60 DAG size of output: 48 [2020-07-28 19:02:43,053 WARN L193 SmtUtils]: Spent 502.00 ms on a formula simplification. DAG size of input: 105 DAG size of output: 31 [2020-07-28 19:02:43,741 WARN L193 SmtUtils]: Spent 666.00 ms on a formula simplification. DAG size of input: 106 DAG size of output: 42 [2020-07-28 19:02:44,934 WARN L193 SmtUtils]: Spent 1.15 s on a formula simplification. DAG size of input: 191 DAG size of output: 57 [2020-07-28 19:02:47,255 WARN L193 SmtUtils]: Spent 2.31 s on a formula simplification. DAG size of input: 265 DAG size of output: 56 [2020-07-28 19:02:47,524 WARN L193 SmtUtils]: Spent 261.00 ms on a formula simplification. DAG size of input: 69 DAG size of output: 31 [2020-07-28 19:02:48,314 WARN L193 SmtUtils]: Spent 779.00 ms on a formula simplification. DAG size of input: 140 DAG size of output: 65 [2020-07-28 19:02:48,917 WARN L193 SmtUtils]: Spent 556.00 ms on a formula simplification. DAG size of input: 102 DAG size of output: 53 [2020-07-28 19:02:50,849 WARN L193 SmtUtils]: Spent 1.82 s on a formula simplification. DAG size of input: 198 DAG size of output: 70 [2020-07-28 19:02:50,857 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 959) no Hoare annotation was computed. [2020-07-28 19:02:50,857 INFO L268 CegarLoopResult]: For program point L333(lines 333 346) no Hoare annotation was computed. [2020-07-28 19:02:50,859 INFO L264 CegarLoopResult]: At program point L333-1(lines 1 962) the Hoare annotation is: (let ((.cse3 (= 0 ~pumpRunning~0))) (let ((.cse10 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse16 (= 0 ULTIMATE.start_processEnvironment_~tmp~1)) (.cse7 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)) (.cse8 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse9 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5)) (.cse20 (<= 2 ~waterLevel~0)) (.cse13 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse15 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))) (.cse21 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0))) (.cse22 (<= ~waterLevel~0 2)) (.cse23 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse17 (not .cse3)) (.cse18 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)) (.cse19 (= ULTIMATE.start_main_~tmp~9 ~systemActive~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse11 (<= 1 ~methaneLevelCritical~0)) (.cse12 (<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse2 (= 1 ULTIMATE.start_main_~tmp~9)) (.cse14 (<= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5)) (.cse6 (<= ~waterLevel~0 1)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= 1 ~waterLevel~0) .cse5) (and .cse0 .cse1 .cse2 .cse3 .cse6 .cse7 .cse4 .cse8 .cse5 .cse9 .cse10) (and .cse11 .cse12 .cse13 .cse14 .cse6 .cse5 .cse15 .cse1 .cse16 .cse4 .cse17 .cse18 .cse19) (and .cse20 .cse13 .cse15 .cse0 .cse21 .cse1 .cse22 .cse23 .cse2 .cse4 .cse17 .cse8 .cse18 .cse19 .cse9) (and .cse13 .cse6 .cse5 .cse10 .cse0 .cse15 .cse1 .cse16 .cse7 .cse4 .cse17 .cse8 .cse18 .cse19 .cse9) (and .cse20 .cse11 .cse12 .cse13 .cse14 .cse15 .cse21 .cse1 .cse22 .cse23 .cse2 .cse4 .cse17 .cse18 .cse19) (and .cse1 .cse11 .cse12 .cse2 .cse3 .cse14 .cse6 .cse4 .cse5)))) [2020-07-28 19:02:50,859 INFO L268 CegarLoopResult]: For program point L333-2(lines 333 346) no Hoare annotation was computed. [2020-07-28 19:02:50,859 INFO L264 CegarLoopResult]: At program point L333-3(lines 1 962) the Hoare annotation is: false [2020-07-28 19:02:50,859 INFO L268 CegarLoopResult]: For program point L333-4(lines 333 346) no Hoare annotation was computed. [2020-07-28 19:02:50,859 INFO L264 CegarLoopResult]: At program point L333-5(lines 1 962) the Hoare annotation is: false [2020-07-28 19:02:50,860 INFO L264 CegarLoopResult]: At program point L169(lines 164 172) the Hoare annotation is: (and (<= 2 ~waterLevel~0) (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0)) (= 0 ~methaneLevelCritical~0) (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0)) (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 2) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (not (= 0 |ULTIMATE.start_isPumpRunning_#res|)) (<= ~waterLevel~0 2) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) (= 1 ULTIMATE.start_main_~tmp~9) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (not (= 0 ~pumpRunning~0)) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (< 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2) (= ULTIMATE.start_main_~tmp~9 ~systemActive~0) (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5)) [2020-07-28 19:02:50,860 INFO L264 CegarLoopResult]: At program point L169-1(lines 164 172) the Hoare annotation is: false [2020-07-28 19:02:50,860 INFO L264 CegarLoopResult]: At program point L169-2(lines 164 172) the Hoare annotation is: false [2020-07-28 19:02:50,860 INFO L268 CegarLoopResult]: For program point L435(lines 435 441) no Hoare annotation was computed. [2020-07-28 19:02:50,860 INFO L268 CegarLoopResult]: For program point L435-1(lines 435 441) no Hoare annotation was computed. [2020-07-28 19:02:50,860 INFO L268 CegarLoopResult]: For program point L435-2(lines 435 441) no Hoare annotation was computed. [2020-07-28 19:02:50,860 INFO L268 CegarLoopResult]: For program point L435-3(lines 435 441) no Hoare annotation was computed. [2020-07-28 19:02:50,860 INFO L268 CegarLoopResult]: For program point L435-4(lines 435 441) no Hoare annotation was computed. [2020-07-28 19:02:50,861 INFO L268 CegarLoopResult]: For program point L435-5(lines 435 441) no Hoare annotation was computed. [2020-07-28 19:02:50,861 INFO L268 CegarLoopResult]: For program point L237(lines 237 241) no Hoare annotation was computed. [2020-07-28 19:02:50,861 INFO L268 CegarLoopResult]: For program point L237-2(lines 237 241) no Hoare annotation was computed. [2020-07-28 19:02:50,861 INFO L268 CegarLoopResult]: For program point L237-3(lines 237 241) no Hoare annotation was computed. [2020-07-28 19:02:50,861 INFO L268 CegarLoopResult]: For program point L237-5(lines 237 241) no Hoare annotation was computed. [2020-07-28 19:02:50,861 INFO L268 CegarLoopResult]: For program point L237-6(lines 237 241) no Hoare annotation was computed. [2020-07-28 19:02:50,861 INFO L268 CegarLoopResult]: For program point L237-8(lines 237 241) no Hoare annotation was computed. [2020-07-28 19:02:50,861 INFO L268 CegarLoopResult]: For program point L370(lines 370 374) no Hoare annotation was computed. [2020-07-28 19:02:50,861 INFO L268 CegarLoopResult]: For program point L337(lines 337 343) no Hoare annotation was computed. [2020-07-28 19:02:50,862 INFO L268 CegarLoopResult]: For program point L271(lines 271 277) no Hoare annotation was computed. [2020-07-28 19:02:50,862 INFO L268 CegarLoopResult]: For program point L337-2(lines 337 343) no Hoare annotation was computed. [2020-07-28 19:02:50,862 INFO L264 CegarLoopResult]: At program point L271-1(lines 271 277) the Hoare annotation is: (let ((.cse12 (= 1 ~waterLevel~0)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse22 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)) (.cse7 (= 1 ~systemActive~0)) (.cse4 (= 0 ~pumpRunning~0))) (let ((.cse18 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse20 (let ((.cse23 (not .cse4))) (or (and .cse2 .cse23 .cse12 .cse22 .cse7) (and .cse1 .cse2 .cse23 .cse22 .cse7)))) (.cse16 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse3 (<= ~waterLevel~0 2)) (.cse10 (= 1 ULTIMATE.start_main_~tmp~9)) (.cse13 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)) (.cse14 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse15 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5)) (.cse17 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))) (.cse8 (<= 1 ~methaneLevelCritical~0)) (.cse21 (= 0 ULTIMATE.start_processEnvironment_~tmp~1)) (.cse9 (<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse19 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse11 (<= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5)) (.cse5 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse6 (= ULTIMATE.start_main_~tmp~9 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse2 .cse8 .cse9 .cse3 .cse10 .cse11 .cse4 .cse5 .cse7) (and .cse0 .cse2 .cse10 .cse4 .cse5 .cse12 .cse7) (and .cse0 .cse2 .cse3 .cse10 .cse4 .cse13 .cse5 .cse14 .cse7 .cse15 .cse16) (and .cse17 .cse8 .cse18 .cse9 .cse19 .cse3 .cse10 .cse11 .cse20) (and .cse0 .cse17 .cse18 .cse3 .cse19 .cse10 .cse20 .cse14 .cse15) (and .cse19 .cse16 .cse0 .cse17 .cse2 .cse21 .cse3 .cse10 .cse13 .cse5 .cse14 .cse22 .cse6 .cse15) (and .cse17 .cse2 .cse8 .cse21 .cse9 .cse19 .cse11 (<= ~waterLevel~0 1) .cse5 .cse22 .cse6 .cse7)))) [2020-07-28 19:02:50,862 INFO L268 CegarLoopResult]: For program point L337-4(lines 337 343) no Hoare annotation was computed. [2020-07-28 19:02:50,862 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 959) no Hoare annotation was computed. [2020-07-28 19:02:50,862 INFO L264 CegarLoopResult]: At program point L307(lines 260 308) the Hoare annotation is: false [2020-07-28 19:02:50,863 INFO L264 CegarLoopResult]: At program point L440(lines 431 444) the Hoare annotation is: false [2020-07-28 19:02:50,863 INFO L264 CegarLoopResult]: At program point L440-1(lines 431 444) the Hoare annotation is: (let ((.cse10 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))) (let ((.cse0 (= 0 ~methaneLevelCritical~0)) (.cse3 (<= ~waterLevel~0 1)) (.cse5 (not .cse10)) (.cse8 (<= 2 ~waterLevel~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse11 (<= 1 ~methaneLevelCritical~0)) (.cse9 (<= ~waterLevel~0 2)) (.cse2 (= 0 ~pumpRunning~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse6 (= ULTIMATE.start_main_~tmp~9 ~systemActive~0)) (.cse7 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse8 .cse1 .cse9 .cse10 .cse2 .cse4 .cse6 .cse7) (and .cse1 .cse11 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse1 .cse11 .cse9 .cse10 .cse2 .cse4 .cse6 .cse7)))) [2020-07-28 19:02:50,863 INFO L264 CegarLoopResult]: At program point L440-2(lines 431 444) the Hoare annotation is: false [2020-07-28 19:02:50,863 INFO L264 CegarLoopResult]: At program point L440-3(lines 431 444) the Hoare annotation is: false [2020-07-28 19:02:50,864 INFO L264 CegarLoopResult]: At program point L440-4(lines 431 444) the Hoare annotation is: false [2020-07-28 19:02:50,864 INFO L264 CegarLoopResult]: At program point L440-5(lines 431 444) the Hoare annotation is: false [2020-07-28 19:02:50,864 INFO L264 CegarLoopResult]: At program point L870-2(lines 870 884) the Hoare annotation is: false [2020-07-28 19:02:50,864 INFO L264 CegarLoopResult]: At program point L243(lines 228 246) the Hoare annotation is: (let ((.cse0 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse3 (<= ~waterLevel~0 1)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (not (= 0 ~pumpRunning~0))) (.cse6 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)) (.cse7 (= ULTIMATE.start_main_~tmp~9 ~systemActive~0)) (.cse8 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8))) [2020-07-28 19:02:50,864 INFO L264 CegarLoopResult]: At program point L243-1(lines 228 246) the Hoare annotation is: false [2020-07-28 19:02:50,865 INFO L264 CegarLoopResult]: At program point L243-2(lines 228 246) the Hoare annotation is: false [2020-07-28 19:02:50,865 INFO L268 CegarLoopResult]: For program point L871(line 871) no Hoare annotation was computed. [2020-07-28 19:02:50,865 INFO L268 CegarLoopResult]: For program point L874(lines 874 878) no Hoare annotation was computed. [2020-07-28 19:02:50,865 INFO L268 CegarLoopResult]: For program point L874-1(lines 58 64) no Hoare annotation was computed. [2020-07-28 19:02:50,865 INFO L268 CegarLoopResult]: For program point L941(lines 941 948) no Hoare annotation was computed. [2020-07-28 19:02:50,865 INFO L271 CegarLoopResult]: At program point L941-1(lines 941 948) the Hoare annotation is: true [2020-07-28 19:02:50,865 INFO L268 CegarLoopResult]: For program point L281(lines 281 287) no Hoare annotation was computed. [2020-07-28 19:02:50,866 INFO L264 CegarLoopResult]: At program point L281-1(lines 281 287) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse11 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)) (.cse5 (= ULTIMATE.start_main_~tmp~9 ~systemActive~0)) (.cse6 (= 1 ~systemActive~0)) (.cse3 (= 0 ~pumpRunning~0))) (let ((.cse8 (= 0 ULTIMATE.start_processEnvironment_~tmp~1)) (.cse10 (<= ~waterLevel~0 1)) (.cse13 (= 0 ~methaneLevelCritical~0)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse12 (let ((.cse15 (not .cse3))) (or (and .cse0 .cse15 (= 1 ~waterLevel~0) .cse11 .cse5 .cse6) (and (<= 2 ~waterLevel~0) .cse0 .cse15 .cse11 .cse5 .cse6)))) (.cse7 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))) (.cse1 (<= 1 ~methaneLevelCritical~0)) (.cse14 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse2 (<= ~waterLevel~0 2)) (.cse9 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse0 .cse8 .cse1 .cse9 .cse10 .cse4 .cse11 .cse5 .cse6) (and .cse12 .cse13 .cse7 .cse14 .cse9 .cse2) (and .cse13 .cse7 .cse0 .cse8 .cse9 .cse10 .cse4 .cse11 .cse5 .cse6) (and .cse13 .cse0 .cse2 (= 1 ULTIMATE.start_main_~tmp~9) .cse3 .cse4 .cse6) (and .cse12 .cse7 .cse1 .cse14 .cse2 .cse9)))) [2020-07-28 19:02:50,866 INFO L268 CegarLoopResult]: For program point L116(lines 116 133) no Hoare annotation was computed. [2020-07-28 19:02:50,866 INFO L268 CegarLoopResult]: For program point L116-1(lines 116 133) no Hoare annotation was computed. [2020-07-28 19:02:50,866 INFO L268 CegarLoopResult]: For program point L116-2(lines 116 133) no Hoare annotation was computed. [2020-07-28 19:02:50,867 INFO L264 CegarLoopResult]: At program point L480(lines 1 962) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:02:50,867 INFO L268 CegarLoopResult]: For program point L382(lines 382 386) no Hoare annotation was computed. [2020-07-28 19:02:50,867 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:02:50,867 INFO L268 CegarLoopResult]: For program point L218(lines 218 222) no Hoare annotation was computed. [2020-07-28 19:02:50,867 INFO L268 CegarLoopResult]: For program point L218-2(lines 218 222) no Hoare annotation was computed. [2020-07-28 19:02:50,867 INFO L268 CegarLoopResult]: For program point L218-3(lines 218 222) no Hoare annotation was computed. [2020-07-28 19:02:50,868 INFO L268 CegarLoopResult]: For program point L218-5(lines 218 222) no Hoare annotation was computed. [2020-07-28 19:02:50,868 INFO L268 CegarLoopResult]: For program point L218-6(lines 218 222) no Hoare annotation was computed. [2020-07-28 19:02:50,868 INFO L268 CegarLoopResult]: For program point L218-8(lines 218 222) no Hoare annotation was computed. [2020-07-28 19:02:50,868 INFO L268 CegarLoopResult]: For program point L218-9(lines 218 222) no Hoare annotation was computed. [2020-07-28 19:02:50,868 INFO L268 CegarLoopResult]: For program point L218-11(lines 218 222) no Hoare annotation was computed. [2020-07-28 19:02:50,868 INFO L268 CegarLoopResult]: For program point L218-12(lines 218 222) no Hoare annotation was computed. [2020-07-28 19:02:50,868 INFO L268 CegarLoopResult]: For program point L218-14(lines 218 222) no Hoare annotation was computed. [2020-07-28 19:02:50,869 INFO L268 CegarLoopResult]: For program point L218-15(lines 218 222) no Hoare annotation was computed. [2020-07-28 19:02:50,869 INFO L268 CegarLoopResult]: For program point L218-17(lines 218 222) no Hoare annotation was computed. [2020-07-28 19:02:50,869 INFO L264 CegarLoopResult]: At program point L450(lines 445 453) the Hoare annotation is: (let ((.cse0 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse3 (<= ~waterLevel~0 1)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (not (= 0 ~pumpRunning~0))) (.cse6 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)) (.cse7 (= ULTIMATE.start_main_~tmp~9 ~systemActive~0)) (.cse8 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 (<= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8))) [2020-07-28 19:02:50,869 INFO L264 CegarLoopResult]: At program point L450-1(lines 445 453) the Hoare annotation is: false [2020-07-28 19:02:50,869 INFO L264 CegarLoopResult]: At program point L450-2(lines 445 453) the Hoare annotation is: false [2020-07-28 19:02:50,870 INFO L268 CegarLoopResult]: For program point L120(lines 120 128) no Hoare annotation was computed. [2020-07-28 19:02:50,870 INFO L268 CegarLoopResult]: For program point L120-1(lines 120 128) no Hoare annotation was computed. [2020-07-28 19:02:50,870 INFO L268 CegarLoopResult]: For program point L120-2(lines 120 128) no Hoare annotation was computed. [2020-07-28 19:02:50,870 INFO L268 CegarLoopResult]: For program point L90(lines 90 107) no Hoare annotation was computed. [2020-07-28 19:02:50,870 INFO L268 CegarLoopResult]: For program point L90-1(lines 90 107) no Hoare annotation was computed. [2020-07-28 19:02:50,870 INFO L268 CegarLoopResult]: For program point L90-2(lines 90 107) no Hoare annotation was computed. [2020-07-28 19:02:50,870 INFO L268 CegarLoopResult]: For program point L90-3(lines 90 107) no Hoare annotation was computed. [2020-07-28 19:02:50,871 INFO L268 CegarLoopResult]: For program point L90-4(lines 90 107) no Hoare annotation was computed. [2020-07-28 19:02:50,871 INFO L268 CegarLoopResult]: For program point L90-5(lines 90 107) no Hoare annotation was computed. [2020-07-28 19:02:50,871 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:02:50,871 INFO L264 CegarLoopResult]: At program point L58(lines 57 76) the Hoare annotation is: (let ((.cse11 (= 0 ~pumpRunning~0))) (let ((.cse0 (= 0 ~methaneLevelCritical~0)) (.cse1 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse4 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse6 (<= ~waterLevel~0 1)) (.cse7 (not .cse11)) (.cse8 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse13 (<= 1 ~methaneLevelCritical~0)) (.cse10 (<= ~waterLevel~0 2)) (.cse5 (= 1 ULTIMATE.start_main_~tmp~9)) (.cse12 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse9 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 .cse2 .cse10 .cse11 .cse12 (= ULTIMATE.start_main_~tmp~9 ~systemActive~0) .cse9) (and .cse1 .cse2 .cse3 .cse13 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse2 .cse13 .cse10 .cse5 .cse11 .cse12 .cse9)))) [2020-07-28 19:02:50,872 INFO L268 CegarLoopResult]: For program point L58-1(lines 58 64) no Hoare annotation was computed. [2020-07-28 19:02:50,872 INFO L264 CegarLoopResult]: At program point L58-2(lines 57 76) the Hoare annotation is: false [2020-07-28 19:02:50,872 INFO L264 CegarLoopResult]: At program point L58-3(lines 57 76) the Hoare annotation is: false [2020-07-28 19:02:50,872 INFO L271 CegarLoopResult]: At program point L950(lines 931 953) the Hoare annotation is: true [2020-07-28 19:02:50,872 INFO L264 CegarLoopResult]: At program point L488(lines 483 491) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:02:50,873 INFO L264 CegarLoopResult]: At program point L224(lines 209 227) the Hoare annotation is: false [2020-07-28 19:02:50,873 INFO L264 CegarLoopResult]: At program point L224-1(lines 209 227) the Hoare annotation is: (let ((.cse6 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse10 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)) (.cse13 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse17 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))) (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (not .cse17)) (.cse5 (not .cse13)) (.cse4 (<= ~waterLevel~0 2)) (.cse7 (= 1 ULTIMATE.start_main_~tmp~9)) (.cse12 (= 0 ~methaneLevelCritical~0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (<= 1 ~methaneLevelCritical~0)) (.cse8 (= 0 ~pumpRunning~0)) (.cse15 (<= ~waterLevel~0 1)) (.cse14 (not .cse10)) (.cse9 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse16 (not .cse6)) (.cse11 (= ULTIMATE.start_main_~tmp~9 ~systemActive~0)) (.cse18 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse0 .cse1 .cse12 .cse2 .cse5 .cse4 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse12 .cse2 .cse8 .cse13 .cse14 .cse15 .cse9 .cse16 .cse17 .cse11 .cse18) (and .cse2 .cse3 .cse8 .cse13 .cse15 .cse14 .cse9 .cse16 .cse17 .cse11 .cse18)))) [2020-07-28 19:02:50,873 INFO L264 CegarLoopResult]: At program point L224-2(lines 209 227) the Hoare annotation is: false [2020-07-28 19:02:50,873 INFO L264 CegarLoopResult]: At program point L224-3(lines 209 227) the Hoare annotation is: false [2020-07-28 19:02:50,874 INFO L264 CegarLoopResult]: At program point L224-4(lines 209 227) the Hoare annotation is: false [2020-07-28 19:02:50,874 INFO L264 CegarLoopResult]: At program point L224-5(lines 209 227) the Hoare annotation is: false [2020-07-28 19:02:50,874 INFO L264 CegarLoopResult]: At program point L918(lines 914 920) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= 1 ~waterLevel~0) (= ULTIMATE.start_main_~tmp~9 ~systemActive~0) (= 1 ~systemActive~0)) [2020-07-28 19:02:50,874 INFO L268 CegarLoopResult]: For program point L291(lines 291 302) no Hoare annotation was computed. [2020-07-28 19:02:50,874 INFO L268 CegarLoopResult]: For program point L358(lines 358 362) no Hoare annotation was computed. [2020-07-28 19:02:50,875 INFO L268 CegarLoopResult]: For program point L358-3(lines 358 362) no Hoare annotation was computed. [2020-07-28 19:02:50,875 INFO L268 CegarLoopResult]: For program point L358-6(lines 358 362) no Hoare annotation was computed. [2020-07-28 19:02:50,875 INFO L268 CegarLoopResult]: For program point L94(lines 94 102) no Hoare annotation was computed. [2020-07-28 19:02:50,875 INFO L268 CegarLoopResult]: For program point L94-1(lines 94 102) no Hoare annotation was computed. [2020-07-28 19:02:50,875 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:02:50,875 INFO L268 CegarLoopResult]: For program point L94-2(lines 94 102) no Hoare annotation was computed. [2020-07-28 19:02:50,876 INFO L268 CegarLoopResult]: For program point L94-3(lines 94 102) no Hoare annotation was computed. [2020-07-28 19:02:50,876 INFO L268 CegarLoopResult]: For program point L94-4(lines 94 102) no Hoare annotation was computed. [2020-07-28 19:02:50,876 INFO L268 CegarLoopResult]: For program point L94-5(lines 94 102) no Hoare annotation was computed. [2020-07-28 19:02:50,876 INFO L268 CegarLoopResult]: For program point L327(lines 327 347) no Hoare annotation was computed. [2020-07-28 19:02:50,876 INFO L268 CegarLoopResult]: For program point L327-2(lines 327 347) no Hoare annotation was computed. [2020-07-28 19:02:50,876 INFO L268 CegarLoopResult]: For program point L327-4(lines 327 347) no Hoare annotation was computed. [2020-07-28 19:02:50,877 INFO L264 CegarLoopResult]: At program point L427(lines 422 430) the Hoare annotation is: (let ((.cse6 (= 0 ~pumpRunning~0)) (.cse0 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse11 (<= ~waterLevel~0 1)) (.cse12 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse2 (= 0 ~methaneLevelCritical~0)) (.cse1 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))) (.cse3 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (= 1 ULTIMATE.start_main_~tmp~9)) (.cse5 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse7 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse8 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)) (.cse9 (= ULTIMATE.start_main_~tmp~9 ~systemActive~0)) (.cse10 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0)) .cse3 (<= ~waterLevel~0 2) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse4 .cse5 (not .cse6) .cse7 .cse8 .cse9 .cse10) (and .cse2 .cse3 (= 1 |ULTIMATE.start_valid_product_#res|) .cse4 .cse6 .cse11 .cse7 (= 1 ~systemActive~0) .cse12 .cse10) (and .cse0 .cse11 .cse12 .cse2 .cse1 .cse3 (= 0 ULTIMATE.start_processEnvironment_~tmp~1) .cse4 .cse5 .cse7 .cse8 .cse9 .cse10))) [2020-07-28 19:02:50,877 INFO L264 CegarLoopResult]: At program point L427-1(lines 422 430) the Hoare annotation is: false [2020-07-28 19:02:50,877 INFO L264 CegarLoopResult]: At program point L427-2(lines 422 430) the Hoare annotation is: false [2020-07-28 19:02:50,877 INFO L268 CegarLoopResult]: For program point L262(lines 261 306) no Hoare annotation was computed. [2020-07-28 19:02:50,877 INFO L264 CegarLoopResult]: At program point L395(lines 390 398) the Hoare annotation is: (let ((.cse3 (= 0 ~pumpRunning~0))) (let ((.cse19 (= 0 ULTIMATE.start_processEnvironment_~tmp~1)) (.cse8 (<= 2 ~waterLevel~0)) (.cse11 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse12 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse13 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0))) (.cse14 (<= ~waterLevel~0 2)) (.cse15 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse16 (not .cse3)) (.cse6 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse17 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)) (.cse18 (= ULTIMATE.start_main_~tmp~9 ~systemActive~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse9 (<= 1 ~methaneLevelCritical~0)) (.cse10 (<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse2 (= 1 ULTIMATE.start_main_~tmp~9)) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse7 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse1 .cse14 .cse15 .cse2 .cse5 .cse16 .cse17 .cse18) (and .cse0 .cse12 .cse1 .cse19 .cse11 .cse2 .cse4 .cse5 .cse6 .cse17 .cse18) (and .cse12 .cse1 .cse19 .cse9 .cse10 .cse11 .cse4 .cse5 .cse17 .cse18 .cse7) (and .cse8 .cse11 .cse12 .cse0 .cse13 .cse1 .cse14 .cse15 .cse2 .cse5 .cse16 .cse6 .cse17 .cse18) (and .cse1 .cse9 .cse10 .cse2 .cse3 .cse4 .cse5 .cse7)))) [2020-07-28 19:02:50,877 INFO L264 CegarLoopResult]: At program point L395-1(lines 390 398) the Hoare annotation is: false [2020-07-28 19:02:50,877 INFO L264 CegarLoopResult]: At program point L395-2(lines 390 398) the Hoare annotation is: false [2020-07-28 19:02:50,877 INFO L268 CegarLoopResult]: For program point L263(lines 263 267) no Hoare annotation was computed. [2020-07-28 19:02:50,878 INFO L264 CegarLoopResult]: At program point L65(lines 65 71) the Hoare annotation is: (let ((.cse15 (= 0 ~pumpRunning~0))) (let ((.cse14 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (= 0 ~methaneLevelCritical~0)) (.cse18 (= 0 ULTIMATE.start_processEnvironment_~tmp~1)) (.cse16 (<= ~waterLevel~0 1)) (.cse17 (= 1 ~systemActive~0)) (.cse0 (<= 2 ~waterLevel~0)) (.cse13 (<= 1 ~methaneLevelCritical~0)) (.cse1 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse2 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~0))) (.cse4 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~0))) (.cse5 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse6 (<= ~waterLevel~0 2)) (.cse7 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse8 (= 1 ULTIMATE.start_main_~tmp~9)) (.cse9 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse10 (not .cse15)) (.cse11 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~2)) (.cse12 (= ULTIMATE.start_main_~tmp~9 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse5 .cse13 .cse14 .cse8 .cse15 .cse16 .cse17) (and .cse2 .cse5 .cse18 .cse13 .cse1 .cse16 .cse9 .cse10 .cse11 .cse12 .cse17) (and .cse3 .cse5 .cse14 .cse8 .cse15 .cse16 .cse17) (and .cse3 .cse2 .cse5 .cse18 .cse1 .cse16 .cse9 .cse10 .cse11 .cse12 .cse17) (and .cse0 .cse13 .cse1 .cse2 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12)))) [2020-07-28 19:02:50,878 INFO L264 CegarLoopResult]: At program point L65-1(lines 65 71) the Hoare annotation is: false [2020-07-28 19:02:50,878 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:02:50,878 INFO L264 CegarLoopResult]: At program point L65-2(lines 65 71) the Hoare annotation is: false [2020-07-28 19:02:50,878 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 959) no Hoare annotation was computed. [2020-07-28 19:02:50,878 INFO L268 CegarLoopResult]: For program point L297(lines 297 301) no Hoare annotation was computed. [2020-07-28 19:02:50,878 INFO L268 CegarLoopResult]: For program point L297-2(lines 58 64) no Hoare annotation was computed. [2020-07-28 19:02:50,878 INFO L268 CegarLoopResult]: For program point L959(line 959) no Hoare annotation was computed. [2020-07-28 19:02:50,878 INFO L268 CegarLoopResult]: For program point L959-1(line 959) no Hoare annotation was computed. [2020-07-28 19:02:50,879 INFO L268 CegarLoopResult]: For program point L959-2(line 959) no Hoare annotation was computed. [2020-07-28 19:02:50,882 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:02:50,882 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:02:50,883 WARN L170 areAnnotationChecker]: L941 has no Hoare annotation [2020-07-28 19:02:50,883 WARN L170 areAnnotationChecker]: L941 has no Hoare annotation [2020-07-28 19:02:50,883 WARN L170 areAnnotationChecker]: L941 has no Hoare annotation [2020-07-28 19:02:50,885 WARN L170 areAnnotationChecker]: L262 has no Hoare annotation [2020-07-28 19:02:50,885 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:02:50,885 WARN L170 areAnnotationChecker]: L58-1 has no Hoare annotation [2020-07-28 19:02:50,885 WARN L170 areAnnotationChecker]: L262 has no Hoare annotation [2020-07-28 19:02:50,885 WARN L170 areAnnotationChecker]: L262 has no Hoare annotation [2020-07-28 19:02:50,885 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:02:50,885 WARN L170 areAnnotationChecker]: L58-1 has no Hoare annotation [2020-07-28 19:02:50,885 WARN L170 areAnnotationChecker]: L58-1 has no Hoare annotation [2020-07-28 19:02:50,885 WARN L170 areAnnotationChecker]: L263 has no Hoare annotation [2020-07-28 19:02:50,885 WARN L170 areAnnotationChecker]: L358-3 has no Hoare annotation [2020-07-28 19:02:50,886 WARN L170 areAnnotationChecker]: L358-3 has no Hoare annotation [2020-07-28 19:02:50,886 WARN L170 areAnnotationChecker]: L116-1 has no Hoare annotation [2020-07-28 19:02:50,886 WARN L170 areAnnotationChecker]: L271 has no Hoare annotation [2020-07-28 19:02:50,886 WARN L170 areAnnotationChecker]: L271 has no Hoare annotation [2020-07-28 19:02:50,886 WARN L170 areAnnotationChecker]: L116-1 has no Hoare annotation [2020-07-28 19:02:50,886 WARN L170 areAnnotationChecker]: L116-1 has no Hoare annotation [2020-07-28 19:02:50,886 WARN L170 areAnnotationChecker]: L370 has no Hoare annotation [2020-07-28 19:02:50,886 WARN L170 areAnnotationChecker]: L370 has no Hoare annotation [2020-07-28 19:02:50,886 WARN L170 areAnnotationChecker]: L281 has no Hoare annotation [2020-07-28 19:02:50,886 WARN L170 areAnnotationChecker]: L237-3 has no Hoare annotation [2020-07-28 19:02:50,886 WARN L170 areAnnotationChecker]: L90-3 has no Hoare annotation [2020-07-28 19:02:50,887 WARN L170 areAnnotationChecker]: L90-3 has no Hoare annotation [2020-07-28 19:02:50,887 WARN L170 areAnnotationChecker]: L327-2 has no Hoare annotation [2020-07-28 19:02:50,887 WARN L170 areAnnotationChecker]: L281 has no Hoare annotation [2020-07-28 19:02:50,887 WARN L170 areAnnotationChecker]: L281 has no Hoare annotation [2020-07-28 19:02:50,887 WARN L170 areAnnotationChecker]: L237-3 has no Hoare annotation [2020-07-28 19:02:50,887 WARN L170 areAnnotationChecker]: L237-3 has no Hoare annotation [2020-07-28 19:02:50,887 WARN L170 areAnnotationChecker]: L435-3 has no Hoare annotation [2020-07-28 19:02:50,887 WARN L170 areAnnotationChecker]: L435-3 has no Hoare annotation [2020-07-28 19:02:50,887 WARN L170 areAnnotationChecker]: L327-2 has no Hoare annotation [2020-07-28 19:02:50,887 WARN L170 areAnnotationChecker]: L327-2 has no Hoare annotation [2020-07-28 19:02:50,887 WARN L170 areAnnotationChecker]: L382 has no Hoare annotation [2020-07-28 19:02:50,888 WARN L170 areAnnotationChecker]: L382 has no Hoare annotation [2020-07-28 19:02:50,888 WARN L170 areAnnotationChecker]: L291 has no Hoare annotation [2020-07-28 19:02:50,888 WARN L170 areAnnotationChecker]: L237-5 has no Hoare annotation [2020-07-28 19:02:50,888 WARN L170 areAnnotationChecker]: L218-9 has no Hoare annotation [2020-07-28 19:02:50,888 WARN L170 areAnnotationChecker]: L333-2 has no Hoare annotation [2020-07-28 19:02:50,888 WARN L170 areAnnotationChecker]: L291 has no Hoare annotation [2020-07-28 19:02:50,888 WARN L170 areAnnotationChecker]: L291 has no Hoare annotation [2020-07-28 19:02:50,888 WARN L170 areAnnotationChecker]: L120-1 has no Hoare annotation [2020-07-28 19:02:50,888 WARN L170 areAnnotationChecker]: L218-9 has no Hoare annotation [2020-07-28 19:02:50,888 WARN L170 areAnnotationChecker]: L218-9 has no Hoare annotation [2020-07-28 19:02:50,889 WARN L170 areAnnotationChecker]: L871 has no Hoare annotation [2020-07-28 19:02:50,889 WARN L170 areAnnotationChecker]: L333-2 has no Hoare annotation [2020-07-28 19:02:50,889 WARN L170 areAnnotationChecker]: L333-2 has no Hoare annotation [2020-07-28 19:02:50,889 WARN L170 areAnnotationChecker]: L297-2 has no Hoare annotation [2020-07-28 19:02:50,889 WARN L170 areAnnotationChecker]: L297-2 has no Hoare annotation [2020-07-28 19:02:50,889 WARN L170 areAnnotationChecker]: L297 has no Hoare annotation [2020-07-28 19:02:50,889 WARN L170 areAnnotationChecker]: L297 has no Hoare annotation [2020-07-28 19:02:50,889 WARN L170 areAnnotationChecker]: L120-1 has no Hoare annotation [2020-07-28 19:02:50,889 WARN L170 areAnnotationChecker]: L120-1 has no Hoare annotation [2020-07-28 19:02:50,889 WARN L170 areAnnotationChecker]: L218-11 has no Hoare annotation [2020-07-28 19:02:50,890 WARN L170 areAnnotationChecker]: L871 has no Hoare annotation [2020-07-28 19:02:50,890 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2020-07-28 19:02:50,890 WARN L170 areAnnotationChecker]: L358 has no Hoare annotation [2020-07-28 19:02:50,890 WARN L170 areAnnotationChecker]: L358 has no Hoare annotation [2020-07-28 19:02:50,890 WARN L170 areAnnotationChecker]: L116 has no Hoare annotation [2020-07-28 19:02:50,891 WARN L170 areAnnotationChecker]: L90-2 has no Hoare annotation [2020-07-28 19:02:50,891 WARN L170 areAnnotationChecker]: L90-2 has no Hoare annotation [2020-07-28 19:02:50,891 WARN L170 areAnnotationChecker]: L94-3 has no Hoare annotation [2020-07-28 19:02:50,891 WARN L170 areAnnotationChecker]: L874 has no Hoare annotation [2020-07-28 19:02:50,891 WARN L170 areAnnotationChecker]: L874 has no Hoare annotation [2020-07-28 19:02:50,891 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2020-07-28 19:02:50,892 WARN L170 areAnnotationChecker]: L337-2 has no Hoare annotation [2020-07-28 19:02:50,892 WARN L170 areAnnotationChecker]: L116 has no Hoare annotation [2020-07-28 19:02:50,892 WARN L170 areAnnotationChecker]: L116 has no Hoare annotation [2020-07-28 19:02:50,893 WARN L170 areAnnotationChecker]: L435-2 has no Hoare annotation [2020-07-28 19:02:50,894 WARN L170 areAnnotationChecker]: L435-2 has no Hoare annotation [2020-07-28 19:02:50,894 WARN L170 areAnnotationChecker]: L94-3 has no Hoare annotation [2020-07-28 19:02:50,894 WARN L170 areAnnotationChecker]: L94-3 has no Hoare annotation [2020-07-28 19:02:50,894 WARN L170 areAnnotationChecker]: L874-1 has no Hoare annotation [2020-07-28 19:02:50,894 WARN L170 areAnnotationChecker]: L874-1 has no Hoare annotation [2020-07-28 19:02:50,894 WARN L170 areAnnotationChecker]: L959-1 has no Hoare annotation [2020-07-28 19:02:50,894 WARN L170 areAnnotationChecker]: L959-1 has no Hoare annotation [2020-07-28 19:02:50,894 WARN L170 areAnnotationChecker]: L237 has no Hoare annotation [2020-07-28 19:02:50,894 WARN L170 areAnnotationChecker]: L90-1 has no Hoare annotation [2020-07-28 19:02:50,894 WARN L170 areAnnotationChecker]: L90-1 has no Hoare annotation [2020-07-28 19:02:50,894 WARN L170 areAnnotationChecker]: L327 has no Hoare annotation [2020-07-28 19:02:50,895 WARN L170 areAnnotationChecker]: L218-6 has no Hoare annotation [2020-07-28 19:02:50,895 WARN L170 areAnnotationChecker]: L358-6 has no Hoare annotation [2020-07-28 19:02:50,895 WARN L170 areAnnotationChecker]: L358-6 has no Hoare annotation [2020-07-28 19:02:50,895 WARN L170 areAnnotationChecker]: L116-2 has no Hoare annotation [2020-07-28 19:02:50,895 WARN L170 areAnnotationChecker]: L237 has no Hoare annotation [2020-07-28 19:02:50,895 WARN L170 areAnnotationChecker]: L237 has no Hoare annotation [2020-07-28 19:02:50,895 WARN L170 areAnnotationChecker]: L435-1 has no Hoare annotation [2020-07-28 19:02:50,895 WARN L170 areAnnotationChecker]: L435-1 has no Hoare annotation [2020-07-28 19:02:50,895 WARN L170 areAnnotationChecker]: L327 has no Hoare annotation [2020-07-28 19:02:50,895 WARN L170 areAnnotationChecker]: L327 has no Hoare annotation [2020-07-28 19:02:50,896 WARN L170 areAnnotationChecker]: L218-6 has no Hoare annotation [2020-07-28 19:02:50,896 WARN L170 areAnnotationChecker]: L218-6 has no Hoare annotation [2020-07-28 19:02:50,896 WARN L170 areAnnotationChecker]: L116-2 has no Hoare annotation [2020-07-28 19:02:50,896 WARN L170 areAnnotationChecker]: L116-2 has no Hoare annotation [2020-07-28 19:02:50,896 WARN L170 areAnnotationChecker]: L237-2 has no Hoare annotation [2020-07-28 19:02:50,896 WARN L170 areAnnotationChecker]: L218-3 has no Hoare annotation [2020-07-28 19:02:50,896 WARN L170 areAnnotationChecker]: L333 has no Hoare annotation [2020-07-28 19:02:50,896 WARN L170 areAnnotationChecker]: L218-8 has no Hoare annotation [2020-07-28 19:02:50,896 WARN L170 areAnnotationChecker]: L237-6 has no Hoare annotation [2020-07-28 19:02:50,896 WARN L170 areAnnotationChecker]: L90-5 has no Hoare annotation [2020-07-28 19:02:50,897 WARN L170 areAnnotationChecker]: L90-5 has no Hoare annotation [2020-07-28 19:02:50,897 WARN L170 areAnnotationChecker]: L327-4 has no Hoare annotation [2020-07-28 19:02:50,897 WARN L170 areAnnotationChecker]: L120 has no Hoare annotation [2020-07-28 19:02:50,897 WARN L170 areAnnotationChecker]: L218-3 has no Hoare annotation [2020-07-28 19:02:50,897 WARN L170 areAnnotationChecker]: L218-3 has no Hoare annotation [2020-07-28 19:02:50,897 WARN L170 areAnnotationChecker]: L333 has no Hoare annotation [2020-07-28 19:02:50,897 WARN L170 areAnnotationChecker]: L333 has no Hoare annotation [2020-07-28 19:02:50,897 WARN L170 areAnnotationChecker]: L94-2 has no Hoare annotation [2020-07-28 19:02:50,897 WARN L170 areAnnotationChecker]: L237-6 has no Hoare annotation [2020-07-28 19:02:50,897 WARN L170 areAnnotationChecker]: L237-6 has no Hoare annotation [2020-07-28 19:02:50,897 WARN L170 areAnnotationChecker]: L435-5 has no Hoare annotation [2020-07-28 19:02:50,898 WARN L170 areAnnotationChecker]: L435-5 has no Hoare annotation [2020-07-28 19:02:50,898 WARN L170 areAnnotationChecker]: L327-4 has no Hoare annotation [2020-07-28 19:02:50,898 WARN L170 areAnnotationChecker]: L327-4 has no Hoare annotation [2020-07-28 19:02:50,898 WARN L170 areAnnotationChecker]: L120 has no Hoare annotation [2020-07-28 19:02:50,898 WARN L170 areAnnotationChecker]: L120 has no Hoare annotation [2020-07-28 19:02:50,898 WARN L170 areAnnotationChecker]: L218-5 has no Hoare annotation [2020-07-28 19:02:50,898 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2020-07-28 19:02:50,898 WARN L170 areAnnotationChecker]: L94-2 has no Hoare annotation [2020-07-28 19:02:50,898 WARN L170 areAnnotationChecker]: L94-2 has no Hoare annotation [2020-07-28 19:02:50,898 WARN L170 areAnnotationChecker]: L237-8 has no Hoare annotation [2020-07-28 19:02:50,898 WARN L170 areAnnotationChecker]: L218-15 has no Hoare annotation [2020-07-28 19:02:50,898 WARN L170 areAnnotationChecker]: L333-4 has no Hoare annotation [2020-07-28 19:02:50,899 WARN L170 areAnnotationChecker]: L90 has no Hoare annotation [2020-07-28 19:02:50,899 WARN L170 areAnnotationChecker]: L90 has no Hoare annotation [2020-07-28 19:02:50,899 WARN L170 areAnnotationChecker]: L94-1 has no Hoare annotation [2020-07-28 19:02:50,899 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2020-07-28 19:02:50,899 WARN L170 areAnnotationChecker]: L337 has no Hoare annotation [2020-07-28 19:02:50,899 WARN L170 areAnnotationChecker]: L120-2 has no Hoare annotation [2020-07-28 19:02:50,899 WARN L170 areAnnotationChecker]: L218-15 has no Hoare annotation [2020-07-28 19:02:50,899 WARN L170 areAnnotationChecker]: L218-15 has no Hoare annotation [2020-07-28 19:02:50,899 WARN L170 areAnnotationChecker]: L333-4 has no Hoare annotation [2020-07-28 19:02:50,899 WARN L170 areAnnotationChecker]: L333-4 has no Hoare annotation [2020-07-28 19:02:50,899 WARN L170 areAnnotationChecker]: L435 has no Hoare annotation [2020-07-28 19:02:50,899 WARN L170 areAnnotationChecker]: L435 has no Hoare annotation [2020-07-28 19:02:50,899 WARN L170 areAnnotationChecker]: L94-1 has no Hoare annotation [2020-07-28 19:02:50,899 WARN L170 areAnnotationChecker]: L94-1 has no Hoare annotation [2020-07-28 19:02:50,899 WARN L170 areAnnotationChecker]: L959 has no Hoare annotation [2020-07-28 19:02:50,900 WARN L170 areAnnotationChecker]: L959 has no Hoare annotation [2020-07-28 19:02:50,900 WARN L170 areAnnotationChecker]: L120-2 has no Hoare annotation [2020-07-28 19:02:50,900 WARN L170 areAnnotationChecker]: L120-2 has no Hoare annotation [2020-07-28 19:02:50,900 WARN L170 areAnnotationChecker]: L218-17 has no Hoare annotation [2020-07-28 19:02:50,900 WARN L170 areAnnotationChecker]: L337-4 has no Hoare annotation [2020-07-28 19:02:50,900 WARN L170 areAnnotationChecker]: L218 has no Hoare annotation [2020-07-28 19:02:50,900 WARN L170 areAnnotationChecker]: L90-4 has no Hoare annotation [2020-07-28 19:02:50,900 WARN L170 areAnnotationChecker]: L90-4 has no Hoare annotation [2020-07-28 19:02:50,900 WARN L170 areAnnotationChecker]: L94-5 has no Hoare annotation [2020-07-28 19:02:50,900 WARN L170 areAnnotationChecker]: L337-4 has no Hoare annotation [2020-07-28 19:02:50,901 WARN L170 areAnnotationChecker]: L337-4 has no Hoare annotation [2020-07-28 19:02:50,901 WARN L170 areAnnotationChecker]: L218 has no Hoare annotation [2020-07-28 19:02:50,901 WARN L170 areAnnotationChecker]: L218 has no Hoare annotation [2020-07-28 19:02:50,901 WARN L170 areAnnotationChecker]: L435-4 has no Hoare annotation [2020-07-28 19:02:50,901 WARN L170 areAnnotationChecker]: L435-4 has no Hoare annotation [2020-07-28 19:02:50,901 WARN L170 areAnnotationChecker]: L94-5 has no Hoare annotation [2020-07-28 19:02:50,901 WARN L170 areAnnotationChecker]: L94-5 has no Hoare annotation [2020-07-28 19:02:50,902 WARN L170 areAnnotationChecker]: L959-2 has no Hoare annotation [2020-07-28 19:02:50,902 WARN L170 areAnnotationChecker]: L959-2 has no Hoare annotation [2020-07-28 19:02:50,902 WARN L170 areAnnotationChecker]: L218-2 has no Hoare annotation [2020-07-28 19:02:50,902 WARN L170 areAnnotationChecker]: L218-12 has no Hoare annotation [2020-07-28 19:02:50,902 WARN L170 areAnnotationChecker]: L94 has no Hoare annotation [2020-07-28 19:02:50,903 WARN L170 areAnnotationChecker]: L218-12 has no Hoare annotation [2020-07-28 19:02:50,903 WARN L170 areAnnotationChecker]: L218-12 has no Hoare annotation [2020-07-28 19:02:50,903 WARN L170 areAnnotationChecker]: L94 has no Hoare annotation [2020-07-28 19:02:50,903 WARN L170 areAnnotationChecker]: L94 has no Hoare annotation [2020-07-28 19:02:50,903 WARN L170 areAnnotationChecker]: L218-14 has no Hoare annotation [2020-07-28 19:02:50,903 WARN L170 areAnnotationChecker]: L94-4 has no Hoare annotation [2020-07-28 19:02:50,903 WARN L170 areAnnotationChecker]: L94-4 has no Hoare annotation [2020-07-28 19:02:50,904 WARN L170 areAnnotationChecker]: L94-4 has no Hoare annotation [2020-07-28 19:02:50,904 INFO L163 areAnnotationChecker]: CFG has 15 edges. 15 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:02:50,955 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:02:50 BoogieIcfgContainer [2020-07-28 19:02:50,956 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:02:50,956 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:02:50,956 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:02:50,957 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:02:50,960 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:01:57" (3/4) ... [2020-07-28 19:02:50,964 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:02:50,983 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:02:50,984 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:02:50,985 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:02:50,986 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:02:50,988 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:02:50,989 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:02:50,990 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:02:51,021 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == methaneLevelCritical && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && 1 == systemActive [2020-07-28 19:02:51,022 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == methaneLevelCritical && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && 1 == systemActive [2020-07-28 19:02:51,022 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == tmp) && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && 1 == systemActive) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && \result == systemActive) && 0 == \result) && 1 == systemActive) && 0 == tmp) && \result <= 1)) || ((((((((((((1 <= methaneLevelCritical && 1 <= \result) && !(0 == \result)) && 1 <= tmp) && waterLevel <= 1) && 1 == systemActive) && !(0 == tmp___0)) && 0 == splverifierCounter) && 0 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive)) || ((((((((((((((2 <= waterLevel && !(0 == \result)) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == \result) && 0 == tmp) && tmp == systemActive) && 0 == tmp)) || ((((((((((((((!(0 == \result) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) && 0 == methaneLevelCritical) && !(0 == tmp___0)) && 0 == splverifierCounter) && 0 == tmp) && tmp___0 <= 1) && \result == systemActive) && !(0 == pumpRunning)) && 0 == \result) && 0 == tmp) && tmp == systemActive) && 0 == tmp)) || ((((((((((((((2 <= waterLevel && 1 <= methaneLevelCritical) && 1 <= \result) && !(0 == \result)) && 1 <= tmp) && !(0 == tmp___0)) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive)) || ((((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == tmp) && 0 == pumpRunning) && 1 <= tmp) && waterLevel <= 1) && \result == systemActive) && 1 == systemActive) [2020-07-28 19:02:51,023 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || ((((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && waterLevel <= 2) && 1 == tmp) && 1 <= tmp) && 0 == pumpRunning) && \result == systemActive) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == tmp) && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && 1 == systemActive)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && tmp___0 <= 1) && \result == systemActive) && 0 == \result) && 1 == systemActive) && 0 == tmp) && \result <= 1)) || ((((((((!(0 == tmp___0) && 1 <= methaneLevelCritical) && 1 == \result) && 1 <= \result) && !(0 == \result)) && waterLevel <= 2) && 1 == tmp) && 1 <= tmp) && (((((0 == splverifierCounter && !(0 == pumpRunning)) && 1 == waterLevel) && 0 == tmp) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == pumpRunning)) && 0 == tmp) && 1 == systemActive)))) || ((((((((0 == methaneLevelCritical && !(0 == tmp___0)) && 1 == \result) && waterLevel <= 2) && !(0 == \result)) && 1 == tmp) && (((((0 == splverifierCounter && !(0 == pumpRunning)) && 1 == waterLevel) && 0 == tmp) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == pumpRunning)) && 0 == tmp) && 1 == systemActive))) && 0 == \result) && 0 == tmp)) || (((((((((((((!(0 == \result) && \result <= 1) && 0 == methaneLevelCritical) && !(0 == tmp___0)) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 1 == tmp) && tmp___0 <= 1) && \result == systemActive) && 0 == \result) && 0 == tmp) && tmp == systemActive) && 0 == tmp)) || (((((((((((!(0 == tmp___0) && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == tmp) && 1 <= \result) && !(0 == \result)) && 1 <= tmp) && waterLevel <= 1) && \result == systemActive) && 0 == tmp) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:02:51,023 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || (((((((((!(0 == tmp___0) && 0 == splverifierCounter) && 0 == tmp) && 1 <= methaneLevelCritical) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && 0 == tmp) && tmp == systemActive) && 1 == systemActive)) || (((((((((((0 == splverifierCounter && !(0 == pumpRunning)) && 1 == waterLevel) && 0 == tmp) && tmp == systemActive) && 1 == systemActive) || (((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive)) && 0 == methaneLevelCritical) && !(0 == tmp___0)) && 1 == \result) && !(0 == \result)) && waterLevel <= 2)) || (((((((((0 == methaneLevelCritical && !(0 == tmp___0)) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && 0 == tmp) && tmp == systemActive) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && \result == systemActive) && 1 == systemActive)) || (((((((((((0 == splverifierCounter && !(0 == pumpRunning)) && 1 == waterLevel) && 0 == tmp) && tmp == systemActive) && 1 == systemActive) || (((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive)) && !(0 == tmp___0)) && 1 <= methaneLevelCritical) && 1 == \result) && waterLevel <= 2) && !(0 == \result)) [2020-07-28 19:02:51,024 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0 == methaneLevelCritical && !(0 == tmp___0)) && 0 == splverifierCounter) && 1 == \result) && !(0 == \result)) && 1 == tmp) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == tmp) && 1 == systemActive) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((((!(0 == tmp___0) && 0 == splverifierCounter) && 1 == \result) && 1 <= methaneLevelCritical) && !(0 == \result)) && 1 == tmp) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == tmp) && 1 == systemActive)) || ((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && \result == systemActive) && 1 == systemActive) [2020-07-28 19:02:51,024 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((2 <= waterLevel && !(0 == \result)) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) || ((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive)) || ((((((((((!(0 == tmp___0) && 0 == splverifierCounter) && 0 == tmp) && 1 <= methaneLevelCritical) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive)) || ((((((((((0 == methaneLevelCritical && !(0 == tmp___0)) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((2 <= waterLevel && 1 <= methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) [2020-07-28 19:02:51,026 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && 0 == \result) && 1 == systemActive) || (((((((((((((2 <= waterLevel && 1 <= methaneLevelCritical) && 1 <= \result) && !(0 == \result)) && !(0 == tmp___0)) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive)) || ((((((((((0 == methaneLevelCritical && !(0 == tmp___0)) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && 1 == tmp) && waterLevel <= 1) && \result == systemActive) && 0 == \result) && 0 == tmp) && tmp == systemActive)) || ((((((((((!(0 == tmp___0) && 0 == splverifierCounter) && 0 == tmp) && 1 <= methaneLevelCritical) && 1 <= \result) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && 0 == tmp) && tmp == systemActive) && 1 == systemActive)) || (((((((((((((2 <= waterLevel && !(0 == \result)) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == \result) && 0 == tmp) && tmp == systemActive)) || (((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && 1 == systemActive) [2020-07-28 19:02:51,026 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(0 == tmp___0) && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive) || (((((((((0 == methaneLevelCritical && !(0 == tmp___0)) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:02:51,027 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && !(0 == \result)) && tmp == systemActive) && 1 == systemActive) || ((((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && !(0 == \result)) && tmp == systemActive) && 1 == systemActive)) || ((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:02:51,028 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((2 <= waterLevel && !(0 == \result)) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == \result) && 0 == tmp) && tmp == systemActive) && 0 == tmp) || (((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && 0 == \result) && 1 == systemActive) && \result <= 1) && 0 == tmp)) || ((((((((((((!(0 == \result) && waterLevel <= 1) && \result <= 1) && 0 == methaneLevelCritical) && !(0 == tmp___0)) && 0 == splverifierCounter) && 0 == tmp) && 1 == tmp) && \result == systemActive) && 0 == \result) && 0 == tmp) && tmp == systemActive) && 0 == tmp) [2020-07-28 19:02:51,028 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((!(0 == tmp___0) && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive) || (((((((((0 == methaneLevelCritical && !(0 == tmp___0)) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:02:51,029 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((2 <= waterLevel && !(0 == tmp___0)) && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && waterLevel <= 2) && !(0 == \result)) && 0 == \result) && 1 == tmp) && 0 == pumpRunning) && \result == systemActive) && 0 == tmp) && tmp == systemActive) || (((((((((((2 <= waterLevel && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && 0 == pumpRunning) && \result == systemActive) && 0 == tmp) && tmp == systemActive)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && !(0 == tmp)) && waterLevel <= 1) && \result == systemActive) && !(0 == \result)) && 0 == tmp___0) && tmp == systemActive) && 1 == systemActive)) || ((((((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && !(0 == tmp)) && \result == systemActive) && !(0 == \result)) && 0 == tmp___0) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:02:51,030 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((2 <= waterLevel && !(0 == \result)) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && !(0 == tmp)) && tmp___0 <= 2) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == \result) && 1 < tmp___0) && 0 == tmp) && tmp == systemActive) && 0 == tmp [2020-07-28 19:02:51,089 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:02:51,090 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:02:51,092 INFO L168 Benchmark]: Toolchain (without parser) took 56604.21 ms. Allocated memory was 1.0 GB in the beginning and 1.8 GB in the end (delta: 808.5 MB). Free memory was 960.2 MB in the beginning and 889.6 MB in the end (delta: 70.6 MB). Peak memory consumption was 879.1 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:51,092 INFO L168 Benchmark]: CDTParser took 0.27 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:02:51,093 INFO L168 Benchmark]: CACSL2BoogieTranslator took 734.67 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 133.2 MB). Free memory was 960.2 MB in the beginning and 1.1 GB in the end (delta: -147.8 MB). Peak memory consumption was 25.9 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:51,093 INFO L168 Benchmark]: Boogie Procedure Inliner took 99.63 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:02:51,093 INFO L168 Benchmark]: Boogie Preprocessor took 76.42 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:51,094 INFO L168 Benchmark]: RCFGBuilder took 1675.97 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 922.6 MB in the end (delta: 178.8 MB). Peak memory consumption was 178.8 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:51,094 INFO L168 Benchmark]: TraceAbstraction took 53868.78 ms. Allocated memory was 1.2 GB in the beginning and 1.8 GB in the end (delta: 675.3 MB). Free memory was 922.6 MB in the beginning and 889.6 MB in the end (delta: 33.0 MB). Peak memory consumption was 708.2 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:51,094 INFO L168 Benchmark]: Witness Printer took 133.63 ms. Allocated memory is still 1.8 GB. Free memory was 889.6 MB in the beginning and 889.6 MB in the end (delta: 24 B). Peak memory consumption was 24 B. Max. memory is 11.5 GB. [2020-07-28 19:02:51,096 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.27 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 734.67 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 133.2 MB). Free memory was 960.2 MB in the beginning and 1.1 GB in the end (delta: -147.8 MB). Peak memory consumption was 25.9 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 99.63 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Boogie Preprocessor took 76.42 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1675.97 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 922.6 MB in the end (delta: 178.8 MB). Peak memory consumption was 178.8 MB. Max. memory is 11.5 GB. * TraceAbstraction took 53868.78 ms. Allocated memory was 1.2 GB in the beginning and 1.8 GB in the end (delta: 675.3 MB). Free memory was 922.6 MB in the beginning and 889.6 MB in the end (delta: 33.0 MB). Peak memory consumption was 708.2 MB. Max. memory is 11.5 GB. * Witness Printer took 133.63 ms. Allocated memory is still 1.8 GB. Free memory was 889.6 MB in the beginning and 889.6 MB in the end (delta: 24 B). Peak memory consumption was 24 B. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 959]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 959]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 959]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 870]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 57]: Loop Invariant Derived loop invariant: (((((((((((0 == methaneLevelCritical && !(0 == tmp___0)) && 0 == splverifierCounter) && 1 == \result) && !(0 == \result)) && 1 == tmp) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == tmp) && 1 == systemActive) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((((!(0 == tmp___0) && 0 == splverifierCounter) && 1 == \result) && 1 <= methaneLevelCritical) && !(0 == \result)) && 1 == tmp) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == tmp) && 1 == systemActive)) || ((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && \result == systemActive) && 1 == systemActive) - InvariantResult [Line: 431]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 228]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 431]: Loop Invariant Derived loop invariant: (((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && !(0 == \result)) && tmp == systemActive) && 1 == systemActive) || ((((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && !(0 == \result)) && tmp == systemActive) && 1 == systemActive)) || ((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 941]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 228]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 931]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 431]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: (((((((((((((((2 <= waterLevel && !(0 == \result)) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == \result) && 0 == tmp) && tmp == systemActive) && 0 == tmp) || (((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && 0 == \result) && 1 == systemActive) && \result <= 1) && 0 == tmp)) || ((((((((((((!(0 == \result) && waterLevel <= 1) && \result <= 1) && 0 == methaneLevelCritical) && !(0 == tmp___0)) && 0 == splverifierCounter) && 0 == tmp) && 1 == tmp) && \result == systemActive) && 0 == \result) && 0 == tmp) && tmp == systemActive) && 0 == tmp) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 228]: Loop Invariant Derived loop invariant: (((((((((!(0 == tmp___0) && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive) || (((((((((0 == methaneLevelCritical && !(0 == tmp___0)) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 431]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 209]: Loop Invariant Derived loop invariant: (((((((((((((2 <= waterLevel && !(0 == tmp___0)) && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && waterLevel <= 2) && !(0 == \result)) && 0 == \result) && 1 == tmp) && 0 == pumpRunning) && \result == systemActive) && 0 == tmp) && tmp == systemActive) || (((((((((((2 <= waterLevel && !(0 == tmp___0)) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && 0 == pumpRunning) && \result == systemActive) && 0 == tmp) && tmp == systemActive)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && !(0 == tmp)) && waterLevel <= 1) && \result == systemActive) && !(0 == \result)) && 0 == tmp___0) && tmp == systemActive) && 1 == systemActive)) || ((((((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && !(0 == tmp)) && \result == systemActive) && !(0 == \result)) && 0 == tmp___0) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 390]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 260]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 209]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 483]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 65]: Loop Invariant Derived loop invariant: ((((((((((((((((2 <= waterLevel && !(0 == \result)) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) || ((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive)) || ((((((((((!(0 == tmp___0) && 0 == splverifierCounter) && 0 == tmp) && 1 <= methaneLevelCritical) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive)) || ((((((((((0 == methaneLevelCritical && !(0 == tmp___0)) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((2 <= waterLevel && 1 <= methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) - InvariantResult [Line: 57]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 57]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 281]: Loop Invariant Derived loop invariant: ((((((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || (((((((((!(0 == tmp___0) && 0 == splverifierCounter) && 0 == tmp) && 1 <= methaneLevelCritical) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && 0 == tmp) && tmp == systemActive) && 1 == systemActive)) || (((((((((((0 == splverifierCounter && !(0 == pumpRunning)) && 1 == waterLevel) && 0 == tmp) && tmp == systemActive) && 1 == systemActive) || (((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive)) && 0 == methaneLevelCritical) && !(0 == tmp___0)) && 1 == \result) && !(0 == \result)) && waterLevel <= 2)) || (((((((((0 == methaneLevelCritical && !(0 == tmp___0)) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && 0 == tmp) && tmp == systemActive) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && \result == systemActive) && 1 == systemActive)) || (((((((((((0 == splverifierCounter && !(0 == pumpRunning)) && 1 == waterLevel) && 0 == tmp) && tmp == systemActive) && 1 == systemActive) || (((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive)) && !(0 == tmp___0)) && 1 <= methaneLevelCritical) && 1 == \result) && waterLevel <= 2) && !(0 == \result)) - InvariantResult [Line: 209]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 445]: Loop Invariant Derived loop invariant: (((((((((!(0 == tmp___0) && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive) || (((((((((0 == methaneLevelCritical && !(0 == tmp___0)) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 209]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == tmp) && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && 1 == systemActive) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && \result == systemActive) && 0 == \result) && 1 == systemActive) && 0 == tmp) && \result <= 1)) || ((((((((((((1 <= methaneLevelCritical && 1 <= \result) && !(0 == \result)) && 1 <= tmp) && waterLevel <= 1) && 1 == systemActive) && !(0 == tmp___0)) && 0 == splverifierCounter) && 0 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive)) || ((((((((((((((2 <= waterLevel && !(0 == \result)) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == \result) && 0 == tmp) && tmp == systemActive) && 0 == tmp)) || ((((((((((((((!(0 == \result) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) && 0 == methaneLevelCritical) && !(0 == tmp___0)) && 0 == splverifierCounter) && 0 == tmp) && tmp___0 <= 1) && \result == systemActive) && !(0 == pumpRunning)) && 0 == \result) && 0 == tmp) && tmp == systemActive) && 0 == tmp)) || ((((((((((((((2 <= waterLevel && 1 <= methaneLevelCritical) && 1 <= \result) && !(0 == \result)) && 1 <= tmp) && !(0 == tmp___0)) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive)) || ((((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == tmp) && 0 == pumpRunning) && 1 <= tmp) && waterLevel <= 1) && \result == systemActive) && 1 == systemActive) - InvariantResult [Line: 445]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 914]: Loop Invariant Derived loop invariant: ((((0 == methaneLevelCritical && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && 1 == systemActive - InvariantResult [Line: 209]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 390]: Loop Invariant Derived loop invariant: (((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && 0 == \result) && 1 == systemActive) || (((((((((((((2 <= waterLevel && 1 <= methaneLevelCritical) && 1 <= \result) && !(0 == \result)) && !(0 == tmp___0)) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == tmp) && tmp == systemActive)) || ((((((((((0 == methaneLevelCritical && !(0 == tmp___0)) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && 1 == tmp) && waterLevel <= 1) && \result == systemActive) && 0 == \result) && 0 == tmp) && tmp == systemActive)) || ((((((((((!(0 == tmp___0) && 0 == splverifierCounter) && 0 == tmp) && 1 <= methaneLevelCritical) && 1 <= \result) && !(0 == \result)) && waterLevel <= 1) && \result == systemActive) && 0 == tmp) && tmp == systemActive) && 1 == systemActive)) || (((((((((((((2 <= waterLevel && !(0 == \result)) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && !(0 == tmp)) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == \result) && 0 == tmp) && tmp == systemActive)) || (((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && 1 == systemActive) - InvariantResult [Line: 445]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 209]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 390]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 164]: Loop Invariant Derived loop invariant: ((((((((((((((((2 <= waterLevel && !(0 == \result)) && !(0 == tmp___0)) && 0 == methaneLevelCritical) && !(0 == tmp)) && tmp___0 <= 2) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 1 == tmp) && \result == systemActive) && !(0 == pumpRunning)) && 0 == \result) && 1 < tmp___0) && 0 == tmp) && tmp == systemActive) && 0 == tmp - InvariantResult [Line: 431]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 422]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 431]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 271]: Loop Invariant Derived loop invariant: (((((((((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || ((((((((0 == splverifierCounter && 1 <= methaneLevelCritical) && 1 <= \result) && waterLevel <= 2) && 1 == tmp) && 1 <= tmp) && 0 == pumpRunning) && \result == systemActive) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == tmp) && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && 1 == systemActive)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && tmp___0 <= 1) && \result == systemActive) && 0 == \result) && 1 == systemActive) && 0 == tmp) && \result <= 1)) || ((((((((!(0 == tmp___0) && 1 <= methaneLevelCritical) && 1 == \result) && 1 <= \result) && !(0 == \result)) && waterLevel <= 2) && 1 == tmp) && 1 <= tmp) && (((((0 == splverifierCounter && !(0 == pumpRunning)) && 1 == waterLevel) && 0 == tmp) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == pumpRunning)) && 0 == tmp) && 1 == systemActive)))) || ((((((((0 == methaneLevelCritical && !(0 == tmp___0)) && 1 == \result) && waterLevel <= 2) && !(0 == \result)) && 1 == tmp) && (((((0 == splverifierCounter && !(0 == pumpRunning)) && 1 == waterLevel) && 0 == tmp) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == pumpRunning)) && 0 == tmp) && 1 == systemActive))) && 0 == \result) && 0 == tmp)) || (((((((((((((!(0 == \result) && \result <= 1) && 0 == methaneLevelCritical) && !(0 == tmp___0)) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 1 == tmp) && tmp___0 <= 1) && \result == systemActive) && 0 == \result) && 0 == tmp) && tmp == systemActive) && 0 == tmp)) || (((((((((((!(0 == tmp___0) && 0 == splverifierCounter) && 1 <= methaneLevelCritical) && 0 == tmp) && 1 <= \result) && !(0 == \result)) && 1 <= tmp) && waterLevel <= 1) && \result == systemActive) && 0 == tmp) && tmp == systemActive) && 1 == systemActive) - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 123 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 39.3s, OverallIterations: 16, TraceHistogramMax: 2, AutomataDifference: 29.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 14.3s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1693 SDtfs, 3121 SDslu, 3078 SDs, 0 SdLazy, 502 SolverSat, 79 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.9s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 250 GetRequests, 151 SyntacticMatches, 0 SemanticMatches, 99 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 69 ImplicationChecksByTransitivity, 1.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=396occurred in iteration=15, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 5.5s AutomataMinimizationTime, 16 MinimizatonAttempts, 1839 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 45 LocationsWithAnnotation, 45 PreInvPairs, 377 NumberOfFragments, 2021 HoareAnnotationTreeSize, 45 FomulaSimplifications, 17769235 FormulaSimplificationTreeSizeReduction, 3.7s HoareSimplificationTime, 45 FomulaSimplificationsInter, 977150 FormulaSimplificationTreeSizeReductionInter, 10.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 2.2s InterpolantComputationTime, 715 NumberOfCodeBlocks, 715 NumberOfCodeBlocksAsserted, 18 NumberOfCheckSat, 697 ConstructedInterpolants, 0 QuantifiedInterpolants, 67987 SizeOfPredicates, 8 NumberOfNonLiveVariables, 830 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 18 InterpolantComputations, 14 PerfectInterpolantSequences, 104/116 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...