./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash bf8906b0b730189db64c3dc46780e4460503fe36 ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:01:56,632 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:01:56,635 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:01:56,652 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:01:56,653 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:01:56,655 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:01:56,657 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:01:56,670 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:01:56,672 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:01:56,674 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:01:56,676 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:01:56,678 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:01:56,678 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:01:56,682 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:01:56,683 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:01:56,685 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:01:56,687 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:01:56,689 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:01:56,691 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:01:56,696 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:01:56,700 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:01:56,703 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:01:56,706 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:01:56,708 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:01:56,710 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:01:56,711 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:01:56,711 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:01:56,713 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:01:56,713 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:01:56,714 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:01:56,714 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:01:56,716 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:01:56,717 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:01:56,718 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:01:56,719 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:01:56,720 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:01:56,720 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:01:56,721 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:01:56,721 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:01:56,722 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:01:56,723 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:01:56,724 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:01:56,750 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:01:56,750 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:01:56,752 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:01:56,752 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:01:56,752 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:01:56,753 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:01:56,753 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:01:56,753 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:01:56,753 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:01:56,754 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:01:56,755 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:01:56,755 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:01:56,755 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:01:56,756 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:01:56,756 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:01:56,757 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:01:56,757 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:01:56,757 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:01:56,757 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:01:56,758 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:01:56,758 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:01:56,758 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:01:56,759 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:01:56,759 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:01:56,759 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:01:56,759 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:01:56,760 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:01:56,760 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:01:56,760 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:01:56,761 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> bf8906b0b730189db64c3dc46780e4460503fe36 [2020-07-28 19:01:57,049 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:01:57,062 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:01:57,065 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:01:57,066 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:01:57,067 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:01:57,067 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c [2020-07-28 19:01:57,136 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0cac27977/b21b0838b24041e5bc8bfaaad71000bd/FLAG3297699b2 [2020-07-28 19:01:57,662 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:01:57,662 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product53.cil.c [2020-07-28 19:01:57,686 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0cac27977/b21b0838b24041e5bc8bfaaad71000bd/FLAG3297699b2 [2020-07-28 19:01:58,011 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0cac27977/b21b0838b24041e5bc8bfaaad71000bd [2020-07-28 19:01:58,014 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:01:58,018 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:01:58,019 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:01:58,019 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:01:58,023 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:01:58,024 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:01:58" (1/1) ... [2020-07-28 19:01:58,027 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@73af02b8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:58, skipping insertion in model container [2020-07-28 19:01:58,027 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:01:58" (1/1) ... [2020-07-28 19:01:58,035 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:01:58,075 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:01:58,532 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:01:58,544 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:01:58,657 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:01:58,703 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:01:58,704 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:58 WrapperNode [2020-07-28 19:01:58,704 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:01:58,705 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:01:58,705 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:01:58,705 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:01:58,714 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:58" (1/1) ... [2020-07-28 19:01:58,734 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:58" (1/1) ... [2020-07-28 19:01:58,814 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:01:58,815 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:01:58,815 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:01:58,816 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:01:58,826 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:58" (1/1) ... [2020-07-28 19:01:58,826 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:58" (1/1) ... [2020-07-28 19:01:58,834 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:58" (1/1) ... [2020-07-28 19:01:58,835 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:58" (1/1) ... [2020-07-28 19:01:58,857 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:58" (1/1) ... [2020-07-28 19:01:58,871 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:58" (1/1) ... [2020-07-28 19:01:58,876 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:58" (1/1) ... [2020-07-28 19:01:58,882 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:01:58,883 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:01:58,883 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:01:58,884 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:01:58,884 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:58" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:01:58,952 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:01:58,953 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:01:58,953 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:01:58,954 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:02:00,845 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:02:00,845 INFO L295 CfgBuilder]: Removed 282 assume(true) statements. [2020-07-28 19:02:00,851 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:02:00 BoogieIcfgContainer [2020-07-28 19:02:00,852 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:02:00,854 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:02:00,854 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:02:00,858 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:02:00,858 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:01:58" (1/3) ... [2020-07-28 19:02:00,860 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7ca2acc6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:02:00, skipping insertion in model container [2020-07-28 19:02:00,860 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:58" (2/3) ... [2020-07-28 19:02:00,860 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7ca2acc6 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:02:00, skipping insertion in model container [2020-07-28 19:02:00,861 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:02:00" (3/3) ... [2020-07-28 19:02:00,863 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product53.cil.c [2020-07-28 19:02:00,875 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:02:00,884 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:02:00,899 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:02:00,925 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:02:00,925 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:02:00,925 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:02:00,926 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:02:00,927 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:02:00,927 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:02:00,928 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:02:00,928 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:02:00,958 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states. [2020-07-28 19:02:00,968 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-28 19:02:00,968 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:00,970 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:00,970 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:00,978 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:00,979 INFO L82 PathProgramCache]: Analyzing trace with hash 1201783907, now seen corresponding path program 1 times [2020-07-28 19:02:00,989 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:00,990 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [722279785] [2020-07-28 19:02:00,990 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:01,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:01,383 INFO L280 TraceCheckUtils]: 0: Hoare triple {198#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {198#true} is VALID [2020-07-28 19:02:01,384 INFO L280 TraceCheckUtils]: 1: Hoare triple {198#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {198#true} is VALID [2020-07-28 19:02:01,385 INFO L280 TraceCheckUtils]: 2: Hoare triple {198#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {198#true} is VALID [2020-07-28 19:02:01,385 INFO L280 TraceCheckUtils]: 3: Hoare triple {198#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {198#true} is VALID [2020-07-28 19:02:01,386 INFO L280 TraceCheckUtils]: 4: Hoare triple {198#true} assume 0 != main_~tmp~10; {198#true} is VALID [2020-07-28 19:02:01,387 INFO L280 TraceCheckUtils]: 5: Hoare triple {198#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {198#true} is VALID [2020-07-28 19:02:01,388 INFO L280 TraceCheckUtils]: 6: Hoare triple {198#true} assume false; {199#false} is VALID [2020-07-28 19:02:01,388 INFO L280 TraceCheckUtils]: 7: Hoare triple {199#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {199#false} is VALID [2020-07-28 19:02:01,389 INFO L280 TraceCheckUtils]: 8: Hoare triple {199#false} assume !(0 != ~pumpRunning~0); {199#false} is VALID [2020-07-28 19:02:01,389 INFO L280 TraceCheckUtils]: 9: Hoare triple {199#false} assume !(0 != ~systemActive~0); {199#false} is VALID [2020-07-28 19:02:01,390 INFO L280 TraceCheckUtils]: 10: Hoare triple {199#false} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {199#false} is VALID [2020-07-28 19:02:01,390 INFO L280 TraceCheckUtils]: 11: Hoare triple {199#false} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {199#false} is VALID [2020-07-28 19:02:01,390 INFO L280 TraceCheckUtils]: 12: Hoare triple {199#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {199#false} is VALID [2020-07-28 19:02:01,391 INFO L280 TraceCheckUtils]: 13: Hoare triple {199#false} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {199#false} is VALID [2020-07-28 19:02:01,392 INFO L280 TraceCheckUtils]: 14: Hoare triple {199#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {199#false} is VALID [2020-07-28 19:02:01,392 INFO L280 TraceCheckUtils]: 15: Hoare triple {199#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {199#false} is VALID [2020-07-28 19:02:01,392 INFO L280 TraceCheckUtils]: 16: Hoare triple {199#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {199#false} is VALID [2020-07-28 19:02:01,393 INFO L280 TraceCheckUtils]: 17: Hoare triple {199#false} assume !false; {199#false} is VALID [2020-07-28 19:02:01,397 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:01,398 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [722279785] [2020-07-28 19:02:01,399 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:01,399 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:02:01,400 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1191360048] [2020-07-28 19:02:01,406 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:02:01,408 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:01,412 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:02:01,457 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:01,457 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:02:01,458 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:01,466 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:02:01,467 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:02:01,470 INFO L87 Difference]: Start difference. First operand 195 states. Second operand 2 states. [2020-07-28 19:02:01,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:01,949 INFO L93 Difference]: Finished difference Result 384 states and 587 transitions. [2020-07-28 19:02:01,949 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:02:01,949 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:02:01,949 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:01,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:02:01,965 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 587 transitions. [2020-07-28 19:02:01,965 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:02:01,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 587 transitions. [2020-07-28 19:02:01,972 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 587 transitions. [2020-07-28 19:02:02,631 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 587 edges. 587 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:02,663 INFO L225 Difference]: With dead ends: 384 [2020-07-28 19:02:02,663 INFO L226 Difference]: Without dead ends: 191 [2020-07-28 19:02:02,670 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:02:02,690 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 191 states. [2020-07-28 19:02:02,744 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 191 to 191. [2020-07-28 19:02:02,745 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:02,745 INFO L82 GeneralOperation]: Start isEquivalent. First operand 191 states. Second operand 191 states. [2020-07-28 19:02:02,746 INFO L74 IsIncluded]: Start isIncluded. First operand 191 states. Second operand 191 states. [2020-07-28 19:02:02,746 INFO L87 Difference]: Start difference. First operand 191 states. Second operand 191 states. [2020-07-28 19:02:02,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:02,759 INFO L93 Difference]: Finished difference Result 191 states and 285 transitions. [2020-07-28 19:02:02,760 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 285 transitions. [2020-07-28 19:02:02,762 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:02,762 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:02,762 INFO L74 IsIncluded]: Start isIncluded. First operand 191 states. Second operand 191 states. [2020-07-28 19:02:02,762 INFO L87 Difference]: Start difference. First operand 191 states. Second operand 191 states. [2020-07-28 19:02:02,774 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:02,775 INFO L93 Difference]: Finished difference Result 191 states and 285 transitions. [2020-07-28 19:02:02,775 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 285 transitions. [2020-07-28 19:02:02,777 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:02,777 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:02,777 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:02,778 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:02,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 191 states. [2020-07-28 19:02:02,789 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 285 transitions. [2020-07-28 19:02:02,790 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 285 transitions. Word has length 18 [2020-07-28 19:02:02,791 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:02,791 INFO L479 AbstractCegarLoop]: Abstraction has 191 states and 285 transitions. [2020-07-28 19:02:02,791 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:02:02,791 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 285 transitions. [2020-07-28 19:02:02,792 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 19:02:02,793 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:02,793 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:02,793 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:02:02,794 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:02,794 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:02,794 INFO L82 PathProgramCache]: Analyzing trace with hash 290753154, now seen corresponding path program 1 times [2020-07-28 19:02:02,794 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:02,795 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1536471320] [2020-07-28 19:02:02,795 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:02,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:02,894 INFO L280 TraceCheckUtils]: 0: Hoare triple {1361#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {1361#true} is VALID [2020-07-28 19:02:02,895 INFO L280 TraceCheckUtils]: 1: Hoare triple {1361#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {1361#true} is VALID [2020-07-28 19:02:02,895 INFO L280 TraceCheckUtils]: 2: Hoare triple {1361#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {1361#true} is VALID [2020-07-28 19:02:02,895 INFO L280 TraceCheckUtils]: 3: Hoare triple {1361#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {1361#true} is VALID [2020-07-28 19:02:02,895 INFO L280 TraceCheckUtils]: 4: Hoare triple {1361#true} assume 0 != main_~tmp~10; {1361#true} is VALID [2020-07-28 19:02:02,896 INFO L280 TraceCheckUtils]: 5: Hoare triple {1361#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1363#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:02:02,897 INFO L280 TraceCheckUtils]: 6: Hoare triple {1363#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {1363#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:02:02,898 INFO L280 TraceCheckUtils]: 7: Hoare triple {1363#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {1362#false} is VALID [2020-07-28 19:02:02,898 INFO L280 TraceCheckUtils]: 8: Hoare triple {1362#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {1362#false} is VALID [2020-07-28 19:02:02,898 INFO L280 TraceCheckUtils]: 9: Hoare triple {1362#false} assume !(0 != ~pumpRunning~0); {1362#false} is VALID [2020-07-28 19:02:02,898 INFO L280 TraceCheckUtils]: 10: Hoare triple {1362#false} assume !(0 != ~systemActive~0); {1362#false} is VALID [2020-07-28 19:02:02,899 INFO L280 TraceCheckUtils]: 11: Hoare triple {1362#false} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {1362#false} is VALID [2020-07-28 19:02:02,899 INFO L280 TraceCheckUtils]: 12: Hoare triple {1362#false} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {1362#false} is VALID [2020-07-28 19:02:02,899 INFO L280 TraceCheckUtils]: 13: Hoare triple {1362#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {1362#false} is VALID [2020-07-28 19:02:02,900 INFO L280 TraceCheckUtils]: 14: Hoare triple {1362#false} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {1362#false} is VALID [2020-07-28 19:02:02,900 INFO L280 TraceCheckUtils]: 15: Hoare triple {1362#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {1362#false} is VALID [2020-07-28 19:02:02,900 INFO L280 TraceCheckUtils]: 16: Hoare triple {1362#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {1362#false} is VALID [2020-07-28 19:02:02,900 INFO L280 TraceCheckUtils]: 17: Hoare triple {1362#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {1362#false} is VALID [2020-07-28 19:02:02,901 INFO L280 TraceCheckUtils]: 18: Hoare triple {1362#false} assume !false; {1362#false} is VALID [2020-07-28 19:02:02,902 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:02,902 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1536471320] [2020-07-28 19:02:02,903 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:02,903 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:02:02,903 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [319424733] [2020-07-28 19:02:02,905 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:02:02,905 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:02,905 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:02:02,940 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:02,940 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:02:02,940 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:02,940 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:02:02,941 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:02,941 INFO L87 Difference]: Start difference. First operand 191 states and 285 transitions. Second operand 3 states. [2020-07-28 19:02:03,224 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:03,224 INFO L93 Difference]: Finished difference Result 191 states and 285 transitions. [2020-07-28 19:02:03,224 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:02:03,224 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:02:03,224 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:03,225 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:03,229 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 285 transitions. [2020-07-28 19:02:03,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:03,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 285 transitions. [2020-07-28 19:02:03,234 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 285 transitions. [2020-07-28 19:02:03,567 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 285 edges. 285 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:03,570 INFO L225 Difference]: With dead ends: 191 [2020-07-28 19:02:03,570 INFO L226 Difference]: Without dead ends: 73 [2020-07-28 19:02:03,572 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:03,572 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2020-07-28 19:02:03,600 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2020-07-28 19:02:03,601 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:03,601 INFO L82 GeneralOperation]: Start isEquivalent. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:03,601 INFO L74 IsIncluded]: Start isIncluded. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:03,602 INFO L87 Difference]: Start difference. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:03,605 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:03,605 INFO L93 Difference]: Finished difference Result 73 states and 108 transitions. [2020-07-28 19:02:03,605 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 108 transitions. [2020-07-28 19:02:03,606 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:03,606 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:03,606 INFO L74 IsIncluded]: Start isIncluded. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:03,606 INFO L87 Difference]: Start difference. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:03,609 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:03,609 INFO L93 Difference]: Finished difference Result 73 states and 108 transitions. [2020-07-28 19:02:03,609 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 108 transitions. [2020-07-28 19:02:03,610 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:03,610 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:03,610 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:03,611 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:03,611 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 73 states. [2020-07-28 19:02:03,614 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 108 transitions. [2020-07-28 19:02:03,614 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 108 transitions. Word has length 19 [2020-07-28 19:02:03,614 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:03,614 INFO L479 AbstractCegarLoop]: Abstraction has 73 states and 108 transitions. [2020-07-28 19:02:03,615 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:02:03,615 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 108 transitions. [2020-07-28 19:02:03,615 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 19:02:03,616 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:03,616 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:03,616 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:02:03,616 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:03,617 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:03,617 INFO L82 PathProgramCache]: Analyzing trace with hash -2129855336, now seen corresponding path program 1 times [2020-07-28 19:02:03,617 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:03,618 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1181571028] [2020-07-28 19:02:03,618 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:03,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:03,723 INFO L280 TraceCheckUtils]: 0: Hoare triple {1868#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {1870#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:03,724 INFO L280 TraceCheckUtils]: 1: Hoare triple {1870#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {1870#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:03,724 INFO L280 TraceCheckUtils]: 2: Hoare triple {1870#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {1871#(= |ULTIMATE.start_valid_product_#res| ~systemActive~0)} is VALID [2020-07-28 19:02:03,725 INFO L280 TraceCheckUtils]: 3: Hoare triple {1871#(= |ULTIMATE.start_valid_product_#res| ~systemActive~0)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {1872#(= ULTIMATE.start_main_~tmp~10 ~systemActive~0)} is VALID [2020-07-28 19:02:03,726 INFO L280 TraceCheckUtils]: 4: Hoare triple {1872#(= ULTIMATE.start_main_~tmp~10 ~systemActive~0)} assume 0 != main_~tmp~10; {1873#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:03,727 INFO L280 TraceCheckUtils]: 5: Hoare triple {1873#(not (= 0 ~systemActive~0))} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1873#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:03,727 INFO L280 TraceCheckUtils]: 6: Hoare triple {1873#(not (= 0 ~systemActive~0))} assume !false; {1873#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:03,728 INFO L280 TraceCheckUtils]: 7: Hoare triple {1873#(not (= 0 ~systemActive~0))} assume test_~splverifierCounter~0 < 4; {1873#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:03,729 INFO L280 TraceCheckUtils]: 8: Hoare triple {1873#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {1873#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:03,729 INFO L280 TraceCheckUtils]: 9: Hoare triple {1873#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp~0); {1873#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:03,730 INFO L280 TraceCheckUtils]: 10: Hoare triple {1873#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {1873#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:03,730 INFO L280 TraceCheckUtils]: 11: Hoare triple {1873#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___0~0); {1873#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:03,731 INFO L280 TraceCheckUtils]: 12: Hoare triple {1873#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {1873#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:03,732 INFO L280 TraceCheckUtils]: 13: Hoare triple {1873#(not (= 0 ~systemActive~0))} assume 0 != test_~tmp___2~0; {1873#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:03,732 INFO L280 TraceCheckUtils]: 14: Hoare triple {1873#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {1873#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:03,733 INFO L280 TraceCheckUtils]: 15: Hoare triple {1873#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {1869#false} is VALID [2020-07-28 19:02:03,734 INFO L280 TraceCheckUtils]: 16: Hoare triple {1869#false} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {1869#false} is VALID [2020-07-28 19:02:03,734 INFO L280 TraceCheckUtils]: 17: Hoare triple {1869#false} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {1869#false} is VALID [2020-07-28 19:02:03,734 INFO L280 TraceCheckUtils]: 18: Hoare triple {1869#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {1869#false} is VALID [2020-07-28 19:02:03,735 INFO L280 TraceCheckUtils]: 19: Hoare triple {1869#false} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {1869#false} is VALID [2020-07-28 19:02:03,735 INFO L280 TraceCheckUtils]: 20: Hoare triple {1869#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {1869#false} is VALID [2020-07-28 19:02:03,736 INFO L280 TraceCheckUtils]: 21: Hoare triple {1869#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {1869#false} is VALID [2020-07-28 19:02:03,736 INFO L280 TraceCheckUtils]: 22: Hoare triple {1869#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {1869#false} is VALID [2020-07-28 19:02:03,736 INFO L280 TraceCheckUtils]: 23: Hoare triple {1869#false} assume !false; {1869#false} is VALID [2020-07-28 19:02:03,738 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:03,738 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1181571028] [2020-07-28 19:02:03,738 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:03,739 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:03,739 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1198707834] [2020-07-28 19:02:03,739 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 24 [2020-07-28 19:02:03,739 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:03,740 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:02:03,777 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:03,778 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:02:03,778 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:03,778 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:02:03,779 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:02:03,779 INFO L87 Difference]: Start difference. First operand 73 states and 108 transitions. Second operand 6 states. [2020-07-28 19:02:04,359 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:04,359 INFO L93 Difference]: Finished difference Result 140 states and 210 transitions. [2020-07-28 19:02:04,359 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:04,359 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 24 [2020-07-28 19:02:04,360 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:04,360 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:04,363 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 210 transitions. [2020-07-28 19:02:04,363 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:04,366 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 210 transitions. [2020-07-28 19:02:04,366 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 210 transitions. [2020-07-28 19:02:04,644 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 210 edges. 210 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:04,646 INFO L225 Difference]: With dead ends: 140 [2020-07-28 19:02:04,646 INFO L226 Difference]: Without dead ends: 73 [2020-07-28 19:02:04,647 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:04,650 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2020-07-28 19:02:04,717 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2020-07-28 19:02:04,718 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:04,718 INFO L82 GeneralOperation]: Start isEquivalent. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:04,718 INFO L74 IsIncluded]: Start isIncluded. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:04,718 INFO L87 Difference]: Start difference. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:04,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:04,721 INFO L93 Difference]: Finished difference Result 73 states and 107 transitions. [2020-07-28 19:02:04,723 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 107 transitions. [2020-07-28 19:02:04,724 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:04,724 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:04,724 INFO L74 IsIncluded]: Start isIncluded. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:04,724 INFO L87 Difference]: Start difference. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:04,732 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:04,732 INFO L93 Difference]: Finished difference Result 73 states and 107 transitions. [2020-07-28 19:02:04,732 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 107 transitions. [2020-07-28 19:02:04,733 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:04,733 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:04,733 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:04,735 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:04,736 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 73 states. [2020-07-28 19:02:04,738 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 107 transitions. [2020-07-28 19:02:04,738 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 107 transitions. Word has length 24 [2020-07-28 19:02:04,739 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:04,739 INFO L479 AbstractCegarLoop]: Abstraction has 73 states and 107 transitions. [2020-07-28 19:02:04,739 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:04,739 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 107 transitions. [2020-07-28 19:02:04,740 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2020-07-28 19:02:04,740 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:04,740 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:04,740 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:02:04,740 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:04,741 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:04,741 INFO L82 PathProgramCache]: Analyzing trace with hash 1287566232, now seen corresponding path program 1 times [2020-07-28 19:02:04,741 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:04,741 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1306957387] [2020-07-28 19:02:04,742 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:04,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:04,866 INFO L280 TraceCheckUtils]: 0: Hoare triple {2311#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,867 INFO L280 TraceCheckUtils]: 1: Hoare triple {2313#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,868 INFO L280 TraceCheckUtils]: 2: Hoare triple {2313#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,868 INFO L280 TraceCheckUtils]: 3: Hoare triple {2313#(= 0 ~pumpRunning~0)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,869 INFO L280 TraceCheckUtils]: 4: Hoare triple {2313#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~10; {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,869 INFO L280 TraceCheckUtils]: 5: Hoare triple {2313#(= 0 ~pumpRunning~0)} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,870 INFO L280 TraceCheckUtils]: 6: Hoare triple {2313#(= 0 ~pumpRunning~0)} assume !false; {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,870 INFO L280 TraceCheckUtils]: 7: Hoare triple {2313#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,871 INFO L280 TraceCheckUtils]: 8: Hoare triple {2313#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,871 INFO L280 TraceCheckUtils]: 9: Hoare triple {2313#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~0); {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,871 INFO L280 TraceCheckUtils]: 10: Hoare triple {2313#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,872 INFO L280 TraceCheckUtils]: 11: Hoare triple {2313#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~0); {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,873 INFO L280 TraceCheckUtils]: 12: Hoare triple {2313#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,874 INFO L280 TraceCheckUtils]: 13: Hoare triple {2313#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,874 INFO L280 TraceCheckUtils]: 14: Hoare triple {2313#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,875 INFO L280 TraceCheckUtils]: 15: Hoare triple {2313#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,875 INFO L280 TraceCheckUtils]: 16: Hoare triple {2313#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,875 INFO L280 TraceCheckUtils]: 17: Hoare triple {2313#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {2313#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:04,876 INFO L280 TraceCheckUtils]: 18: Hoare triple {2313#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {2312#false} is VALID [2020-07-28 19:02:04,876 INFO L280 TraceCheckUtils]: 19: Hoare triple {2312#false} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {2312#false} is VALID [2020-07-28 19:02:04,876 INFO L280 TraceCheckUtils]: 20: Hoare triple {2312#false} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {2312#false} is VALID [2020-07-28 19:02:04,877 INFO L280 TraceCheckUtils]: 21: Hoare triple {2312#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {2312#false} is VALID [2020-07-28 19:02:04,877 INFO L280 TraceCheckUtils]: 22: Hoare triple {2312#false} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {2312#false} is VALID [2020-07-28 19:02:04,877 INFO L280 TraceCheckUtils]: 23: Hoare triple {2312#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {2312#false} is VALID [2020-07-28 19:02:04,877 INFO L280 TraceCheckUtils]: 24: Hoare triple {2312#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {2312#false} is VALID [2020-07-28 19:02:04,878 INFO L280 TraceCheckUtils]: 25: Hoare triple {2312#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {2312#false} is VALID [2020-07-28 19:02:04,878 INFO L280 TraceCheckUtils]: 26: Hoare triple {2312#false} assume !false; {2312#false} is VALID [2020-07-28 19:02:04,879 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:04,879 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1306957387] [2020-07-28 19:02:04,879 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:04,879 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:02:04,880 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [184268663] [2020-07-28 19:02:04,880 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 27 [2020-07-28 19:02:04,880 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:04,880 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:02:04,918 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 27 edges. 27 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:04,918 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:02:04,919 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:04,919 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:02:04,919 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:04,919 INFO L87 Difference]: Start difference. First operand 73 states and 107 transitions. Second operand 3 states. [2020-07-28 19:02:05,135 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:05,138 INFO L93 Difference]: Finished difference Result 151 states and 223 transitions. [2020-07-28 19:02:05,138 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:02:05,139 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 27 [2020-07-28 19:02:05,139 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:05,139 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:05,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 223 transitions. [2020-07-28 19:02:05,143 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:05,146 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 223 transitions. [2020-07-28 19:02:05,146 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 223 transitions. [2020-07-28 19:02:05,358 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 223 edges. 223 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:05,360 INFO L225 Difference]: With dead ends: 151 [2020-07-28 19:02:05,360 INFO L226 Difference]: Without dead ends: 84 [2020-07-28 19:02:05,361 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:05,361 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2020-07-28 19:02:05,443 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 82. [2020-07-28 19:02:05,443 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:05,443 INFO L82 GeneralOperation]: Start isEquivalent. First operand 84 states. Second operand 82 states. [2020-07-28 19:02:05,443 INFO L74 IsIncluded]: Start isIncluded. First operand 84 states. Second operand 82 states. [2020-07-28 19:02:05,443 INFO L87 Difference]: Start difference. First operand 84 states. Second operand 82 states. [2020-07-28 19:02:05,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:05,449 INFO L93 Difference]: Finished difference Result 84 states and 117 transitions. [2020-07-28 19:02:05,449 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 117 transitions. [2020-07-28 19:02:05,450 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:05,450 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:05,450 INFO L74 IsIncluded]: Start isIncluded. First operand 82 states. Second operand 84 states. [2020-07-28 19:02:05,450 INFO L87 Difference]: Start difference. First operand 82 states. Second operand 84 states. [2020-07-28 19:02:05,457 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:05,457 INFO L93 Difference]: Finished difference Result 84 states and 117 transitions. [2020-07-28 19:02:05,457 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 117 transitions. [2020-07-28 19:02:05,458 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:05,458 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:05,458 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:05,458 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:05,459 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 82 states. [2020-07-28 19:02:05,462 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 116 transitions. [2020-07-28 19:02:05,463 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 116 transitions. Word has length 27 [2020-07-28 19:02:05,463 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:05,463 INFO L479 AbstractCegarLoop]: Abstraction has 82 states and 116 transitions. [2020-07-28 19:02:05,463 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:02:05,464 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 116 transitions. [2020-07-28 19:02:05,465 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:05,467 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:05,468 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:05,468 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:02:05,468 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:05,469 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:05,469 INFO L82 PathProgramCache]: Analyzing trace with hash 1887369033, now seen corresponding path program 1 times [2020-07-28 19:02:05,469 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:05,469 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [477698099] [2020-07-28 19:02:05,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:05,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:05,610 INFO L280 TraceCheckUtils]: 0: Hoare triple {2797#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {2797#true} is VALID [2020-07-28 19:02:05,611 INFO L280 TraceCheckUtils]: 1: Hoare triple {2797#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {2797#true} is VALID [2020-07-28 19:02:05,611 INFO L280 TraceCheckUtils]: 2: Hoare triple {2797#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {2797#true} is VALID [2020-07-28 19:02:05,612 INFO L280 TraceCheckUtils]: 3: Hoare triple {2797#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {2797#true} is VALID [2020-07-28 19:02:05,612 INFO L280 TraceCheckUtils]: 4: Hoare triple {2797#true} assume 0 != main_~tmp~10; {2797#true} is VALID [2020-07-28 19:02:05,613 INFO L280 TraceCheckUtils]: 5: Hoare triple {2797#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2797#true} is VALID [2020-07-28 19:02:05,613 INFO L280 TraceCheckUtils]: 6: Hoare triple {2797#true} assume !false; {2797#true} is VALID [2020-07-28 19:02:05,614 INFO L280 TraceCheckUtils]: 7: Hoare triple {2797#true} assume test_~splverifierCounter~0 < 4; {2797#true} is VALID [2020-07-28 19:02:05,614 INFO L280 TraceCheckUtils]: 8: Hoare triple {2797#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {2797#true} is VALID [2020-07-28 19:02:05,614 INFO L280 TraceCheckUtils]: 9: Hoare triple {2797#true} assume !(0 != test_~tmp~0); {2797#true} is VALID [2020-07-28 19:02:05,614 INFO L280 TraceCheckUtils]: 10: Hoare triple {2797#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {2797#true} is VALID [2020-07-28 19:02:05,615 INFO L280 TraceCheckUtils]: 11: Hoare triple {2797#true} assume !(0 != test_~tmp___0~0); {2797#true} is VALID [2020-07-28 19:02:05,615 INFO L280 TraceCheckUtils]: 12: Hoare triple {2797#true} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {2797#true} is VALID [2020-07-28 19:02:05,615 INFO L280 TraceCheckUtils]: 13: Hoare triple {2797#true} assume 0 != test_~tmp___2~0; {2797#true} is VALID [2020-07-28 19:02:05,615 INFO L280 TraceCheckUtils]: 14: Hoare triple {2797#true} assume !(0 != ~pumpRunning~0); {2797#true} is VALID [2020-07-28 19:02:05,616 INFO L280 TraceCheckUtils]: 15: Hoare triple {2797#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {2797#true} is VALID [2020-07-28 19:02:05,616 INFO L280 TraceCheckUtils]: 16: Hoare triple {2797#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {2797#true} is VALID [2020-07-28 19:02:05,616 INFO L280 TraceCheckUtils]: 17: Hoare triple {2797#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {2797#true} is VALID [2020-07-28 19:02:05,616 INFO L280 TraceCheckUtils]: 18: Hoare triple {2797#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {2797#true} is VALID [2020-07-28 19:02:05,617 INFO L280 TraceCheckUtils]: 19: Hoare triple {2797#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {2797#true} is VALID [2020-07-28 19:02:05,617 INFO L280 TraceCheckUtils]: 20: Hoare triple {2797#true} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {2797#true} is VALID [2020-07-28 19:02:05,618 INFO L280 TraceCheckUtils]: 21: Hoare triple {2797#true} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {2799#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} is VALID [2020-07-28 19:02:05,619 INFO L280 TraceCheckUtils]: 22: Hoare triple {2799#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {2800#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:02:05,620 INFO L280 TraceCheckUtils]: 23: Hoare triple {2800#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__highWaterSensor_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret5 && processEnvironment__wrappee__highWaterSensor_#t~ret5 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret5;havoc processEnvironment__wrappee__highWaterSensor_#t~ret5; {2801#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1)} is VALID [2020-07-28 19:02:05,621 INFO L280 TraceCheckUtils]: 24: Hoare triple {2801#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;~pumpRunning~0 := 1; {2798#false} is VALID [2020-07-28 19:02:05,622 INFO L280 TraceCheckUtils]: 25: Hoare triple {2798#false} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {2798#false} is VALID [2020-07-28 19:02:05,622 INFO L280 TraceCheckUtils]: 26: Hoare triple {2798#false} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {2798#false} is VALID [2020-07-28 19:02:05,622 INFO L280 TraceCheckUtils]: 27: Hoare triple {2798#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {2798#false} is VALID [2020-07-28 19:02:05,622 INFO L280 TraceCheckUtils]: 28: Hoare triple {2798#false} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {2798#false} is VALID [2020-07-28 19:02:05,623 INFO L280 TraceCheckUtils]: 29: Hoare triple {2798#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {2798#false} is VALID [2020-07-28 19:02:05,623 INFO L280 TraceCheckUtils]: 30: Hoare triple {2798#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {2798#false} is VALID [2020-07-28 19:02:05,623 INFO L280 TraceCheckUtils]: 31: Hoare triple {2798#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {2798#false} is VALID [2020-07-28 19:02:05,623 INFO L280 TraceCheckUtils]: 32: Hoare triple {2798#false} assume !false; {2798#false} is VALID [2020-07-28 19:02:05,625 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:05,625 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [477698099] [2020-07-28 19:02:05,625 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:05,625 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:05,626 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1233716407] [2020-07-28 19:02:05,626 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2020-07-28 19:02:05,626 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:05,626 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:05,670 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:05,670 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:05,670 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:05,671 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:05,671 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:05,671 INFO L87 Difference]: Start difference. First operand 82 states and 116 transitions. Second operand 5 states. [2020-07-28 19:02:06,421 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:06,421 INFO L93 Difference]: Finished difference Result 216 states and 303 transitions. [2020-07-28 19:02:06,421 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:02:06,422 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2020-07-28 19:02:06,422 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:06,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:06,425 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 243 transitions. [2020-07-28 19:02:06,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:06,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 243 transitions. [2020-07-28 19:02:06,428 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 243 transitions. [2020-07-28 19:02:06,705 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 243 edges. 243 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:06,708 INFO L225 Difference]: With dead ends: 216 [2020-07-28 19:02:06,708 INFO L226 Difference]: Without dead ends: 140 [2020-07-28 19:02:06,709 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:06,709 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 140 states. [2020-07-28 19:02:06,807 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 140 to 91. [2020-07-28 19:02:06,807 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:06,807 INFO L82 GeneralOperation]: Start isEquivalent. First operand 140 states. Second operand 91 states. [2020-07-28 19:02:06,807 INFO L74 IsIncluded]: Start isIncluded. First operand 140 states. Second operand 91 states. [2020-07-28 19:02:06,808 INFO L87 Difference]: Start difference. First operand 140 states. Second operand 91 states. [2020-07-28 19:02:06,813 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:06,813 INFO L93 Difference]: Finished difference Result 140 states and 190 transitions. [2020-07-28 19:02:06,813 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 190 transitions. [2020-07-28 19:02:06,814 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:06,814 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:06,814 INFO L74 IsIncluded]: Start isIncluded. First operand 91 states. Second operand 140 states. [2020-07-28 19:02:06,814 INFO L87 Difference]: Start difference. First operand 91 states. Second operand 140 states. [2020-07-28 19:02:06,819 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:06,819 INFO L93 Difference]: Finished difference Result 140 states and 190 transitions. [2020-07-28 19:02:06,820 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 190 transitions. [2020-07-28 19:02:06,820 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:06,820 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:06,821 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:06,821 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:06,821 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 91 states. [2020-07-28 19:02:06,824 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 125 transitions. [2020-07-28 19:02:06,824 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 125 transitions. Word has length 33 [2020-07-28 19:02:06,824 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:06,825 INFO L479 AbstractCegarLoop]: Abstraction has 91 states and 125 transitions. [2020-07-28 19:02:06,825 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:06,825 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 125 transitions. [2020-07-28 19:02:06,826 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:06,826 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:06,826 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:06,826 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:02:06,827 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:06,827 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:06,827 INFO L82 PathProgramCache]: Analyzing trace with hash 759972940, now seen corresponding path program 1 times [2020-07-28 19:02:06,827 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:06,828 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [932883370] [2020-07-28 19:02:06,828 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:06,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:06,910 INFO L280 TraceCheckUtils]: 0: Hoare triple {3503#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,911 INFO L280 TraceCheckUtils]: 1: Hoare triple {3505#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,912 INFO L280 TraceCheckUtils]: 2: Hoare triple {3505#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,913 INFO L280 TraceCheckUtils]: 3: Hoare triple {3505#(= 1 ~waterLevel~0)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,915 INFO L280 TraceCheckUtils]: 4: Hoare triple {3505#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,918 INFO L280 TraceCheckUtils]: 5: Hoare triple {3505#(= 1 ~waterLevel~0)} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,921 INFO L280 TraceCheckUtils]: 6: Hoare triple {3505#(= 1 ~waterLevel~0)} assume !false; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,921 INFO L280 TraceCheckUtils]: 7: Hoare triple {3505#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,922 INFO L280 TraceCheckUtils]: 8: Hoare triple {3505#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,928 INFO L280 TraceCheckUtils]: 9: Hoare triple {3505#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~0); {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,929 INFO L280 TraceCheckUtils]: 10: Hoare triple {3505#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,930 INFO L280 TraceCheckUtils]: 11: Hoare triple {3505#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,930 INFO L280 TraceCheckUtils]: 12: Hoare triple {3505#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,931 INFO L280 TraceCheckUtils]: 13: Hoare triple {3505#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,931 INFO L280 TraceCheckUtils]: 14: Hoare triple {3505#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,932 INFO L280 TraceCheckUtils]: 15: Hoare triple {3505#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,932 INFO L280 TraceCheckUtils]: 16: Hoare triple {3505#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,933 INFO L280 TraceCheckUtils]: 17: Hoare triple {3505#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,935 INFO L280 TraceCheckUtils]: 18: Hoare triple {3505#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,936 INFO L280 TraceCheckUtils]: 19: Hoare triple {3505#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,936 INFO L280 TraceCheckUtils]: 20: Hoare triple {3505#(= 1 ~waterLevel~0)} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,937 INFO L280 TraceCheckUtils]: 21: Hoare triple {3505#(= 1 ~waterLevel~0)} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,937 INFO L280 TraceCheckUtils]: 22: Hoare triple {3505#(= 1 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,937 INFO L280 TraceCheckUtils]: 23: Hoare triple {3505#(= 1 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret5 && processEnvironment__wrappee__highWaterSensor_#t~ret5 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret5;havoc processEnvironment__wrappee__highWaterSensor_#t~ret5; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,938 INFO L280 TraceCheckUtils]: 24: Hoare triple {3505#(= 1 ~waterLevel~0)} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~1); {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,939 INFO L280 TraceCheckUtils]: 25: Hoare triple {3505#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,939 INFO L280 TraceCheckUtils]: 26: Hoare triple {3505#(= 1 ~waterLevel~0)} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {3505#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:06,940 INFO L280 TraceCheckUtils]: 27: Hoare triple {3505#(= 1 ~waterLevel~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {3506#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:02:06,941 INFO L280 TraceCheckUtils]: 28: Hoare triple {3506#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {3507#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3)} is VALID [2020-07-28 19:02:06,943 INFO L280 TraceCheckUtils]: 29: Hoare triple {3507#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {3504#false} is VALID [2020-07-28 19:02:06,943 INFO L280 TraceCheckUtils]: 30: Hoare triple {3504#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {3504#false} is VALID [2020-07-28 19:02:06,943 INFO L280 TraceCheckUtils]: 31: Hoare triple {3504#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {3504#false} is VALID [2020-07-28 19:02:06,944 INFO L280 TraceCheckUtils]: 32: Hoare triple {3504#false} assume !false; {3504#false} is VALID [2020-07-28 19:02:06,946 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:06,947 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [932883370] [2020-07-28 19:02:06,947 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:06,947 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:06,947 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1951629318] [2020-07-28 19:02:06,948 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2020-07-28 19:02:06,948 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:06,948 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:06,992 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:06,992 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:06,993 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:06,993 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:06,993 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:06,993 INFO L87 Difference]: Start difference. First operand 91 states and 125 transitions. Second operand 5 states. [2020-07-28 19:02:08,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:08,181 INFO L93 Difference]: Finished difference Result 444 states and 625 transitions. [2020-07-28 19:02:08,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:08,181 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2020-07-28 19:02:08,182 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:08,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:08,185 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 416 transitions. [2020-07-28 19:02:08,186 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:08,190 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 416 transitions. [2020-07-28 19:02:08,190 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 416 transitions. [2020-07-28 19:02:08,647 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 416 edges. 416 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:08,658 INFO L225 Difference]: With dead ends: 444 [2020-07-28 19:02:08,658 INFO L226 Difference]: Without dead ends: 359 [2020-07-28 19:02:08,658 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:08,659 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 359 states. [2020-07-28 19:02:08,830 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 359 to 139. [2020-07-28 19:02:08,830 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:08,830 INFO L82 GeneralOperation]: Start isEquivalent. First operand 359 states. Second operand 139 states. [2020-07-28 19:02:08,830 INFO L74 IsIncluded]: Start isIncluded. First operand 359 states. Second operand 139 states. [2020-07-28 19:02:08,831 INFO L87 Difference]: Start difference. First operand 359 states. Second operand 139 states. [2020-07-28 19:02:08,843 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:08,843 INFO L93 Difference]: Finished difference Result 359 states and 492 transitions. [2020-07-28 19:02:08,844 INFO L276 IsEmpty]: Start isEmpty. Operand 359 states and 492 transitions. [2020-07-28 19:02:08,844 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:08,844 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:08,845 INFO L74 IsIncluded]: Start isIncluded. First operand 139 states. Second operand 359 states. [2020-07-28 19:02:08,845 INFO L87 Difference]: Start difference. First operand 139 states. Second operand 359 states. [2020-07-28 19:02:08,856 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:08,856 INFO L93 Difference]: Finished difference Result 359 states and 492 transitions. [2020-07-28 19:02:08,856 INFO L276 IsEmpty]: Start isEmpty. Operand 359 states and 492 transitions. [2020-07-28 19:02:08,857 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:08,857 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:08,858 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:08,858 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:08,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 139 states. [2020-07-28 19:02:08,861 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139 states to 139 states and 188 transitions. [2020-07-28 19:02:08,861 INFO L78 Accepts]: Start accepts. Automaton has 139 states and 188 transitions. Word has length 33 [2020-07-28 19:02:08,862 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:08,862 INFO L479 AbstractCegarLoop]: Abstraction has 139 states and 188 transitions. [2020-07-28 19:02:08,862 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:08,862 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 188 transitions. [2020-07-28 19:02:08,863 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2020-07-28 19:02:08,863 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:08,864 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:08,864 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:02:08,864 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:08,864 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:08,865 INFO L82 PathProgramCache]: Analyzing trace with hash 1917268878, now seen corresponding path program 1 times [2020-07-28 19:02:08,865 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:08,865 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [385504202] [2020-07-28 19:02:08,865 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:08,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:08,932 INFO L280 TraceCheckUtils]: 0: Hoare triple {5014#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {5016#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,933 INFO L280 TraceCheckUtils]: 1: Hoare triple {5016#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {5016#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,937 INFO L280 TraceCheckUtils]: 2: Hoare triple {5016#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {5016#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,938 INFO L280 TraceCheckUtils]: 3: Hoare triple {5016#(= 1 ~waterLevel~0)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {5016#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,939 INFO L280 TraceCheckUtils]: 4: Hoare triple {5016#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {5016#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,939 INFO L280 TraceCheckUtils]: 5: Hoare triple {5016#(= 1 ~waterLevel~0)} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {5016#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,940 INFO L280 TraceCheckUtils]: 6: Hoare triple {5016#(= 1 ~waterLevel~0)} assume !false; {5016#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,940 INFO L280 TraceCheckUtils]: 7: Hoare triple {5016#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {5016#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,941 INFO L280 TraceCheckUtils]: 8: Hoare triple {5016#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {5016#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,942 INFO L280 TraceCheckUtils]: 9: Hoare triple {5016#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~0; {5016#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,942 INFO L280 TraceCheckUtils]: 10: Hoare triple {5016#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {5017#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,943 INFO L280 TraceCheckUtils]: 11: Hoare triple {5017#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {5017#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,944 INFO L280 TraceCheckUtils]: 12: Hoare triple {5017#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {5017#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,944 INFO L280 TraceCheckUtils]: 13: Hoare triple {5017#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {5017#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,945 INFO L280 TraceCheckUtils]: 14: Hoare triple {5017#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {5017#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,946 INFO L280 TraceCheckUtils]: 15: Hoare triple {5017#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {5017#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,947 INFO L280 TraceCheckUtils]: 16: Hoare triple {5017#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {5017#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,947 INFO L280 TraceCheckUtils]: 17: Hoare triple {5017#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {5017#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,948 INFO L280 TraceCheckUtils]: 18: Hoare triple {5017#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {5017#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,948 INFO L280 TraceCheckUtils]: 19: Hoare triple {5017#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {5017#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:08,950 INFO L280 TraceCheckUtils]: 20: Hoare triple {5017#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {5015#false} is VALID [2020-07-28 19:02:08,950 INFO L280 TraceCheckUtils]: 21: Hoare triple {5015#false} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {5015#false} is VALID [2020-07-28 19:02:08,950 INFO L280 TraceCheckUtils]: 22: Hoare triple {5015#false} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {5015#false} is VALID [2020-07-28 19:02:08,950 INFO L280 TraceCheckUtils]: 23: Hoare triple {5015#false} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {5015#false} is VALID [2020-07-28 19:02:08,951 INFO L280 TraceCheckUtils]: 24: Hoare triple {5015#false} processEnvironment__wrappee__highWaterSensor_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret5 && processEnvironment__wrappee__highWaterSensor_#t~ret5 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret5;havoc processEnvironment__wrappee__highWaterSensor_#t~ret5; {5015#false} is VALID [2020-07-28 19:02:08,951 INFO L280 TraceCheckUtils]: 25: Hoare triple {5015#false} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~1); {5015#false} is VALID [2020-07-28 19:02:08,952 INFO L280 TraceCheckUtils]: 26: Hoare triple {5015#false} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {5015#false} is VALID [2020-07-28 19:02:08,952 INFO L280 TraceCheckUtils]: 27: Hoare triple {5015#false} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {5015#false} is VALID [2020-07-28 19:02:08,952 INFO L280 TraceCheckUtils]: 28: Hoare triple {5015#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {5015#false} is VALID [2020-07-28 19:02:08,953 INFO L280 TraceCheckUtils]: 29: Hoare triple {5015#false} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {5015#false} is VALID [2020-07-28 19:02:08,953 INFO L280 TraceCheckUtils]: 30: Hoare triple {5015#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {5015#false} is VALID [2020-07-28 19:02:08,953 INFO L280 TraceCheckUtils]: 31: Hoare triple {5015#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {5015#false} is VALID [2020-07-28 19:02:08,954 INFO L280 TraceCheckUtils]: 32: Hoare triple {5015#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {5015#false} is VALID [2020-07-28 19:02:08,954 INFO L280 TraceCheckUtils]: 33: Hoare triple {5015#false} assume !false; {5015#false} is VALID [2020-07-28 19:02:08,955 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:08,955 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [385504202] [2020-07-28 19:02:08,955 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:08,956 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:02:08,956 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1469274241] [2020-07-28 19:02:08,957 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 34 [2020-07-28 19:02:08,957 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:08,957 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:08,997 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:08,998 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:08,998 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:08,998 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:08,999 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:08,999 INFO L87 Difference]: Start difference. First operand 139 states and 188 transitions. Second operand 4 states. [2020-07-28 19:02:09,694 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:09,694 INFO L93 Difference]: Finished difference Result 294 states and 403 transitions. [2020-07-28 19:02:09,695 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:02:09,695 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 34 [2020-07-28 19:02:09,695 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:09,695 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:09,697 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 262 transitions. [2020-07-28 19:02:09,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:09,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 262 transitions. [2020-07-28 19:02:09,700 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 262 transitions. [2020-07-28 19:02:09,971 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 262 edges. 262 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:09,976 INFO L225 Difference]: With dead ends: 294 [2020-07-28 19:02:09,976 INFO L226 Difference]: Without dead ends: 209 [2020-07-28 19:02:09,977 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:09,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 209 states. [2020-07-28 19:02:10,253 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 209 to 206. [2020-07-28 19:02:10,253 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:10,253 INFO L82 GeneralOperation]: Start isEquivalent. First operand 209 states. Second operand 206 states. [2020-07-28 19:02:10,254 INFO L74 IsIncluded]: Start isIncluded. First operand 209 states. Second operand 206 states. [2020-07-28 19:02:10,254 INFO L87 Difference]: Start difference. First operand 209 states. Second operand 206 states. [2020-07-28 19:02:10,259 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:10,260 INFO L93 Difference]: Finished difference Result 209 states and 280 transitions. [2020-07-28 19:02:10,260 INFO L276 IsEmpty]: Start isEmpty. Operand 209 states and 280 transitions. [2020-07-28 19:02:10,260 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:10,261 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:10,261 INFO L74 IsIncluded]: Start isIncluded. First operand 206 states. Second operand 209 states. [2020-07-28 19:02:10,261 INFO L87 Difference]: Start difference. First operand 206 states. Second operand 209 states. [2020-07-28 19:02:10,267 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:10,267 INFO L93 Difference]: Finished difference Result 209 states and 280 transitions. [2020-07-28 19:02:10,267 INFO L276 IsEmpty]: Start isEmpty. Operand 209 states and 280 transitions. [2020-07-28 19:02:10,268 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:10,268 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:10,268 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:10,268 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:10,269 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 206 states. [2020-07-28 19:02:10,274 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 206 states to 206 states and 278 transitions. [2020-07-28 19:02:10,275 INFO L78 Accepts]: Start accepts. Automaton has 206 states and 278 transitions. Word has length 34 [2020-07-28 19:02:10,275 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:10,275 INFO L479 AbstractCegarLoop]: Abstraction has 206 states and 278 transitions. [2020-07-28 19:02:10,275 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:10,275 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 278 transitions. [2020-07-28 19:02:10,276 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2020-07-28 19:02:10,276 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:10,276 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:10,277 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:02:10,277 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:10,277 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:10,277 INFO L82 PathProgramCache]: Analyzing trace with hash 906151628, now seen corresponding path program 1 times [2020-07-28 19:02:10,278 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:10,278 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1087063891] [2020-07-28 19:02:10,278 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:10,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:10,343 INFO L280 TraceCheckUtils]: 0: Hoare triple {6111#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {6111#true} is VALID [2020-07-28 19:02:10,343 INFO L280 TraceCheckUtils]: 1: Hoare triple {6111#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {6111#true} is VALID [2020-07-28 19:02:10,343 INFO L280 TraceCheckUtils]: 2: Hoare triple {6111#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {6111#true} is VALID [2020-07-28 19:02:10,343 INFO L280 TraceCheckUtils]: 3: Hoare triple {6111#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {6111#true} is VALID [2020-07-28 19:02:10,344 INFO L280 TraceCheckUtils]: 4: Hoare triple {6111#true} assume 0 != main_~tmp~10; {6111#true} is VALID [2020-07-28 19:02:10,344 INFO L280 TraceCheckUtils]: 5: Hoare triple {6111#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6111#true} is VALID [2020-07-28 19:02:10,344 INFO L280 TraceCheckUtils]: 6: Hoare triple {6111#true} assume !false; {6111#true} is VALID [2020-07-28 19:02:10,344 INFO L280 TraceCheckUtils]: 7: Hoare triple {6111#true} assume test_~splverifierCounter~0 < 4; {6111#true} is VALID [2020-07-28 19:02:10,344 INFO L280 TraceCheckUtils]: 8: Hoare triple {6111#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {6111#true} is VALID [2020-07-28 19:02:10,345 INFO L280 TraceCheckUtils]: 9: Hoare triple {6111#true} assume 0 != test_~tmp~0; {6111#true} is VALID [2020-07-28 19:02:10,345 INFO L280 TraceCheckUtils]: 10: Hoare triple {6111#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6111#true} is VALID [2020-07-28 19:02:10,345 INFO L280 TraceCheckUtils]: 11: Hoare triple {6111#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {6111#true} is VALID [2020-07-28 19:02:10,345 INFO L280 TraceCheckUtils]: 12: Hoare triple {6111#true} assume !(0 != test_~tmp___0~0); {6111#true} is VALID [2020-07-28 19:02:10,345 INFO L280 TraceCheckUtils]: 13: Hoare triple {6111#true} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {6111#true} is VALID [2020-07-28 19:02:10,346 INFO L280 TraceCheckUtils]: 14: Hoare triple {6111#true} assume 0 != test_~tmp___2~0; {6111#true} is VALID [2020-07-28 19:02:10,346 INFO L280 TraceCheckUtils]: 15: Hoare triple {6111#true} assume !(0 != ~pumpRunning~0); {6111#true} is VALID [2020-07-28 19:02:10,346 INFO L280 TraceCheckUtils]: 16: Hoare triple {6111#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {6111#true} is VALID [2020-07-28 19:02:10,346 INFO L280 TraceCheckUtils]: 17: Hoare triple {6111#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {6111#true} is VALID [2020-07-28 19:02:10,346 INFO L280 TraceCheckUtils]: 18: Hoare triple {6111#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {6111#true} is VALID [2020-07-28 19:02:10,347 INFO L280 TraceCheckUtils]: 19: Hoare triple {6111#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {6111#true} is VALID [2020-07-28 19:02:10,349 INFO L280 TraceCheckUtils]: 20: Hoare triple {6111#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {6113#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:02:10,350 INFO L280 TraceCheckUtils]: 21: Hoare triple {6113#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {6114#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)} is VALID [2020-07-28 19:02:10,350 INFO L280 TraceCheckUtils]: 22: Hoare triple {6114#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)} assume 0 != isHighWaterLevel_~tmp~4;isHighWaterLevel_~tmp___0~1 := 0; {6112#false} is VALID [2020-07-28 19:02:10,351 INFO L280 TraceCheckUtils]: 23: Hoare triple {6112#false} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {6112#false} is VALID [2020-07-28 19:02:10,351 INFO L280 TraceCheckUtils]: 24: Hoare triple {6112#false} processEnvironment__wrappee__highWaterSensor_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret5 && processEnvironment__wrappee__highWaterSensor_#t~ret5 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret5;havoc processEnvironment__wrappee__highWaterSensor_#t~ret5; {6112#false} is VALID [2020-07-28 19:02:10,351 INFO L280 TraceCheckUtils]: 25: Hoare triple {6112#false} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~1); {6112#false} is VALID [2020-07-28 19:02:10,351 INFO L280 TraceCheckUtils]: 26: Hoare triple {6112#false} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {6112#false} is VALID [2020-07-28 19:02:10,351 INFO L280 TraceCheckUtils]: 27: Hoare triple {6112#false} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {6112#false} is VALID [2020-07-28 19:02:10,352 INFO L280 TraceCheckUtils]: 28: Hoare triple {6112#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {6112#false} is VALID [2020-07-28 19:02:10,352 INFO L280 TraceCheckUtils]: 29: Hoare triple {6112#false} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {6112#false} is VALID [2020-07-28 19:02:10,352 INFO L280 TraceCheckUtils]: 30: Hoare triple {6112#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {6112#false} is VALID [2020-07-28 19:02:10,352 INFO L280 TraceCheckUtils]: 31: Hoare triple {6112#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {6112#false} is VALID [2020-07-28 19:02:10,352 INFO L280 TraceCheckUtils]: 32: Hoare triple {6112#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {6112#false} is VALID [2020-07-28 19:02:10,353 INFO L280 TraceCheckUtils]: 33: Hoare triple {6112#false} assume !false; {6112#false} is VALID [2020-07-28 19:02:10,353 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:10,354 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1087063891] [2020-07-28 19:02:10,354 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:10,354 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:10,354 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [583168050] [2020-07-28 19:02:10,355 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 34 [2020-07-28 19:02:10,355 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:10,355 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:10,400 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:10,400 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:10,401 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:10,401 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:10,401 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:10,401 INFO L87 Difference]: Start difference. First operand 206 states and 278 transitions. Second operand 4 states. [2020-07-28 19:02:11,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:11,469 INFO L93 Difference]: Finished difference Result 484 states and 665 transitions. [2020-07-28 19:02:11,470 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:11,470 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 34 [2020-07-28 19:02:11,470 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:11,470 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:11,473 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 282 transitions. [2020-07-28 19:02:11,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:11,475 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 282 transitions. [2020-07-28 19:02:11,476 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 282 transitions. [2020-07-28 19:02:11,773 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 282 edges. 282 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:11,783 INFO L225 Difference]: With dead ends: 484 [2020-07-28 19:02:11,784 INFO L226 Difference]: Without dead ends: 331 [2020-07-28 19:02:11,785 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:11,785 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 331 states. [2020-07-28 19:02:12,080 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 331 to 197. [2020-07-28 19:02:12,081 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:12,081 INFO L82 GeneralOperation]: Start isEquivalent. First operand 331 states. Second operand 197 states. [2020-07-28 19:02:12,081 INFO L74 IsIncluded]: Start isIncluded. First operand 331 states. Second operand 197 states. [2020-07-28 19:02:12,081 INFO L87 Difference]: Start difference. First operand 331 states. Second operand 197 states. [2020-07-28 19:02:12,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:12,093 INFO L93 Difference]: Finished difference Result 331 states and 452 transitions. [2020-07-28 19:02:12,093 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 452 transitions. [2020-07-28 19:02:12,094 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:12,094 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:12,094 INFO L74 IsIncluded]: Start isIncluded. First operand 197 states. Second operand 331 states. [2020-07-28 19:02:12,094 INFO L87 Difference]: Start difference. First operand 197 states. Second operand 331 states. [2020-07-28 19:02:12,105 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:12,105 INFO L93 Difference]: Finished difference Result 331 states and 452 transitions. [2020-07-28 19:02:12,106 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 452 transitions. [2020-07-28 19:02:12,106 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:12,107 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:12,107 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:12,107 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:12,107 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 197 states. [2020-07-28 19:02:12,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 266 transitions. [2020-07-28 19:02:12,113 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 266 transitions. Word has length 34 [2020-07-28 19:02:12,113 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:12,113 INFO L479 AbstractCegarLoop]: Abstraction has 197 states and 266 transitions. [2020-07-28 19:02:12,113 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:12,114 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 266 transitions. [2020-07-28 19:02:12,114 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2020-07-28 19:02:12,114 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:12,115 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:12,115 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:02:12,115 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:12,115 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:12,116 INFO L82 PathProgramCache]: Analyzing trace with hash -2003254137, now seen corresponding path program 1 times [2020-07-28 19:02:12,116 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:12,116 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [952969727] [2020-07-28 19:02:12,117 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:12,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:12,186 INFO L280 TraceCheckUtils]: 0: Hoare triple {7697#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {7697#true} is VALID [2020-07-28 19:02:12,187 INFO L280 TraceCheckUtils]: 1: Hoare triple {7697#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {7697#true} is VALID [2020-07-28 19:02:12,187 INFO L280 TraceCheckUtils]: 2: Hoare triple {7697#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {7697#true} is VALID [2020-07-28 19:02:12,187 INFO L280 TraceCheckUtils]: 3: Hoare triple {7697#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {7697#true} is VALID [2020-07-28 19:02:12,187 INFO L280 TraceCheckUtils]: 4: Hoare triple {7697#true} assume 0 != main_~tmp~10; {7697#true} is VALID [2020-07-28 19:02:12,187 INFO L280 TraceCheckUtils]: 5: Hoare triple {7697#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {7697#true} is VALID [2020-07-28 19:02:12,188 INFO L280 TraceCheckUtils]: 6: Hoare triple {7697#true} assume !false; {7697#true} is VALID [2020-07-28 19:02:12,188 INFO L280 TraceCheckUtils]: 7: Hoare triple {7697#true} assume test_~splverifierCounter~0 < 4; {7697#true} is VALID [2020-07-28 19:02:12,188 INFO L280 TraceCheckUtils]: 8: Hoare triple {7697#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {7697#true} is VALID [2020-07-28 19:02:12,189 INFO L280 TraceCheckUtils]: 9: Hoare triple {7697#true} assume 0 != test_~tmp~0; {7697#true} is VALID [2020-07-28 19:02:12,189 INFO L280 TraceCheckUtils]: 10: Hoare triple {7697#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {7697#true} is VALID [2020-07-28 19:02:12,189 INFO L280 TraceCheckUtils]: 11: Hoare triple {7697#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {7697#true} is VALID [2020-07-28 19:02:12,189 INFO L280 TraceCheckUtils]: 12: Hoare triple {7697#true} assume !(0 != test_~tmp___0~0); {7697#true} is VALID [2020-07-28 19:02:12,190 INFO L280 TraceCheckUtils]: 13: Hoare triple {7697#true} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {7697#true} is VALID [2020-07-28 19:02:12,190 INFO L280 TraceCheckUtils]: 14: Hoare triple {7697#true} assume 0 != test_~tmp___2~0; {7697#true} is VALID [2020-07-28 19:02:12,190 INFO L280 TraceCheckUtils]: 15: Hoare triple {7697#true} assume !(0 != ~pumpRunning~0); {7697#true} is VALID [2020-07-28 19:02:12,191 INFO L280 TraceCheckUtils]: 16: Hoare triple {7697#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {7697#true} is VALID [2020-07-28 19:02:12,191 INFO L280 TraceCheckUtils]: 17: Hoare triple {7697#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {7697#true} is VALID [2020-07-28 19:02:12,191 INFO L280 TraceCheckUtils]: 18: Hoare triple {7697#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {7697#true} is VALID [2020-07-28 19:02:12,191 INFO L280 TraceCheckUtils]: 19: Hoare triple {7697#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {7697#true} is VALID [2020-07-28 19:02:12,191 INFO L280 TraceCheckUtils]: 20: Hoare triple {7697#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {7697#true} is VALID [2020-07-28 19:02:12,191 INFO L280 TraceCheckUtils]: 21: Hoare triple {7697#true} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {7697#true} is VALID [2020-07-28 19:02:12,192 INFO L280 TraceCheckUtils]: 22: Hoare triple {7697#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {7697#true} is VALID [2020-07-28 19:02:12,192 INFO L280 TraceCheckUtils]: 23: Hoare triple {7697#true} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {7697#true} is VALID [2020-07-28 19:02:12,192 INFO L280 TraceCheckUtils]: 24: Hoare triple {7697#true} processEnvironment__wrappee__highWaterSensor_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret5 && processEnvironment__wrappee__highWaterSensor_#t~ret5 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret5;havoc processEnvironment__wrappee__highWaterSensor_#t~ret5; {7697#true} is VALID [2020-07-28 19:02:12,193 INFO L280 TraceCheckUtils]: 25: Hoare triple {7697#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;~pumpRunning~0 := 1; {7699#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:12,194 INFO L280 TraceCheckUtils]: 26: Hoare triple {7699#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {7699#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:12,195 INFO L280 TraceCheckUtils]: 27: Hoare triple {7699#(= 1 ~pumpRunning~0)} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {7699#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:12,195 INFO L280 TraceCheckUtils]: 28: Hoare triple {7699#(= 1 ~pumpRunning~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {7699#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:12,196 INFO L280 TraceCheckUtils]: 29: Hoare triple {7699#(= 1 ~pumpRunning~0)} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {7699#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:12,197 INFO L280 TraceCheckUtils]: 30: Hoare triple {7699#(= 1 ~pumpRunning~0)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {7700#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:02:12,199 INFO L280 TraceCheckUtils]: 31: Hoare triple {7700#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {7701#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~1)} is VALID [2020-07-28 19:02:12,202 INFO L280 TraceCheckUtils]: 32: Hoare triple {7701#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {7698#false} is VALID [2020-07-28 19:02:12,203 INFO L280 TraceCheckUtils]: 33: Hoare triple {7698#false} assume !false; {7698#false} is VALID [2020-07-28 19:02:12,204 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:12,204 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [952969727] [2020-07-28 19:02:12,204 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:12,204 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:12,205 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [884811355] [2020-07-28 19:02:12,205 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2020-07-28 19:02:12,205 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:12,206 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:12,249 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:12,249 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:12,249 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:12,249 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:12,249 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:12,250 INFO L87 Difference]: Start difference. First operand 197 states and 266 transitions. Second operand 5 states. [2020-07-28 19:02:13,655 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:13,655 INFO L93 Difference]: Finished difference Result 504 states and 697 transitions. [2020-07-28 19:02:13,655 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:13,655 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 34 [2020-07-28 19:02:13,656 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:13,656 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:13,658 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 302 transitions. [2020-07-28 19:02:13,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:13,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 302 transitions. [2020-07-28 19:02:13,661 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 302 transitions. [2020-07-28 19:02:14,008 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 302 edges. 302 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:14,017 INFO L225 Difference]: With dead ends: 504 [2020-07-28 19:02:14,018 INFO L226 Difference]: Without dead ends: 313 [2020-07-28 19:02:14,019 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:14,019 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 313 states. [2020-07-28 19:02:14,336 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 313 to 161. [2020-07-28 19:02:14,336 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:14,337 INFO L82 GeneralOperation]: Start isEquivalent. First operand 313 states. Second operand 161 states. [2020-07-28 19:02:14,337 INFO L74 IsIncluded]: Start isIncluded. First operand 313 states. Second operand 161 states. [2020-07-28 19:02:14,337 INFO L87 Difference]: Start difference. First operand 313 states. Second operand 161 states. [2020-07-28 19:02:14,343 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:14,343 INFO L93 Difference]: Finished difference Result 313 states and 419 transitions. [2020-07-28 19:02:14,343 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 419 transitions. [2020-07-28 19:02:14,344 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:14,344 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:14,344 INFO L74 IsIncluded]: Start isIncluded. First operand 161 states. Second operand 313 states. [2020-07-28 19:02:14,344 INFO L87 Difference]: Start difference. First operand 161 states. Second operand 313 states. [2020-07-28 19:02:14,352 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:14,352 INFO L93 Difference]: Finished difference Result 313 states and 419 transitions. [2020-07-28 19:02:14,353 INFO L276 IsEmpty]: Start isEmpty. Operand 313 states and 419 transitions. [2020-07-28 19:02:14,353 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:14,354 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:14,354 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:14,354 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:14,354 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 161 states. [2020-07-28 19:02:14,357 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 161 states to 161 states and 210 transitions. [2020-07-28 19:02:14,358 INFO L78 Accepts]: Start accepts. Automaton has 161 states and 210 transitions. Word has length 34 [2020-07-28 19:02:14,358 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:14,358 INFO L479 AbstractCegarLoop]: Abstraction has 161 states and 210 transitions. [2020-07-28 19:02:14,358 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:14,359 INFO L276 IsEmpty]: Start isEmpty. Operand 161 states and 210 transitions. [2020-07-28 19:02:14,359 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2020-07-28 19:02:14,359 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:14,359 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:14,360 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:02:14,360 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:14,360 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:14,361 INFO L82 PathProgramCache]: Analyzing trace with hash 1164317066, now seen corresponding path program 1 times [2020-07-28 19:02:14,361 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:14,361 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2122884284] [2020-07-28 19:02:14,361 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:14,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:14,474 INFO L280 TraceCheckUtils]: 0: Hoare triple {9234#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {9234#true} is VALID [2020-07-28 19:02:14,475 INFO L280 TraceCheckUtils]: 1: Hoare triple {9234#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {9234#true} is VALID [2020-07-28 19:02:14,476 INFO L280 TraceCheckUtils]: 2: Hoare triple {9234#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {9236#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:02:14,477 INFO L280 TraceCheckUtils]: 3: Hoare triple {9236#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {9237#(= 1 ULTIMATE.start_main_~tmp~10)} is VALID [2020-07-28 19:02:14,478 INFO L280 TraceCheckUtils]: 4: Hoare triple {9237#(= 1 ULTIMATE.start_main_~tmp~10)} assume 0 != main_~tmp~10; {9234#true} is VALID [2020-07-28 19:02:14,478 INFO L280 TraceCheckUtils]: 5: Hoare triple {9234#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {9234#true} is VALID [2020-07-28 19:02:14,478 INFO L280 TraceCheckUtils]: 6: Hoare triple {9234#true} assume !false; {9234#true} is VALID [2020-07-28 19:02:14,478 INFO L280 TraceCheckUtils]: 7: Hoare triple {9234#true} assume test_~splverifierCounter~0 < 4; {9234#true} is VALID [2020-07-28 19:02:14,478 INFO L280 TraceCheckUtils]: 8: Hoare triple {9234#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {9234#true} is VALID [2020-07-28 19:02:14,479 INFO L280 TraceCheckUtils]: 9: Hoare triple {9234#true} assume 0 != test_~tmp~0; {9234#true} is VALID [2020-07-28 19:02:14,479 INFO L280 TraceCheckUtils]: 10: Hoare triple {9234#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9234#true} is VALID [2020-07-28 19:02:14,479 INFO L280 TraceCheckUtils]: 11: Hoare triple {9234#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {9234#true} is VALID [2020-07-28 19:02:14,480 INFO L280 TraceCheckUtils]: 12: Hoare triple {9234#true} assume !(0 != test_~tmp___0~0); {9234#true} is VALID [2020-07-28 19:02:14,480 INFO L280 TraceCheckUtils]: 13: Hoare triple {9234#true} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {9234#true} is VALID [2020-07-28 19:02:14,480 INFO L280 TraceCheckUtils]: 14: Hoare triple {9234#true} assume 0 != test_~tmp___2~0; {9234#true} is VALID [2020-07-28 19:02:14,480 INFO L280 TraceCheckUtils]: 15: Hoare triple {9234#true} assume !(0 != ~pumpRunning~0); {9234#true} is VALID [2020-07-28 19:02:14,480 INFO L280 TraceCheckUtils]: 16: Hoare triple {9234#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {9234#true} is VALID [2020-07-28 19:02:14,481 INFO L280 TraceCheckUtils]: 17: Hoare triple {9234#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {9234#true} is VALID [2020-07-28 19:02:14,481 INFO L280 TraceCheckUtils]: 18: Hoare triple {9234#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {9234#true} is VALID [2020-07-28 19:02:14,481 INFO L280 TraceCheckUtils]: 19: Hoare triple {9234#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {9234#true} is VALID [2020-07-28 19:02:14,481 INFO L280 TraceCheckUtils]: 20: Hoare triple {9234#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {9234#true} is VALID [2020-07-28 19:02:14,482 INFO L280 TraceCheckUtils]: 21: Hoare triple {9234#true} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {9234#true} is VALID [2020-07-28 19:02:14,491 INFO L280 TraceCheckUtils]: 22: Hoare triple {9234#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {9238#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))} is VALID [2020-07-28 19:02:14,492 INFO L280 TraceCheckUtils]: 23: Hoare triple {9238#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {9239#(not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))} is VALID [2020-07-28 19:02:14,494 INFO L280 TraceCheckUtils]: 24: Hoare triple {9239#(not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))} processEnvironment__wrappee__highWaterSensor_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret5 && processEnvironment__wrappee__highWaterSensor_#t~ret5 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret5;havoc processEnvironment__wrappee__highWaterSensor_#t~ret5; {9240#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1))} is VALID [2020-07-28 19:02:14,495 INFO L280 TraceCheckUtils]: 25: Hoare triple {9240#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1))} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~1); {9235#false} is VALID [2020-07-28 19:02:14,495 INFO L280 TraceCheckUtils]: 26: Hoare triple {9235#false} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {9235#false} is VALID [2020-07-28 19:02:14,495 INFO L280 TraceCheckUtils]: 27: Hoare triple {9235#false} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {9235#false} is VALID [2020-07-28 19:02:14,495 INFO L280 TraceCheckUtils]: 28: Hoare triple {9235#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {9235#false} is VALID [2020-07-28 19:02:14,495 INFO L280 TraceCheckUtils]: 29: Hoare triple {9235#false} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {9235#false} is VALID [2020-07-28 19:02:14,496 INFO L280 TraceCheckUtils]: 30: Hoare triple {9235#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {9235#false} is VALID [2020-07-28 19:02:14,496 INFO L280 TraceCheckUtils]: 31: Hoare triple {9235#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {9235#false} is VALID [2020-07-28 19:02:14,496 INFO L280 TraceCheckUtils]: 32: Hoare triple {9235#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {9235#false} is VALID [2020-07-28 19:02:14,496 INFO L280 TraceCheckUtils]: 33: Hoare triple {9235#false} assume !false; {9235#false} is VALID [2020-07-28 19:02:14,498 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:14,498 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2122884284] [2020-07-28 19:02:14,498 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:14,498 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2020-07-28 19:02:14,498 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [559926694] [2020-07-28 19:02:14,499 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 34 [2020-07-28 19:02:14,499 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:14,499 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:14,548 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:14,548 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:14,548 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:14,548 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:14,549 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:14,549 INFO L87 Difference]: Start difference. First operand 161 states and 210 transitions. Second operand 7 states. [2020-07-28 19:02:15,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:15,874 INFO L93 Difference]: Finished difference Result 413 states and 547 transitions. [2020-07-28 19:02:15,874 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:15,874 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 34 [2020-07-28 19:02:15,874 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:15,874 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:15,875 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 208 transitions. [2020-07-28 19:02:15,876 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:15,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 208 transitions. [2020-07-28 19:02:15,877 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 208 transitions. [2020-07-28 19:02:16,137 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 208 edges. 208 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:16,143 INFO L225 Difference]: With dead ends: 413 [2020-07-28 19:02:16,143 INFO L226 Difference]: Without dead ends: 258 [2020-07-28 19:02:16,143 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2020-07-28 19:02:16,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 258 states. [2020-07-28 19:02:16,459 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 258 to 149. [2020-07-28 19:02:16,459 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:16,460 INFO L82 GeneralOperation]: Start isEquivalent. First operand 258 states. Second operand 149 states. [2020-07-28 19:02:16,460 INFO L74 IsIncluded]: Start isIncluded. First operand 258 states. Second operand 149 states. [2020-07-28 19:02:16,460 INFO L87 Difference]: Start difference. First operand 258 states. Second operand 149 states. [2020-07-28 19:02:16,467 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,468 INFO L93 Difference]: Finished difference Result 258 states and 340 transitions. [2020-07-28 19:02:16,468 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 340 transitions. [2020-07-28 19:02:16,468 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:16,469 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:16,469 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 258 states. [2020-07-28 19:02:16,469 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 258 states. [2020-07-28 19:02:16,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,475 INFO L93 Difference]: Finished difference Result 258 states and 340 transitions. [2020-07-28 19:02:16,476 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 340 transitions. [2020-07-28 19:02:16,476 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:16,476 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:16,477 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:16,477 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:16,477 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2020-07-28 19:02:16,480 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 191 transitions. [2020-07-28 19:02:16,480 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 191 transitions. Word has length 34 [2020-07-28 19:02:16,480 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:16,481 INFO L479 AbstractCegarLoop]: Abstraction has 149 states and 191 transitions. [2020-07-28 19:02:16,481 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:16,481 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 191 transitions. [2020-07-28 19:02:16,482 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2020-07-28 19:02:16,482 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:16,482 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:16,483 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-28 19:02:16,483 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:16,483 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:16,483 INFO L82 PathProgramCache]: Analyzing trace with hash 602597855, now seen corresponding path program 1 times [2020-07-28 19:02:16,484 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:16,484 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1889623568] [2020-07-28 19:02:16,484 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:16,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:16,550 INFO L280 TraceCheckUtils]: 0: Hoare triple {10526#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {10526#true} is VALID [2020-07-28 19:02:16,550 INFO L280 TraceCheckUtils]: 1: Hoare triple {10526#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {10526#true} is VALID [2020-07-28 19:02:16,551 INFO L280 TraceCheckUtils]: 2: Hoare triple {10526#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {10526#true} is VALID [2020-07-28 19:02:16,551 INFO L280 TraceCheckUtils]: 3: Hoare triple {10526#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {10526#true} is VALID [2020-07-28 19:02:16,551 INFO L280 TraceCheckUtils]: 4: Hoare triple {10526#true} assume 0 != main_~tmp~10; {10526#true} is VALID [2020-07-28 19:02:16,552 INFO L280 TraceCheckUtils]: 5: Hoare triple {10526#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {10526#true} is VALID [2020-07-28 19:02:16,552 INFO L280 TraceCheckUtils]: 6: Hoare triple {10526#true} assume !false; {10526#true} is VALID [2020-07-28 19:02:16,552 INFO L280 TraceCheckUtils]: 7: Hoare triple {10526#true} assume test_~splverifierCounter~0 < 4; {10526#true} is VALID [2020-07-28 19:02:16,552 INFO L280 TraceCheckUtils]: 8: Hoare triple {10526#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {10526#true} is VALID [2020-07-28 19:02:16,552 INFO L280 TraceCheckUtils]: 9: Hoare triple {10526#true} assume !(0 != test_~tmp~0); {10526#true} is VALID [2020-07-28 19:02:16,553 INFO L280 TraceCheckUtils]: 10: Hoare triple {10526#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {10526#true} is VALID [2020-07-28 19:02:16,553 INFO L280 TraceCheckUtils]: 11: Hoare triple {10526#true} assume !(0 != test_~tmp___0~0); {10526#true} is VALID [2020-07-28 19:02:16,553 INFO L280 TraceCheckUtils]: 12: Hoare triple {10526#true} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {10526#true} is VALID [2020-07-28 19:02:16,553 INFO L280 TraceCheckUtils]: 13: Hoare triple {10526#true} assume 0 != test_~tmp___2~0; {10526#true} is VALID [2020-07-28 19:02:16,553 INFO L280 TraceCheckUtils]: 14: Hoare triple {10526#true} assume !(0 != ~pumpRunning~0); {10526#true} is VALID [2020-07-28 19:02:16,554 INFO L280 TraceCheckUtils]: 15: Hoare triple {10526#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {10526#true} is VALID [2020-07-28 19:02:16,554 INFO L280 TraceCheckUtils]: 16: Hoare triple {10526#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {10526#true} is VALID [2020-07-28 19:02:16,554 INFO L280 TraceCheckUtils]: 17: Hoare triple {10526#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {10526#true} is VALID [2020-07-28 19:02:16,555 INFO L280 TraceCheckUtils]: 18: Hoare triple {10526#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {10526#true} is VALID [2020-07-28 19:02:16,556 INFO L280 TraceCheckUtils]: 19: Hoare triple {10526#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {10528#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:02:16,557 INFO L280 TraceCheckUtils]: 20: Hoare triple {10528#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {10529#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~4)} is VALID [2020-07-28 19:02:16,557 INFO L280 TraceCheckUtils]: 21: Hoare triple {10529#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~4)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {10527#false} is VALID [2020-07-28 19:02:16,558 INFO L280 TraceCheckUtils]: 22: Hoare triple {10527#false} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {10527#false} is VALID [2020-07-28 19:02:16,558 INFO L280 TraceCheckUtils]: 23: Hoare triple {10527#false} processEnvironment__wrappee__highWaterSensor_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret5 && processEnvironment__wrappee__highWaterSensor_#t~ret5 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret5;havoc processEnvironment__wrappee__highWaterSensor_#t~ret5; {10527#false} is VALID [2020-07-28 19:02:16,558 INFO L280 TraceCheckUtils]: 24: Hoare triple {10527#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;~pumpRunning~0 := 1; {10527#false} is VALID [2020-07-28 19:02:16,558 INFO L280 TraceCheckUtils]: 25: Hoare triple {10527#false} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {10527#false} is VALID [2020-07-28 19:02:16,559 INFO L280 TraceCheckUtils]: 26: Hoare triple {10527#false} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {10527#false} is VALID [2020-07-28 19:02:16,559 INFO L280 TraceCheckUtils]: 27: Hoare triple {10527#false} assume 0 != __utac_acc__Specification3_spec__1_~tmp~6; {10527#false} is VALID [2020-07-28 19:02:16,559 INFO L280 TraceCheckUtils]: 28: Hoare triple {10527#false} assume !false; {10527#false} is VALID [2020-07-28 19:02:16,559 INFO L280 TraceCheckUtils]: 29: Hoare triple {10527#false} assume test_~splverifierCounter~0 < 4; {10527#false} is VALID [2020-07-28 19:02:16,559 INFO L280 TraceCheckUtils]: 30: Hoare triple {10527#false} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {10527#false} is VALID [2020-07-28 19:02:16,560 INFO L280 TraceCheckUtils]: 31: Hoare triple {10527#false} assume !(0 != test_~tmp~0); {10527#false} is VALID [2020-07-28 19:02:16,560 INFO L280 TraceCheckUtils]: 32: Hoare triple {10527#false} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {10527#false} is VALID [2020-07-28 19:02:16,560 INFO L280 TraceCheckUtils]: 33: Hoare triple {10527#false} assume !(0 != test_~tmp___0~0); {10527#false} is VALID [2020-07-28 19:02:16,560 INFO L280 TraceCheckUtils]: 34: Hoare triple {10527#false} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {10527#false} is VALID [2020-07-28 19:02:16,560 INFO L280 TraceCheckUtils]: 35: Hoare triple {10527#false} assume 0 != test_~tmp___2~0; {10527#false} is VALID [2020-07-28 19:02:16,561 INFO L280 TraceCheckUtils]: 36: Hoare triple {10527#false} assume 0 != ~pumpRunning~0; {10527#false} is VALID [2020-07-28 19:02:16,561 INFO L280 TraceCheckUtils]: 37: Hoare triple {10527#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {10527#false} is VALID [2020-07-28 19:02:16,561 INFO L280 TraceCheckUtils]: 38: Hoare triple {10527#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {10527#false} is VALID [2020-07-28 19:02:16,562 INFO L280 TraceCheckUtils]: 39: Hoare triple {10527#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~2;havoc isMethaneAlarm_~retValue_acc~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {10527#false} is VALID [2020-07-28 19:02:16,562 INFO L280 TraceCheckUtils]: 40: Hoare triple {10527#false} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~2 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~2; {10527#false} is VALID [2020-07-28 19:02:16,562 INFO L280 TraceCheckUtils]: 41: Hoare triple {10527#false} processEnvironment_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret7 && processEnvironment_#t~ret7 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret7;havoc processEnvironment_#t~ret7; {10527#false} is VALID [2020-07-28 19:02:16,562 INFO L280 TraceCheckUtils]: 42: Hoare triple {10527#false} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {10527#false} is VALID [2020-07-28 19:02:16,563 INFO L280 TraceCheckUtils]: 43: Hoare triple {10527#false} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {10527#false} is VALID [2020-07-28 19:02:16,563 INFO L280 TraceCheckUtils]: 44: Hoare triple {10527#false} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {10527#false} is VALID [2020-07-28 19:02:16,563 INFO L280 TraceCheckUtils]: 45: Hoare triple {10527#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {10527#false} is VALID [2020-07-28 19:02:16,563 INFO L280 TraceCheckUtils]: 46: Hoare triple {10527#false} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {10527#false} is VALID [2020-07-28 19:02:16,563 INFO L280 TraceCheckUtils]: 47: Hoare triple {10527#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {10527#false} is VALID [2020-07-28 19:02:16,564 INFO L280 TraceCheckUtils]: 48: Hoare triple {10527#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {10527#false} is VALID [2020-07-28 19:02:16,564 INFO L280 TraceCheckUtils]: 49: Hoare triple {10527#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {10527#false} is VALID [2020-07-28 19:02:16,564 INFO L280 TraceCheckUtils]: 50: Hoare triple {10527#false} assume !false; {10527#false} is VALID [2020-07-28 19:02:16,566 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:02:16,567 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1889623568] [2020-07-28 19:02:16,567 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:16,567 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:16,568 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1518601605] [2020-07-28 19:02:16,568 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 51 [2020-07-28 19:02:16,568 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:16,569 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:16,628 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:16,629 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:16,629 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:16,629 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:16,630 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:16,630 INFO L87 Difference]: Start difference. First operand 149 states and 191 transitions. Second operand 4 states. [2020-07-28 19:02:17,529 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:17,530 INFO L93 Difference]: Finished difference Result 301 states and 393 transitions. [2020-07-28 19:02:17,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:02:17,530 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 51 [2020-07-28 19:02:17,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:17,531 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:17,532 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 161 transitions. [2020-07-28 19:02:17,532 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:17,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 161 transitions. [2020-07-28 19:02:17,533 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 161 transitions. [2020-07-28 19:02:17,731 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 161 edges. 161 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:17,734 INFO L225 Difference]: With dead ends: 301 [2020-07-28 19:02:17,734 INFO L226 Difference]: Without dead ends: 185 [2020-07-28 19:02:17,735 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:17,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2020-07-28 19:02:18,004 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 133. [2020-07-28 19:02:18,005 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:18,005 INFO L82 GeneralOperation]: Start isEquivalent. First operand 185 states. Second operand 133 states. [2020-07-28 19:02:18,005 INFO L74 IsIncluded]: Start isIncluded. First operand 185 states. Second operand 133 states. [2020-07-28 19:02:18,005 INFO L87 Difference]: Start difference. First operand 185 states. Second operand 133 states. [2020-07-28 19:02:18,008 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:18,009 INFO L93 Difference]: Finished difference Result 185 states and 240 transitions. [2020-07-28 19:02:18,009 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 240 transitions. [2020-07-28 19:02:18,009 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:18,010 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:18,010 INFO L74 IsIncluded]: Start isIncluded. First operand 133 states. Second operand 185 states. [2020-07-28 19:02:18,010 INFO L87 Difference]: Start difference. First operand 133 states. Second operand 185 states. [2020-07-28 19:02:18,013 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:18,014 INFO L93 Difference]: Finished difference Result 185 states and 240 transitions. [2020-07-28 19:02:18,014 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 240 transitions. [2020-07-28 19:02:18,014 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:18,015 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:18,015 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:18,015 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:18,015 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 133 states. [2020-07-28 19:02:18,017 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 133 states to 133 states and 171 transitions. [2020-07-28 19:02:18,018 INFO L78 Accepts]: Start accepts. Automaton has 133 states and 171 transitions. Word has length 51 [2020-07-28 19:02:18,018 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:18,018 INFO L479 AbstractCegarLoop]: Abstraction has 133 states and 171 transitions. [2020-07-28 19:02:18,018 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:18,018 INFO L276 IsEmpty]: Start isEmpty. Operand 133 states and 171 transitions. [2020-07-28 19:02:18,019 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2020-07-28 19:02:18,019 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:18,019 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:18,020 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:02:18,020 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:18,020 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:18,020 INFO L82 PathProgramCache]: Analyzing trace with hash 99994719, now seen corresponding path program 1 times [2020-07-28 19:02:18,021 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:18,021 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [818388851] [2020-07-28 19:02:18,021 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:18,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:18,094 INFO L280 TraceCheckUtils]: 0: Hoare triple {11486#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,095 INFO L280 TraceCheckUtils]: 1: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,096 INFO L280 TraceCheckUtils]: 2: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,096 INFO L280 TraceCheckUtils]: 3: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,097 INFO L280 TraceCheckUtils]: 4: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~10; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,097 INFO L280 TraceCheckUtils]: 5: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,098 INFO L280 TraceCheckUtils]: 6: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume !false; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,098 INFO L280 TraceCheckUtils]: 7: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,099 INFO L280 TraceCheckUtils]: 8: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,099 INFO L280 TraceCheckUtils]: 9: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp~0; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,100 INFO L280 TraceCheckUtils]: 10: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,100 INFO L280 TraceCheckUtils]: 11: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,101 INFO L280 TraceCheckUtils]: 12: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~0); {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,102 INFO L280 TraceCheckUtils]: 13: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,102 INFO L280 TraceCheckUtils]: 14: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,103 INFO L280 TraceCheckUtils]: 15: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,103 INFO L280 TraceCheckUtils]: 16: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,104 INFO L280 TraceCheckUtils]: 17: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,104 INFO L280 TraceCheckUtils]: 18: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,105 INFO L280 TraceCheckUtils]: 19: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,105 INFO L280 TraceCheckUtils]: 20: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,106 INFO L280 TraceCheckUtils]: 21: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,106 INFO L280 TraceCheckUtils]: 22: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,107 INFO L280 TraceCheckUtils]: 23: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,107 INFO L280 TraceCheckUtils]: 24: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} processEnvironment__wrappee__highWaterSensor_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret5 && processEnvironment__wrappee__highWaterSensor_#t~ret5 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret5;havoc processEnvironment__wrappee__highWaterSensor_#t~ret5; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,108 INFO L280 TraceCheckUtils]: 25: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;~pumpRunning~0 := 1; {11488#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,109 INFO L280 TraceCheckUtils]: 26: Hoare triple {11488#(= 0 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {11489#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:18,109 INFO L280 TraceCheckUtils]: 27: Hoare triple {11489#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {11490#(= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~6)} is VALID [2020-07-28 19:02:18,110 INFO L280 TraceCheckUtils]: 28: Hoare triple {11490#(= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~6)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~6; {11487#false} is VALID [2020-07-28 19:02:18,110 INFO L280 TraceCheckUtils]: 29: Hoare triple {11487#false} assume !false; {11487#false} is VALID [2020-07-28 19:02:18,110 INFO L280 TraceCheckUtils]: 30: Hoare triple {11487#false} assume test_~splverifierCounter~0 < 4; {11487#false} is VALID [2020-07-28 19:02:18,110 INFO L280 TraceCheckUtils]: 31: Hoare triple {11487#false} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {11487#false} is VALID [2020-07-28 19:02:18,111 INFO L280 TraceCheckUtils]: 32: Hoare triple {11487#false} assume !(0 != test_~tmp~0); {11487#false} is VALID [2020-07-28 19:02:18,111 INFO L280 TraceCheckUtils]: 33: Hoare triple {11487#false} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {11487#false} is VALID [2020-07-28 19:02:18,111 INFO L280 TraceCheckUtils]: 34: Hoare triple {11487#false} assume !(0 != test_~tmp___0~0); {11487#false} is VALID [2020-07-28 19:02:18,111 INFO L280 TraceCheckUtils]: 35: Hoare triple {11487#false} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {11487#false} is VALID [2020-07-28 19:02:18,112 INFO L280 TraceCheckUtils]: 36: Hoare triple {11487#false} assume 0 != test_~tmp___2~0; {11487#false} is VALID [2020-07-28 19:02:18,112 INFO L280 TraceCheckUtils]: 37: Hoare triple {11487#false} assume 0 != ~pumpRunning~0; {11487#false} is VALID [2020-07-28 19:02:18,112 INFO L280 TraceCheckUtils]: 38: Hoare triple {11487#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11487#false} is VALID [2020-07-28 19:02:18,112 INFO L280 TraceCheckUtils]: 39: Hoare triple {11487#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {11487#false} is VALID [2020-07-28 19:02:18,112 INFO L280 TraceCheckUtils]: 40: Hoare triple {11487#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~2;havoc isMethaneAlarm_~retValue_acc~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {11487#false} is VALID [2020-07-28 19:02:18,113 INFO L280 TraceCheckUtils]: 41: Hoare triple {11487#false} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~2 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~2; {11487#false} is VALID [2020-07-28 19:02:18,113 INFO L280 TraceCheckUtils]: 42: Hoare triple {11487#false} processEnvironment_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret7 && processEnvironment_#t~ret7 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret7;havoc processEnvironment_#t~ret7; {11487#false} is VALID [2020-07-28 19:02:18,113 INFO L280 TraceCheckUtils]: 43: Hoare triple {11487#false} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {11487#false} is VALID [2020-07-28 19:02:18,114 INFO L280 TraceCheckUtils]: 44: Hoare triple {11487#false} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {11487#false} is VALID [2020-07-28 19:02:18,114 INFO L280 TraceCheckUtils]: 45: Hoare triple {11487#false} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {11487#false} is VALID [2020-07-28 19:02:18,114 INFO L280 TraceCheckUtils]: 46: Hoare triple {11487#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {11487#false} is VALID [2020-07-28 19:02:18,114 INFO L280 TraceCheckUtils]: 47: Hoare triple {11487#false} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {11487#false} is VALID [2020-07-28 19:02:18,114 INFO L280 TraceCheckUtils]: 48: Hoare triple {11487#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {11487#false} is VALID [2020-07-28 19:02:18,115 INFO L280 TraceCheckUtils]: 49: Hoare triple {11487#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {11487#false} is VALID [2020-07-28 19:02:18,115 INFO L280 TraceCheckUtils]: 50: Hoare triple {11487#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {11487#false} is VALID [2020-07-28 19:02:18,115 INFO L280 TraceCheckUtils]: 51: Hoare triple {11487#false} assume !false; {11487#false} is VALID [2020-07-28 19:02:18,118 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:18,118 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [818388851] [2020-07-28 19:02:18,118 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:18,118 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:18,119 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [288241884] [2020-07-28 19:02:18,119 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 52 [2020-07-28 19:02:18,119 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:18,120 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:18,192 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 52 edges. 52 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:18,192 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:18,192 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:18,193 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:18,193 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:18,193 INFO L87 Difference]: Start difference. First operand 133 states and 171 transitions. Second operand 5 states. [2020-07-28 19:02:20,046 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:20,047 INFO L93 Difference]: Finished difference Result 684 states and 873 transitions. [2020-07-28 19:02:20,047 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 19:02:20,047 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 52 [2020-07-28 19:02:20,047 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:20,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:20,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 329 transitions. [2020-07-28 19:02:20,050 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:20,051 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 329 transitions. [2020-07-28 19:02:20,051 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 329 transitions. [2020-07-28 19:02:20,432 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 329 edges. 329 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:20,450 INFO L225 Difference]: With dead ends: 684 [2020-07-28 19:02:20,450 INFO L226 Difference]: Without dead ends: 557 [2020-07-28 19:02:20,451 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:02:20,452 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 557 states. [2020-07-28 19:02:21,141 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 557 to 258. [2020-07-28 19:02:21,141 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:21,141 INFO L82 GeneralOperation]: Start isEquivalent. First operand 557 states. Second operand 258 states. [2020-07-28 19:02:21,142 INFO L74 IsIncluded]: Start isIncluded. First operand 557 states. Second operand 258 states. [2020-07-28 19:02:21,142 INFO L87 Difference]: Start difference. First operand 557 states. Second operand 258 states. [2020-07-28 19:02:21,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:21,157 INFO L93 Difference]: Finished difference Result 557 states and 697 transitions. [2020-07-28 19:02:21,158 INFO L276 IsEmpty]: Start isEmpty. Operand 557 states and 697 transitions. [2020-07-28 19:02:21,158 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:21,159 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:21,159 INFO L74 IsIncluded]: Start isIncluded. First operand 258 states. Second operand 557 states. [2020-07-28 19:02:21,159 INFO L87 Difference]: Start difference. First operand 258 states. Second operand 557 states. [2020-07-28 19:02:21,174 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:21,174 INFO L93 Difference]: Finished difference Result 557 states and 697 transitions. [2020-07-28 19:02:21,174 INFO L276 IsEmpty]: Start isEmpty. Operand 557 states and 697 transitions. [2020-07-28 19:02:21,175 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:21,175 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:21,175 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:21,176 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:21,176 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 258 states. [2020-07-28 19:02:21,182 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 326 transitions. [2020-07-28 19:02:21,182 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 326 transitions. Word has length 52 [2020-07-28 19:02:21,182 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:21,183 INFO L479 AbstractCegarLoop]: Abstraction has 258 states and 326 transitions. [2020-07-28 19:02:21,183 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:21,183 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 326 transitions. [2020-07-28 19:02:21,184 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2020-07-28 19:02:21,184 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:21,184 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:21,184 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-28 19:02:21,184 INFO L427 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:21,185 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:21,185 INFO L82 PathProgramCache]: Analyzing trace with hash -42529499, now seen corresponding path program 1 times [2020-07-28 19:02:21,185 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:21,185 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [224965851] [2020-07-28 19:02:21,185 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:21,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:21,277 INFO L280 TraceCheckUtils]: 0: Hoare triple {13873#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {13873#true} is VALID [2020-07-28 19:02:21,278 INFO L280 TraceCheckUtils]: 1: Hoare triple {13873#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {13873#true} is VALID [2020-07-28 19:02:21,278 INFO L280 TraceCheckUtils]: 2: Hoare triple {13873#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {13873#true} is VALID [2020-07-28 19:02:21,278 INFO L280 TraceCheckUtils]: 3: Hoare triple {13873#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {13873#true} is VALID [2020-07-28 19:02:21,279 INFO L280 TraceCheckUtils]: 4: Hoare triple {13873#true} assume 0 != main_~tmp~10; {13873#true} is VALID [2020-07-28 19:02:21,279 INFO L280 TraceCheckUtils]: 5: Hoare triple {13873#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {13873#true} is VALID [2020-07-28 19:02:21,279 INFO L280 TraceCheckUtils]: 6: Hoare triple {13873#true} assume !false; {13873#true} is VALID [2020-07-28 19:02:21,279 INFO L280 TraceCheckUtils]: 7: Hoare triple {13873#true} assume test_~splverifierCounter~0 < 4; {13873#true} is VALID [2020-07-28 19:02:21,279 INFO L280 TraceCheckUtils]: 8: Hoare triple {13873#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {13873#true} is VALID [2020-07-28 19:02:21,279 INFO L280 TraceCheckUtils]: 9: Hoare triple {13873#true} assume 0 != test_~tmp~0; {13873#true} is VALID [2020-07-28 19:02:21,280 INFO L280 TraceCheckUtils]: 10: Hoare triple {13873#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13873#true} is VALID [2020-07-28 19:02:21,280 INFO L280 TraceCheckUtils]: 11: Hoare triple {13873#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {13873#true} is VALID [2020-07-28 19:02:21,280 INFO L280 TraceCheckUtils]: 12: Hoare triple {13873#true} assume 0 != test_~tmp___0~0; {13873#true} is VALID [2020-07-28 19:02:21,282 INFO L280 TraceCheckUtils]: 13: Hoare triple {13873#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,282 INFO L280 TraceCheckUtils]: 14: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,283 INFO L280 TraceCheckUtils]: 15: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,283 INFO L280 TraceCheckUtils]: 16: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,284 INFO L280 TraceCheckUtils]: 17: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,284 INFO L280 TraceCheckUtils]: 18: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,285 INFO L280 TraceCheckUtils]: 19: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,286 INFO L280 TraceCheckUtils]: 20: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,286 INFO L280 TraceCheckUtils]: 21: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,287 INFO L280 TraceCheckUtils]: 22: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,287 INFO L280 TraceCheckUtils]: 23: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,288 INFO L280 TraceCheckUtils]: 24: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,288 INFO L280 TraceCheckUtils]: 25: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} processEnvironment__wrappee__highWaterSensor_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret5 && processEnvironment__wrappee__highWaterSensor_#t~ret5 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret5;havoc processEnvironment__wrappee__highWaterSensor_#t~ret5; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,289 INFO L280 TraceCheckUtils]: 26: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;~pumpRunning~0 := 1; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,289 INFO L280 TraceCheckUtils]: 27: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,290 INFO L280 TraceCheckUtils]: 28: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,290 INFO L280 TraceCheckUtils]: 29: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~6; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,291 INFO L280 TraceCheckUtils]: 30: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume !false; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,292 INFO L280 TraceCheckUtils]: 31: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,293 INFO L280 TraceCheckUtils]: 32: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,293 INFO L280 TraceCheckUtils]: 33: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp~0); {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,294 INFO L280 TraceCheckUtils]: 34: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,295 INFO L280 TraceCheckUtils]: 35: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~0); {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,295 INFO L280 TraceCheckUtils]: 36: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,296 INFO L280 TraceCheckUtils]: 37: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,296 INFO L280 TraceCheckUtils]: 38: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,297 INFO L280 TraceCheckUtils]: 39: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,297 INFO L280 TraceCheckUtils]: 40: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,298 INFO L280 TraceCheckUtils]: 41: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~2;havoc isMethaneAlarm_~retValue_acc~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,298 INFO L280 TraceCheckUtils]: 42: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~2 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~2; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,299 INFO L280 TraceCheckUtils]: 43: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} processEnvironment_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret7 && processEnvironment_#t~ret7 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret7;havoc processEnvironment_#t~ret7; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,300 INFO L280 TraceCheckUtils]: 44: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {13875#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,300 INFO L280 TraceCheckUtils]: 45: Hoare triple {13875#(= 1 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {13876#(= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:21,301 INFO L280 TraceCheckUtils]: 46: Hoare triple {13876#(= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {13877#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~6)} is VALID [2020-07-28 19:02:21,302 INFO L280 TraceCheckUtils]: 47: Hoare triple {13877#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~6)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {13874#false} is VALID [2020-07-28 19:02:21,302 INFO L280 TraceCheckUtils]: 48: Hoare triple {13874#false} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {13874#false} is VALID [2020-07-28 19:02:21,302 INFO L280 TraceCheckUtils]: 49: Hoare triple {13874#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {13874#false} is VALID [2020-07-28 19:02:21,302 INFO L280 TraceCheckUtils]: 50: Hoare triple {13874#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {13874#false} is VALID [2020-07-28 19:02:21,303 INFO L280 TraceCheckUtils]: 51: Hoare triple {13874#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {13874#false} is VALID [2020-07-28 19:02:21,303 INFO L280 TraceCheckUtils]: 52: Hoare triple {13874#false} assume !false; {13874#false} is VALID [2020-07-28 19:02:21,306 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 19:02:21,306 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [224965851] [2020-07-28 19:02:21,306 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [805865126] [2020-07-28 19:02:21,307 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:02:21,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:21,432 INFO L263 TraceCheckSpWp]: Trace formula consists of 410 conjuncts, 5 conjunts are in the unsatisfiable core [2020-07-28 19:02:21,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:21,471 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:02:21,682 INFO L280 TraceCheckUtils]: 0: Hoare triple {13873#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {13873#true} is VALID [2020-07-28 19:02:21,683 INFO L280 TraceCheckUtils]: 1: Hoare triple {13873#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {13873#true} is VALID [2020-07-28 19:02:21,683 INFO L280 TraceCheckUtils]: 2: Hoare triple {13873#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {13873#true} is VALID [2020-07-28 19:02:21,683 INFO L280 TraceCheckUtils]: 3: Hoare triple {13873#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {13873#true} is VALID [2020-07-28 19:02:21,683 INFO L280 TraceCheckUtils]: 4: Hoare triple {13873#true} assume 0 != main_~tmp~10; {13873#true} is VALID [2020-07-28 19:02:21,684 INFO L280 TraceCheckUtils]: 5: Hoare triple {13873#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {13873#true} is VALID [2020-07-28 19:02:21,684 INFO L280 TraceCheckUtils]: 6: Hoare triple {13873#true} assume !false; {13873#true} is VALID [2020-07-28 19:02:21,684 INFO L280 TraceCheckUtils]: 7: Hoare triple {13873#true} assume test_~splverifierCounter~0 < 4; {13873#true} is VALID [2020-07-28 19:02:21,684 INFO L280 TraceCheckUtils]: 8: Hoare triple {13873#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {13873#true} is VALID [2020-07-28 19:02:21,684 INFO L280 TraceCheckUtils]: 9: Hoare triple {13873#true} assume 0 != test_~tmp~0; {13873#true} is VALID [2020-07-28 19:02:21,685 INFO L280 TraceCheckUtils]: 10: Hoare triple {13873#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13873#true} is VALID [2020-07-28 19:02:21,685 INFO L280 TraceCheckUtils]: 11: Hoare triple {13873#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {13873#true} is VALID [2020-07-28 19:02:21,685 INFO L280 TraceCheckUtils]: 12: Hoare triple {13873#true} assume 0 != test_~tmp___0~0; {13873#true} is VALID [2020-07-28 19:02:21,686 INFO L280 TraceCheckUtils]: 13: Hoare triple {13873#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,686 INFO L280 TraceCheckUtils]: 14: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,687 INFO L280 TraceCheckUtils]: 15: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,687 INFO L280 TraceCheckUtils]: 16: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,688 INFO L280 TraceCheckUtils]: 17: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,689 INFO L280 TraceCheckUtils]: 18: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,689 INFO L280 TraceCheckUtils]: 19: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,690 INFO L280 TraceCheckUtils]: 20: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,690 INFO L280 TraceCheckUtils]: 21: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,691 INFO L280 TraceCheckUtils]: 22: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,691 INFO L280 TraceCheckUtils]: 23: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,692 INFO L280 TraceCheckUtils]: 24: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,693 INFO L280 TraceCheckUtils]: 25: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} processEnvironment__wrappee__highWaterSensor_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret5 && processEnvironment__wrappee__highWaterSensor_#t~ret5 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret5;havoc processEnvironment__wrappee__highWaterSensor_#t~ret5; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,694 INFO L280 TraceCheckUtils]: 26: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;~pumpRunning~0 := 1; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,694 INFO L280 TraceCheckUtils]: 27: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,695 INFO L280 TraceCheckUtils]: 28: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,696 INFO L280 TraceCheckUtils]: 29: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~6; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,696 INFO L280 TraceCheckUtils]: 30: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume !false; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,697 INFO L280 TraceCheckUtils]: 31: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,698 INFO L280 TraceCheckUtils]: 32: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,698 INFO L280 TraceCheckUtils]: 33: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp~0); {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,699 INFO L280 TraceCheckUtils]: 34: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,700 INFO L280 TraceCheckUtils]: 35: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~0); {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,700 INFO L280 TraceCheckUtils]: 36: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,701 INFO L280 TraceCheckUtils]: 37: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,701 INFO L280 TraceCheckUtils]: 38: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,702 INFO L280 TraceCheckUtils]: 39: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,703 INFO L280 TraceCheckUtils]: 40: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,703 INFO L280 TraceCheckUtils]: 41: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~2;havoc isMethaneAlarm_~retValue_acc~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,704 INFO L280 TraceCheckUtils]: 42: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~2 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~2; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,705 INFO L280 TraceCheckUtils]: 43: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} processEnvironment_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret7 && processEnvironment_#t~ret7 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret7;havoc processEnvironment_#t~ret7; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,705 INFO L280 TraceCheckUtils]: 44: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {13920#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:21,706 INFO L280 TraceCheckUtils]: 45: Hoare triple {13920#(<= 1 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {14017#(<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:21,707 INFO L280 TraceCheckUtils]: 46: Hoare triple {14017#(<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {14021#(<= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~6)} is VALID [2020-07-28 19:02:21,708 INFO L280 TraceCheckUtils]: 47: Hoare triple {14021#(<= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~6)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {13874#false} is VALID [2020-07-28 19:02:21,708 INFO L280 TraceCheckUtils]: 48: Hoare triple {13874#false} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {13874#false} is VALID [2020-07-28 19:02:21,708 INFO L280 TraceCheckUtils]: 49: Hoare triple {13874#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {13874#false} is VALID [2020-07-28 19:02:21,708 INFO L280 TraceCheckUtils]: 50: Hoare triple {13874#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {13874#false} is VALID [2020-07-28 19:02:21,708 INFO L280 TraceCheckUtils]: 51: Hoare triple {13874#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {13874#false} is VALID [2020-07-28 19:02:21,709 INFO L280 TraceCheckUtils]: 52: Hoare triple {13874#false} assume !false; {13874#false} is VALID [2020-07-28 19:02:21,713 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 19:02:21,713 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:02:21,714 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 8 [2020-07-28 19:02:21,714 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [632981658] [2020-07-28 19:02:21,715 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 53 [2020-07-28 19:02:21,715 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:21,715 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2020-07-28 19:02:21,812 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 82 edges. 82 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:21,812 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2020-07-28 19:02:21,812 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:21,812 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2020-07-28 19:02:21,813 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:21,813 INFO L87 Difference]: Start difference. First operand 258 states and 326 transitions. Second operand 8 states. [2020-07-28 19:02:23,741 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:23,741 INFO L93 Difference]: Finished difference Result 634 states and 796 transitions. [2020-07-28 19:02:23,741 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:23,741 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 53 [2020-07-28 19:02:23,742 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:23,742 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:02:23,744 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 250 transitions. [2020-07-28 19:02:23,745 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:02:23,747 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 250 transitions. [2020-07-28 19:02:23,747 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 250 transitions. [2020-07-28 19:02:24,064 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 250 edges. 250 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:24,078 INFO L225 Difference]: With dead ends: 634 [2020-07-28 19:02:24,078 INFO L226 Difference]: Without dead ends: 382 [2020-07-28 19:02:24,080 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 52 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=38, Invalid=72, Unknown=0, NotChecked=0, Total=110 [2020-07-28 19:02:24,080 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 382 states. [2020-07-28 19:02:24,814 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 382 to 244. [2020-07-28 19:02:24,814 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:24,814 INFO L82 GeneralOperation]: Start isEquivalent. First operand 382 states. Second operand 244 states. [2020-07-28 19:02:24,814 INFO L74 IsIncluded]: Start isIncluded. First operand 382 states. Second operand 244 states. [2020-07-28 19:02:24,815 INFO L87 Difference]: Start difference. First operand 382 states. Second operand 244 states. [2020-07-28 19:02:24,826 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:24,826 INFO L93 Difference]: Finished difference Result 382 states and 467 transitions. [2020-07-28 19:02:24,827 INFO L276 IsEmpty]: Start isEmpty. Operand 382 states and 467 transitions. [2020-07-28 19:02:24,827 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:24,828 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:24,828 INFO L74 IsIncluded]: Start isIncluded. First operand 244 states. Second operand 382 states. [2020-07-28 19:02:24,828 INFO L87 Difference]: Start difference. First operand 244 states. Second operand 382 states. [2020-07-28 19:02:24,840 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:24,840 INFO L93 Difference]: Finished difference Result 382 states and 467 transitions. [2020-07-28 19:02:24,840 INFO L276 IsEmpty]: Start isEmpty. Operand 382 states and 467 transitions. [2020-07-28 19:02:24,841 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:24,841 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:24,841 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:24,842 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:24,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 244 states. [2020-07-28 19:02:24,850 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244 states to 244 states and 299 transitions. [2020-07-28 19:02:24,850 INFO L78 Accepts]: Start accepts. Automaton has 244 states and 299 transitions. Word has length 53 [2020-07-28 19:02:24,850 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:24,850 INFO L479 AbstractCegarLoop]: Abstraction has 244 states and 299 transitions. [2020-07-28 19:02:24,851 INFO L480 AbstractCegarLoop]: Interpolant automaton has 8 states. [2020-07-28 19:02:24,851 INFO L276 IsEmpty]: Start isEmpty. Operand 244 states and 299 transitions. [2020-07-28 19:02:24,851 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2020-07-28 19:02:24,852 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:24,852 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:25,067 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2020-07-28 19:02:25,068 INFO L427 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:25,068 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:25,068 INFO L82 PathProgramCache]: Analyzing trace with hash 280626892, now seen corresponding path program 1 times [2020-07-28 19:02:25,068 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:25,069 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [585015152] [2020-07-28 19:02:25,069 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:25,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:25,236 INFO L280 TraceCheckUtils]: 0: Hoare triple {15986#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {15988#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:25,237 INFO L280 TraceCheckUtils]: 1: Hoare triple {15988#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {15988#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:25,238 INFO L280 TraceCheckUtils]: 2: Hoare triple {15988#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {15988#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:25,238 INFO L280 TraceCheckUtils]: 3: Hoare triple {15988#(= 1 ~waterLevel~0)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {15988#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:25,239 INFO L280 TraceCheckUtils]: 4: Hoare triple {15988#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {15988#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:25,239 INFO L280 TraceCheckUtils]: 5: Hoare triple {15988#(= 1 ~waterLevel~0)} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {15988#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:25,240 INFO L280 TraceCheckUtils]: 6: Hoare triple {15988#(= 1 ~waterLevel~0)} assume !false; {15988#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:25,241 INFO L280 TraceCheckUtils]: 7: Hoare triple {15988#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {15988#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:25,241 INFO L280 TraceCheckUtils]: 8: Hoare triple {15988#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {15988#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:25,242 INFO L280 TraceCheckUtils]: 9: Hoare triple {15988#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~0; {15988#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:25,242 INFO L280 TraceCheckUtils]: 10: Hoare triple {15988#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,243 INFO L280 TraceCheckUtils]: 11: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,244 INFO L280 TraceCheckUtils]: 12: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___0~0); {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,257 INFO L280 TraceCheckUtils]: 13: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,258 INFO L280 TraceCheckUtils]: 14: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != test_~tmp___2~0; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,258 INFO L280 TraceCheckUtils]: 15: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,259 INFO L280 TraceCheckUtils]: 16: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,260 INFO L280 TraceCheckUtils]: 17: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,261 INFO L280 TraceCheckUtils]: 18: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,261 INFO L280 TraceCheckUtils]: 19: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,262 INFO L280 TraceCheckUtils]: 20: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,263 INFO L280 TraceCheckUtils]: 21: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,265 INFO L280 TraceCheckUtils]: 22: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,266 INFO L280 TraceCheckUtils]: 23: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,266 INFO L280 TraceCheckUtils]: 24: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} processEnvironment__wrappee__highWaterSensor_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret5 && processEnvironment__wrappee__highWaterSensor_#t~ret5 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret5;havoc processEnvironment__wrappee__highWaterSensor_#t~ret5; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,267 INFO L280 TraceCheckUtils]: 25: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;~pumpRunning~0 := 1; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,268 INFO L280 TraceCheckUtils]: 26: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,269 INFO L280 TraceCheckUtils]: 27: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:25,269 INFO L280 TraceCheckUtils]: 28: Hoare triple {15989#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {15990#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:02:25,270 INFO L280 TraceCheckUtils]: 29: Hoare triple {15990#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {15991#(and (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 2) (< 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3))} is VALID [2020-07-28 19:02:25,271 INFO L280 TraceCheckUtils]: 30: Hoare triple {15991#(and (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 2) (< 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3))} assume !(2 == __utac_acc__Specification3_spec__1_~tmp___0~3); {15987#false} is VALID [2020-07-28 19:02:25,271 INFO L280 TraceCheckUtils]: 31: Hoare triple {15987#false} assume !false; {15987#false} is VALID [2020-07-28 19:02:25,272 INFO L280 TraceCheckUtils]: 32: Hoare triple {15987#false} assume test_~splverifierCounter~0 < 4; {15987#false} is VALID [2020-07-28 19:02:25,272 INFO L280 TraceCheckUtils]: 33: Hoare triple {15987#false} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {15987#false} is VALID [2020-07-28 19:02:25,272 INFO L280 TraceCheckUtils]: 34: Hoare triple {15987#false} assume !(0 != test_~tmp~0); {15987#false} is VALID [2020-07-28 19:02:25,272 INFO L280 TraceCheckUtils]: 35: Hoare triple {15987#false} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {15987#false} is VALID [2020-07-28 19:02:25,272 INFO L280 TraceCheckUtils]: 36: Hoare triple {15987#false} assume !(0 != test_~tmp___0~0); {15987#false} is VALID [2020-07-28 19:02:25,272 INFO L280 TraceCheckUtils]: 37: Hoare triple {15987#false} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {15987#false} is VALID [2020-07-28 19:02:25,273 INFO L280 TraceCheckUtils]: 38: Hoare triple {15987#false} assume 0 != test_~tmp___2~0; {15987#false} is VALID [2020-07-28 19:02:25,273 INFO L280 TraceCheckUtils]: 39: Hoare triple {15987#false} assume 0 != ~pumpRunning~0; {15987#false} is VALID [2020-07-28 19:02:25,273 INFO L280 TraceCheckUtils]: 40: Hoare triple {15987#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15987#false} is VALID [2020-07-28 19:02:25,274 INFO L280 TraceCheckUtils]: 41: Hoare triple {15987#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {15987#false} is VALID [2020-07-28 19:02:25,274 INFO L280 TraceCheckUtils]: 42: Hoare triple {15987#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~2;havoc isMethaneAlarm_~retValue_acc~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {15987#false} is VALID [2020-07-28 19:02:25,274 INFO L280 TraceCheckUtils]: 43: Hoare triple {15987#false} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~2 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~2; {15987#false} is VALID [2020-07-28 19:02:25,274 INFO L280 TraceCheckUtils]: 44: Hoare triple {15987#false} processEnvironment_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret7 && processEnvironment_#t~ret7 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret7;havoc processEnvironment_#t~ret7; {15987#false} is VALID [2020-07-28 19:02:25,274 INFO L280 TraceCheckUtils]: 45: Hoare triple {15987#false} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {15987#false} is VALID [2020-07-28 19:02:25,275 INFO L280 TraceCheckUtils]: 46: Hoare triple {15987#false} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {15987#false} is VALID [2020-07-28 19:02:25,275 INFO L280 TraceCheckUtils]: 47: Hoare triple {15987#false} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {15987#false} is VALID [2020-07-28 19:02:25,275 INFO L280 TraceCheckUtils]: 48: Hoare triple {15987#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {15987#false} is VALID [2020-07-28 19:02:25,275 INFO L280 TraceCheckUtils]: 49: Hoare triple {15987#false} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {15987#false} is VALID [2020-07-28 19:02:25,276 INFO L280 TraceCheckUtils]: 50: Hoare triple {15987#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {15987#false} is VALID [2020-07-28 19:02:25,276 INFO L280 TraceCheckUtils]: 51: Hoare triple {15987#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {15987#false} is VALID [2020-07-28 19:02:25,276 INFO L280 TraceCheckUtils]: 52: Hoare triple {15987#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {15987#false} is VALID [2020-07-28 19:02:25,276 INFO L280 TraceCheckUtils]: 53: Hoare triple {15987#false} assume !false; {15987#false} is VALID [2020-07-28 19:02:25,281 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:25,281 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [585015152] [2020-07-28 19:02:25,282 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:25,282 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:25,282 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [559289198] [2020-07-28 19:02:25,283 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 54 [2020-07-28 19:02:25,284 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:25,284 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:02:25,350 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 54 edges. 54 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:25,350 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:02:25,351 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:25,351 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:02:25,352 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:02:25,353 INFO L87 Difference]: Start difference. First operand 244 states and 299 transitions. Second operand 6 states. [2020-07-28 19:02:29,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:29,913 INFO L93 Difference]: Finished difference Result 1258 states and 1585 transitions. [2020-07-28 19:02:29,913 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2020-07-28 19:02:29,913 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 54 [2020-07-28 19:02:29,913 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:29,913 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:29,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 507 transitions. [2020-07-28 19:02:29,915 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:29,917 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 507 transitions. [2020-07-28 19:02:29,917 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states and 507 transitions. [2020-07-28 19:02:30,543 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 507 edges. 507 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:30,594 INFO L225 Difference]: With dead ends: 1258 [2020-07-28 19:02:30,594 INFO L226 Difference]: Without dead ends: 1072 [2020-07-28 19:02:30,595 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=93, Unknown=0, NotChecked=0, Total=132 [2020-07-28 19:02:30,596 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1072 states. [2020-07-28 19:02:31,830 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1072 to 410. [2020-07-28 19:02:31,830 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:31,830 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1072 states. Second operand 410 states. [2020-07-28 19:02:31,830 INFO L74 IsIncluded]: Start isIncluded. First operand 1072 states. Second operand 410 states. [2020-07-28 19:02:31,830 INFO L87 Difference]: Start difference. First operand 1072 states. Second operand 410 states. [2020-07-28 19:02:31,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:31,875 INFO L93 Difference]: Finished difference Result 1072 states and 1319 transitions. [2020-07-28 19:02:31,875 INFO L276 IsEmpty]: Start isEmpty. Operand 1072 states and 1319 transitions. [2020-07-28 19:02:31,877 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:31,877 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:31,877 INFO L74 IsIncluded]: Start isIncluded. First operand 410 states. Second operand 1072 states. [2020-07-28 19:02:31,877 INFO L87 Difference]: Start difference. First operand 410 states. Second operand 1072 states. [2020-07-28 19:02:31,951 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:31,951 INFO L93 Difference]: Finished difference Result 1072 states and 1319 transitions. [2020-07-28 19:02:31,952 INFO L276 IsEmpty]: Start isEmpty. Operand 1072 states and 1319 transitions. [2020-07-28 19:02:31,955 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:31,955 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:31,955 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:31,955 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:31,955 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 410 states. [2020-07-28 19:02:31,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 410 states to 410 states and 498 transitions. [2020-07-28 19:02:31,970 INFO L78 Accepts]: Start accepts. Automaton has 410 states and 498 transitions. Word has length 54 [2020-07-28 19:02:31,971 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:31,971 INFO L479 AbstractCegarLoop]: Abstraction has 410 states and 498 transitions. [2020-07-28 19:02:31,971 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:31,971 INFO L276 IsEmpty]: Start isEmpty. Operand 410 states and 498 transitions. [2020-07-28 19:02:31,972 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2020-07-28 19:02:31,972 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:31,972 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:31,973 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2020-07-28 19:02:31,973 INFO L427 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:31,973 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:31,973 INFO L82 PathProgramCache]: Analyzing trace with hash 103606007, now seen corresponding path program 1 times [2020-07-28 19:02:31,974 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:31,974 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1512426023] [2020-07-28 19:02:31,974 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:31,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:32,058 INFO L280 TraceCheckUtils]: 0: Hoare triple {20376#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {20376#true} is VALID [2020-07-28 19:02:32,059 INFO L280 TraceCheckUtils]: 1: Hoare triple {20376#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {20376#true} is VALID [2020-07-28 19:02:32,059 INFO L280 TraceCheckUtils]: 2: Hoare triple {20376#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {20376#true} is VALID [2020-07-28 19:02:32,059 INFO L280 TraceCheckUtils]: 3: Hoare triple {20376#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {20376#true} is VALID [2020-07-28 19:02:32,059 INFO L280 TraceCheckUtils]: 4: Hoare triple {20376#true} assume 0 != main_~tmp~10; {20376#true} is VALID [2020-07-28 19:02:32,060 INFO L280 TraceCheckUtils]: 5: Hoare triple {20376#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {20376#true} is VALID [2020-07-28 19:02:32,060 INFO L280 TraceCheckUtils]: 6: Hoare triple {20376#true} assume !false; {20376#true} is VALID [2020-07-28 19:02:32,060 INFO L280 TraceCheckUtils]: 7: Hoare triple {20376#true} assume test_~splverifierCounter~0 < 4; {20376#true} is VALID [2020-07-28 19:02:32,060 INFO L280 TraceCheckUtils]: 8: Hoare triple {20376#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {20376#true} is VALID [2020-07-28 19:02:32,061 INFO L280 TraceCheckUtils]: 9: Hoare triple {20376#true} assume 0 != test_~tmp~0; {20376#true} is VALID [2020-07-28 19:02:32,061 INFO L280 TraceCheckUtils]: 10: Hoare triple {20376#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20376#true} is VALID [2020-07-28 19:02:32,061 INFO L280 TraceCheckUtils]: 11: Hoare triple {20376#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {20376#true} is VALID [2020-07-28 19:02:32,061 INFO L280 TraceCheckUtils]: 12: Hoare triple {20376#true} assume 0 != test_~tmp___0~0; {20376#true} is VALID [2020-07-28 19:02:32,062 INFO L280 TraceCheckUtils]: 13: Hoare triple {20376#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {20376#true} is VALID [2020-07-28 19:02:32,062 INFO L280 TraceCheckUtils]: 14: Hoare triple {20376#true} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {20376#true} is VALID [2020-07-28 19:02:32,062 INFO L280 TraceCheckUtils]: 15: Hoare triple {20376#true} assume 0 != test_~tmp___2~0; {20376#true} is VALID [2020-07-28 19:02:32,062 INFO L280 TraceCheckUtils]: 16: Hoare triple {20376#true} assume !(0 != ~pumpRunning~0); {20376#true} is VALID [2020-07-28 19:02:32,063 INFO L280 TraceCheckUtils]: 17: Hoare triple {20376#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {20376#true} is VALID [2020-07-28 19:02:32,063 INFO L280 TraceCheckUtils]: 18: Hoare triple {20376#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {20376#true} is VALID [2020-07-28 19:02:32,063 INFO L280 TraceCheckUtils]: 19: Hoare triple {20376#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {20376#true} is VALID [2020-07-28 19:02:32,063 INFO L280 TraceCheckUtils]: 20: Hoare triple {20376#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {20376#true} is VALID [2020-07-28 19:02:32,063 INFO L280 TraceCheckUtils]: 21: Hoare triple {20376#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {20376#true} is VALID [2020-07-28 19:02:32,063 INFO L280 TraceCheckUtils]: 22: Hoare triple {20376#true} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {20376#true} is VALID [2020-07-28 19:02:32,064 INFO L280 TraceCheckUtils]: 23: Hoare triple {20376#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {20376#true} is VALID [2020-07-28 19:02:32,064 INFO L280 TraceCheckUtils]: 24: Hoare triple {20376#true} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {20376#true} is VALID [2020-07-28 19:02:32,064 INFO L280 TraceCheckUtils]: 25: Hoare triple {20376#true} processEnvironment__wrappee__highWaterSensor_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret5 && processEnvironment__wrappee__highWaterSensor_#t~ret5 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret5;havoc processEnvironment__wrappee__highWaterSensor_#t~ret5; {20376#true} is VALID [2020-07-28 19:02:32,064 INFO L280 TraceCheckUtils]: 26: Hoare triple {20376#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;~pumpRunning~0 := 1; {20376#true} is VALID [2020-07-28 19:02:32,064 INFO L280 TraceCheckUtils]: 27: Hoare triple {20376#true} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {20376#true} is VALID [2020-07-28 19:02:32,064 INFO L280 TraceCheckUtils]: 28: Hoare triple {20376#true} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {20376#true} is VALID [2020-07-28 19:02:32,065 INFO L280 TraceCheckUtils]: 29: Hoare triple {20376#true} assume 0 != __utac_acc__Specification3_spec__1_~tmp~6; {20376#true} is VALID [2020-07-28 19:02:32,065 INFO L280 TraceCheckUtils]: 30: Hoare triple {20376#true} assume !false; {20376#true} is VALID [2020-07-28 19:02:32,065 INFO L280 TraceCheckUtils]: 31: Hoare triple {20376#true} assume test_~splverifierCounter~0 < 4; {20376#true} is VALID [2020-07-28 19:02:32,065 INFO L280 TraceCheckUtils]: 32: Hoare triple {20376#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {20376#true} is VALID [2020-07-28 19:02:32,066 INFO L280 TraceCheckUtils]: 33: Hoare triple {20376#true} assume !(0 != test_~tmp~0); {20376#true} is VALID [2020-07-28 19:02:32,066 INFO L280 TraceCheckUtils]: 34: Hoare triple {20376#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {20376#true} is VALID [2020-07-28 19:02:32,066 INFO L280 TraceCheckUtils]: 35: Hoare triple {20376#true} assume 0 != test_~tmp___0~0; {20376#true} is VALID [2020-07-28 19:02:32,068 INFO L280 TraceCheckUtils]: 36: Hoare triple {20376#true} assume 0 != ~methaneLevelCritical~0;~methaneLevelCritical~0 := 0; {20378#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:32,068 INFO L280 TraceCheckUtils]: 37: Hoare triple {20378#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {20378#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:32,069 INFO L280 TraceCheckUtils]: 38: Hoare triple {20378#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {20378#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:32,069 INFO L280 TraceCheckUtils]: 39: Hoare triple {20378#(= 0 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0; {20378#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:32,070 INFO L280 TraceCheckUtils]: 40: Hoare triple {20378#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20378#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:32,070 INFO L280 TraceCheckUtils]: 41: Hoare triple {20378#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {20378#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:32,071 INFO L280 TraceCheckUtils]: 42: Hoare triple {20378#(= 0 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~2;havoc isMethaneAlarm_~retValue_acc~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {20379#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:32,072 INFO L280 TraceCheckUtils]: 43: Hoare triple {20379#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~2 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~2; {20380#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} is VALID [2020-07-28 19:02:32,073 INFO L280 TraceCheckUtils]: 44: Hoare triple {20380#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} processEnvironment_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret7 && processEnvironment_#t~ret7 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret7;havoc processEnvironment_#t~ret7; {20381#(= 0 ULTIMATE.start_processEnvironment_~tmp~3)} is VALID [2020-07-28 19:02:32,073 INFO L280 TraceCheckUtils]: 45: Hoare triple {20381#(= 0 ULTIMATE.start_processEnvironment_~tmp~3)} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {20377#false} is VALID [2020-07-28 19:02:32,073 INFO L280 TraceCheckUtils]: 46: Hoare triple {20377#false} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {20377#false} is VALID [2020-07-28 19:02:32,073 INFO L280 TraceCheckUtils]: 47: Hoare triple {20377#false} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {20377#false} is VALID [2020-07-28 19:02:32,074 INFO L280 TraceCheckUtils]: 48: Hoare triple {20377#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {20377#false} is VALID [2020-07-28 19:02:32,074 INFO L280 TraceCheckUtils]: 49: Hoare triple {20377#false} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {20377#false} is VALID [2020-07-28 19:02:32,074 INFO L280 TraceCheckUtils]: 50: Hoare triple {20377#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {20377#false} is VALID [2020-07-28 19:02:32,075 INFO L280 TraceCheckUtils]: 51: Hoare triple {20377#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {20377#false} is VALID [2020-07-28 19:02:32,075 INFO L280 TraceCheckUtils]: 52: Hoare triple {20377#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {20377#false} is VALID [2020-07-28 19:02:32,075 INFO L280 TraceCheckUtils]: 53: Hoare triple {20377#false} assume !false; {20377#false} is VALID [2020-07-28 19:02:32,078 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 8 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2020-07-28 19:02:32,078 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1512426023] [2020-07-28 19:02:32,079 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:32,079 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-28 19:02:32,082 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [597977506] [2020-07-28 19:02:32,083 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 54 [2020-07-28 19:02:32,083 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:32,083 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:02:32,139 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:32,140 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:02:32,140 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:32,140 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:02:32,141 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:02:32,141 INFO L87 Difference]: Start difference. First operand 410 states and 498 transitions. Second operand 6 states. [2020-07-28 19:02:37,316 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:37,316 INFO L93 Difference]: Finished difference Result 1575 states and 1929 transitions. [2020-07-28 19:02:37,316 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2020-07-28 19:02:37,316 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 54 [2020-07-28 19:02:37,317 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:37,317 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:37,318 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 426 transitions. [2020-07-28 19:02:37,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:37,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 426 transitions. [2020-07-28 19:02:37,320 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 13 states and 426 transitions. [2020-07-28 19:02:37,823 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 426 edges. 426 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:37,895 INFO L225 Difference]: With dead ends: 1575 [2020-07-28 19:02:37,895 INFO L226 Difference]: Without dead ends: 1221 [2020-07-28 19:02:37,896 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 9 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 20 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=51, Invalid=105, Unknown=0, NotChecked=0, Total=156 [2020-07-28 19:02:37,898 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1221 states. [2020-07-28 19:02:39,193 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1221 to 410. [2020-07-28 19:02:39,193 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:39,193 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1221 states. Second operand 410 states. [2020-07-28 19:02:39,193 INFO L74 IsIncluded]: Start isIncluded. First operand 1221 states. Second operand 410 states. [2020-07-28 19:02:39,193 INFO L87 Difference]: Start difference. First operand 1221 states. Second operand 410 states. [2020-07-28 19:02:39,248 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:39,248 INFO L93 Difference]: Finished difference Result 1221 states and 1493 transitions. [2020-07-28 19:02:39,248 INFO L276 IsEmpty]: Start isEmpty. Operand 1221 states and 1493 transitions. [2020-07-28 19:02:39,250 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:39,250 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:39,250 INFO L74 IsIncluded]: Start isIncluded. First operand 410 states. Second operand 1221 states. [2020-07-28 19:02:39,250 INFO L87 Difference]: Start difference. First operand 410 states. Second operand 1221 states. [2020-07-28 19:02:39,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:39,305 INFO L93 Difference]: Finished difference Result 1221 states and 1493 transitions. [2020-07-28 19:02:39,305 INFO L276 IsEmpty]: Start isEmpty. Operand 1221 states and 1493 transitions. [2020-07-28 19:02:39,306 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:39,306 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:39,306 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:39,306 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:39,306 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 410 states. [2020-07-28 19:02:39,315 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 410 states to 410 states and 496 transitions. [2020-07-28 19:02:39,315 INFO L78 Accepts]: Start accepts. Automaton has 410 states and 496 transitions. Word has length 54 [2020-07-28 19:02:39,316 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:39,316 INFO L479 AbstractCegarLoop]: Abstraction has 410 states and 496 transitions. [2020-07-28 19:02:39,316 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:39,316 INFO L276 IsEmpty]: Start isEmpty. Operand 410 states and 496 transitions. [2020-07-28 19:02:39,317 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2020-07-28 19:02:39,317 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:39,317 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:39,317 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2020-07-28 19:02:39,318 INFO L427 AbstractCegarLoop]: === Iteration 16 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:39,318 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:39,318 INFO L82 PathProgramCache]: Analyzing trace with hash -1991996669, now seen corresponding path program 1 times [2020-07-28 19:02:39,318 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:39,319 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [447709726] [2020-07-28 19:02:39,319 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:39,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:39,414 INFO L280 TraceCheckUtils]: 0: Hoare triple {25503#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {25503#true} is VALID [2020-07-28 19:02:39,415 INFO L280 TraceCheckUtils]: 1: Hoare triple {25503#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {25503#true} is VALID [2020-07-28 19:02:39,415 INFO L280 TraceCheckUtils]: 2: Hoare triple {25503#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {25503#true} is VALID [2020-07-28 19:02:39,415 INFO L280 TraceCheckUtils]: 3: Hoare triple {25503#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {25503#true} is VALID [2020-07-28 19:02:39,415 INFO L280 TraceCheckUtils]: 4: Hoare triple {25503#true} assume 0 != main_~tmp~10; {25503#true} is VALID [2020-07-28 19:02:39,415 INFO L280 TraceCheckUtils]: 5: Hoare triple {25503#true} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {25503#true} is VALID [2020-07-28 19:02:39,416 INFO L280 TraceCheckUtils]: 6: Hoare triple {25503#true} assume !false; {25503#true} is VALID [2020-07-28 19:02:39,416 INFO L280 TraceCheckUtils]: 7: Hoare triple {25503#true} assume test_~splverifierCounter~0 < 4; {25503#true} is VALID [2020-07-28 19:02:39,416 INFO L280 TraceCheckUtils]: 8: Hoare triple {25503#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {25503#true} is VALID [2020-07-28 19:02:39,416 INFO L280 TraceCheckUtils]: 9: Hoare triple {25503#true} assume 0 != test_~tmp~0; {25503#true} is VALID [2020-07-28 19:02:39,417 INFO L280 TraceCheckUtils]: 10: Hoare triple {25503#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {25503#true} is VALID [2020-07-28 19:02:39,417 INFO L280 TraceCheckUtils]: 11: Hoare triple {25503#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {25503#true} is VALID [2020-07-28 19:02:39,417 INFO L280 TraceCheckUtils]: 12: Hoare triple {25503#true} assume 0 != test_~tmp___0~0; {25503#true} is VALID [2020-07-28 19:02:39,417 INFO L280 TraceCheckUtils]: 13: Hoare triple {25503#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {25503#true} is VALID [2020-07-28 19:02:39,417 INFO L280 TraceCheckUtils]: 14: Hoare triple {25503#true} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {25503#true} is VALID [2020-07-28 19:02:39,418 INFO L280 TraceCheckUtils]: 15: Hoare triple {25503#true} assume 0 != test_~tmp___2~0; {25503#true} is VALID [2020-07-28 19:02:39,418 INFO L280 TraceCheckUtils]: 16: Hoare triple {25503#true} assume !(0 != ~pumpRunning~0); {25503#true} is VALID [2020-07-28 19:02:39,418 INFO L280 TraceCheckUtils]: 17: Hoare triple {25503#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {25503#true} is VALID [2020-07-28 19:02:39,418 INFO L280 TraceCheckUtils]: 18: Hoare triple {25503#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {25503#true} is VALID [2020-07-28 19:02:39,418 INFO L280 TraceCheckUtils]: 19: Hoare triple {25503#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {25503#true} is VALID [2020-07-28 19:02:39,418 INFO L280 TraceCheckUtils]: 20: Hoare triple {25503#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {25503#true} is VALID [2020-07-28 19:02:39,419 INFO L280 TraceCheckUtils]: 21: Hoare triple {25503#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {25503#true} is VALID [2020-07-28 19:02:39,419 INFO L280 TraceCheckUtils]: 22: Hoare triple {25503#true} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {25503#true} is VALID [2020-07-28 19:02:39,419 INFO L280 TraceCheckUtils]: 23: Hoare triple {25503#true} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {25503#true} is VALID [2020-07-28 19:02:39,419 INFO L280 TraceCheckUtils]: 24: Hoare triple {25503#true} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {25503#true} is VALID [2020-07-28 19:02:39,420 INFO L280 TraceCheckUtils]: 25: Hoare triple {25503#true} processEnvironment__wrappee__highWaterSensor_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret5 && processEnvironment__wrappee__highWaterSensor_#t~ret5 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret5;havoc processEnvironment__wrappee__highWaterSensor_#t~ret5; {25503#true} is VALID [2020-07-28 19:02:39,420 INFO L280 TraceCheckUtils]: 26: Hoare triple {25503#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;~pumpRunning~0 := 1; {25503#true} is VALID [2020-07-28 19:02:39,420 INFO L280 TraceCheckUtils]: 27: Hoare triple {25503#true} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {25503#true} is VALID [2020-07-28 19:02:39,420 INFO L280 TraceCheckUtils]: 28: Hoare triple {25503#true} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {25503#true} is VALID [2020-07-28 19:02:39,421 INFO L280 TraceCheckUtils]: 29: Hoare triple {25503#true} assume 0 != __utac_acc__Specification3_spec__1_~tmp~6; {25503#true} is VALID [2020-07-28 19:02:39,421 INFO L280 TraceCheckUtils]: 30: Hoare triple {25503#true} assume !false; {25503#true} is VALID [2020-07-28 19:02:39,421 INFO L280 TraceCheckUtils]: 31: Hoare triple {25503#true} assume test_~splverifierCounter~0 < 4; {25503#true} is VALID [2020-07-28 19:02:39,422 INFO L280 TraceCheckUtils]: 32: Hoare triple {25503#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {25503#true} is VALID [2020-07-28 19:02:39,422 INFO L280 TraceCheckUtils]: 33: Hoare triple {25503#true} assume !(0 != test_~tmp~0); {25503#true} is VALID [2020-07-28 19:02:39,422 INFO L280 TraceCheckUtils]: 34: Hoare triple {25503#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {25503#true} is VALID [2020-07-28 19:02:39,423 INFO L280 TraceCheckUtils]: 35: Hoare triple {25503#true} assume 0 != test_~tmp___0~0; {25503#true} is VALID [2020-07-28 19:02:39,423 INFO L280 TraceCheckUtils]: 36: Hoare triple {25503#true} assume 0 != ~methaneLevelCritical~0;~methaneLevelCritical~0 := 0; {25503#true} is VALID [2020-07-28 19:02:39,423 INFO L280 TraceCheckUtils]: 37: Hoare triple {25503#true} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {25503#true} is VALID [2020-07-28 19:02:39,423 INFO L280 TraceCheckUtils]: 38: Hoare triple {25503#true} assume 0 != test_~tmp___2~0; {25503#true} is VALID [2020-07-28 19:02:39,424 INFO L280 TraceCheckUtils]: 39: Hoare triple {25503#true} assume 0 != ~pumpRunning~0; {25503#true} is VALID [2020-07-28 19:02:39,424 INFO L280 TraceCheckUtils]: 40: Hoare triple {25503#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25503#true} is VALID [2020-07-28 19:02:39,424 INFO L280 TraceCheckUtils]: 41: Hoare triple {25503#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {25503#true} is VALID [2020-07-28 19:02:39,424 INFO L280 TraceCheckUtils]: 42: Hoare triple {25503#true} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~2;havoc isMethaneAlarm_~retValue_acc~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {25503#true} is VALID [2020-07-28 19:02:39,425 INFO L280 TraceCheckUtils]: 43: Hoare triple {25503#true} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~2 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~2; {25503#true} is VALID [2020-07-28 19:02:39,425 INFO L280 TraceCheckUtils]: 44: Hoare triple {25503#true} processEnvironment_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret7 && processEnvironment_#t~ret7 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret7;havoc processEnvironment_#t~ret7; {25503#true} is VALID [2020-07-28 19:02:39,425 INFO L280 TraceCheckUtils]: 45: Hoare triple {25503#true} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {25503#true} is VALID [2020-07-28 19:02:39,425 INFO L280 TraceCheckUtils]: 46: Hoare triple {25503#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret26, isLowWaterLevel_~retValue_acc~5, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~5;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {25503#true} is VALID [2020-07-28 19:02:39,426 INFO L280 TraceCheckUtils]: 47: Hoare triple {25503#true} isLowWaterLevel_#t~ret26 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret26 && isLowWaterLevel_#t~ret26 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret26;havoc isLowWaterLevel_#t~ret26; {25503#true} is VALID [2020-07-28 19:02:39,428 INFO L280 TraceCheckUtils]: 48: Hoare triple {25503#true} assume 0 != isLowWaterLevel_~tmp~5;isLowWaterLevel_~tmp___0~2 := 0; {25505#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2)} is VALID [2020-07-28 19:02:39,429 INFO L280 TraceCheckUtils]: 49: Hoare triple {25505#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2)} isLowWaterLevel_~retValue_acc~5 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~5; {25506#(= 0 |ULTIMATE.start_isLowWaterLevel_#res|)} is VALID [2020-07-28 19:02:39,430 INFO L280 TraceCheckUtils]: 50: Hoare triple {25506#(= 0 |ULTIMATE.start_isLowWaterLevel_#res|)} processEnvironment__wrappee__lowWaterSensor_#t~ret6 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret6 && processEnvironment__wrappee__lowWaterSensor_#t~ret6 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~2 := processEnvironment__wrappee__lowWaterSensor_#t~ret6;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6; {25507#(= 0 ULTIMATE.start_processEnvironment__wrappee__lowWaterSensor_~tmp~2)} is VALID [2020-07-28 19:02:39,430 INFO L280 TraceCheckUtils]: 51: Hoare triple {25507#(= 0 ULTIMATE.start_processEnvironment__wrappee__lowWaterSensor_~tmp~2)} assume 0 != processEnvironment__wrappee__lowWaterSensor_~tmp~2;~pumpRunning~0 := 0; {25504#false} is VALID [2020-07-28 19:02:39,431 INFO L280 TraceCheckUtils]: 52: Hoare triple {25504#false} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {25504#false} is VALID [2020-07-28 19:02:39,431 INFO L280 TraceCheckUtils]: 53: Hoare triple {25504#false} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {25504#false} is VALID [2020-07-28 19:02:39,431 INFO L280 TraceCheckUtils]: 54: Hoare triple {25504#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {25504#false} is VALID [2020-07-28 19:02:39,431 INFO L280 TraceCheckUtils]: 55: Hoare triple {25504#false} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {25504#false} is VALID [2020-07-28 19:02:39,431 INFO L280 TraceCheckUtils]: 56: Hoare triple {25504#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {25504#false} is VALID [2020-07-28 19:02:39,432 INFO L280 TraceCheckUtils]: 57: Hoare triple {25504#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {25504#false} is VALID [2020-07-28 19:02:39,432 INFO L280 TraceCheckUtils]: 58: Hoare triple {25504#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {25504#false} is VALID [2020-07-28 19:02:39,432 INFO L280 TraceCheckUtils]: 59: Hoare triple {25504#false} assume !false; {25504#false} is VALID [2020-07-28 19:02:39,435 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2020-07-28 19:02:39,435 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [447709726] [2020-07-28 19:02:39,435 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:39,435 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:39,435 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [84792986] [2020-07-28 19:02:39,436 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 60 [2020-07-28 19:02:39,436 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:39,436 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:39,514 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 52 edges. 52 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:39,514 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:39,514 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:39,515 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:39,515 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:39,516 INFO L87 Difference]: Start difference. First operand 410 states and 496 transitions. Second operand 5 states. [2020-07-28 19:02:43,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:43,594 INFO L93 Difference]: Finished difference Result 1366 states and 1678 transitions. [2020-07-28 19:02:43,594 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:02:43,594 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 60 [2020-07-28 19:02:43,594 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:43,594 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:43,595 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 252 transitions. [2020-07-28 19:02:43,595 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:43,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 252 transitions. [2020-07-28 19:02:43,596 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 252 transitions. [2020-07-28 19:02:43,888 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 252 edges. 252 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:43,936 INFO L225 Difference]: With dead ends: 1366 [2020-07-28 19:02:43,936 INFO L226 Difference]: Without dead ends: 1012 [2020-07-28 19:02:43,937 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:43,938 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1012 states. [2020-07-28 19:02:45,352 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1012 to 422. [2020-07-28 19:02:45,352 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:45,353 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1012 states. Second operand 422 states. [2020-07-28 19:02:45,353 INFO L74 IsIncluded]: Start isIncluded. First operand 1012 states. Second operand 422 states. [2020-07-28 19:02:45,353 INFO L87 Difference]: Start difference. First operand 1012 states. Second operand 422 states. [2020-07-28 19:02:45,393 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:45,393 INFO L93 Difference]: Finished difference Result 1012 states and 1242 transitions. [2020-07-28 19:02:45,393 INFO L276 IsEmpty]: Start isEmpty. Operand 1012 states and 1242 transitions. [2020-07-28 19:02:45,394 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:45,394 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:45,394 INFO L74 IsIncluded]: Start isIncluded. First operand 422 states. Second operand 1012 states. [2020-07-28 19:02:45,394 INFO L87 Difference]: Start difference. First operand 422 states. Second operand 1012 states. [2020-07-28 19:02:45,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:45,443 INFO L93 Difference]: Finished difference Result 1012 states and 1242 transitions. [2020-07-28 19:02:45,443 INFO L276 IsEmpty]: Start isEmpty. Operand 1012 states and 1242 transitions. [2020-07-28 19:02:45,444 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:45,444 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:45,444 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:45,445 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:45,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 422 states. [2020-07-28 19:02:45,454 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 422 states to 422 states and 508 transitions. [2020-07-28 19:02:45,454 INFO L78 Accepts]: Start accepts. Automaton has 422 states and 508 transitions. Word has length 60 [2020-07-28 19:02:45,454 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:45,454 INFO L479 AbstractCegarLoop]: Abstraction has 422 states and 508 transitions. [2020-07-28 19:02:45,455 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:45,455 INFO L276 IsEmpty]: Start isEmpty. Operand 422 states and 508 transitions. [2020-07-28 19:02:45,455 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2020-07-28 19:02:45,455 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:45,455 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:45,455 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2020-07-28 19:02:45,456 INFO L427 AbstractCegarLoop]: === Iteration 17 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:45,456 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:45,456 INFO L82 PathProgramCache]: Analyzing trace with hash -1733831231, now seen corresponding path program 1 times [2020-07-28 19:02:45,456 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:45,456 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [376281796] [2020-07-28 19:02:45,456 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:45,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:45,550 INFO L280 TraceCheckUtils]: 0: Hoare triple {29940#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {29942#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:45,551 INFO L280 TraceCheckUtils]: 1: Hoare triple {29942#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {29942#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:45,552 INFO L280 TraceCheckUtils]: 2: Hoare triple {29942#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {29942#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:45,552 INFO L280 TraceCheckUtils]: 3: Hoare triple {29942#(= 1 ~waterLevel~0)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {29942#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:45,553 INFO L280 TraceCheckUtils]: 4: Hoare triple {29942#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {29942#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:45,553 INFO L280 TraceCheckUtils]: 5: Hoare triple {29942#(= 1 ~waterLevel~0)} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {29942#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:45,554 INFO L280 TraceCheckUtils]: 6: Hoare triple {29942#(= 1 ~waterLevel~0)} assume !false; {29942#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:45,554 INFO L280 TraceCheckUtils]: 7: Hoare triple {29942#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {29942#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:45,555 INFO L280 TraceCheckUtils]: 8: Hoare triple {29942#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {29942#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:45,556 INFO L280 TraceCheckUtils]: 9: Hoare triple {29942#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~0; {29942#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:45,556 INFO L280 TraceCheckUtils]: 10: Hoare triple {29942#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,557 INFO L280 TraceCheckUtils]: 11: Hoare triple {29943#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,557 INFO L280 TraceCheckUtils]: 12: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___0~0; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,558 INFO L280 TraceCheckUtils]: 13: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,558 INFO L280 TraceCheckUtils]: 14: Hoare triple {29943#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,559 INFO L280 TraceCheckUtils]: 15: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,559 INFO L280 TraceCheckUtils]: 16: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,560 INFO L280 TraceCheckUtils]: 17: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,561 INFO L280 TraceCheckUtils]: 18: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,561 INFO L280 TraceCheckUtils]: 19: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,562 INFO L280 TraceCheckUtils]: 20: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,562 INFO L280 TraceCheckUtils]: 21: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,563 INFO L280 TraceCheckUtils]: 22: Hoare triple {29943#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,563 INFO L280 TraceCheckUtils]: 23: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,564 INFO L280 TraceCheckUtils]: 24: Hoare triple {29943#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,564 INFO L280 TraceCheckUtils]: 25: Hoare triple {29943#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret5 && processEnvironment__wrappee__highWaterSensor_#t~ret5 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret5;havoc processEnvironment__wrappee__highWaterSensor_#t~ret5; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,565 INFO L280 TraceCheckUtils]: 26: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;~pumpRunning~0 := 1; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,565 INFO L280 TraceCheckUtils]: 27: Hoare triple {29943#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,566 INFO L280 TraceCheckUtils]: 28: Hoare triple {29943#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,567 INFO L280 TraceCheckUtils]: 29: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~6; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,567 INFO L280 TraceCheckUtils]: 30: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !false; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,568 INFO L280 TraceCheckUtils]: 31: Hoare triple {29943#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,568 INFO L280 TraceCheckUtils]: 32: Hoare triple {29943#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,569 INFO L280 TraceCheckUtils]: 33: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~0); {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,569 INFO L280 TraceCheckUtils]: 34: Hoare triple {29943#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,570 INFO L280 TraceCheckUtils]: 35: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___0~0; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,571 INFO L280 TraceCheckUtils]: 36: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != ~methaneLevelCritical~0;~methaneLevelCritical~0 := 0; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,571 INFO L280 TraceCheckUtils]: 37: Hoare triple {29943#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,572 INFO L280 TraceCheckUtils]: 38: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,572 INFO L280 TraceCheckUtils]: 39: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,573 INFO L280 TraceCheckUtils]: 40: Hoare triple {29943#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,574 INFO L280 TraceCheckUtils]: 41: Hoare triple {29944#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,574 INFO L280 TraceCheckUtils]: 42: Hoare triple {29944#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~2;havoc isMethaneAlarm_~retValue_acc~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,575 INFO L280 TraceCheckUtils]: 43: Hoare triple {29944#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~2 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~2; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,575 INFO L280 TraceCheckUtils]: 44: Hoare triple {29944#(<= ~waterLevel~0 1)} processEnvironment_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret7 && processEnvironment_#t~ret7 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret7;havoc processEnvironment_#t~ret7; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,576 INFO L280 TraceCheckUtils]: 45: Hoare triple {29944#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,576 INFO L280 TraceCheckUtils]: 46: Hoare triple {29944#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret26, isLowWaterLevel_~retValue_acc~5, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~5;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,577 INFO L280 TraceCheckUtils]: 47: Hoare triple {29944#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret26 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret26 && isLowWaterLevel_#t~ret26 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret26;havoc isLowWaterLevel_#t~ret26; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,578 INFO L280 TraceCheckUtils]: 48: Hoare triple {29944#(<= ~waterLevel~0 1)} assume !(0 != isLowWaterLevel_~tmp~5);isLowWaterLevel_~tmp___0~2 := 1; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,578 INFO L280 TraceCheckUtils]: 49: Hoare triple {29944#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~5 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~5; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,579 INFO L280 TraceCheckUtils]: 50: Hoare triple {29944#(<= ~waterLevel~0 1)} processEnvironment__wrappee__lowWaterSensor_#t~ret6 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret6 && processEnvironment__wrappee__lowWaterSensor_#t~ret6 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~2 := processEnvironment__wrappee__lowWaterSensor_#t~ret6;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,579 INFO L280 TraceCheckUtils]: 51: Hoare triple {29944#(<= ~waterLevel~0 1)} assume 0 != processEnvironment__wrappee__lowWaterSensor_~tmp~2;~pumpRunning~0 := 0; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,580 INFO L280 TraceCheckUtils]: 52: Hoare triple {29944#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,580 INFO L280 TraceCheckUtils]: 53: Hoare triple {29944#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,581 INFO L280 TraceCheckUtils]: 54: Hoare triple {29944#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {29945#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:02:45,582 INFO L280 TraceCheckUtils]: 55: Hoare triple {29945#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {29946#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)} is VALID [2020-07-28 19:02:45,583 INFO L280 TraceCheckUtils]: 56: Hoare triple {29946#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {29941#false} is VALID [2020-07-28 19:02:45,583 INFO L280 TraceCheckUtils]: 57: Hoare triple {29941#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {29941#false} is VALID [2020-07-28 19:02:45,583 INFO L280 TraceCheckUtils]: 58: Hoare triple {29941#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {29941#false} is VALID [2020-07-28 19:02:45,583 INFO L280 TraceCheckUtils]: 59: Hoare triple {29941#false} assume !false; {29941#false} is VALID [2020-07-28 19:02:45,587 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 5 proven. 4 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 19:02:45,588 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [376281796] [2020-07-28 19:02:45,588 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1209270175] [2020-07-28 19:02:45,588 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:02:45,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:45,684 INFO L263 TraceCheckSpWp]: Trace formula consists of 435 conjuncts, 7 conjunts are in the unsatisfiable core [2020-07-28 19:02:45,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:45,708 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:02:45,911 INFO L280 TraceCheckUtils]: 0: Hoare triple {29940#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(13);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string30.base, #t~string30.offset, 1);call write~init~int(77, #t~string30.base, 1 + #t~string30.offset, 1);call write~init~int(101, #t~string30.base, 2 + #t~string30.offset, 1);call write~init~int(116, #t~string30.base, 3 + #t~string30.offset, 1);call write~init~int(104, #t~string30.base, 4 + #t~string30.offset, 1);call write~init~int(58, #t~string30.base, 5 + #t~string30.offset, 1);call write~init~int(0, #t~string30.base, 6 + #t~string30.offset, 1);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string32.base, #t~string32.offset, 1);call write~init~int(82, #t~string32.base, 1 + #t~string32.offset, 1);call write~init~int(73, #t~string32.base, 2 + #t~string32.offset, 1);call write~init~int(84, #t~string32.base, 3 + #t~string32.offset, 1);call write~init~int(0, #t~string32.base, 4 + #t~string32.offset, 1);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string34.base, #t~string34.offset, 1);call write~init~int(75, #t~string34.base, 1 + #t~string34.offset, 1);call write~init~int(0, #t~string34.base, 2 + #t~string34.offset, 1);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string36.base, #t~string36.offset, 1);call write~init~int(0, #t~string36.base, 1 + #t~string36.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(21);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(30);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(9);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(25);call #t~string70.base, #t~string70.offset := #Ultimate.allocOnStack(30);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(9);call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(25);~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,912 INFO L280 TraceCheckUtils]: 1: Hoare triple {29944#(<= ~waterLevel~0 1)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,912 INFO L280 TraceCheckUtils]: 2: Hoare triple {29944#(<= ~waterLevel~0 1)} havoc valid_product_#res;havoc valid_product_~retValue_acc~1;havoc valid_product_~retValue_acc~1;valid_product_~retValue_acc~1 := 1;valid_product_#res := valid_product_~retValue_acc~1; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,913 INFO L280 TraceCheckUtils]: 3: Hoare triple {29944#(<= ~waterLevel~0 1)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,914 INFO L280 TraceCheckUtils]: 4: Hoare triple {29944#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~10; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,914 INFO L280 TraceCheckUtils]: 5: Hoare triple {29944#(<= ~waterLevel~0 1)} havoc test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_#t~nondet4, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,915 INFO L280 TraceCheckUtils]: 6: Hoare triple {29944#(<= ~waterLevel~0 1)} assume !false; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,915 INFO L280 TraceCheckUtils]: 7: Hoare triple {29944#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,916 INFO L280 TraceCheckUtils]: 8: Hoare triple {29944#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,916 INFO L280 TraceCheckUtils]: 9: Hoare triple {29944#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~0; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,917 INFO L280 TraceCheckUtils]: 10: Hoare triple {29944#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,918 INFO L280 TraceCheckUtils]: 11: Hoare triple {29943#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,918 INFO L280 TraceCheckUtils]: 12: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___0~0; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,919 INFO L280 TraceCheckUtils]: 13: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,920 INFO L280 TraceCheckUtils]: 14: Hoare triple {29943#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,920 INFO L280 TraceCheckUtils]: 15: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,921 INFO L280 TraceCheckUtils]: 16: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,922 INFO L280 TraceCheckUtils]: 17: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,922 INFO L280 TraceCheckUtils]: 18: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,923 INFO L280 TraceCheckUtils]: 19: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret5, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,923 INFO L280 TraceCheckUtils]: 20: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~4, isHighWaterLevel_~tmp~4, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~4;havoc isHighWaterLevel_~tmp~4;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,924 INFO L280 TraceCheckUtils]: 21: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,925 INFO L280 TraceCheckUtils]: 22: Hoare triple {29943#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~4 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,925 INFO L280 TraceCheckUtils]: 23: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~4);isHighWaterLevel_~tmp___0~1 := 1; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,926 INFO L280 TraceCheckUtils]: 24: Hoare triple {29943#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~4 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~4; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,926 INFO L280 TraceCheckUtils]: 25: Hoare triple {29943#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret5 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret5 && processEnvironment__wrappee__highWaterSensor_#t~ret5 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret5;havoc processEnvironment__wrappee__highWaterSensor_#t~ret5; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,927 INFO L280 TraceCheckUtils]: 26: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;~pumpRunning~0 := 1; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,928 INFO L280 TraceCheckUtils]: 27: Hoare triple {29943#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,928 INFO L280 TraceCheckUtils]: 28: Hoare triple {29943#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,929 INFO L280 TraceCheckUtils]: 29: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~6; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,929 INFO L280 TraceCheckUtils]: 30: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !false; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,930 INFO L280 TraceCheckUtils]: 31: Hoare triple {29943#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,930 INFO L280 TraceCheckUtils]: 32: Hoare triple {29943#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp~0 := test_#t~nondet1;havoc test_#t~nondet1; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,931 INFO L280 TraceCheckUtils]: 33: Hoare triple {29943#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~0); {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,932 INFO L280 TraceCheckUtils]: 34: Hoare triple {29943#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___0~0 := test_#t~nondet2;havoc test_#t~nondet2; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,932 INFO L280 TraceCheckUtils]: 35: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___0~0; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,933 INFO L280 TraceCheckUtils]: 36: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != ~methaneLevelCritical~0;~methaneLevelCritical~0 := 0; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,933 INFO L280 TraceCheckUtils]: 37: Hoare triple {29943#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet3 && test_#t~nondet3 <= 2147483647;test_~tmp___2~0 := test_#t~nondet3;havoc test_#t~nondet3; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,934 INFO L280 TraceCheckUtils]: 38: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,934 INFO L280 TraceCheckUtils]: 39: Hoare triple {29943#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {29943#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:45,936 INFO L280 TraceCheckUtils]: 40: Hoare triple {29943#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,936 INFO L280 TraceCheckUtils]: 41: Hoare triple {29944#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret7, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,936 INFO L280 TraceCheckUtils]: 42: Hoare triple {29944#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~2;havoc isMethaneAlarm_~retValue_acc~2;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,937 INFO L280 TraceCheckUtils]: 43: Hoare triple {29944#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~2 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~2; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,937 INFO L280 TraceCheckUtils]: 44: Hoare triple {29944#(<= ~waterLevel~0 1)} processEnvironment_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret7 && processEnvironment_#t~ret7 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret7;havoc processEnvironment_#t~ret7; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,938 INFO L280 TraceCheckUtils]: 45: Hoare triple {29944#(<= ~waterLevel~0 1)} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6, processEnvironment__wrappee__lowWaterSensor_~tmp~2;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~2; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,938 INFO L280 TraceCheckUtils]: 46: Hoare triple {29944#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret26, isLowWaterLevel_~retValue_acc~5, isLowWaterLevel_~tmp~5, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~5;havoc isLowWaterLevel_~tmp~5;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,939 INFO L280 TraceCheckUtils]: 47: Hoare triple {29944#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret26 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret26 && isLowWaterLevel_#t~ret26 <= 2147483647;isLowWaterLevel_~tmp~5 := isLowWaterLevel_#t~ret26;havoc isLowWaterLevel_#t~ret26; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,939 INFO L280 TraceCheckUtils]: 48: Hoare triple {29944#(<= ~waterLevel~0 1)} assume !(0 != isLowWaterLevel_~tmp~5);isLowWaterLevel_~tmp___0~2 := 1; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,939 INFO L280 TraceCheckUtils]: 49: Hoare triple {29944#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~5 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~5; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,940 INFO L280 TraceCheckUtils]: 50: Hoare triple {29944#(<= ~waterLevel~0 1)} processEnvironment__wrappee__lowWaterSensor_#t~ret6 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret6 && processEnvironment__wrappee__lowWaterSensor_#t~ret6 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~2 := processEnvironment__wrappee__lowWaterSensor_#t~ret6;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret6; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,940 INFO L280 TraceCheckUtils]: 51: Hoare triple {29944#(<= ~waterLevel~0 1)} assume 0 != processEnvironment__wrappee__lowWaterSensor_~tmp~2;~pumpRunning~0 := 0; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,941 INFO L280 TraceCheckUtils]: 52: Hoare triple {29944#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret37, __utac_acc__Specification3_spec__1_#t~ret38, __utac_acc__Specification3_spec__1_#t~ret39, __utac_acc__Specification3_spec__1_~tmp~6, __utac_acc__Specification3_spec__1_~tmp___0~3, __utac_acc__Specification3_spec__1_~tmp___1~1;havoc __utac_acc__Specification3_spec__1_~tmp~6;havoc __utac_acc__Specification3_spec__1_~tmp___0~3;havoc __utac_acc__Specification3_spec__1_~tmp___1~1;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,941 INFO L280 TraceCheckUtils]: 53: Hoare triple {29944#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret37 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret37 && __utac_acc__Specification3_spec__1_#t~ret37 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~6 := __utac_acc__Specification3_spec__1_#t~ret37;havoc __utac_acc__Specification3_spec__1_#t~ret37; {29944#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:45,942 INFO L280 TraceCheckUtils]: 54: Hoare triple {29944#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~6);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {29945#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:02:45,942 INFO L280 TraceCheckUtils]: 55: Hoare triple {29945#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification3_spec__1_#t~ret38 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret38 && __utac_acc__Specification3_spec__1_#t~ret38 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~3 := __utac_acc__Specification3_spec__1_#t~ret38;havoc __utac_acc__Specification3_spec__1_#t~ret38; {29946#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)} is VALID [2020-07-28 19:02:45,943 INFO L280 TraceCheckUtils]: 56: Hoare triple {29946#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~3;havoc isPumpRunning_~retValue_acc~3;isPumpRunning_~retValue_acc~3 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~3; {29941#false} is VALID [2020-07-28 19:02:45,943 INFO L280 TraceCheckUtils]: 57: Hoare triple {29941#false} __utac_acc__Specification3_spec__1_#t~ret39 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret39 && __utac_acc__Specification3_spec__1_#t~ret39 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~1 := __utac_acc__Specification3_spec__1_#t~ret39;havoc __utac_acc__Specification3_spec__1_#t~ret39; {29941#false} is VALID [2020-07-28 19:02:45,943 INFO L280 TraceCheckUtils]: 58: Hoare triple {29941#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~1); {29941#false} is VALID [2020-07-28 19:02:45,943 INFO L280 TraceCheckUtils]: 59: Hoare triple {29941#false} assume !false; {29941#false} is VALID [2020-07-28 19:02:45,946 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 5 proven. 4 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 19:02:45,947 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:02:45,947 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 6 [2020-07-28 19:02:45,947 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [476243808] [2020-07-28 19:02:45,947 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 60 [2020-07-28 19:02:45,948 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:45,948 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:46,018 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 67 edges. 67 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:46,018 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:46,018 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:46,019 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:46,019 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:46,019 INFO L87 Difference]: Start difference. First operand 422 states and 508 transitions. Second operand 7 states. [2020-07-28 19:02:50,626 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:50,626 INFO L93 Difference]: Finished difference Result 1437 states and 1751 transitions. [2020-07-28 19:02:50,627 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2020-07-28 19:02:50,627 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 60 [2020-07-28 19:02:50,627 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:50,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:50,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 401 transitions. [2020-07-28 19:02:50,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:50,630 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 401 transitions. [2020-07-28 19:02:50,630 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 401 transitions. [2020-07-28 19:02:51,111 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 401 edges. 401 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:51,111 INFO L225 Difference]: With dead ends: 1437 [2020-07-28 19:02:51,112 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:02:51,114 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 71 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=59, Invalid=97, Unknown=0, NotChecked=0, Total=156 [2020-07-28 19:02:51,115 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:02:51,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:02:51,115 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:51,115 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:51,115 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:51,115 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:51,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:51,116 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:51,116 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:51,116 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:51,116 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:51,117 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:51,117 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:51,117 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:51,117 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:51,118 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:51,118 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:51,118 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:51,118 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:51,118 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:51,119 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:02:51,119 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:02:51,119 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 60 [2020-07-28 19:02:51,119 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:51,119 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:02:51,120 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:51,120 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:51,120 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:51,328 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable16 [2020-07-28 19:02:51,332 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:02:52,095 WARN L193 SmtUtils]: Spent 715.00 ms on a formula simplification. DAG size of input: 232 DAG size of output: 184 [2020-07-28 19:02:52,535 WARN L193 SmtUtils]: Spent 432.00 ms on a formula simplification. DAG size of input: 240 DAG size of output: 197 [2020-07-28 19:02:52,684 WARN L193 SmtUtils]: Spent 138.00 ms on a formula simplification. DAG size of input: 127 DAG size of output: 105 [2020-07-28 19:02:53,588 WARN L193 SmtUtils]: Spent 895.00 ms on a formula simplification. DAG size of input: 330 DAG size of output: 281 [2020-07-28 19:02:54,634 WARN L193 SmtUtils]: Spent 966.00 ms on a formula simplification. DAG size of input: 436 DAG size of output: 372 [2020-07-28 19:02:55,445 WARN L193 SmtUtils]: Spent 658.00 ms on a formula simplification. DAG size of input: 365 DAG size of output: 290 [2020-07-28 19:02:55,696 WARN L193 SmtUtils]: Spent 173.00 ms on a formula simplification. DAG size of input: 218 DAG size of output: 188 [2020-07-28 19:02:56,086 WARN L193 SmtUtils]: Spent 385.00 ms on a formula simplification. DAG size of input: 312 DAG size of output: 265 [2020-07-28 19:02:56,287 WARN L193 SmtUtils]: Spent 182.00 ms on a formula simplification. DAG size of input: 219 DAG size of output: 179 [2020-07-28 19:02:57,669 WARN L193 SmtUtils]: Spent 1.27 s on a formula simplification. DAG size of input: 172 DAG size of output: 42 [2020-07-28 19:02:59,009 WARN L193 SmtUtils]: Spent 1.32 s on a formula simplification. DAG size of input: 187 DAG size of output: 71 [2020-07-28 19:02:59,377 WARN L193 SmtUtils]: Spent 358.00 ms on a formula simplification. DAG size of input: 100 DAG size of output: 37 [2020-07-28 19:03:01,986 WARN L193 SmtUtils]: Spent 2.60 s on a formula simplification. DAG size of input: 267 DAG size of output: 60 [2020-07-28 19:03:02,371 WARN L193 SmtUtils]: Spent 377.00 ms on a formula simplification. DAG size of input: 102 DAG size of output: 54 [2020-07-28 19:03:08,076 WARN L193 SmtUtils]: Spent 5.69 s on a formula simplification. DAG size of input: 357 DAG size of output: 55 [2020-07-28 19:03:08,452 WARN L193 SmtUtils]: Spent 289.00 ms on a formula simplification. DAG size of input: 84 DAG size of output: 37 [2020-07-28 19:03:08,927 WARN L193 SmtUtils]: Spent 459.00 ms on a formula simplification. DAG size of input: 101 DAG size of output: 33 [2020-07-28 19:03:12,696 WARN L193 SmtUtils]: Spent 3.76 s on a formula simplification. DAG size of input: 281 DAG size of output: 38 [2020-07-28 19:03:13,168 WARN L193 SmtUtils]: Spent 467.00 ms on a formula simplification. DAG size of input: 106 DAG size of output: 36 [2020-07-28 19:03:14,419 WARN L193 SmtUtils]: Spent 1.24 s on a formula simplification. DAG size of input: 180 DAG size of output: 61 [2020-07-28 19:03:16,908 WARN L193 SmtUtils]: Spent 2.48 s on a formula simplification. DAG size of input: 252 DAG size of output: 73 [2020-07-28 19:03:18,308 WARN L193 SmtUtils]: Spent 1.35 s on a formula simplification. DAG size of input: 173 DAG size of output: 34 [2020-07-28 19:03:18,317 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 44) no Hoare annotation was computed. [2020-07-28 19:03:18,317 INFO L264 CegarLoopResult]: At program point L465(lines 460 468) the Hoare annotation is: (let ((.cse3 (<= ~waterLevel~0 1)) (.cse8 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse9 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse10 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse7 (= 1 ~systemActive~0)) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~6)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse11 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (.cse6 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse12 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 (= 0 ~pumpRunning~0) .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and (= 0 ULTIMATE.start_processEnvironment_~tmp~3) (= 0 ULTIMATE.start_processEnvironment__wrappee__lowWaterSensor_~tmp~2) (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse9 .cse10 .cse3 .cse7 .cse8 .cse0 .cse1 .cse2 .cse4 .cse5 .cse11 .cse6 .cse12) (and (<= 2 ~waterLevel~0) (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1)) .cse9 .cse10 .cse7 .cse0 .cse1 (<= ~waterLevel~0 2) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse2 .cse4 .cse5 .cse11 .cse6 .cse12))) [2020-07-28 19:03:18,318 INFO L264 CegarLoopResult]: At program point L465-1(lines 460 468) the Hoare annotation is: false [2020-07-28 19:03:18,318 INFO L264 CegarLoopResult]: At program point L465-2(lines 460 468) the Hoare annotation is: false [2020-07-28 19:03:18,318 INFO L268 CegarLoopResult]: For program point L102(lines 101 146) no Hoare annotation was computed. [2020-07-28 19:03:18,318 INFO L264 CegarLoopResult]: At program point L433(lines 428 436) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse2 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse3 (<= ~waterLevel~0 1)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse6 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (.cse7 (= 1 ~systemActive~0)) (.cse8 (= 1 ~pumpRunning~0))) (or (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 (= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse7 .cse8))) [2020-07-28 19:03:18,319 INFO L264 CegarLoopResult]: At program point L433-1(lines 428 436) the Hoare annotation is: (let ((.cse19 (= 0 ~pumpRunning~0)) (.cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse14 (= 0 ULTIMATE.start_processEnvironment_~tmp~3)) (.cse15 (= 0 ULTIMATE.start_processEnvironment__wrappee__lowWaterSensor_~tmp~2)) (.cse3 (= 1 ~methaneLevelCritical~0)) (.cse16 (<= ~waterLevel~0 1)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1))) (.cse4 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse5 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse6 (= 1 ~systemActive~0)) (.cse17 (= 0 ~methaneLevelCritical~0)) (.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse8 (<= ~waterLevel~0 2)) (.cse9 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse10 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse11 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse12 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (.cse18 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse13 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse14 .cse15 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse4 .cse5 .cse16 .cse6 .cse17 .cse7 .cse10 .cse11 .cse18 .cse12 .cse13) (and .cse0 .cse7 .cse3 .cse19 .cse16 .cse10 .cse11 .cse6) (and .cse17 .cse7 .cse19 .cse16 .cse10 .cse11 .cse18 .cse6) (and .cse0 .cse14 .cse15 .cse3 .cse4 .cse5 .cse16 .cse6 .cse7 .cse10 .cse11 .cse12 .cse13) (and .cse1 .cse2 .cse4 .cse5 .cse6 .cse17 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse18 .cse13))) [2020-07-28 19:03:18,319 INFO L264 CegarLoopResult]: At program point L433-2(lines 428 436) the Hoare annotation is: false [2020-07-28 19:03:18,319 INFO L264 CegarLoopResult]: At program point L433-3(lines 428 436) the Hoare annotation is: false [2020-07-28 19:03:18,319 INFO L264 CegarLoopResult]: At program point L301(lines 294 304) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse2 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse3 (<= ~waterLevel~0 1)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse6 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (.cse7 (= 1 ~systemActive~0)) (.cse8 (= 1 ~pumpRunning~0))) (or (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 (= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and (= 0 ~methaneLevelCritical~0) .cse0 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse7 .cse8))) [2020-07-28 19:03:18,320 INFO L264 CegarLoopResult]: At program point L433-4(lines 428 436) the Hoare annotation is: false [2020-07-28 19:03:18,320 INFO L264 CegarLoopResult]: At program point L301-1(lines 294 304) the Hoare annotation is: false [2020-07-28 19:03:18,320 INFO L264 CegarLoopResult]: At program point L433-5(lines 428 436) the Hoare annotation is: false [2020-07-28 19:03:18,320 INFO L268 CegarLoopResult]: For program point L235(lines 235 243) no Hoare annotation was computed. [2020-07-28 19:03:18,320 INFO L264 CegarLoopResult]: At program point L301-2(lines 294 304) the Hoare annotation is: false [2020-07-28 19:03:18,320 INFO L268 CegarLoopResult]: For program point L235-1(lines 235 243) no Hoare annotation was computed. [2020-07-28 19:03:18,320 INFO L268 CegarLoopResult]: For program point L235-2(lines 235 243) no Hoare annotation was computed. [2020-07-28 19:03:18,320 INFO L268 CegarLoopResult]: For program point L235-3(lines 235 243) no Hoare annotation was computed. [2020-07-28 19:03:18,320 INFO L268 CegarLoopResult]: For program point L103(lines 103 107) no Hoare annotation was computed. [2020-07-28 19:03:18,321 INFO L268 CegarLoopResult]: For program point L235-4(lines 235 243) no Hoare annotation was computed. [2020-07-28 19:03:18,321 INFO L268 CegarLoopResult]: For program point L235-5(lines 235 243) no Hoare annotation was computed. [2020-07-28 19:03:18,321 INFO L268 CegarLoopResult]: For program point L137(lines 137 141) no Hoare annotation was computed. [2020-07-28 19:03:18,321 INFO L268 CegarLoopResult]: For program point L137-2(lines 173 179) no Hoare annotation was computed. [2020-07-28 19:03:18,321 INFO L268 CegarLoopResult]: For program point L502(lines 502 522) no Hoare annotation was computed. [2020-07-28 19:03:18,321 INFO L268 CegarLoopResult]: For program point L502-2(lines 502 522) no Hoare annotation was computed. [2020-07-28 19:03:18,321 INFO L268 CegarLoopResult]: For program point L502-4(lines 502 522) no Hoare annotation was computed. [2020-07-28 19:03:18,321 INFO L268 CegarLoopResult]: For program point L205(lines 205 222) no Hoare annotation was computed. [2020-07-28 19:03:18,321 INFO L268 CegarLoopResult]: For program point L205-1(lines 205 222) no Hoare annotation was computed. [2020-07-28 19:03:18,321 INFO L268 CegarLoopResult]: For program point L205-2(lines 205 222) no Hoare annotation was computed. [2020-07-28 19:03:18,322 INFO L268 CegarLoopResult]: For program point L205-3(lines 205 222) no Hoare annotation was computed. [2020-07-28 19:03:18,322 INFO L268 CegarLoopResult]: For program point L205-4(lines 205 222) no Hoare annotation was computed. [2020-07-28 19:03:18,322 INFO L268 CegarLoopResult]: For program point L205-5(lines 205 222) no Hoare annotation was computed. [2020-07-28 19:03:18,322 INFO L268 CegarLoopResult]: For program point L205-6(lines 205 222) no Hoare annotation was computed. [2020-07-28 19:03:18,322 INFO L268 CegarLoopResult]: For program point L205-7(lines 205 222) no Hoare annotation was computed. [2020-07-28 19:03:18,322 INFO L268 CegarLoopResult]: For program point L205-8(lines 205 222) no Hoare annotation was computed. [2020-07-28 19:03:18,322 INFO L268 CegarLoopResult]: For program point L205-9(lines 205 222) no Hoare annotation was computed. [2020-07-28 19:03:18,322 INFO L268 CegarLoopResult]: For program point L205-10(lines 205 222) no Hoare annotation was computed. [2020-07-28 19:03:18,323 INFO L268 CegarLoopResult]: For program point L205-11(lines 205 222) no Hoare annotation was computed. [2020-07-28 19:03:18,323 INFO L264 CegarLoopResult]: At program point L173(lines 172 191) the Hoare annotation is: (let ((.cse0 (= 0 ~methaneLevelCritical~0)) (.cse2 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse3 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse4 (<= ~waterLevel~0 1)) (.cse7 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (.cse9 (= 1 ~pumpRunning~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse12 (= 1 ~methaneLevelCritical~0)) (.cse10 (<= ~waterLevel~0 2)) (.cse11 (= 0 ~pumpRunning~0)) (.cse5 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse6 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse8 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 .cse1 .cse10 .cse11 .cse5 .cse6 .cse8) (and .cse1 .cse12 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse1 .cse12 .cse10 .cse11 .cse5 .cse6 .cse8))) [2020-07-28 19:03:18,323 INFO L268 CegarLoopResult]: For program point L173-1(lines 173 179) no Hoare annotation was computed. [2020-07-28 19:03:18,323 INFO L264 CegarLoopResult]: At program point L173-2(lines 172 191) the Hoare annotation is: false [2020-07-28 19:03:18,324 INFO L264 CegarLoopResult]: At program point L74(lines 1 987) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:03:18,324 INFO L264 CegarLoopResult]: At program point L173-3(lines 172 191) the Hoare annotation is: false [2020-07-28 19:03:18,324 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 44) no Hoare annotation was computed. [2020-07-28 19:03:18,324 INFO L268 CegarLoopResult]: For program point L473(lines 473 479) no Hoare annotation was computed. [2020-07-28 19:03:18,324 INFO L268 CegarLoopResult]: For program point L473-1(lines 473 479) no Hoare annotation was computed. [2020-07-28 19:03:18,325 INFO L268 CegarLoopResult]: For program point L473-2(lines 473 479) no Hoare annotation was computed. [2020-07-28 19:03:18,325 INFO L268 CegarLoopResult]: For program point L473-3(lines 473 479) no Hoare annotation was computed. [2020-07-28 19:03:18,325 INFO L268 CegarLoopResult]: For program point L473-4(lines 473 479) no Hoare annotation was computed. [2020-07-28 19:03:18,325 INFO L268 CegarLoopResult]: For program point L473-5(lines 473 479) no Hoare annotation was computed. [2020-07-28 19:03:18,325 INFO L268 CegarLoopResult]: For program point L473-6(lines 473 479) no Hoare annotation was computed. [2020-07-28 19:03:18,325 INFO L268 CegarLoopResult]: For program point L473-7(lines 473 479) no Hoare annotation was computed. [2020-07-28 19:03:18,325 INFO L268 CegarLoopResult]: For program point L209(lines 209 217) no Hoare annotation was computed. [2020-07-28 19:03:18,325 INFO L268 CegarLoopResult]: For program point L473-8(lines 473 479) no Hoare annotation was computed. [2020-07-28 19:03:18,325 INFO L268 CegarLoopResult]: For program point L209-1(lines 209 217) no Hoare annotation was computed. [2020-07-28 19:03:18,325 INFO L268 CegarLoopResult]: For program point L473-9(lines 473 479) no Hoare annotation was computed. [2020-07-28 19:03:18,325 INFO L268 CegarLoopResult]: For program point L209-2(lines 209 217) no Hoare annotation was computed. [2020-07-28 19:03:18,325 INFO L268 CegarLoopResult]: For program point L473-10(lines 473 479) no Hoare annotation was computed. [2020-07-28 19:03:18,326 INFO L268 CegarLoopResult]: For program point L209-3(lines 209 217) no Hoare annotation was computed. [2020-07-28 19:03:18,326 INFO L268 CegarLoopResult]: For program point L473-11(lines 473 479) no Hoare annotation was computed. [2020-07-28 19:03:18,326 INFO L268 CegarLoopResult]: For program point L209-4(lines 209 217) no Hoare annotation was computed. [2020-07-28 19:03:18,326 INFO L268 CegarLoopResult]: For program point L44(line 44) no Hoare annotation was computed. [2020-07-28 19:03:18,326 INFO L268 CegarLoopResult]: For program point L209-5(lines 209 217) no Hoare annotation was computed. [2020-07-28 19:03:18,326 INFO L268 CegarLoopResult]: For program point L209-6(lines 209 217) no Hoare annotation was computed. [2020-07-28 19:03:18,326 INFO L268 CegarLoopResult]: For program point L44-1(line 44) no Hoare annotation was computed. [2020-07-28 19:03:18,326 INFO L268 CegarLoopResult]: For program point L209-7(lines 209 217) no Hoare annotation was computed. [2020-07-28 19:03:18,326 INFO L268 CegarLoopResult]: For program point L44-2(line 44) no Hoare annotation was computed. [2020-07-28 19:03:18,327 INFO L268 CegarLoopResult]: For program point L209-8(lines 209 217) no Hoare annotation was computed. [2020-07-28 19:03:18,327 INFO L268 CegarLoopResult]: For program point L209-9(lines 209 217) no Hoare annotation was computed. [2020-07-28 19:03:18,327 INFO L268 CegarLoopResult]: For program point L209-10(lines 209 217) no Hoare annotation was computed. [2020-07-28 19:03:18,327 INFO L268 CegarLoopResult]: For program point L209-11(lines 209 217) no Hoare annotation was computed. [2020-07-28 19:03:18,327 INFO L268 CegarLoopResult]: For program point L408(lines 408 412) no Hoare annotation was computed. [2020-07-28 19:03:18,327 INFO L268 CegarLoopResult]: For program point L111(lines 111 117) no Hoare annotation was computed. [2020-07-28 19:03:18,327 INFO L264 CegarLoopResult]: At program point L111-1(lines 111 117) the Hoare annotation is: (let ((.cse23 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse24 (= 1 ~waterLevel~0)) (.cse7 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse20 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (.cse8 (= 1 ~systemActive~0)) (.cse22 (= 1 ~pumpRunning~0))) (let ((.cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse14 (= 0 ULTIMATE.start_processEnvironment_~tmp~3)) (.cse15 (= 0 ULTIMATE.start_processEnvironment__wrappee__lowWaterSensor_~tmp~2)) (.cse1 (= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~6)) (.cse3 (= 1 ~methaneLevelCritical~0)) (.cse13 (<= ~waterLevel~0 1)) (.cse9 (or (and .cse23 .cse2 .cse7 .cse20 .cse8 .cse22) (and .cse2 .cse24 .cse7 .cse20 .cse8 .cse22))) (.cse10 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse11 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse12 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse17 (= 0 ~methaneLevelCritical~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse18 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~6)) (.cse5 (= 0 ~pumpRunning~0)) (.cse19 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)) (.cse6 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse21 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse16 (<= |ULTIMATE.start_getWaterLevel_#res| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse1 .cse3 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse14 .cse15 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse11 .cse12 .cse13 .cse8 .cse16 .cse17 .cse2 .cse18 .cse19 .cse6 .cse7 .cse20 .cse21 .cse22) (and .cse17 .cse23 .cse2 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse23 .cse1 .cse3 .cse11 .cse12 .cse8 .cse2 .cse4 .cse6 .cse7 .cse20 .cse22) (and .cse0 .cse14 .cse15 .cse1 .cse3 .cse11 .cse12 .cse13 .cse8 .cse2 .cse6 .cse7 .cse20 .cse22) (and .cse17 .cse9 .cse10 .cse4 .cse11 .cse18 .cse12 .cse21) (and .cse17 .cse2 .cse5 .cse6 .cse7 .cse24 .cse8) (and .cse17 .cse2 .cse4 .cse18 .cse5 .cse19 .cse6 .cse7 .cse21 .cse8 .cse16)))) [2020-07-28 19:03:18,328 INFO L264 CegarLoopResult]: At program point L904-2(lines 904 918) the Hoare annotation is: false [2020-07-28 19:03:18,328 INFO L268 CegarLoopResult]: For program point L508(lines 508 521) no Hoare annotation was computed. [2020-07-28 19:03:18,328 INFO L264 CegarLoopResult]: At program point L508-1(lines 1 987) the Hoare annotation is: (let ((.cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse17 (= 0 ULTIMATE.start_processEnvironment_~tmp~3)) (.cse18 (= 0 ULTIMATE.start_processEnvironment__wrappee__lowWaterSensor_~tmp~2)) (.cse3 (= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~6)) (.cse4 (= 1 ~methaneLevelCritical~0)) (.cse16 (<= ~waterLevel~0 1)) (.cse22 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 1)) (.cse19 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse1 (<= 2 ~waterLevel~0)) (.cse2 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1))) (.cse5 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse6 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse21 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~6)) (.cse13 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (.cse23 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse14 (= 1 ~pumpRunning~0)) (.cse20 (= 0 ~methaneLevelCritical~0)) (.cse8 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse15 (= 0 ~pumpRunning~0)) (.cse11 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse12 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse7 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13 .cse14) (and .cse0 .cse8 .cse3 .cse4 .cse15 .cse16 .cse11 .cse12 .cse7) (and .cse17 .cse18 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse5 .cse6 .cse16 .cse7 .cse19 .cse20 .cse8 .cse21 .cse22 .cse11 .cse12 .cse13 .cse23 .cse14) (and .cse0 .cse17 .cse18 .cse3 .cse4 .cse5 .cse6 .cse16 .cse7 .cse8 .cse11 .cse12 .cse13 .cse14) (and .cse20 .cse8 .cse21 .cse15 .cse16 .cse22 .cse11 .cse12 .cse23 .cse7 .cse19) (and .cse1 .cse2 .cse5 .cse6 .cse7 .cse20 .cse8 .cse9 .cse10 .cse21 .cse11 .cse12 .cse13 .cse23 .cse14) (and .cse20 .cse8 .cse15 .cse11 .cse12 (= 1 ~waterLevel~0) .cse7))) [2020-07-28 19:03:18,328 INFO L268 CegarLoopResult]: For program point L508-2(lines 508 521) no Hoare annotation was computed. [2020-07-28 19:03:18,328 INFO L264 CegarLoopResult]: At program point L508-3(lines 1 987) the Hoare annotation is: false [2020-07-28 19:03:18,328 INFO L268 CegarLoopResult]: For program point L508-4(lines 508 521) no Hoare annotation was computed. [2020-07-28 19:03:18,328 INFO L264 CegarLoopResult]: At program point L508-5(lines 1 987) the Hoare annotation is: false [2020-07-28 19:03:18,328 INFO L264 CegarLoopResult]: At program point L310(lines 305 313) the Hoare annotation is: (and (<= 2 ~waterLevel~0) (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1)) (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (= 1 ~systemActive~0) (= 0 ~methaneLevelCritical~0) (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3 2) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= ~waterLevel~0 2) (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~6) (= 1 |ULTIMATE.start_isPumpRunning_#res|) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4) (< 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~3) (= 1 ~pumpRunning~0)) [2020-07-28 19:03:18,329 INFO L264 CegarLoopResult]: At program point L310-1(lines 305 313) the Hoare annotation is: false [2020-07-28 19:03:18,329 INFO L264 CegarLoopResult]: At program point L310-2(lines 305 313) the Hoare annotation is: false [2020-07-28 19:03:18,329 INFO L268 CegarLoopResult]: For program point L905(line 905) no Hoare annotation was computed. [2020-07-28 19:03:18,329 INFO L268 CegarLoopResult]: For program point L378(lines 378 382) no Hoare annotation was computed. [2020-07-28 19:03:18,329 INFO L268 CegarLoopResult]: For program point L378-2(lines 378 382) no Hoare annotation was computed. [2020-07-28 19:03:18,329 INFO L268 CegarLoopResult]: For program point L378-3(lines 378 382) no Hoare annotation was computed. [2020-07-28 19:03:18,329 INFO L268 CegarLoopResult]: For program point L378-5(lines 378 382) no Hoare annotation was computed. [2020-07-28 19:03:18,329 INFO L264 CegarLoopResult]: At program point L180(lines 180 186) the Hoare annotation is: (let ((.cse13 (= 0 ~pumpRunning~0)) (.cse14 (<= 2 ~waterLevel~0)) (.cse15 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1))) (.cse6 (= 0 ~methaneLevelCritical~0)) (.cse16 (<= ~waterLevel~0 2)) (.cse17 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse0 (= 0 ULTIMATE.start_processEnvironment_~tmp~3)) (.cse1 (= 0 ULTIMATE.start_processEnvironment__wrappee__lowWaterSensor_~tmp~2)) (.cse12 (= 1 ~methaneLevelCritical~0)) (.cse2 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse3 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (= 1 ~systemActive~0)) (.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse8 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse9 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse10 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (.cse11 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse11) (and .cse7 .cse12 .cse13 .cse4 .cse8 .cse9 .cse5) (and .cse14 .cse15 .cse12 .cse2 .cse3 .cse5 .cse7 .cse16 .cse17 .cse8 .cse9 .cse10 .cse11) (and .cse6 .cse7 .cse13 .cse4 .cse8 .cse9 .cse5) (and .cse14 .cse15 .cse2 .cse3 .cse5 .cse6 .cse7 .cse16 .cse17 .cse8 .cse9 .cse10 .cse11) (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 .cse1 .cse12 .cse2 .cse3 .cse4 .cse5 .cse7 .cse8 .cse9 .cse10 .cse11))) [2020-07-28 19:03:18,329 INFO L268 CegarLoopResult]: For program point L378-6(lines 378 382) no Hoare annotation was computed. [2020-07-28 19:03:18,330 INFO L264 CegarLoopResult]: At program point L147(lines 100 148) the Hoare annotation is: false [2020-07-28 19:03:18,330 INFO L264 CegarLoopResult]: At program point L180-1(lines 180 186) the Hoare annotation is: false [2020-07-28 19:03:18,330 INFO L268 CegarLoopResult]: For program point L378-8(lines 378 382) no Hoare annotation was computed. [2020-07-28 19:03:18,330 INFO L264 CegarLoopResult]: At program point L180-2(lines 180 186) the Hoare annotation is: false [2020-07-28 19:03:18,330 INFO L268 CegarLoopResult]: For program point L378-9(lines 378 382) no Hoare annotation was computed. [2020-07-28 19:03:18,330 INFO L268 CegarLoopResult]: For program point L378-11(lines 378 382) no Hoare annotation was computed. [2020-07-28 19:03:18,330 INFO L268 CegarLoopResult]: For program point L378-12(lines 378 382) no Hoare annotation was computed. [2020-07-28 19:03:18,330 INFO L268 CegarLoopResult]: For program point L378-14(lines 378 382) no Hoare annotation was computed. [2020-07-28 19:03:18,330 INFO L268 CegarLoopResult]: For program point L378-15(lines 378 382) no Hoare annotation was computed. [2020-07-28 19:03:18,330 INFO L268 CegarLoopResult]: For program point L378-17(lines 378 382) no Hoare annotation was computed. [2020-07-28 19:03:18,331 INFO L264 CegarLoopResult]: At program point L478(lines 469 482) the Hoare annotation is: false [2020-07-28 19:03:18,331 INFO L264 CegarLoopResult]: At program point L478-1(lines 469 482) the Hoare annotation is: false [2020-07-28 19:03:18,331 INFO L264 CegarLoopResult]: At program point L478-2(lines 469 482) the Hoare annotation is: false [2020-07-28 19:03:18,331 INFO L264 CegarLoopResult]: At program point L478-3(lines 469 482) the Hoare annotation is: (let ((.cse1 (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse9 (= 1 ~methaneLevelCritical~0)) (.cse4 (<= ~waterLevel~0 1)) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse8 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse10 (<= ~waterLevel~0 2)) (.cse11 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse3 (= 0 ~pumpRunning~0)) (.cse5 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse6 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse7 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse8 .cse2 .cse9 .cse10 .cse11 .cse3 .cse5 .cse6 .cse7) (and .cse1 .cse2 .cse9 .cse3 .cse4 .cse5 .cse6 .cse7) (and .cse0 .cse8 .cse2 .cse10 .cse11 .cse3 .cse5 .cse6 .cse7))) [2020-07-28 19:03:18,331 INFO L264 CegarLoopResult]: At program point L478-4(lines 469 482) the Hoare annotation is: false [2020-07-28 19:03:18,332 INFO L264 CegarLoopResult]: At program point L478-5(lines 469 482) the Hoare annotation is: false [2020-07-28 19:03:18,332 INFO L264 CegarLoopResult]: At program point L478-6(lines 469 482) the Hoare annotation is: false [2020-07-28 19:03:18,332 INFO L264 CegarLoopResult]: At program point L478-7(lines 469 482) the Hoare annotation is: false [2020-07-28 19:03:18,332 INFO L264 CegarLoopResult]: At program point L478-8(lines 469 482) the Hoare annotation is: false [2020-07-28 19:03:18,332 INFO L264 CegarLoopResult]: At program point L478-9(lines 469 482) the Hoare annotation is: false [2020-07-28 19:03:18,332 INFO L264 CegarLoopResult]: At program point L478-10(lines 469 482) the Hoare annotation is: false [2020-07-28 19:03:18,333 INFO L264 CegarLoopResult]: At program point L478-11(lines 469 482) the Hoare annotation is: false [2020-07-28 19:03:18,333 INFO L264 CegarLoopResult]: At program point L82(lines 77 85) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:03:18,333 INFO L268 CegarLoopResult]: For program point L908(lines 908 912) no Hoare annotation was computed. [2020-07-28 19:03:18,333 INFO L268 CegarLoopResult]: For program point L908-1(lines 173 179) no Hoare annotation was computed. [2020-07-28 19:03:18,333 INFO L268 CegarLoopResult]: For program point L512(lines 512 518) no Hoare annotation was computed. [2020-07-28 19:03:18,333 INFO L268 CegarLoopResult]: For program point L512-2(lines 512 518) no Hoare annotation was computed. [2020-07-28 19:03:18,334 INFO L268 CegarLoopResult]: For program point L512-4(lines 512 518) no Hoare annotation was computed. [2020-07-28 19:03:18,334 INFO L268 CegarLoopResult]: For program point L975(lines 975 982) no Hoare annotation was computed. [2020-07-28 19:03:18,334 INFO L271 CegarLoopResult]: At program point L975-1(lines 975 982) the Hoare annotation is: true [2020-07-28 19:03:18,334 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:03:18,334 INFO L264 CegarLoopResult]: At program point L384(lines 369 387) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_processEnvironment_~tmp~3)) (.cse2 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse3 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse4 (<= ~waterLevel~0 1)) (.cse8 (= 1 ~systemActive~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse5 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse6 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse7 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (.cse9 (= 1 ~pumpRunning~0))) (or (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 .cse1 (= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse2 .cse3 .cse4 .cse8 (= 0 ~methaneLevelCritical~0) .cse1 .cse5 .cse6 .cse7 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse9))) [2020-07-28 19:03:18,335 INFO L264 CegarLoopResult]: At program point L384-1(lines 369 387) the Hoare annotation is: false [2020-07-28 19:03:18,335 INFO L264 CegarLoopResult]: At program point L384-2(lines 369 387) the Hoare annotation is: false [2020-07-28 19:03:18,335 INFO L264 CegarLoopResult]: At program point L384-3(lines 369 387) the Hoare annotation is: false [2020-07-28 19:03:18,335 INFO L264 CegarLoopResult]: At program point L384-4(lines 369 387) the Hoare annotation is: false [2020-07-28 19:03:18,335 INFO L264 CegarLoopResult]: At program point L384-5(lines 369 387) the Hoare annotation is: false [2020-07-28 19:03:18,335 INFO L268 CegarLoopResult]: For program point L121(lines 121 127) no Hoare annotation was computed. [2020-07-28 19:03:18,336 INFO L264 CegarLoopResult]: At program point L121-1(lines 121 127) the Hoare annotation is: (let ((.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse10 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse14 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (.cse11 (= 1 ~systemActive~0)) (.cse15 (= 1 ~pumpRunning~0))) (let ((.cse1 (or (and (<= 2 ~waterLevel~0) .cse7 .cse10 .cse14 .cse11 .cse15) (and .cse7 (= 1 ~waterLevel~0) .cse10 .cse14 .cse11 .cse15))) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse0 (= 1 ~methaneLevelCritical~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse8 (= 0 ~pumpRunning~0)) (.cse6 (= 0 ~methaneLevelCritical~0)) (.cse13 (= 0 ULTIMATE.start_processEnvironment_~tmp~3)) (.cse12 (= 0 ULTIMATE.start_processEnvironment__wrappee__lowWaterSensor_~tmp~2)) (.cse3 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse5 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse9 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse1 .cse2 .cse3 .cse4 .cse5) (and .cse6 .cse7 .cse4 .cse8 .cse9 .cse10 .cse11) (and .cse12 .cse13 .cse7 .cse0 .cse4 .cse3 .cse5 .cse9 .cse10 .cse14 .cse11 .cse15) (and .cse7 .cse0 .cse4 .cse8 .cse9 .cse10 .cse11) (and .cse6 .cse13 .cse12 .cse7 .cse3 .cse5 (<= ~waterLevel~0 1) .cse9 .cse10 .cse14 .cse11 .cse15)))) [2020-07-28 19:03:18,336 INFO L268 CegarLoopResult]: For program point L420(lines 420 424) no Hoare annotation was computed. [2020-07-28 19:03:18,336 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:03:18,336 INFO L264 CegarLoopResult]: At program point L488(lines 483 491) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_processEnvironment_~tmp~3)) (.cse2 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse3 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse4 (<= ~waterLevel~0 1)) (.cse8 (= 1 ~systemActive~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse5 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse6 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse7 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (.cse9 (= 1 ~pumpRunning~0))) (or (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 .cse1 (= 1 ~methaneLevelCritical~0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse0 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse2 .cse3 .cse4 .cse8 (= 0 ~methaneLevelCritical~0) .cse1 .cse5 .cse6 .cse7 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse9))) [2020-07-28 19:03:18,336 INFO L264 CegarLoopResult]: At program point L488-1(lines 483 491) the Hoare annotation is: false [2020-07-28 19:03:18,336 INFO L264 CegarLoopResult]: At program point L488-2(lines 483 491) the Hoare annotation is: false [2020-07-28 19:03:18,336 INFO L264 CegarLoopResult]: At program point L488-3(lines 483 491) the Hoare annotation is: false [2020-07-28 19:03:18,336 INFO L264 CegarLoopResult]: At program point L488-4(lines 483 491) the Hoare annotation is: false [2020-07-28 19:03:18,336 INFO L264 CegarLoopResult]: At program point L488-5(lines 483 491) the Hoare annotation is: false [2020-07-28 19:03:18,337 INFO L268 CegarLoopResult]: For program point L257(lines 257 274) no Hoare annotation was computed. [2020-07-28 19:03:18,337 INFO L268 CegarLoopResult]: For program point L257-1(lines 257 274) no Hoare annotation was computed. [2020-07-28 19:03:18,337 INFO L268 CegarLoopResult]: For program point L257-2(lines 257 274) no Hoare annotation was computed. [2020-07-28 19:03:18,337 INFO L271 CegarLoopResult]: At program point L984(lines 965 987) the Hoare annotation is: true [2020-07-28 19:03:18,337 INFO L264 CegarLoopResult]: At program point L952(lines 948 954) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= 1 ~waterLevel~0) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 1 ~systemActive~0)) [2020-07-28 19:03:18,337 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:03:18,337 INFO L268 CegarLoopResult]: For program point L359(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,337 INFO L268 CegarLoopResult]: For program point L359-2(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,337 INFO L268 CegarLoopResult]: For program point L359-3(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,337 INFO L268 CegarLoopResult]: For program point L359-5(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,337 INFO L268 CegarLoopResult]: For program point L359-6(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,338 INFO L268 CegarLoopResult]: For program point L359-8(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,338 INFO L268 CegarLoopResult]: For program point L359-9(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,338 INFO L268 CegarLoopResult]: For program point L359-11(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,338 INFO L268 CegarLoopResult]: For program point L359-12(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,338 INFO L268 CegarLoopResult]: For program point L359-14(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,338 INFO L268 CegarLoopResult]: For program point L359-15(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,338 INFO L268 CegarLoopResult]: For program point L359-17(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,338 INFO L268 CegarLoopResult]: For program point L359-18(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,338 INFO L268 CegarLoopResult]: For program point L359-20(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,338 INFO L268 CegarLoopResult]: For program point L359-21(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,338 INFO L268 CegarLoopResult]: For program point L359-23(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,338 INFO L268 CegarLoopResult]: For program point L359-24(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,339 INFO L268 CegarLoopResult]: For program point L359-26(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,339 INFO L268 CegarLoopResult]: For program point L359-27(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,339 INFO L268 CegarLoopResult]: For program point L359-29(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,339 INFO L268 CegarLoopResult]: For program point L359-30(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,339 INFO L268 CegarLoopResult]: For program point L359-32(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,339 INFO L268 CegarLoopResult]: For program point L359-33(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,339 INFO L268 CegarLoopResult]: For program point L261(lines 261 269) no Hoare annotation was computed. [2020-07-28 19:03:18,339 INFO L268 CegarLoopResult]: For program point L261-1(lines 261 269) no Hoare annotation was computed. [2020-07-28 19:03:18,339 INFO L268 CegarLoopResult]: For program point L359-35(lines 359 363) no Hoare annotation was computed. [2020-07-28 19:03:18,339 INFO L268 CegarLoopResult]: For program point L261-2(lines 261 269) no Hoare annotation was computed. [2020-07-28 19:03:18,339 INFO L268 CegarLoopResult]: For program point L131(lines 131 142) no Hoare annotation was computed. [2020-07-28 19:03:18,339 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:03:18,340 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 44) no Hoare annotation was computed. [2020-07-28 19:03:18,340 INFO L268 CegarLoopResult]: For program point L396(lines 396 400) no Hoare annotation was computed. [2020-07-28 19:03:18,340 INFO L268 CegarLoopResult]: For program point L396-3(lines 396 400) no Hoare annotation was computed. [2020-07-28 19:03:18,340 INFO L268 CegarLoopResult]: For program point L231(lines 231 248) no Hoare annotation was computed. [2020-07-28 19:03:18,340 INFO L268 CegarLoopResult]: For program point L231-1(lines 231 248) no Hoare annotation was computed. [2020-07-28 19:03:18,340 INFO L268 CegarLoopResult]: For program point L396-6(lines 396 400) no Hoare annotation was computed. [2020-07-28 19:03:18,340 INFO L268 CegarLoopResult]: For program point L231-2(lines 231 248) no Hoare annotation was computed. [2020-07-28 19:03:18,340 INFO L268 CegarLoopResult]: For program point L231-3(lines 231 248) no Hoare annotation was computed. [2020-07-28 19:03:18,340 INFO L268 CegarLoopResult]: For program point L231-4(lines 231 248) no Hoare annotation was computed. [2020-07-28 19:03:18,340 INFO L268 CegarLoopResult]: For program point L231-5(lines 231 248) no Hoare annotation was computed. [2020-07-28 19:03:18,340 INFO L264 CegarLoopResult]: At program point L365(lines 350 368) the Hoare annotation is: false [2020-07-28 19:03:18,340 INFO L264 CegarLoopResult]: At program point L365-1(lines 350 368) the Hoare annotation is: false [2020-07-28 19:03:18,341 INFO L264 CegarLoopResult]: At program point L365-2(lines 350 368) the Hoare annotation is: false [2020-07-28 19:03:18,341 INFO L264 CegarLoopResult]: At program point L365-3(lines 350 368) the Hoare annotation is: (let ((.cse13 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse15 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (let ((.cse1 (= 0 ~methaneLevelCritical~0)) (.cse12 (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse16 (<= ~waterLevel~0 1)) (.cse17 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (.cse0 (<= 2 ~waterLevel~0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse14 (= 1 ~methaneLevelCritical~0)) (.cse4 (<= ~waterLevel~0 2)) (.cse3 (not .cse15)) (.cse5 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse6 (not .cse13)) (.cse7 (= 0 ~pumpRunning~0)) (.cse8 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse9 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse10 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~4)) (.cse11 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11) (and .cse12 .cse13 .cse2 .cse14 .cse7 .cse15 .cse16 .cse8 .cse9 .cse17 .cse11) (and .cse1 .cse12 .cse13 .cse2 .cse7 .cse15 .cse16 .cse8 .cse9 .cse17 .cse11) (and .cse0 .cse2 .cse14 .cse4 .cse3 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11)))) [2020-07-28 19:03:18,341 INFO L264 CegarLoopResult]: At program point L365-4(lines 350 368) the Hoare annotation is: false [2020-07-28 19:03:18,341 INFO L264 CegarLoopResult]: At program point L365-5(lines 350 368) the Hoare annotation is: false [2020-07-28 19:03:18,341 INFO L264 CegarLoopResult]: At program point L365-6(lines 350 368) the Hoare annotation is: false [2020-07-28 19:03:18,342 INFO L264 CegarLoopResult]: At program point L365-7(lines 350 368) the Hoare annotation is: false [2020-07-28 19:03:18,342 INFO L264 CegarLoopResult]: At program point L365-8(lines 350 368) the Hoare annotation is: false [2020-07-28 19:03:18,342 INFO L264 CegarLoopResult]: At program point L365-9(lines 350 368) the Hoare annotation is: false [2020-07-28 19:03:18,342 INFO L264 CegarLoopResult]: At program point L365-10(lines 350 368) the Hoare annotation is: false [2020-07-28 19:03:18,342 INFO L264 CegarLoopResult]: At program point L365-11(lines 350 368) the Hoare annotation is: false [2020-07-28 19:03:18,345 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:03:18,345 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:03:18,346 WARN L170 areAnnotationChecker]: L975 has no Hoare annotation [2020-07-28 19:03:18,346 WARN L170 areAnnotationChecker]: L975 has no Hoare annotation [2020-07-28 19:03:18,346 WARN L170 areAnnotationChecker]: L975 has no Hoare annotation [2020-07-28 19:03:18,348 WARN L170 areAnnotationChecker]: L102 has no Hoare annotation [2020-07-28 19:03:18,348 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:03:18,348 WARN L170 areAnnotationChecker]: L173-1 has no Hoare annotation [2020-07-28 19:03:18,348 WARN L170 areAnnotationChecker]: L102 has no Hoare annotation [2020-07-28 19:03:18,348 WARN L170 areAnnotationChecker]: L102 has no Hoare annotation [2020-07-28 19:03:18,348 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:03:18,349 WARN L170 areAnnotationChecker]: L173-1 has no Hoare annotation [2020-07-28 19:03:18,349 WARN L170 areAnnotationChecker]: L173-1 has no Hoare annotation [2020-07-28 19:03:18,349 WARN L170 areAnnotationChecker]: L103 has no Hoare annotation [2020-07-28 19:03:18,349 WARN L170 areAnnotationChecker]: L396-3 has no Hoare annotation [2020-07-28 19:03:18,349 WARN L170 areAnnotationChecker]: L396-3 has no Hoare annotation [2020-07-28 19:03:18,349 WARN L170 areAnnotationChecker]: L257-1 has no Hoare annotation [2020-07-28 19:03:18,349 WARN L170 areAnnotationChecker]: L111 has no Hoare annotation [2020-07-28 19:03:18,349 WARN L170 areAnnotationChecker]: L111 has no Hoare annotation [2020-07-28 19:03:18,349 WARN L170 areAnnotationChecker]: L257-1 has no Hoare annotation [2020-07-28 19:03:18,349 WARN L170 areAnnotationChecker]: L257-1 has no Hoare annotation [2020-07-28 19:03:18,349 WARN L170 areAnnotationChecker]: L408 has no Hoare annotation [2020-07-28 19:03:18,349 WARN L170 areAnnotationChecker]: L408 has no Hoare annotation [2020-07-28 19:03:18,350 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2020-07-28 19:03:18,350 WARN L170 areAnnotationChecker]: L231-3 has no Hoare annotation [2020-07-28 19:03:18,350 WARN L170 areAnnotationChecker]: L231-3 has no Hoare annotation [2020-07-28 19:03:18,350 WARN L170 areAnnotationChecker]: L502-2 has no Hoare annotation [2020-07-28 19:03:18,350 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2020-07-28 19:03:18,350 WARN L170 areAnnotationChecker]: L121 has no Hoare annotation [2020-07-28 19:03:18,350 WARN L170 areAnnotationChecker]: L261-1 has no Hoare annotation [2020-07-28 19:03:18,350 WARN L170 areAnnotationChecker]: L378-9 has no Hoare annotation [2020-07-28 19:03:18,350 WARN L170 areAnnotationChecker]: L205-7 has no Hoare annotation [2020-07-28 19:03:18,350 WARN L170 areAnnotationChecker]: L205-7 has no Hoare annotation [2020-07-28 19:03:18,350 WARN L170 areAnnotationChecker]: L502-2 has no Hoare annotation [2020-07-28 19:03:18,350 WARN L170 areAnnotationChecker]: L502-2 has no Hoare annotation [2020-07-28 19:03:18,351 WARN L170 areAnnotationChecker]: L420 has no Hoare annotation [2020-07-28 19:03:18,351 WARN L170 areAnnotationChecker]: L420 has no Hoare annotation [2020-07-28 19:03:18,351 WARN L170 areAnnotationChecker]: L131 has no Hoare annotation [2020-07-28 19:03:18,351 WARN L170 areAnnotationChecker]: L261-1 has no Hoare annotation [2020-07-28 19:03:18,351 WARN L170 areAnnotationChecker]: L261-1 has no Hoare annotation [2020-07-28 19:03:18,351 WARN L170 areAnnotationChecker]: L378-9 has no Hoare annotation [2020-07-28 19:03:18,351 WARN L170 areAnnotationChecker]: L378-9 has no Hoare annotation [2020-07-28 19:03:18,351 WARN L170 areAnnotationChecker]: L473-7 has no Hoare annotation [2020-07-28 19:03:18,351 WARN L170 areAnnotationChecker]: L473-7 has no Hoare annotation [2020-07-28 19:03:18,351 WARN L170 areAnnotationChecker]: L508-2 has no Hoare annotation [2020-07-28 19:03:18,351 WARN L170 areAnnotationChecker]: L131 has no Hoare annotation [2020-07-28 19:03:18,351 WARN L170 areAnnotationChecker]: L131 has no Hoare annotation [2020-07-28 19:03:18,352 WARN L170 areAnnotationChecker]: L231-2 has no Hoare annotation [2020-07-28 19:03:18,352 WARN L170 areAnnotationChecker]: L231-2 has no Hoare annotation [2020-07-28 19:03:18,352 WARN L170 areAnnotationChecker]: L378-11 has no Hoare annotation [2020-07-28 19:03:18,352 WARN L170 areAnnotationChecker]: L359-21 has no Hoare annotation [2020-07-28 19:03:18,352 WARN L170 areAnnotationChecker]: L905 has no Hoare annotation [2020-07-28 19:03:18,352 WARN L170 areAnnotationChecker]: L508-2 has no Hoare annotation [2020-07-28 19:03:18,352 WARN L170 areAnnotationChecker]: L508-2 has no Hoare annotation [2020-07-28 19:03:18,352 WARN L170 areAnnotationChecker]: L137-2 has no Hoare annotation [2020-07-28 19:03:18,352 WARN L170 areAnnotationChecker]: L137-2 has no Hoare annotation [2020-07-28 19:03:18,352 WARN L170 areAnnotationChecker]: L137 has no Hoare annotation [2020-07-28 19:03:18,352 WARN L170 areAnnotationChecker]: L137 has no Hoare annotation [2020-07-28 19:03:18,352 WARN L170 areAnnotationChecker]: L378-6 has no Hoare annotation [2020-07-28 19:03:18,353 WARN L170 areAnnotationChecker]: L205-5 has no Hoare annotation [2020-07-28 19:03:18,353 WARN L170 areAnnotationChecker]: L205-5 has no Hoare annotation [2020-07-28 19:03:18,353 WARN L170 areAnnotationChecker]: L235-3 has no Hoare annotation [2020-07-28 19:03:18,353 WARN L170 areAnnotationChecker]: L359-21 has no Hoare annotation [2020-07-28 19:03:18,353 WARN L170 areAnnotationChecker]: L359-21 has no Hoare annotation [2020-07-28 19:03:18,353 WARN L170 areAnnotationChecker]: L905 has no Hoare annotation [2020-07-28 19:03:18,353 WARN L170 areAnnotationChecker]: L512-2 has no Hoare annotation [2020-07-28 19:03:18,353 WARN L170 areAnnotationChecker]: L396 has no Hoare annotation [2020-07-28 19:03:18,353 WARN L170 areAnnotationChecker]: L396 has no Hoare annotation [2020-07-28 19:03:18,353 WARN L170 areAnnotationChecker]: L257 has no Hoare annotation [2020-07-28 19:03:18,355 WARN L170 areAnnotationChecker]: L378-6 has no Hoare annotation [2020-07-28 19:03:18,355 WARN L170 areAnnotationChecker]: L378-6 has no Hoare annotation [2020-07-28 19:03:18,356 WARN L170 areAnnotationChecker]: L473-5 has no Hoare annotation [2020-07-28 19:03:18,356 WARN L170 areAnnotationChecker]: L473-5 has no Hoare annotation [2020-07-28 19:03:18,356 WARN L170 areAnnotationChecker]: L235-3 has no Hoare annotation [2020-07-28 19:03:18,356 WARN L170 areAnnotationChecker]: L235-3 has no Hoare annotation [2020-07-28 19:03:18,356 WARN L170 areAnnotationChecker]: L359-23 has no Hoare annotation [2020-07-28 19:03:18,356 WARN L170 areAnnotationChecker]: L908 has no Hoare annotation [2020-07-28 19:03:18,356 WARN L170 areAnnotationChecker]: L908 has no Hoare annotation [2020-07-28 19:03:18,356 WARN L170 areAnnotationChecker]: L512-2 has no Hoare annotation [2020-07-28 19:03:18,356 WARN L170 areAnnotationChecker]: L512-2 has no Hoare annotation [2020-07-28 19:03:18,357 WARN L170 areAnnotationChecker]: L257 has no Hoare annotation [2020-07-28 19:03:18,357 WARN L170 areAnnotationChecker]: L257 has no Hoare annotation [2020-07-28 19:03:18,358 WARN L170 areAnnotationChecker]: L378-8 has no Hoare annotation [2020-07-28 19:03:18,358 WARN L170 areAnnotationChecker]: L359-15 has no Hoare annotation [2020-07-28 19:03:18,358 WARN L170 areAnnotationChecker]: L205-6 has no Hoare annotation [2020-07-28 19:03:18,359 WARN L170 areAnnotationChecker]: L205-6 has no Hoare annotation [2020-07-28 19:03:18,359 WARN L170 areAnnotationChecker]: L209-7 has no Hoare annotation [2020-07-28 19:03:18,359 WARN L170 areAnnotationChecker]: L908-1 has no Hoare annotation [2020-07-28 19:03:18,359 WARN L170 areAnnotationChecker]: L908-1 has no Hoare annotation [2020-07-28 19:03:18,359 WARN L170 areAnnotationChecker]: L44-1 has no Hoare annotation [2020-07-28 19:03:18,359 WARN L170 areAnnotationChecker]: L44-1 has no Hoare annotation [2020-07-28 19:03:18,361 WARN L170 areAnnotationChecker]: L231-1 has no Hoare annotation [2020-07-28 19:03:18,361 WARN L170 areAnnotationChecker]: L231-1 has no Hoare annotation [2020-07-28 19:03:18,361 WARN L170 areAnnotationChecker]: L502 has no Hoare annotation [2020-07-28 19:03:18,361 WARN L170 areAnnotationChecker]: L235-2 has no Hoare annotation [2020-07-28 19:03:18,361 WARN L170 areAnnotationChecker]: L359-15 has no Hoare annotation [2020-07-28 19:03:18,361 WARN L170 areAnnotationChecker]: L359-15 has no Hoare annotation [2020-07-28 19:03:18,361 WARN L170 areAnnotationChecker]: L473-6 has no Hoare annotation [2020-07-28 19:03:18,362 WARN L170 areAnnotationChecker]: L473-6 has no Hoare annotation [2020-07-28 19:03:18,362 WARN L170 areAnnotationChecker]: L209-7 has no Hoare annotation [2020-07-28 19:03:18,362 WARN L170 areAnnotationChecker]: L209-7 has no Hoare annotation [2020-07-28 19:03:18,362 WARN L170 areAnnotationChecker]: L396-6 has no Hoare annotation [2020-07-28 19:03:18,362 WARN L170 areAnnotationChecker]: L396-6 has no Hoare annotation [2020-07-28 19:03:18,362 WARN L170 areAnnotationChecker]: L257-2 has no Hoare annotation [2020-07-28 19:03:18,362 WARN L170 areAnnotationChecker]: L261 has no Hoare annotation [2020-07-28 19:03:18,363 WARN L170 areAnnotationChecker]: L378-3 has no Hoare annotation [2020-07-28 19:03:18,363 WARN L170 areAnnotationChecker]: L205-3 has no Hoare annotation [2020-07-28 19:03:18,363 WARN L170 areAnnotationChecker]: L205-3 has no Hoare annotation [2020-07-28 19:03:18,363 WARN L170 areAnnotationChecker]: L502 has no Hoare annotation [2020-07-28 19:03:18,363 WARN L170 areAnnotationChecker]: L502 has no Hoare annotation [2020-07-28 19:03:18,363 WARN L170 areAnnotationChecker]: L235-2 has no Hoare annotation [2020-07-28 19:03:18,363 WARN L170 areAnnotationChecker]: L235-2 has no Hoare annotation [2020-07-28 19:03:18,364 WARN L170 areAnnotationChecker]: L359-17 has no Hoare annotation [2020-07-28 19:03:18,364 WARN L170 areAnnotationChecker]: L359-18 has no Hoare annotation [2020-07-28 19:03:18,364 WARN L170 areAnnotationChecker]: L257-2 has no Hoare annotation [2020-07-28 19:03:18,364 WARN L170 areAnnotationChecker]: L257-2 has no Hoare annotation [2020-07-28 19:03:18,364 WARN L170 areAnnotationChecker]: L261 has no Hoare annotation [2020-07-28 19:03:18,364 WARN L170 areAnnotationChecker]: L261 has no Hoare annotation [2020-07-28 19:03:18,364 WARN L170 areAnnotationChecker]: L378-3 has no Hoare annotation [2020-07-28 19:03:18,364 WARN L170 areAnnotationChecker]: L378-3 has no Hoare annotation [2020-07-28 19:03:18,365 WARN L170 areAnnotationChecker]: L473-3 has no Hoare annotation [2020-07-28 19:03:18,365 WARN L170 areAnnotationChecker]: L473-3 has no Hoare annotation [2020-07-28 19:03:18,365 WARN L170 areAnnotationChecker]: L508 has no Hoare annotation [2020-07-28 19:03:18,365 WARN L170 areAnnotationChecker]: L205-4 has no Hoare annotation [2020-07-28 19:03:18,365 WARN L170 areAnnotationChecker]: L205-4 has no Hoare annotation [2020-07-28 19:03:18,365 WARN L170 areAnnotationChecker]: L209-5 has no Hoare annotation [2020-07-28 19:03:18,365 WARN L170 areAnnotationChecker]: L359-18 has no Hoare annotation [2020-07-28 19:03:18,365 WARN L170 areAnnotationChecker]: L359-18 has no Hoare annotation [2020-07-28 19:03:18,365 WARN L170 areAnnotationChecker]: L231-5 has no Hoare annotation [2020-07-28 19:03:18,365 WARN L170 areAnnotationChecker]: L231-5 has no Hoare annotation [2020-07-28 19:03:18,366 WARN L170 areAnnotationChecker]: L502-4 has no Hoare annotation [2020-07-28 19:03:18,366 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2020-07-28 19:03:18,366 WARN L170 areAnnotationChecker]: L231 has no Hoare annotation [2020-07-28 19:03:18,366 WARN L170 areAnnotationChecker]: L378-5 has no Hoare annotation [2020-07-28 19:03:18,366 WARN L170 areAnnotationChecker]: L359-9 has no Hoare annotation [2020-07-28 19:03:18,366 WARN L170 areAnnotationChecker]: L508 has no Hoare annotation [2020-07-28 19:03:18,366 WARN L170 areAnnotationChecker]: L508 has no Hoare annotation [2020-07-28 19:03:18,366 WARN L170 areAnnotationChecker]: L473-4 has no Hoare annotation [2020-07-28 19:03:18,366 WARN L170 areAnnotationChecker]: L473-4 has no Hoare annotation [2020-07-28 19:03:18,366 WARN L170 areAnnotationChecker]: L209-5 has no Hoare annotation [2020-07-28 19:03:18,366 WARN L170 areAnnotationChecker]: L209-5 has no Hoare annotation [2020-07-28 19:03:18,366 WARN L170 areAnnotationChecker]: L359-20 has no Hoare annotation [2020-07-28 19:03:18,367 WARN L170 areAnnotationChecker]: L261-2 has no Hoare annotation [2020-07-28 19:03:18,367 WARN L170 areAnnotationChecker]: L378-15 has no Hoare annotation [2020-07-28 19:03:18,367 WARN L170 areAnnotationChecker]: L205-11 has no Hoare annotation [2020-07-28 19:03:18,367 WARN L170 areAnnotationChecker]: L205-11 has no Hoare annotation [2020-07-28 19:03:18,367 WARN L170 areAnnotationChecker]: L502-4 has no Hoare annotation [2020-07-28 19:03:18,367 WARN L170 areAnnotationChecker]: L502-4 has no Hoare annotation [2020-07-28 19:03:18,367 WARN L170 areAnnotationChecker]: L378 has no Hoare annotation [2020-07-28 19:03:18,367 WARN L170 areAnnotationChecker]: L205-1 has no Hoare annotation [2020-07-28 19:03:18,367 WARN L170 areAnnotationChecker]: L205-1 has no Hoare annotation [2020-07-28 19:03:18,367 WARN L170 areAnnotationChecker]: L235-1 has no Hoare annotation [2020-07-28 19:03:18,367 WARN L170 areAnnotationChecker]: L359-9 has no Hoare annotation [2020-07-28 19:03:18,367 WARN L170 areAnnotationChecker]: L359-9 has no Hoare annotation [2020-07-28 19:03:18,368 WARN L170 areAnnotationChecker]: L512 has no Hoare annotation [2020-07-28 19:03:18,368 WARN L170 areAnnotationChecker]: L359-12 has no Hoare annotation [2020-07-28 19:03:18,368 WARN L170 areAnnotationChecker]: L209-6 has no Hoare annotation [2020-07-28 19:03:18,368 WARN L170 areAnnotationChecker]: L261-2 has no Hoare annotation [2020-07-28 19:03:18,368 WARN L170 areAnnotationChecker]: L261-2 has no Hoare annotation [2020-07-28 19:03:18,368 WARN L170 areAnnotationChecker]: L378-15 has no Hoare annotation [2020-07-28 19:03:18,368 WARN L170 areAnnotationChecker]: L378-15 has no Hoare annotation [2020-07-28 19:03:18,368 WARN L170 areAnnotationChecker]: L473-11 has no Hoare annotation [2020-07-28 19:03:18,368 WARN L170 areAnnotationChecker]: L473-11 has no Hoare annotation [2020-07-28 19:03:18,368 WARN L170 areAnnotationChecker]: L508-4 has no Hoare annotation [2020-07-28 19:03:18,368 WARN L170 areAnnotationChecker]: L378 has no Hoare annotation [2020-07-28 19:03:18,368 WARN L170 areAnnotationChecker]: L378 has no Hoare annotation [2020-07-28 19:03:18,369 WARN L170 areAnnotationChecker]: L473-1 has no Hoare annotation [2020-07-28 19:03:18,369 WARN L170 areAnnotationChecker]: L473-1 has no Hoare annotation [2020-07-28 19:03:18,369 WARN L170 areAnnotationChecker]: L235-1 has no Hoare annotation [2020-07-28 19:03:18,369 WARN L170 areAnnotationChecker]: L235-1 has no Hoare annotation [2020-07-28 19:03:18,369 WARN L170 areAnnotationChecker]: L359-11 has no Hoare annotation [2020-07-28 19:03:18,369 WARN L170 areAnnotationChecker]: L512 has no Hoare annotation [2020-07-28 19:03:18,369 WARN L170 areAnnotationChecker]: L512 has no Hoare annotation [2020-07-28 19:03:18,369 WARN L170 areAnnotationChecker]: L359-12 has no Hoare annotation [2020-07-28 19:03:18,369 WARN L170 areAnnotationChecker]: L359-12 has no Hoare annotation [2020-07-28 19:03:18,369 WARN L170 areAnnotationChecker]: L209-6 has no Hoare annotation [2020-07-28 19:03:18,369 WARN L170 areAnnotationChecker]: L209-6 has no Hoare annotation [2020-07-28 19:03:18,369 WARN L170 areAnnotationChecker]: L231-4 has no Hoare annotation [2020-07-28 19:03:18,370 WARN L170 areAnnotationChecker]: L231-4 has no Hoare annotation [2020-07-28 19:03:18,370 WARN L170 areAnnotationChecker]: L378-17 has no Hoare annotation [2020-07-28 19:03:18,370 WARN L170 areAnnotationChecker]: L359-33 has no Hoare annotation [2020-07-28 19:03:18,370 WARN L170 areAnnotationChecker]: L508-4 has no Hoare annotation [2020-07-28 19:03:18,370 WARN L170 areAnnotationChecker]: L508-4 has no Hoare annotation [2020-07-28 19:03:18,370 WARN L170 areAnnotationChecker]: L378-2 has no Hoare annotation [2020-07-28 19:03:18,370 WARN L170 areAnnotationChecker]: L359-3 has no Hoare annotation [2020-07-28 19:03:18,370 WARN L170 areAnnotationChecker]: L205-2 has no Hoare annotation [2020-07-28 19:03:18,370 WARN L170 areAnnotationChecker]: L205-2 has no Hoare annotation [2020-07-28 19:03:18,370 WARN L170 areAnnotationChecker]: L209-3 has no Hoare annotation [2020-07-28 19:03:18,370 WARN L170 areAnnotationChecker]: L44 has no Hoare annotation [2020-07-28 19:03:18,370 WARN L170 areAnnotationChecker]: L44 has no Hoare annotation [2020-07-28 19:03:18,371 WARN L170 areAnnotationChecker]: L359-14 has no Hoare annotation [2020-07-28 19:03:18,371 WARN L170 areAnnotationChecker]: L378-12 has no Hoare annotation [2020-07-28 19:03:18,371 WARN L170 areAnnotationChecker]: L205-9 has no Hoare annotation [2020-07-28 19:03:18,371 WARN L170 areAnnotationChecker]: L205-9 has no Hoare annotation [2020-07-28 19:03:18,371 WARN L170 areAnnotationChecker]: L235-5 has no Hoare annotation [2020-07-28 19:03:18,371 WARN L170 areAnnotationChecker]: L359-33 has no Hoare annotation [2020-07-28 19:03:18,371 WARN L170 areAnnotationChecker]: L359-33 has no Hoare annotation [2020-07-28 19:03:18,371 WARN L170 areAnnotationChecker]: L512-4 has no Hoare annotation [2020-07-28 19:03:18,371 WARN L170 areAnnotationChecker]: L235 has no Hoare annotation [2020-07-28 19:03:18,371 WARN L170 areAnnotationChecker]: L359-3 has no Hoare annotation [2020-07-28 19:03:18,371 WARN L170 areAnnotationChecker]: L359-3 has no Hoare annotation [2020-07-28 19:03:18,371 WARN L170 areAnnotationChecker]: L473-2 has no Hoare annotation [2020-07-28 19:03:18,372 WARN L170 areAnnotationChecker]: L473-2 has no Hoare annotation [2020-07-28 19:03:18,372 WARN L170 areAnnotationChecker]: L209-3 has no Hoare annotation [2020-07-28 19:03:18,372 WARN L170 areAnnotationChecker]: L209-3 has no Hoare annotation [2020-07-28 19:03:18,372 WARN L170 areAnnotationChecker]: L209-4 has no Hoare annotation [2020-07-28 19:03:18,372 WARN L170 areAnnotationChecker]: L378-12 has no Hoare annotation [2020-07-28 19:03:18,372 WARN L170 areAnnotationChecker]: L378-12 has no Hoare annotation [2020-07-28 19:03:18,372 WARN L170 areAnnotationChecker]: L473-9 has no Hoare annotation [2020-07-28 19:03:18,372 WARN L170 areAnnotationChecker]: L473-9 has no Hoare annotation [2020-07-28 19:03:18,372 WARN L170 areAnnotationChecker]: L235-5 has no Hoare annotation [2020-07-28 19:03:18,372 WARN L170 areAnnotationChecker]: L235-5 has no Hoare annotation [2020-07-28 19:03:18,372 WARN L170 areAnnotationChecker]: L359-35 has no Hoare annotation [2020-07-28 19:03:18,372 WARN L170 areAnnotationChecker]: L512-4 has no Hoare annotation [2020-07-28 19:03:18,372 WARN L170 areAnnotationChecker]: L512-4 has no Hoare annotation [2020-07-28 19:03:18,373 WARN L170 areAnnotationChecker]: L235 has no Hoare annotation [2020-07-28 19:03:18,373 WARN L170 areAnnotationChecker]: L235 has no Hoare annotation [2020-07-28 19:03:18,373 WARN L170 areAnnotationChecker]: L359-5 has no Hoare annotation [2020-07-28 19:03:18,373 WARN L170 areAnnotationChecker]: L359-6 has no Hoare annotation [2020-07-28 19:03:18,373 WARN L170 areAnnotationChecker]: L209-4 has no Hoare annotation [2020-07-28 19:03:18,373 WARN L170 areAnnotationChecker]: L209-4 has no Hoare annotation [2020-07-28 19:03:18,373 WARN L170 areAnnotationChecker]: L378-14 has no Hoare annotation [2020-07-28 19:03:18,373 WARN L170 areAnnotationChecker]: L359-27 has no Hoare annotation [2020-07-28 19:03:18,373 WARN L170 areAnnotationChecker]: L205-10 has no Hoare annotation [2020-07-28 19:03:18,374 WARN L170 areAnnotationChecker]: L205-10 has no Hoare annotation [2020-07-28 19:03:18,374 WARN L170 areAnnotationChecker]: L209-11 has no Hoare annotation [2020-07-28 19:03:18,374 WARN L170 areAnnotationChecker]: L44-2 has no Hoare annotation [2020-07-28 19:03:18,374 WARN L170 areAnnotationChecker]: L44-2 has no Hoare annotation [2020-07-28 19:03:18,374 WARN L170 areAnnotationChecker]: L205 has no Hoare annotation [2020-07-28 19:03:18,374 WARN L170 areAnnotationChecker]: L205 has no Hoare annotation [2020-07-28 19:03:18,374 WARN L170 areAnnotationChecker]: L209-1 has no Hoare annotation [2020-07-28 19:03:18,374 WARN L170 areAnnotationChecker]: L359-6 has no Hoare annotation [2020-07-28 19:03:18,374 WARN L170 areAnnotationChecker]: L359-6 has no Hoare annotation [2020-07-28 19:03:18,374 WARN L170 areAnnotationChecker]: L235-4 has no Hoare annotation [2020-07-28 19:03:18,374 WARN L170 areAnnotationChecker]: L359-27 has no Hoare annotation [2020-07-28 19:03:18,374 WARN L170 areAnnotationChecker]: L359-27 has no Hoare annotation [2020-07-28 19:03:18,375 WARN L170 areAnnotationChecker]: L473-10 has no Hoare annotation [2020-07-28 19:03:18,375 WARN L170 areAnnotationChecker]: L473-10 has no Hoare annotation [2020-07-28 19:03:18,375 WARN L170 areAnnotationChecker]: L209-11 has no Hoare annotation [2020-07-28 19:03:18,375 WARN L170 areAnnotationChecker]: L209-11 has no Hoare annotation [2020-07-28 19:03:18,375 WARN L170 areAnnotationChecker]: L473 has no Hoare annotation [2020-07-28 19:03:18,375 WARN L170 areAnnotationChecker]: L473 has no Hoare annotation [2020-07-28 19:03:18,375 WARN L170 areAnnotationChecker]: L209-1 has no Hoare annotation [2020-07-28 19:03:18,375 WARN L170 areAnnotationChecker]: L209-1 has no Hoare annotation [2020-07-28 19:03:18,375 WARN L170 areAnnotationChecker]: L359-8 has no Hoare annotation [2020-07-28 19:03:18,375 WARN L170 areAnnotationChecker]: L235-4 has no Hoare annotation [2020-07-28 19:03:18,375 WARN L170 areAnnotationChecker]: L235-4 has no Hoare annotation [2020-07-28 19:03:18,375 WARN L170 areAnnotationChecker]: L359-29 has no Hoare annotation [2020-07-28 19:03:18,376 WARN L170 areAnnotationChecker]: L359-30 has no Hoare annotation [2020-07-28 19:03:18,376 WARN L170 areAnnotationChecker]: L359 has no Hoare annotation [2020-07-28 19:03:18,376 WARN L170 areAnnotationChecker]: L209-2 has no Hoare annotation [2020-07-28 19:03:18,376 WARN L170 areAnnotationChecker]: L205-8 has no Hoare annotation [2020-07-28 19:03:18,376 WARN L170 areAnnotationChecker]: L205-8 has no Hoare annotation [2020-07-28 19:03:18,376 WARN L170 areAnnotationChecker]: L209-9 has no Hoare annotation [2020-07-28 19:03:18,376 WARN L170 areAnnotationChecker]: L359-30 has no Hoare annotation [2020-07-28 19:03:18,376 WARN L170 areAnnotationChecker]: L359-30 has no Hoare annotation [2020-07-28 19:03:18,376 WARN L170 areAnnotationChecker]: L359 has no Hoare annotation [2020-07-28 19:03:18,376 WARN L170 areAnnotationChecker]: L359 has no Hoare annotation [2020-07-28 19:03:18,376 WARN L170 areAnnotationChecker]: L209-2 has no Hoare annotation [2020-07-28 19:03:18,377 WARN L170 areAnnotationChecker]: L209-2 has no Hoare annotation [2020-07-28 19:03:18,377 WARN L170 areAnnotationChecker]: L473-8 has no Hoare annotation [2020-07-28 19:03:18,377 WARN L170 areAnnotationChecker]: L473-8 has no Hoare annotation [2020-07-28 19:03:18,377 WARN L170 areAnnotationChecker]: L209-9 has no Hoare annotation [2020-07-28 19:03:18,377 WARN L170 areAnnotationChecker]: L209-9 has no Hoare annotation [2020-07-28 19:03:18,377 WARN L170 areAnnotationChecker]: L359-32 has no Hoare annotation [2020-07-28 19:03:18,377 WARN L170 areAnnotationChecker]: L359-2 has no Hoare annotation [2020-07-28 19:03:18,377 WARN L170 areAnnotationChecker]: L359-24 has no Hoare annotation [2020-07-28 19:03:18,377 WARN L170 areAnnotationChecker]: L209-10 has no Hoare annotation [2020-07-28 19:03:18,377 WARN L170 areAnnotationChecker]: L209 has no Hoare annotation [2020-07-28 19:03:18,377 WARN L170 areAnnotationChecker]: L359-24 has no Hoare annotation [2020-07-28 19:03:18,378 WARN L170 areAnnotationChecker]: L359-24 has no Hoare annotation [2020-07-28 19:03:18,378 WARN L170 areAnnotationChecker]: L209-10 has no Hoare annotation [2020-07-28 19:03:18,378 WARN L170 areAnnotationChecker]: L209-10 has no Hoare annotation [2020-07-28 19:03:18,378 WARN L170 areAnnotationChecker]: L209 has no Hoare annotation [2020-07-28 19:03:18,378 WARN L170 areAnnotationChecker]: L209 has no Hoare annotation [2020-07-28 19:03:18,378 WARN L170 areAnnotationChecker]: L359-26 has no Hoare annotation [2020-07-28 19:03:18,378 WARN L170 areAnnotationChecker]: L209-8 has no Hoare annotation [2020-07-28 19:03:18,378 WARN L170 areAnnotationChecker]: L209-8 has no Hoare annotation [2020-07-28 19:03:18,378 WARN L170 areAnnotationChecker]: L209-8 has no Hoare annotation [2020-07-28 19:03:18,378 INFO L163 areAnnotationChecker]: CFG has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:03:18,448 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:03:18 BoogieIcfgContainer [2020-07-28 19:03:18,449 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:03:18,449 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:03:18,449 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:03:18,450 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:03:18,450 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:02:00" (3/4) ... [2020-07-28 19:03:18,454 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:03:18,477 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:03:18,479 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:03:18,481 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:03:18,482 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:03:18,484 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:03:18,486 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:03:18,488 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:03:18,524 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == methaneLevelCritical && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && 1 == systemActive [2020-07-28 19:03:18,524 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == methaneLevelCritical && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && 1 == systemActive [2020-07-28 19:03:18,525 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((((1 == \result && 2 <= waterLevel) && !(0 == tmp)) && 1 == tmp) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == tmp) && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((((((0 == tmp && 0 == tmp) && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && tmp___0 <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || (((((((((((((1 == \result && 0 == tmp) && 0 == tmp) && 1 == tmp) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 1 == systemActive) && \result <= 1)) || ((((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == tmp) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive) [2020-07-28 19:03:18,525 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((1 == \result && 1 == tmp) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || (((((((1 == \result && 1 == tmp) && 1 == methaneLevelCritical) && ((((((2 <= waterLevel && 0 == splverifierCounter) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || (((((0 == splverifierCounter && 1 == waterLevel) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning))) && 1 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1)) || ((((((((((((((((0 == tmp && 0 == tmp) && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && tmp___0 <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((1 == \result && 2 <= waterLevel) && 1 == tmp) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && waterLevel <= 2) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || (((((((((((((1 == \result && 0 == tmp) && 0 == tmp) && 1 == tmp) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || (((((((0 == methaneLevelCritical && ((((((2 <= waterLevel && 0 == splverifierCounter) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || (((((0 == splverifierCounter && 1 == waterLevel) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning))) && 1 == \result) && waterLevel <= 2) && !(0 == \result)) && 0 == tmp) && !(0 == tmp___0)) && 0 == \result)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 0 == tmp) && 0 == pumpRunning) && tmp___0 <= 1) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 1 == systemActive) && \result <= 1) [2020-07-28 19:03:18,526 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == methaneLevelCritical && ((((((2 <= waterLevel && 0 == splverifierCounter) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || (((((0 == splverifierCounter && 1 == waterLevel) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning))) && 1 == \result) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) || (((((0 == methaneLevelCritical && ((((((2 <= waterLevel && 0 == splverifierCounter) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || (((((0 == splverifierCounter && 1 == waterLevel) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning))) && 1 == \result) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0))) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((((((0 == tmp && 0 == tmp) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && !(0 == \result)) && !(0 == tmp___0)) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning)) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((((((0 == methaneLevelCritical && 0 == tmp) && 0 == tmp) && 0 == splverifierCounter) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) [2020-07-28 19:03:18,527 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning)) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:03:18,527 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((0 == tmp && 0 == tmp) && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((2 <= waterLevel && !(0 == tmp)) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || ((((((((((((1 == \result && 0 == tmp) && 0 == tmp) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning) [2020-07-28 19:03:18,529 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((1 == \result && 2 <= waterLevel) && !(0 == tmp)) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning) || (((((((((((((0 == tmp && 0 == tmp) && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 0 == tmp) && 1 == pumpRunning)) || (((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 1 == systemActive)) || ((((((((((((1 == \result && 0 == tmp) && 0 == tmp) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || (((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) [2020-07-28 19:03:18,530 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == systemActive) && 1 == pumpRunning) [2020-07-28 19:03:18,531 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || (((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == systemActive) && 1 == pumpRunning) [2020-07-28 19:03:18,532 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 1 == systemActive) && \result <= 1) || (((((((((((((((0 == tmp && 0 == tmp) && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == tmp) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) [2020-07-28 19:03:18,532 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0 == methaneLevelCritical && 1 == \result) && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || ((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || ((((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:03:18,534 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && !(0 == tmp___0)) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) || ((((((((((1 == \result && 0 == tmp___0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == tmp) && 1 == systemActive)) || ((((((((((0 == methaneLevelCritical && 1 == \result) && 0 == tmp___0) && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == tmp) && 1 == systemActive)) || (((((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && !(0 == \result)) && 0 == \result) && !(0 == tmp___0)) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) [2020-07-28 19:03:18,534 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && tmp___0 <= 2) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == tmp) && 1 == \result) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 0 == tmp) && 1 < tmp___0) && 1 == pumpRunning [2020-07-28 19:03:18,535 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == \result && 0 == tmp) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || ((((((((((((0 == tmp && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) [2020-07-28 19:03:18,536 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == \result && 0 == tmp) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || ((((((((((((0 == tmp && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) [2020-07-28 19:03:18,635 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:03:18,636 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:03:18,638 INFO L168 Benchmark]: Toolchain (without parser) took 80622.36 ms. Allocated memory was 1.0 GB in the beginning and 2.0 GB in the end (delta: 973.1 MB). Free memory was 960.2 MB in the beginning and 1.8 GB in the end (delta: -849.6 MB). Peak memory consumption was 123.5 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:18,638 INFO L168 Benchmark]: CDTParser took 0.20 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:03:18,639 INFO L168 Benchmark]: CACSL2BoogieTranslator took 685.40 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 140.0 MB). Free memory was 954.9 MB in the beginning and 1.1 GB in the end (delta: -159.6 MB). Peak memory consumption was 20.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:18,639 INFO L168 Benchmark]: Boogie Procedure Inliner took 109.95 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:18,640 INFO L168 Benchmark]: Boogie Preprocessor took 67.67 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:03:18,640 INFO L168 Benchmark]: RCFGBuilder took 1969.21 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 868.0 MB in the end (delta: 239.9 MB). Peak memory consumption was 239.9 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:18,640 INFO L168 Benchmark]: TraceAbstraction took 77594.85 ms. Allocated memory was 1.2 GB in the beginning and 2.0 GB in the end (delta: 833.1 MB). Free memory was 868.0 MB in the beginning and 1.8 GB in the end (delta: -964.8 MB). There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:03:18,641 INFO L168 Benchmark]: Witness Printer took 186.78 ms. Allocated memory is still 2.0 GB. Free memory was 1.8 GB in the beginning and 1.8 GB in the end (delta: 23.0 MB). Peak memory consumption was 23.0 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:18,644 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 685.40 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 140.0 MB). Free memory was 954.9 MB in the beginning and 1.1 GB in the end (delta: -159.6 MB). Peak memory consumption was 20.7 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 109.95 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 67.67 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 1969.21 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 868.0 MB in the end (delta: 239.9 MB). Peak memory consumption was 239.9 MB. Max. memory is 11.5 GB. * TraceAbstraction took 77594.85 ms. Allocated memory was 1.2 GB in the beginning and 2.0 GB in the end (delta: 833.1 MB). Free memory was 868.0 MB in the beginning and 1.8 GB in the end (delta: -964.8 MB). There was no memory consumed. Max. memory is 11.5 GB. * Witness Printer took 186.78 ms. Allocated memory is still 2.0 GB. Free memory was 1.8 GB in the beginning and 1.8 GB in the end (delta: 23.0 MB). Peak memory consumption was 23.0 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 44]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 44]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 44]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 305]: Loop Invariant Derived loop invariant: ((((((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && tmp___0 <= 2) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == tmp) && 1 == \result) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 0 == tmp) && 1 < tmp___0) && 1 == pumpRunning - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 305]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: (((((((((((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && !(0 == tmp___0)) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) || ((((((((((1 == \result && 0 == tmp___0) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == tmp) && 1 == systemActive)) || ((((((((((0 == methaneLevelCritical && 1 == \result) && 0 == tmp___0) && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == tmp) && 1 == systemActive)) || (((((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && !(0 == \result)) && 0 == \result) && !(0 == tmp___0)) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) - InvariantResult [Line: 369]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 369]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 369]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 369]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((((((((((1 == \result && 2 <= waterLevel) && !(0 == tmp)) && 1 == tmp) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == tmp) && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((((((0 == tmp && 0 == tmp) && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && tmp___0 <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || (((((((((((((1 == \result && 0 == tmp) && 0 == tmp) && 1 == tmp) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && tmp___0 <= 1) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 1 == systemActive) && \result <= 1)) || ((((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == tmp) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive) - InvariantResult [Line: 965]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 180]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 100]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 180]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 369]: Loop Invariant Derived loop invariant: (((((((((((1 == \result && 0 == tmp) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || ((((((((((((0 == tmp && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) - InvariantResult [Line: 180]: Loop Invariant Derived loop invariant: (((((((((((((((((0 == tmp && 0 == tmp) && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((2 <= waterLevel && !(0 == tmp)) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || ((((((((((((1 == \result && 0 == tmp) && 0 == tmp) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning) - InvariantResult [Line: 369]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 460]: Loop Invariant Derived loop invariant: ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 1 == systemActive) && \result <= 1) || (((((((((((((((0 == tmp && 0 == tmp) && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == tmp) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) - InvariantResult [Line: 904]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 121]: Loop Invariant Derived loop invariant: (((((((((1 == methaneLevelCritical && ((((((2 <= waterLevel && 0 == splverifierCounter) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || (((((0 == splverifierCounter && 1 == waterLevel) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning))) && 1 == \result) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) || (((((0 == methaneLevelCritical && ((((((2 <= waterLevel && 0 == splverifierCounter) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || (((((0 == splverifierCounter && 1 == waterLevel) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning))) && 1 == \result) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0))) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((((((0 == tmp && 0 == tmp) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && !(0 == \result)) && !(0 == tmp___0)) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning)) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((((((0 == methaneLevelCritical && 0 == tmp) && 0 == tmp) && 0 == splverifierCounter) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) - InvariantResult [Line: 460]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 460]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 483]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 483]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 948]: Loop Invariant Derived loop invariant: ((((0 == methaneLevelCritical && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && 1 == systemActive - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 77]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 294]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 483]: Loop Invariant Derived loop invariant: (((((((((((1 == \result && 0 == tmp) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || ((((((((((((0 == tmp && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) - InvariantResult [Line: 294]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 483]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: ((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == systemActive) && 1 == pumpRunning) - InvariantResult [Line: 483]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 172]: Loop Invariant Derived loop invariant: (((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning)) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 294]: Loop Invariant Derived loop invariant: ((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || (((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == systemActive) && 1 == pumpRunning) - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: (((((((((((((((((1 == \result && 2 <= waterLevel) && !(0 == tmp)) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning) || (((((((((((((0 == tmp && 0 == tmp) && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 0 == tmp) && 1 == pumpRunning)) || (((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 1 == systemActive)) || ((((((((((((1 == \result && 0 == tmp) && 0 == tmp) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || (((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) - InvariantResult [Line: 111]: Loop Invariant Derived loop invariant: (((((((((((((((1 == \result && 1 == tmp) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || (((((((1 == \result && 1 == tmp) && 1 == methaneLevelCritical) && ((((((2 <= waterLevel && 0 == splverifierCounter) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || (((((0 == splverifierCounter && 1 == waterLevel) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning))) && 1 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1)) || ((((((((((((((((0 == tmp && 0 == tmp) && 0 == \result) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && tmp___0 <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || ((((((((((((1 == \result && 2 <= waterLevel) && 1 == tmp) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && waterLevel <= 2) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || (((((((((((((1 == \result && 0 == tmp) && 0 == tmp) && 1 == tmp) && 1 == methaneLevelCritical) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || (((((((0 == methaneLevelCritical && ((((((2 <= waterLevel && 0 == splverifierCounter) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning) || (((((0 == splverifierCounter && 1 == waterLevel) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) && 1 == pumpRunning))) && 1 == \result) && waterLevel <= 2) && !(0 == \result)) && 0 == tmp) && !(0 == tmp___0)) && 0 == \result)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 0 == tmp) && 0 == pumpRunning) && tmp___0 <= 1) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 1 == systemActive) && \result <= 1) - InvariantResult [Line: 483]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 428]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 975]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 305]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: (((((((((0 == methaneLevelCritical && 1 == \result) && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || ((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || ((((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 350]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 469]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 195 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 50.4s, OverallIterations: 17, TraceHistogramMax: 2, AutomataDifference: 37.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 26.9s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 2269 SDtfs, 3619 SDslu, 4066 SDs, 0 SdLazy, 618 SolverSat, 108 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.0s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 250 GetRequests, 155 SyntacticMatches, 0 SemanticMatches, 95 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 67 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=422occurred in iteration=16, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 8.0s AutomataMinimizationTime, 17 MinimizatonAttempts, 3221 StatesRemovedByMinimization, 13 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 69 LocationsWithAnnotation, 69 PreInvPairs, 425 NumberOfFragments, 2312 HoareAnnotationTreeSize, 69 FomulaSimplifications, 229885442 FormulaSimplificationTreeSizeReduction, 4.9s HoareSimplificationTime, 69 FomulaSimplificationsInter, 27477297 FormulaSimplificationTreeSizeReductionInter, 21.8s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 2.0s InterpolantComputationTime, 787 NumberOfCodeBlocks, 787 NumberOfCodeBlocksAsserted, 19 NumberOfCheckSat, 768 ConstructedInterpolants, 0 QuantifiedInterpolants, 73206 SizeOfPredicates, 8 NumberOfNonLiveVariables, 845 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 19 InterpolantComputations, 15 PerfectInterpolantSequences, 120/132 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...