./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 59e8ffce74c1b6945f19c84278937c63a4a3dd33 ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:01:57,113 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:01:57,115 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:01:57,128 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:01:57,128 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:01:57,130 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:01:57,131 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:01:57,134 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:01:57,136 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:01:57,137 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:01:57,138 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:01:57,140 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:01:57,140 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:01:57,141 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:01:57,143 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:01:57,144 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:01:57,146 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:01:57,147 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:01:57,149 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:01:57,151 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:01:57,153 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:01:57,154 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:01:57,156 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:01:57,157 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:01:57,160 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:01:57,160 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:01:57,161 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:01:57,162 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:01:57,162 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:01:57,163 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:01:57,164 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:01:57,165 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:01:57,166 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:01:57,167 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:01:57,168 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:01:57,168 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:01:57,169 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:01:57,169 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:01:57,169 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:01:57,171 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:01:57,171 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:01:57,172 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:01:57,187 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:01:57,188 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:01:57,189 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:01:57,189 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:01:57,190 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:01:57,190 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:01:57,190 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:01:57,191 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:01:57,191 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:01:57,191 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:01:57,192 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:01:57,192 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:01:57,192 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:01:57,192 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:01:57,193 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:01:57,193 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:01:57,193 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:01:57,194 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:01:57,194 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:01:57,194 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:01:57,195 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:01:57,195 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:01:57,195 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:01:57,196 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:01:57,196 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:01:57,196 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:01:57,197 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:01:57,197 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:01:57,197 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:01:57,197 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 59e8ffce74c1b6945f19c84278937c63a4a3dd33 [2020-07-28 19:01:57,551 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:01:57,570 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:01:57,573 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:01:57,575 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:01:57,576 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:01:57,577 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c [2020-07-28 19:01:57,644 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/49d4bf67e/c050f8548dd642deb796602a200bcd03/FLAG4551cfe33 [2020-07-28 19:01:58,097 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:01:58,097 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product54.cil.c [2020-07-28 19:01:58,110 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/49d4bf67e/c050f8548dd642deb796602a200bcd03/FLAG4551cfe33 [2020-07-28 19:01:58,438 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/49d4bf67e/c050f8548dd642deb796602a200bcd03 [2020-07-28 19:01:58,442 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:01:58,444 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:01:58,446 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:01:58,446 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:01:58,449 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:01:58,451 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:01:58" (1/1) ... [2020-07-28 19:01:58,454 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@e8b4eb2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:58, skipping insertion in model container [2020-07-28 19:01:58,454 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:01:58" (1/1) ... [2020-07-28 19:01:58,463 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:01:58,506 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:01:58,934 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:01:58,955 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:01:59,147 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:01:59,183 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:01:59,184 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:59 WrapperNode [2020-07-28 19:01:59,184 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:01:59,185 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:01:59,185 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:01:59,185 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:01:59,194 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:59" (1/1) ... [2020-07-28 19:01:59,214 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:59" (1/1) ... [2020-07-28 19:01:59,283 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:01:59,284 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:01:59,284 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:01:59,284 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:01:59,294 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:59" (1/1) ... [2020-07-28 19:01:59,295 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:59" (1/1) ... [2020-07-28 19:01:59,301 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:59" (1/1) ... [2020-07-28 19:01:59,302 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:59" (1/1) ... [2020-07-28 19:01:59,324 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:59" (1/1) ... [2020-07-28 19:01:59,349 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:59" (1/1) ... [2020-07-28 19:01:59,354 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:59" (1/1) ... [2020-07-28 19:01:59,365 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:01:59,366 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:01:59,366 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:01:59,366 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:01:59,368 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:59" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:01:59,436 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:01:59,436 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:01:59,436 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:01:59,437 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:02:01,507 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:02:01,507 INFO L295 CfgBuilder]: Removed 284 assume(true) statements. [2020-07-28 19:02:01,512 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:02:01 BoogieIcfgContainer [2020-07-28 19:02:01,513 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:02:01,514 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:02:01,514 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:02:01,517 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:02:01,518 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:01:58" (1/3) ... [2020-07-28 19:02:01,519 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@9913c53 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:02:01, skipping insertion in model container [2020-07-28 19:02:01,519 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:01:59" (2/3) ... [2020-07-28 19:02:01,519 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@9913c53 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:02:01, skipping insertion in model container [2020-07-28 19:02:01,519 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:02:01" (3/3) ... [2020-07-28 19:02:01,522 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product54.cil.c [2020-07-28 19:02:01,534 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:02:01,541 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:02:01,556 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:02:01,583 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:02:01,584 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:02:01,584 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:02:01,584 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:02:01,584 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:02:01,585 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:02:01,585 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:02:01,585 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:02:01,606 INFO L276 IsEmpty]: Start isEmpty. Operand 195 states. [2020-07-28 19:02:01,614 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-28 19:02:01,614 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:01,615 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:01,616 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:01,622 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:01,623 INFO L82 PathProgramCache]: Analyzing trace with hash 60762052, now seen corresponding path program 1 times [2020-07-28 19:02:01,634 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:01,634 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1253483681] [2020-07-28 19:02:01,635 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:01,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:01,987 INFO L280 TraceCheckUtils]: 0: Hoare triple {198#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {198#true} is VALID [2020-07-28 19:02:01,988 INFO L280 TraceCheckUtils]: 1: Hoare triple {198#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {198#true} is VALID [2020-07-28 19:02:01,988 INFO L280 TraceCheckUtils]: 2: Hoare triple {198#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {198#true} is VALID [2020-07-28 19:02:01,989 INFO L280 TraceCheckUtils]: 3: Hoare triple {198#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {198#true} is VALID [2020-07-28 19:02:01,989 INFO L280 TraceCheckUtils]: 4: Hoare triple {198#true} assume 0 != main_~tmp~0; {198#true} is VALID [2020-07-28 19:02:01,990 INFO L280 TraceCheckUtils]: 5: Hoare triple {198#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {198#true} is VALID [2020-07-28 19:02:01,991 INFO L280 TraceCheckUtils]: 6: Hoare triple {198#true} assume false; {199#false} is VALID [2020-07-28 19:02:01,992 INFO L280 TraceCheckUtils]: 7: Hoare triple {199#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {199#false} is VALID [2020-07-28 19:02:01,992 INFO L280 TraceCheckUtils]: 8: Hoare triple {199#false} assume !(0 != ~pumpRunning~0); {199#false} is VALID [2020-07-28 19:02:01,992 INFO L280 TraceCheckUtils]: 9: Hoare triple {199#false} assume !(0 != ~systemActive~0); {199#false} is VALID [2020-07-28 19:02:01,993 INFO L280 TraceCheckUtils]: 10: Hoare triple {199#false} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {199#false} is VALID [2020-07-28 19:02:01,993 INFO L280 TraceCheckUtils]: 11: Hoare triple {199#false} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {199#false} is VALID [2020-07-28 19:02:01,994 INFO L280 TraceCheckUtils]: 12: Hoare triple {199#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {199#false} is VALID [2020-07-28 19:02:01,994 INFO L280 TraceCheckUtils]: 13: Hoare triple {199#false} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {199#false} is VALID [2020-07-28 19:02:01,995 INFO L280 TraceCheckUtils]: 14: Hoare triple {199#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {199#false} is VALID [2020-07-28 19:02:01,995 INFO L280 TraceCheckUtils]: 15: Hoare triple {199#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {199#false} is VALID [2020-07-28 19:02:01,995 INFO L280 TraceCheckUtils]: 16: Hoare triple {199#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {199#false} is VALID [2020-07-28 19:02:01,996 INFO L280 TraceCheckUtils]: 17: Hoare triple {199#false} assume !false; {199#false} is VALID [2020-07-28 19:02:02,000 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:02,000 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1253483681] [2020-07-28 19:02:02,002 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:02,002 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:02:02,003 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1184439838] [2020-07-28 19:02:02,010 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:02:02,011 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:02,015 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:02:02,060 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:02,060 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:02:02,061 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:02,069 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:02:02,070 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:02:02,073 INFO L87 Difference]: Start difference. First operand 195 states. Second operand 2 states. [2020-07-28 19:02:02,534 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:02,535 INFO L93 Difference]: Finished difference Result 384 states and 587 transitions. [2020-07-28 19:02:02,535 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:02:02,536 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:02:02,536 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:02,537 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:02:02,553 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 587 transitions. [2020-07-28 19:02:02,554 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:02:02,562 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 587 transitions. [2020-07-28 19:02:02,562 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 587 transitions. [2020-07-28 19:02:03,280 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 587 edges. 587 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:03,306 INFO L225 Difference]: With dead ends: 384 [2020-07-28 19:02:03,306 INFO L226 Difference]: Without dead ends: 191 [2020-07-28 19:02:03,314 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:02:03,335 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 191 states. [2020-07-28 19:02:03,405 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 191 to 191. [2020-07-28 19:02:03,405 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:03,406 INFO L82 GeneralOperation]: Start isEquivalent. First operand 191 states. Second operand 191 states. [2020-07-28 19:02:03,407 INFO L74 IsIncluded]: Start isIncluded. First operand 191 states. Second operand 191 states. [2020-07-28 19:02:03,407 INFO L87 Difference]: Start difference. First operand 191 states. Second operand 191 states. [2020-07-28 19:02:03,420 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:03,420 INFO L93 Difference]: Finished difference Result 191 states and 285 transitions. [2020-07-28 19:02:03,420 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 285 transitions. [2020-07-28 19:02:03,423 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:03,423 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:03,423 INFO L74 IsIncluded]: Start isIncluded. First operand 191 states. Second operand 191 states. [2020-07-28 19:02:03,423 INFO L87 Difference]: Start difference. First operand 191 states. Second operand 191 states. [2020-07-28 19:02:03,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:03,437 INFO L93 Difference]: Finished difference Result 191 states and 285 transitions. [2020-07-28 19:02:03,437 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 285 transitions. [2020-07-28 19:02:03,439 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:03,440 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:03,440 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:03,440 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:03,440 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 191 states. [2020-07-28 19:02:03,453 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 285 transitions. [2020-07-28 19:02:03,455 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 285 transitions. Word has length 18 [2020-07-28 19:02:03,455 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:03,455 INFO L479 AbstractCegarLoop]: Abstraction has 191 states and 285 transitions. [2020-07-28 19:02:03,455 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:02:03,456 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 285 transitions. [2020-07-28 19:02:03,457 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 19:02:03,457 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:03,457 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:03,457 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:02:03,458 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:03,458 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:03,458 INFO L82 PathProgramCache]: Analyzing trace with hash -850268701, now seen corresponding path program 1 times [2020-07-28 19:02:03,458 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:03,459 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [164911989] [2020-07-28 19:02:03,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:03,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:03,626 INFO L280 TraceCheckUtils]: 0: Hoare triple {1364#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1364#true} is VALID [2020-07-28 19:02:03,627 INFO L280 TraceCheckUtils]: 1: Hoare triple {1364#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {1364#true} is VALID [2020-07-28 19:02:03,627 INFO L280 TraceCheckUtils]: 2: Hoare triple {1364#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {1364#true} is VALID [2020-07-28 19:02:03,627 INFO L280 TraceCheckUtils]: 3: Hoare triple {1364#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {1364#true} is VALID [2020-07-28 19:02:03,628 INFO L280 TraceCheckUtils]: 4: Hoare triple {1364#true} assume 0 != main_~tmp~0; {1364#true} is VALID [2020-07-28 19:02:03,629 INFO L280 TraceCheckUtils]: 5: Hoare triple {1364#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1366#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:02:03,630 INFO L280 TraceCheckUtils]: 6: Hoare triple {1366#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {1366#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:02:03,630 INFO L280 TraceCheckUtils]: 7: Hoare triple {1366#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {1365#false} is VALID [2020-07-28 19:02:03,631 INFO L280 TraceCheckUtils]: 8: Hoare triple {1365#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {1365#false} is VALID [2020-07-28 19:02:03,631 INFO L280 TraceCheckUtils]: 9: Hoare triple {1365#false} assume !(0 != ~pumpRunning~0); {1365#false} is VALID [2020-07-28 19:02:03,631 INFO L280 TraceCheckUtils]: 10: Hoare triple {1365#false} assume !(0 != ~systemActive~0); {1365#false} is VALID [2020-07-28 19:02:03,632 INFO L280 TraceCheckUtils]: 11: Hoare triple {1365#false} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {1365#false} is VALID [2020-07-28 19:02:03,632 INFO L280 TraceCheckUtils]: 12: Hoare triple {1365#false} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {1365#false} is VALID [2020-07-28 19:02:03,632 INFO L280 TraceCheckUtils]: 13: Hoare triple {1365#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {1365#false} is VALID [2020-07-28 19:02:03,632 INFO L280 TraceCheckUtils]: 14: Hoare triple {1365#false} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {1365#false} is VALID [2020-07-28 19:02:03,633 INFO L280 TraceCheckUtils]: 15: Hoare triple {1365#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {1365#false} is VALID [2020-07-28 19:02:03,633 INFO L280 TraceCheckUtils]: 16: Hoare triple {1365#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {1365#false} is VALID [2020-07-28 19:02:03,633 INFO L280 TraceCheckUtils]: 17: Hoare triple {1365#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {1365#false} is VALID [2020-07-28 19:02:03,633 INFO L280 TraceCheckUtils]: 18: Hoare triple {1365#false} assume !false; {1365#false} is VALID [2020-07-28 19:02:03,635 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:03,635 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [164911989] [2020-07-28 19:02:03,635 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:03,635 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:02:03,636 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1658832030] [2020-07-28 19:02:03,637 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:02:03,637 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:03,638 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:02:03,671 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:03,671 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:02:03,671 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:03,672 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:02:03,672 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:03,672 INFO L87 Difference]: Start difference. First operand 191 states and 285 transitions. Second operand 3 states. [2020-07-28 19:02:03,928 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:03,929 INFO L93 Difference]: Finished difference Result 191 states and 285 transitions. [2020-07-28 19:02:03,929 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:02:03,929 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:02:03,929 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:03,930 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:03,933 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 285 transitions. [2020-07-28 19:02:03,934 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:03,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 285 transitions. [2020-07-28 19:02:03,938 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 285 transitions. [2020-07-28 19:02:04,277 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 285 edges. 285 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:04,280 INFO L225 Difference]: With dead ends: 191 [2020-07-28 19:02:04,280 INFO L226 Difference]: Without dead ends: 73 [2020-07-28 19:02:04,282 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:04,282 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2020-07-28 19:02:04,310 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2020-07-28 19:02:04,310 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:04,310 INFO L82 GeneralOperation]: Start isEquivalent. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:04,310 INFO L74 IsIncluded]: Start isIncluded. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:04,311 INFO L87 Difference]: Start difference. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:04,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:04,315 INFO L93 Difference]: Finished difference Result 73 states and 108 transitions. [2020-07-28 19:02:04,315 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 108 transitions. [2020-07-28 19:02:04,316 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:04,316 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:04,316 INFO L74 IsIncluded]: Start isIncluded. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:04,316 INFO L87 Difference]: Start difference. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:04,321 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:04,321 INFO L93 Difference]: Finished difference Result 73 states and 108 transitions. [2020-07-28 19:02:04,322 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 108 transitions. [2020-07-28 19:02:04,325 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:04,325 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:04,326 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:04,326 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:04,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 73 states. [2020-07-28 19:02:04,329 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 108 transitions. [2020-07-28 19:02:04,329 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 108 transitions. Word has length 19 [2020-07-28 19:02:04,329 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:04,329 INFO L479 AbstractCegarLoop]: Abstraction has 73 states and 108 transitions. [2020-07-28 19:02:04,329 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:02:04,330 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 108 transitions. [2020-07-28 19:02:04,330 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 19:02:04,330 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:04,330 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:04,331 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:02:04,332 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:04,332 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:04,333 INFO L82 PathProgramCache]: Analyzing trace with hash -1473925832, now seen corresponding path program 1 times [2020-07-28 19:02:04,333 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:04,333 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [131957920] [2020-07-28 19:02:04,333 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:04,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:04,513 INFO L280 TraceCheckUtils]: 0: Hoare triple {1873#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1873#true} is VALID [2020-07-28 19:02:04,514 INFO L280 TraceCheckUtils]: 1: Hoare triple {1873#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {1873#true} is VALID [2020-07-28 19:02:04,514 INFO L280 TraceCheckUtils]: 2: Hoare triple {1873#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {1873#true} is VALID [2020-07-28 19:02:04,514 INFO L280 TraceCheckUtils]: 3: Hoare triple {1873#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {1873#true} is VALID [2020-07-28 19:02:04,515 INFO L280 TraceCheckUtils]: 4: Hoare triple {1873#true} assume 0 != main_~tmp~0; {1873#true} is VALID [2020-07-28 19:02:04,515 INFO L280 TraceCheckUtils]: 5: Hoare triple {1873#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1873#true} is VALID [2020-07-28 19:02:04,516 INFO L280 TraceCheckUtils]: 6: Hoare triple {1873#true} assume !false; {1873#true} is VALID [2020-07-28 19:02:04,516 INFO L280 TraceCheckUtils]: 7: Hoare triple {1873#true} assume test_~splverifierCounter~0 < 4; {1873#true} is VALID [2020-07-28 19:02:04,516 INFO L280 TraceCheckUtils]: 8: Hoare triple {1873#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {1873#true} is VALID [2020-07-28 19:02:04,517 INFO L280 TraceCheckUtils]: 9: Hoare triple {1873#true} assume !(0 != test_~tmp~5); {1873#true} is VALID [2020-07-28 19:02:04,517 INFO L280 TraceCheckUtils]: 10: Hoare triple {1873#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {1873#true} is VALID [2020-07-28 19:02:04,517 INFO L280 TraceCheckUtils]: 11: Hoare triple {1873#true} assume !(0 != test_~tmp___0~1); {1873#true} is VALID [2020-07-28 19:02:04,517 INFO L280 TraceCheckUtils]: 12: Hoare triple {1873#true} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {1873#true} is VALID [2020-07-28 19:02:04,520 INFO L280 TraceCheckUtils]: 13: Hoare triple {1873#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1875#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:04,521 INFO L280 TraceCheckUtils]: 14: Hoare triple {1875#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {1875#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:04,525 INFO L280 TraceCheckUtils]: 15: Hoare triple {1875#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {1874#false} is VALID [2020-07-28 19:02:04,526 INFO L280 TraceCheckUtils]: 16: Hoare triple {1874#false} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {1874#false} is VALID [2020-07-28 19:02:04,526 INFO L280 TraceCheckUtils]: 17: Hoare triple {1874#false} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {1874#false} is VALID [2020-07-28 19:02:04,527 INFO L280 TraceCheckUtils]: 18: Hoare triple {1874#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {1874#false} is VALID [2020-07-28 19:02:04,527 INFO L280 TraceCheckUtils]: 19: Hoare triple {1874#false} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {1874#false} is VALID [2020-07-28 19:02:04,527 INFO L280 TraceCheckUtils]: 20: Hoare triple {1874#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {1874#false} is VALID [2020-07-28 19:02:04,528 INFO L280 TraceCheckUtils]: 21: Hoare triple {1874#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {1874#false} is VALID [2020-07-28 19:02:04,528 INFO L280 TraceCheckUtils]: 22: Hoare triple {1874#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {1874#false} is VALID [2020-07-28 19:02:04,528 INFO L280 TraceCheckUtils]: 23: Hoare triple {1874#false} assume !false; {1874#false} is VALID [2020-07-28 19:02:04,529 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:04,532 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [131957920] [2020-07-28 19:02:04,532 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:04,532 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:02:04,533 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1881492422] [2020-07-28 19:02:04,533 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 19:02:04,533 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:04,533 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:02:04,571 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:04,571 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:02:04,571 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:04,571 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:02:04,572 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:04,572 INFO L87 Difference]: Start difference. First operand 73 states and 108 transitions. Second operand 3 states. [2020-07-28 19:02:04,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:04,802 INFO L93 Difference]: Finished difference Result 140 states and 210 transitions. [2020-07-28 19:02:04,802 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:02:04,802 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 19:02:04,803 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:04,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:04,805 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 210 transitions. [2020-07-28 19:02:04,805 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:04,808 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 210 transitions. [2020-07-28 19:02:04,808 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 210 transitions. [2020-07-28 19:02:05,067 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 210 edges. 210 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:05,069 INFO L225 Difference]: With dead ends: 140 [2020-07-28 19:02:05,069 INFO L226 Difference]: Without dead ends: 73 [2020-07-28 19:02:05,070 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:05,071 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 73 states. [2020-07-28 19:02:05,125 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 73 to 73. [2020-07-28 19:02:05,125 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:05,125 INFO L82 GeneralOperation]: Start isEquivalent. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:05,126 INFO L74 IsIncluded]: Start isIncluded. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:05,126 INFO L87 Difference]: Start difference. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:05,130 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:05,131 INFO L93 Difference]: Finished difference Result 73 states and 107 transitions. [2020-07-28 19:02:05,131 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 107 transitions. [2020-07-28 19:02:05,131 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:05,131 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:05,132 INFO L74 IsIncluded]: Start isIncluded. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:05,132 INFO L87 Difference]: Start difference. First operand 73 states. Second operand 73 states. [2020-07-28 19:02:05,138 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:05,139 INFO L93 Difference]: Finished difference Result 73 states and 107 transitions. [2020-07-28 19:02:05,139 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 107 transitions. [2020-07-28 19:02:05,139 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:05,140 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:05,140 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:05,140 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:05,140 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 73 states. [2020-07-28 19:02:05,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 73 states to 73 states and 107 transitions. [2020-07-28 19:02:05,144 INFO L78 Accepts]: Start accepts. Automaton has 73 states and 107 transitions. Word has length 24 [2020-07-28 19:02:05,144 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:05,145 INFO L479 AbstractCegarLoop]: Abstraction has 73 states and 107 transitions. [2020-07-28 19:02:05,145 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:02:05,145 INFO L276 IsEmpty]: Start isEmpty. Operand 73 states and 107 transitions. [2020-07-28 19:02:05,146 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2020-07-28 19:02:05,146 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:05,146 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:05,147 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:02:05,147 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:05,147 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:05,148 INFO L82 PathProgramCache]: Analyzing trace with hash -17775911, now seen corresponding path program 1 times [2020-07-28 19:02:05,148 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:05,148 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [7903647] [2020-07-28 19:02:05,149 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:05,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:05,252 INFO L280 TraceCheckUtils]: 0: Hoare triple {2312#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,253 INFO L280 TraceCheckUtils]: 1: Hoare triple {2314#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,254 INFO L280 TraceCheckUtils]: 2: Hoare triple {2314#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,255 INFO L280 TraceCheckUtils]: 3: Hoare triple {2314#(= 0 ~pumpRunning~0)} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,256 INFO L280 TraceCheckUtils]: 4: Hoare triple {2314#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~0; {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,257 INFO L280 TraceCheckUtils]: 5: Hoare triple {2314#(= 0 ~pumpRunning~0)} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,257 INFO L280 TraceCheckUtils]: 6: Hoare triple {2314#(= 0 ~pumpRunning~0)} assume !false; {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,258 INFO L280 TraceCheckUtils]: 7: Hoare triple {2314#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,259 INFO L280 TraceCheckUtils]: 8: Hoare triple {2314#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,259 INFO L280 TraceCheckUtils]: 9: Hoare triple {2314#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~5); {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,260 INFO L280 TraceCheckUtils]: 10: Hoare triple {2314#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,261 INFO L280 TraceCheckUtils]: 11: Hoare triple {2314#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~1); {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,261 INFO L280 TraceCheckUtils]: 12: Hoare triple {2314#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,262 INFO L280 TraceCheckUtils]: 13: Hoare triple {2314#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,263 INFO L280 TraceCheckUtils]: 14: Hoare triple {2314#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,263 INFO L280 TraceCheckUtils]: 15: Hoare triple {2314#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,264 INFO L280 TraceCheckUtils]: 16: Hoare triple {2314#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret55, processEnvironment__wrappee__lowWaterSensor_~tmp~7;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~7; {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,265 INFO L280 TraceCheckUtils]: 17: Hoare triple {2314#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {2314#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:05,266 INFO L280 TraceCheckUtils]: 18: Hoare triple {2314#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {2313#false} is VALID [2020-07-28 19:02:05,267 INFO L280 TraceCheckUtils]: 19: Hoare triple {2313#false} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {2313#false} is VALID [2020-07-28 19:02:05,267 INFO L280 TraceCheckUtils]: 20: Hoare triple {2313#false} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {2313#false} is VALID [2020-07-28 19:02:05,267 INFO L280 TraceCheckUtils]: 21: Hoare triple {2313#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {2313#false} is VALID [2020-07-28 19:02:05,268 INFO L280 TraceCheckUtils]: 22: Hoare triple {2313#false} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {2313#false} is VALID [2020-07-28 19:02:05,268 INFO L280 TraceCheckUtils]: 23: Hoare triple {2313#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {2313#false} is VALID [2020-07-28 19:02:05,268 INFO L280 TraceCheckUtils]: 24: Hoare triple {2313#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {2313#false} is VALID [2020-07-28 19:02:05,268 INFO L280 TraceCheckUtils]: 25: Hoare triple {2313#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {2313#false} is VALID [2020-07-28 19:02:05,269 INFO L280 TraceCheckUtils]: 26: Hoare triple {2313#false} assume !false; {2313#false} is VALID [2020-07-28 19:02:05,271 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:05,271 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [7903647] [2020-07-28 19:02:05,271 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:05,271 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:02:05,272 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [869254957] [2020-07-28 19:02:05,272 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 27 [2020-07-28 19:02:05,272 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:05,273 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:02:05,318 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 27 edges. 27 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:05,318 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:02:05,319 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:05,319 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:02:05,319 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:05,319 INFO L87 Difference]: Start difference. First operand 73 states and 107 transitions. Second operand 3 states. [2020-07-28 19:02:05,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:05,588 INFO L93 Difference]: Finished difference Result 151 states and 223 transitions. [2020-07-28 19:02:05,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:02:05,589 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 27 [2020-07-28 19:02:05,589 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:05,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:05,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 223 transitions. [2020-07-28 19:02:05,593 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:05,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 223 transitions. [2020-07-28 19:02:05,599 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 223 transitions. [2020-07-28 19:02:05,895 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 223 edges. 223 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:05,897 INFO L225 Difference]: With dead ends: 151 [2020-07-28 19:02:05,897 INFO L226 Difference]: Without dead ends: 84 [2020-07-28 19:02:05,898 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:05,899 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84 states. [2020-07-28 19:02:05,951 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84 to 82. [2020-07-28 19:02:05,952 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:05,952 INFO L82 GeneralOperation]: Start isEquivalent. First operand 84 states. Second operand 82 states. [2020-07-28 19:02:05,952 INFO L74 IsIncluded]: Start isIncluded. First operand 84 states. Second operand 82 states. [2020-07-28 19:02:05,952 INFO L87 Difference]: Start difference. First operand 84 states. Second operand 82 states. [2020-07-28 19:02:05,955 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:05,956 INFO L93 Difference]: Finished difference Result 84 states and 117 transitions. [2020-07-28 19:02:05,956 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 117 transitions. [2020-07-28 19:02:05,956 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:05,956 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:05,956 INFO L74 IsIncluded]: Start isIncluded. First operand 82 states. Second operand 84 states. [2020-07-28 19:02:05,957 INFO L87 Difference]: Start difference. First operand 82 states. Second operand 84 states. [2020-07-28 19:02:05,960 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:05,960 INFO L93 Difference]: Finished difference Result 84 states and 117 transitions. [2020-07-28 19:02:05,960 INFO L276 IsEmpty]: Start isEmpty. Operand 84 states and 117 transitions. [2020-07-28 19:02:05,961 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:05,961 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:05,961 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:05,961 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:05,962 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 82 states. [2020-07-28 19:02:05,964 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 82 states to 82 states and 116 transitions. [2020-07-28 19:02:05,965 INFO L78 Accepts]: Start accepts. Automaton has 82 states and 116 transitions. Word has length 27 [2020-07-28 19:02:05,965 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:05,965 INFO L479 AbstractCegarLoop]: Abstraction has 82 states and 116 transitions. [2020-07-28 19:02:05,966 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:02:05,966 INFO L276 IsEmpty]: Start isEmpty. Operand 82 states and 116 transitions. [2020-07-28 19:02:05,966 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:05,967 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:05,967 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:05,967 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:02:05,968 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:05,968 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:05,968 INFO L82 PathProgramCache]: Analyzing trace with hash 585251370, now seen corresponding path program 1 times [2020-07-28 19:02:05,968 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:05,969 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1307001290] [2020-07-28 19:02:05,969 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:05,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:06,042 INFO L280 TraceCheckUtils]: 0: Hoare triple {2803#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {2803#true} is VALID [2020-07-28 19:02:06,043 INFO L280 TraceCheckUtils]: 1: Hoare triple {2803#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {2803#true} is VALID [2020-07-28 19:02:06,043 INFO L280 TraceCheckUtils]: 2: Hoare triple {2803#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {2803#true} is VALID [2020-07-28 19:02:06,044 INFO L280 TraceCheckUtils]: 3: Hoare triple {2803#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {2803#true} is VALID [2020-07-28 19:02:06,044 INFO L280 TraceCheckUtils]: 4: Hoare triple {2803#true} assume 0 != main_~tmp~0; {2803#true} is VALID [2020-07-28 19:02:06,044 INFO L280 TraceCheckUtils]: 5: Hoare triple {2803#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2803#true} is VALID [2020-07-28 19:02:06,044 INFO L280 TraceCheckUtils]: 6: Hoare triple {2803#true} assume !false; {2803#true} is VALID [2020-07-28 19:02:06,045 INFO L280 TraceCheckUtils]: 7: Hoare triple {2803#true} assume test_~splverifierCounter~0 < 4; {2803#true} is VALID [2020-07-28 19:02:06,045 INFO L280 TraceCheckUtils]: 8: Hoare triple {2803#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {2803#true} is VALID [2020-07-28 19:02:06,045 INFO L280 TraceCheckUtils]: 9: Hoare triple {2803#true} assume !(0 != test_~tmp~5); {2803#true} is VALID [2020-07-28 19:02:06,046 INFO L280 TraceCheckUtils]: 10: Hoare triple {2803#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {2803#true} is VALID [2020-07-28 19:02:06,046 INFO L280 TraceCheckUtils]: 11: Hoare triple {2803#true} assume !(0 != test_~tmp___0~1); {2803#true} is VALID [2020-07-28 19:02:06,046 INFO L280 TraceCheckUtils]: 12: Hoare triple {2803#true} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {2803#true} is VALID [2020-07-28 19:02:06,047 INFO L280 TraceCheckUtils]: 13: Hoare triple {2803#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {2803#true} is VALID [2020-07-28 19:02:06,047 INFO L280 TraceCheckUtils]: 14: Hoare triple {2803#true} assume !(0 != ~pumpRunning~0); {2803#true} is VALID [2020-07-28 19:02:06,047 INFO L280 TraceCheckUtils]: 15: Hoare triple {2803#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {2803#true} is VALID [2020-07-28 19:02:06,047 INFO L280 TraceCheckUtils]: 16: Hoare triple {2803#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret55, processEnvironment__wrappee__lowWaterSensor_~tmp~7;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~7; {2803#true} is VALID [2020-07-28 19:02:06,047 INFO L280 TraceCheckUtils]: 17: Hoare triple {2803#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {2803#true} is VALID [2020-07-28 19:02:06,048 INFO L280 TraceCheckUtils]: 18: Hoare triple {2803#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {2803#true} is VALID [2020-07-28 19:02:06,048 INFO L280 TraceCheckUtils]: 19: Hoare triple {2803#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {2803#true} is VALID [2020-07-28 19:02:06,049 INFO L280 TraceCheckUtils]: 20: Hoare triple {2803#true} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {2803#true} is VALID [2020-07-28 19:02:06,050 INFO L280 TraceCheckUtils]: 21: Hoare triple {2803#true} assume 0 != isHighWaterLevel_~tmp~9;isHighWaterLevel_~tmp___0~2 := 0; {2805#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2)} is VALID [2020-07-28 19:02:06,051 INFO L280 TraceCheckUtils]: 22: Hoare triple {2805#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {2806#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:02:06,052 INFO L280 TraceCheckUtils]: 23: Hoare triple {2806#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {2807#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6)} is VALID [2020-07-28 19:02:06,053 INFO L280 TraceCheckUtils]: 24: Hoare triple {2807#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;~pumpRunning~0 := 1; {2804#false} is VALID [2020-07-28 19:02:06,053 INFO L280 TraceCheckUtils]: 25: Hoare triple {2804#false} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {2804#false} is VALID [2020-07-28 19:02:06,053 INFO L280 TraceCheckUtils]: 26: Hoare triple {2804#false} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {2804#false} is VALID [2020-07-28 19:02:06,053 INFO L280 TraceCheckUtils]: 27: Hoare triple {2804#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {2804#false} is VALID [2020-07-28 19:02:06,054 INFO L280 TraceCheckUtils]: 28: Hoare triple {2804#false} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {2804#false} is VALID [2020-07-28 19:02:06,054 INFO L280 TraceCheckUtils]: 29: Hoare triple {2804#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {2804#false} is VALID [2020-07-28 19:02:06,054 INFO L280 TraceCheckUtils]: 30: Hoare triple {2804#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {2804#false} is VALID [2020-07-28 19:02:06,055 INFO L280 TraceCheckUtils]: 31: Hoare triple {2804#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {2804#false} is VALID [2020-07-28 19:02:06,055 INFO L280 TraceCheckUtils]: 32: Hoare triple {2804#false} assume !false; {2804#false} is VALID [2020-07-28 19:02:06,056 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:06,057 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1307001290] [2020-07-28 19:02:06,057 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:06,057 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:06,057 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1062981533] [2020-07-28 19:02:06,058 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2020-07-28 19:02:06,058 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:06,058 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:06,100 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:06,101 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:06,101 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:06,101 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:06,102 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:06,102 INFO L87 Difference]: Start difference. First operand 82 states and 116 transitions. Second operand 5 states. [2020-07-28 19:02:06,820 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:06,820 INFO L93 Difference]: Finished difference Result 216 states and 303 transitions. [2020-07-28 19:02:06,820 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:02:06,820 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2020-07-28 19:02:06,821 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:06,821 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:06,825 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 243 transitions. [2020-07-28 19:02:06,825 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:06,828 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 243 transitions. [2020-07-28 19:02:06,828 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 243 transitions. [2020-07-28 19:02:07,084 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 243 edges. 243 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:07,087 INFO L225 Difference]: With dead ends: 216 [2020-07-28 19:02:07,087 INFO L226 Difference]: Without dead ends: 140 [2020-07-28 19:02:07,088 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:07,089 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 140 states. [2020-07-28 19:02:07,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 140 to 91. [2020-07-28 19:02:07,180 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:07,180 INFO L82 GeneralOperation]: Start isEquivalent. First operand 140 states. Second operand 91 states. [2020-07-28 19:02:07,181 INFO L74 IsIncluded]: Start isIncluded. First operand 140 states. Second operand 91 states. [2020-07-28 19:02:07,181 INFO L87 Difference]: Start difference. First operand 140 states. Second operand 91 states. [2020-07-28 19:02:07,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:07,189 INFO L93 Difference]: Finished difference Result 140 states and 190 transitions. [2020-07-28 19:02:07,190 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 190 transitions. [2020-07-28 19:02:07,190 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:07,191 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:07,191 INFO L74 IsIncluded]: Start isIncluded. First operand 91 states. Second operand 140 states. [2020-07-28 19:02:07,191 INFO L87 Difference]: Start difference. First operand 91 states. Second operand 140 states. [2020-07-28 19:02:07,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:07,198 INFO L93 Difference]: Finished difference Result 140 states and 190 transitions. [2020-07-28 19:02:07,199 INFO L276 IsEmpty]: Start isEmpty. Operand 140 states and 190 transitions. [2020-07-28 19:02:07,199 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:07,199 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:07,199 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:07,199 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:07,200 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 91 states. [2020-07-28 19:02:07,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 91 states to 91 states and 125 transitions. [2020-07-28 19:02:07,203 INFO L78 Accepts]: Start accepts. Automaton has 91 states and 125 transitions. Word has length 33 [2020-07-28 19:02:07,203 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:07,203 INFO L479 AbstractCegarLoop]: Abstraction has 91 states and 125 transitions. [2020-07-28 19:02:07,203 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:07,203 INFO L276 IsEmpty]: Start isEmpty. Operand 91 states and 125 transitions. [2020-07-28 19:02:07,204 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:07,204 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:07,204 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:07,204 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:02:07,205 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:07,205 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:07,205 INFO L82 PathProgramCache]: Analyzing trace with hash -542144723, now seen corresponding path program 1 times [2020-07-28 19:02:07,205 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:07,206 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [98469296] [2020-07-28 19:02:07,206 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:07,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:07,294 INFO L280 TraceCheckUtils]: 0: Hoare triple {3517#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,295 INFO L280 TraceCheckUtils]: 1: Hoare triple {3519#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,295 INFO L280 TraceCheckUtils]: 2: Hoare triple {3519#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,296 INFO L280 TraceCheckUtils]: 3: Hoare triple {3519#(= 1 ~waterLevel~0)} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,297 INFO L280 TraceCheckUtils]: 4: Hoare triple {3519#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~0; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,297 INFO L280 TraceCheckUtils]: 5: Hoare triple {3519#(= 1 ~waterLevel~0)} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,298 INFO L280 TraceCheckUtils]: 6: Hoare triple {3519#(= 1 ~waterLevel~0)} assume !false; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,299 INFO L280 TraceCheckUtils]: 7: Hoare triple {3519#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,300 INFO L280 TraceCheckUtils]: 8: Hoare triple {3519#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,300 INFO L280 TraceCheckUtils]: 9: Hoare triple {3519#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~5); {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,301 INFO L280 TraceCheckUtils]: 10: Hoare triple {3519#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,302 INFO L280 TraceCheckUtils]: 11: Hoare triple {3519#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~1); {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,303 INFO L280 TraceCheckUtils]: 12: Hoare triple {3519#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,303 INFO L280 TraceCheckUtils]: 13: Hoare triple {3519#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,304 INFO L280 TraceCheckUtils]: 14: Hoare triple {3519#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,305 INFO L280 TraceCheckUtils]: 15: Hoare triple {3519#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,305 INFO L280 TraceCheckUtils]: 16: Hoare triple {3519#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret55, processEnvironment__wrappee__lowWaterSensor_~tmp~7;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~7; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,306 INFO L280 TraceCheckUtils]: 17: Hoare triple {3519#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,307 INFO L280 TraceCheckUtils]: 18: Hoare triple {3519#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,307 INFO L280 TraceCheckUtils]: 19: Hoare triple {3519#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,308 INFO L280 TraceCheckUtils]: 20: Hoare triple {3519#(= 1 ~waterLevel~0)} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,309 INFO L280 TraceCheckUtils]: 21: Hoare triple {3519#(= 1 ~waterLevel~0)} assume 0 != isHighWaterLevel_~tmp~9;isHighWaterLevel_~tmp___0~2 := 0; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,310 INFO L280 TraceCheckUtils]: 22: Hoare triple {3519#(= 1 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,311 INFO L280 TraceCheckUtils]: 23: Hoare triple {3519#(= 1 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,311 INFO L280 TraceCheckUtils]: 24: Hoare triple {3519#(= 1 ~waterLevel~0)} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~6); {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,312 INFO L280 TraceCheckUtils]: 25: Hoare triple {3519#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,313 INFO L280 TraceCheckUtils]: 26: Hoare triple {3519#(= 1 ~waterLevel~0)} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {3519#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:07,314 INFO L280 TraceCheckUtils]: 27: Hoare triple {3519#(= 1 ~waterLevel~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {3520#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:02:07,314 INFO L280 TraceCheckUtils]: 28: Hoare triple {3520#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {3521#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0)} is VALID [2020-07-28 19:02:07,315 INFO L280 TraceCheckUtils]: 29: Hoare triple {3521#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {3518#false} is VALID [2020-07-28 19:02:07,316 INFO L280 TraceCheckUtils]: 30: Hoare triple {3518#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {3518#false} is VALID [2020-07-28 19:02:07,316 INFO L280 TraceCheckUtils]: 31: Hoare triple {3518#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {3518#false} is VALID [2020-07-28 19:02:07,316 INFO L280 TraceCheckUtils]: 32: Hoare triple {3518#false} assume !false; {3518#false} is VALID [2020-07-28 19:02:07,318 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:07,319 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [98469296] [2020-07-28 19:02:07,319 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:07,319 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:07,319 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [805698589] [2020-07-28 19:02:07,320 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2020-07-28 19:02:07,320 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:07,320 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:07,373 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:07,374 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:07,374 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:07,374 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:07,374 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:07,374 INFO L87 Difference]: Start difference. First operand 91 states and 125 transitions. Second operand 5 states. [2020-07-28 19:02:08,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:08,577 INFO L93 Difference]: Finished difference Result 444 states and 625 transitions. [2020-07-28 19:02:08,577 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:08,578 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 33 [2020-07-28 19:02:08,578 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:08,578 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:08,583 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 416 transitions. [2020-07-28 19:02:08,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:08,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 416 transitions. [2020-07-28 19:02:08,589 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 416 transitions. [2020-07-28 19:02:09,133 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 416 edges. 416 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:09,142 INFO L225 Difference]: With dead ends: 444 [2020-07-28 19:02:09,142 INFO L226 Difference]: Without dead ends: 359 [2020-07-28 19:02:09,143 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:09,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 359 states. [2020-07-28 19:02:09,312 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 359 to 139. [2020-07-28 19:02:09,312 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:09,312 INFO L82 GeneralOperation]: Start isEquivalent. First operand 359 states. Second operand 139 states. [2020-07-28 19:02:09,312 INFO L74 IsIncluded]: Start isIncluded. First operand 359 states. Second operand 139 states. [2020-07-28 19:02:09,312 INFO L87 Difference]: Start difference. First operand 359 states. Second operand 139 states. [2020-07-28 19:02:09,332 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:09,332 INFO L93 Difference]: Finished difference Result 359 states and 492 transitions. [2020-07-28 19:02:09,333 INFO L276 IsEmpty]: Start isEmpty. Operand 359 states and 492 transitions. [2020-07-28 19:02:09,333 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:09,334 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:09,334 INFO L74 IsIncluded]: Start isIncluded. First operand 139 states. Second operand 359 states. [2020-07-28 19:02:09,334 INFO L87 Difference]: Start difference. First operand 139 states. Second operand 359 states. [2020-07-28 19:02:09,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:09,345 INFO L93 Difference]: Finished difference Result 359 states and 492 transitions. [2020-07-28 19:02:09,345 INFO L276 IsEmpty]: Start isEmpty. Operand 359 states and 492 transitions. [2020-07-28 19:02:09,346 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:09,346 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:09,346 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:09,347 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:09,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 139 states. [2020-07-28 19:02:09,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 139 states to 139 states and 188 transitions. [2020-07-28 19:02:09,350 INFO L78 Accepts]: Start accepts. Automaton has 139 states and 188 transitions. Word has length 33 [2020-07-28 19:02:09,352 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:09,352 INFO L479 AbstractCegarLoop]: Abstraction has 139 states and 188 transitions. [2020-07-28 19:02:09,352 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:09,352 INFO L276 IsEmpty]: Start isEmpty. Operand 139 states and 188 transitions. [2020-07-28 19:02:09,354 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2020-07-28 19:02:09,354 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:09,354 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:09,354 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:02:09,355 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:09,355 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:09,355 INFO L82 PathProgramCache]: Analyzing trace with hash 615151215, now seen corresponding path program 1 times [2020-07-28 19:02:09,355 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:09,356 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [518432973] [2020-07-28 19:02:09,356 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:09,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:09,440 INFO L280 TraceCheckUtils]: 0: Hoare triple {5046#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {5048#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,441 INFO L280 TraceCheckUtils]: 1: Hoare triple {5048#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {5048#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,442 INFO L280 TraceCheckUtils]: 2: Hoare triple {5048#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {5048#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,442 INFO L280 TraceCheckUtils]: 3: Hoare triple {5048#(= 1 ~waterLevel~0)} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {5048#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,443 INFO L280 TraceCheckUtils]: 4: Hoare triple {5048#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~0; {5048#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,443 INFO L280 TraceCheckUtils]: 5: Hoare triple {5048#(= 1 ~waterLevel~0)} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {5048#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,444 INFO L280 TraceCheckUtils]: 6: Hoare triple {5048#(= 1 ~waterLevel~0)} assume !false; {5048#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,444 INFO L280 TraceCheckUtils]: 7: Hoare triple {5048#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {5048#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,445 INFO L280 TraceCheckUtils]: 8: Hoare triple {5048#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {5048#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,445 INFO L280 TraceCheckUtils]: 9: Hoare triple {5048#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~5; {5048#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,446 INFO L280 TraceCheckUtils]: 10: Hoare triple {5048#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {5049#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,446 INFO L280 TraceCheckUtils]: 11: Hoare triple {5049#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {5049#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,447 INFO L280 TraceCheckUtils]: 12: Hoare triple {5049#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~1); {5049#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,447 INFO L280 TraceCheckUtils]: 13: Hoare triple {5049#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {5049#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,448 INFO L280 TraceCheckUtils]: 14: Hoare triple {5049#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {5049#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,449 INFO L280 TraceCheckUtils]: 15: Hoare triple {5049#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {5049#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,450 INFO L280 TraceCheckUtils]: 16: Hoare triple {5049#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {5049#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,450 INFO L280 TraceCheckUtils]: 17: Hoare triple {5049#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret55, processEnvironment__wrappee__lowWaterSensor_~tmp~7;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~7; {5049#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,451 INFO L280 TraceCheckUtils]: 18: Hoare triple {5049#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {5049#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,451 INFO L280 TraceCheckUtils]: 19: Hoare triple {5049#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {5049#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:09,452 INFO L280 TraceCheckUtils]: 20: Hoare triple {5049#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {5047#false} is VALID [2020-07-28 19:02:09,453 INFO L280 TraceCheckUtils]: 21: Hoare triple {5047#false} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {5047#false} is VALID [2020-07-28 19:02:09,453 INFO L280 TraceCheckUtils]: 22: Hoare triple {5047#false} assume 0 != isHighWaterLevel_~tmp~9;isHighWaterLevel_~tmp___0~2 := 0; {5047#false} is VALID [2020-07-28 19:02:09,453 INFO L280 TraceCheckUtils]: 23: Hoare triple {5047#false} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {5047#false} is VALID [2020-07-28 19:02:09,453 INFO L280 TraceCheckUtils]: 24: Hoare triple {5047#false} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {5047#false} is VALID [2020-07-28 19:02:09,454 INFO L280 TraceCheckUtils]: 25: Hoare triple {5047#false} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~6); {5047#false} is VALID [2020-07-28 19:02:09,454 INFO L280 TraceCheckUtils]: 26: Hoare triple {5047#false} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {5047#false} is VALID [2020-07-28 19:02:09,454 INFO L280 TraceCheckUtils]: 27: Hoare triple {5047#false} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {5047#false} is VALID [2020-07-28 19:02:09,454 INFO L280 TraceCheckUtils]: 28: Hoare triple {5047#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {5047#false} is VALID [2020-07-28 19:02:09,454 INFO L280 TraceCheckUtils]: 29: Hoare triple {5047#false} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {5047#false} is VALID [2020-07-28 19:02:09,454 INFO L280 TraceCheckUtils]: 30: Hoare triple {5047#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {5047#false} is VALID [2020-07-28 19:02:09,455 INFO L280 TraceCheckUtils]: 31: Hoare triple {5047#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {5047#false} is VALID [2020-07-28 19:02:09,455 INFO L280 TraceCheckUtils]: 32: Hoare triple {5047#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {5047#false} is VALID [2020-07-28 19:02:09,455 INFO L280 TraceCheckUtils]: 33: Hoare triple {5047#false} assume !false; {5047#false} is VALID [2020-07-28 19:02:09,456 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:09,456 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [518432973] [2020-07-28 19:02:09,457 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:09,457 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:02:09,457 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1064257731] [2020-07-28 19:02:09,457 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 34 [2020-07-28 19:02:09,458 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:09,458 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:09,504 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:09,504 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:09,504 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:09,505 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:09,505 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:09,505 INFO L87 Difference]: Start difference. First operand 139 states and 188 transitions. Second operand 4 states. [2020-07-28 19:02:10,156 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:10,156 INFO L93 Difference]: Finished difference Result 294 states and 403 transitions. [2020-07-28 19:02:10,156 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:02:10,157 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 34 [2020-07-28 19:02:10,157 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:10,157 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:10,159 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 262 transitions. [2020-07-28 19:02:10,160 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:10,162 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 262 transitions. [2020-07-28 19:02:10,162 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 262 transitions. [2020-07-28 19:02:10,408 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 262 edges. 262 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:10,413 INFO L225 Difference]: With dead ends: 294 [2020-07-28 19:02:10,413 INFO L226 Difference]: Without dead ends: 209 [2020-07-28 19:02:10,414 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:10,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 209 states. [2020-07-28 19:02:10,662 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 209 to 206. [2020-07-28 19:02:10,662 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:10,662 INFO L82 GeneralOperation]: Start isEquivalent. First operand 209 states. Second operand 206 states. [2020-07-28 19:02:10,662 INFO L74 IsIncluded]: Start isIncluded. First operand 209 states. Second operand 206 states. [2020-07-28 19:02:10,663 INFO L87 Difference]: Start difference. First operand 209 states. Second operand 206 states. [2020-07-28 19:02:10,668 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:10,668 INFO L93 Difference]: Finished difference Result 209 states and 280 transitions. [2020-07-28 19:02:10,668 INFO L276 IsEmpty]: Start isEmpty. Operand 209 states and 280 transitions. [2020-07-28 19:02:10,669 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:10,669 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:10,669 INFO L74 IsIncluded]: Start isIncluded. First operand 206 states. Second operand 209 states. [2020-07-28 19:02:10,670 INFO L87 Difference]: Start difference. First operand 206 states. Second operand 209 states. [2020-07-28 19:02:10,674 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:10,675 INFO L93 Difference]: Finished difference Result 209 states and 280 transitions. [2020-07-28 19:02:10,675 INFO L276 IsEmpty]: Start isEmpty. Operand 209 states and 280 transitions. [2020-07-28 19:02:10,676 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:10,676 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:10,676 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:10,676 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:10,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 206 states. [2020-07-28 19:02:10,681 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 206 states to 206 states and 278 transitions. [2020-07-28 19:02:10,681 INFO L78 Accepts]: Start accepts. Automaton has 206 states and 278 transitions. Word has length 34 [2020-07-28 19:02:10,682 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:10,682 INFO L479 AbstractCegarLoop]: Abstraction has 206 states and 278 transitions. [2020-07-28 19:02:10,682 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:10,682 INFO L276 IsEmpty]: Start isEmpty. Operand 206 states and 278 transitions. [2020-07-28 19:02:10,682 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2020-07-28 19:02:10,682 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:10,682 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:10,683 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:02:10,683 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:10,683 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:10,683 INFO L82 PathProgramCache]: Analyzing trace with hash -395966035, now seen corresponding path program 1 times [2020-07-28 19:02:10,683 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:10,684 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [878156120] [2020-07-28 19:02:10,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:10,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:10,760 INFO L280 TraceCheckUtils]: 0: Hoare triple {6157#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {6157#true} is VALID [2020-07-28 19:02:10,760 INFO L280 TraceCheckUtils]: 1: Hoare triple {6157#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {6157#true} is VALID [2020-07-28 19:02:10,760 INFO L280 TraceCheckUtils]: 2: Hoare triple {6157#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {6157#true} is VALID [2020-07-28 19:02:10,760 INFO L280 TraceCheckUtils]: 3: Hoare triple {6157#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {6157#true} is VALID [2020-07-28 19:02:10,761 INFO L280 TraceCheckUtils]: 4: Hoare triple {6157#true} assume 0 != main_~tmp~0; {6157#true} is VALID [2020-07-28 19:02:10,761 INFO L280 TraceCheckUtils]: 5: Hoare triple {6157#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6157#true} is VALID [2020-07-28 19:02:10,761 INFO L280 TraceCheckUtils]: 6: Hoare triple {6157#true} assume !false; {6157#true} is VALID [2020-07-28 19:02:10,761 INFO L280 TraceCheckUtils]: 7: Hoare triple {6157#true} assume test_~splverifierCounter~0 < 4; {6157#true} is VALID [2020-07-28 19:02:10,762 INFO L280 TraceCheckUtils]: 8: Hoare triple {6157#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {6157#true} is VALID [2020-07-28 19:02:10,762 INFO L280 TraceCheckUtils]: 9: Hoare triple {6157#true} assume 0 != test_~tmp~5; {6157#true} is VALID [2020-07-28 19:02:10,762 INFO L280 TraceCheckUtils]: 10: Hoare triple {6157#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6157#true} is VALID [2020-07-28 19:02:10,762 INFO L280 TraceCheckUtils]: 11: Hoare triple {6157#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {6157#true} is VALID [2020-07-28 19:02:10,764 INFO L280 TraceCheckUtils]: 12: Hoare triple {6157#true} assume !(0 != test_~tmp___0~1); {6157#true} is VALID [2020-07-28 19:02:10,764 INFO L280 TraceCheckUtils]: 13: Hoare triple {6157#true} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {6157#true} is VALID [2020-07-28 19:02:10,764 INFO L280 TraceCheckUtils]: 14: Hoare triple {6157#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {6157#true} is VALID [2020-07-28 19:02:10,764 INFO L280 TraceCheckUtils]: 15: Hoare triple {6157#true} assume !(0 != ~pumpRunning~0); {6157#true} is VALID [2020-07-28 19:02:10,764 INFO L280 TraceCheckUtils]: 16: Hoare triple {6157#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {6157#true} is VALID [2020-07-28 19:02:10,765 INFO L280 TraceCheckUtils]: 17: Hoare triple {6157#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret55, processEnvironment__wrappee__lowWaterSensor_~tmp~7;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~7; {6157#true} is VALID [2020-07-28 19:02:10,765 INFO L280 TraceCheckUtils]: 18: Hoare triple {6157#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {6157#true} is VALID [2020-07-28 19:02:10,765 INFO L280 TraceCheckUtils]: 19: Hoare triple {6157#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {6157#true} is VALID [2020-07-28 19:02:10,773 INFO L280 TraceCheckUtils]: 20: Hoare triple {6157#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {6159#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:02:10,775 INFO L280 TraceCheckUtils]: 21: Hoare triple {6159#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {6160#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)} is VALID [2020-07-28 19:02:10,775 INFO L280 TraceCheckUtils]: 22: Hoare triple {6160#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)} assume 0 != isHighWaterLevel_~tmp~9;isHighWaterLevel_~tmp___0~2 := 0; {6158#false} is VALID [2020-07-28 19:02:10,776 INFO L280 TraceCheckUtils]: 23: Hoare triple {6158#false} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {6158#false} is VALID [2020-07-28 19:02:10,776 INFO L280 TraceCheckUtils]: 24: Hoare triple {6158#false} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {6158#false} is VALID [2020-07-28 19:02:10,776 INFO L280 TraceCheckUtils]: 25: Hoare triple {6158#false} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~6); {6158#false} is VALID [2020-07-28 19:02:10,776 INFO L280 TraceCheckUtils]: 26: Hoare triple {6158#false} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {6158#false} is VALID [2020-07-28 19:02:10,776 INFO L280 TraceCheckUtils]: 27: Hoare triple {6158#false} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {6158#false} is VALID [2020-07-28 19:02:10,776 INFO L280 TraceCheckUtils]: 28: Hoare triple {6158#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {6158#false} is VALID [2020-07-28 19:02:10,777 INFO L280 TraceCheckUtils]: 29: Hoare triple {6158#false} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {6158#false} is VALID [2020-07-28 19:02:10,777 INFO L280 TraceCheckUtils]: 30: Hoare triple {6158#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {6158#false} is VALID [2020-07-28 19:02:10,777 INFO L280 TraceCheckUtils]: 31: Hoare triple {6158#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {6158#false} is VALID [2020-07-28 19:02:10,777 INFO L280 TraceCheckUtils]: 32: Hoare triple {6158#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {6158#false} is VALID [2020-07-28 19:02:10,777 INFO L280 TraceCheckUtils]: 33: Hoare triple {6158#false} assume !false; {6158#false} is VALID [2020-07-28 19:02:10,780 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:10,780 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [878156120] [2020-07-28 19:02:10,780 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:10,781 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:10,781 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1901652495] [2020-07-28 19:02:10,782 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 34 [2020-07-28 19:02:10,782 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:10,783 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:10,823 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:10,823 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:10,823 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:10,824 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:10,824 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:10,824 INFO L87 Difference]: Start difference. First operand 206 states and 278 transitions. Second operand 4 states. [2020-07-28 19:02:11,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:11,851 INFO L93 Difference]: Finished difference Result 484 states and 665 transitions. [2020-07-28 19:02:11,851 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:11,852 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 34 [2020-07-28 19:02:11,852 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:11,852 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:11,854 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 282 transitions. [2020-07-28 19:02:11,855 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:11,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 282 transitions. [2020-07-28 19:02:11,857 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 282 transitions. [2020-07-28 19:02:12,178 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 282 edges. 282 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:12,187 INFO L225 Difference]: With dead ends: 484 [2020-07-28 19:02:12,187 INFO L226 Difference]: Without dead ends: 331 [2020-07-28 19:02:12,188 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:12,189 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 331 states. [2020-07-28 19:02:12,497 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 331 to 197. [2020-07-28 19:02:12,498 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:12,498 INFO L82 GeneralOperation]: Start isEquivalent. First operand 331 states. Second operand 197 states. [2020-07-28 19:02:12,498 INFO L74 IsIncluded]: Start isIncluded. First operand 331 states. Second operand 197 states. [2020-07-28 19:02:12,498 INFO L87 Difference]: Start difference. First operand 331 states. Second operand 197 states. [2020-07-28 19:02:12,509 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:12,510 INFO L93 Difference]: Finished difference Result 331 states and 452 transitions. [2020-07-28 19:02:12,510 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 452 transitions. [2020-07-28 19:02:12,511 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:12,511 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:12,511 INFO L74 IsIncluded]: Start isIncluded. First operand 197 states. Second operand 331 states. [2020-07-28 19:02:12,511 INFO L87 Difference]: Start difference. First operand 197 states. Second operand 331 states. [2020-07-28 19:02:12,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:12,521 INFO L93 Difference]: Finished difference Result 331 states and 452 transitions. [2020-07-28 19:02:12,522 INFO L276 IsEmpty]: Start isEmpty. Operand 331 states and 452 transitions. [2020-07-28 19:02:12,523 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:12,523 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:12,523 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:12,524 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:12,524 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 197 states. [2020-07-28 19:02:12,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197 states to 197 states and 266 transitions. [2020-07-28 19:02:12,530 INFO L78 Accepts]: Start accepts. Automaton has 197 states and 266 transitions. Word has length 34 [2020-07-28 19:02:12,530 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:12,530 INFO L479 AbstractCegarLoop]: Abstraction has 197 states and 266 transitions. [2020-07-28 19:02:12,530 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:12,530 INFO L276 IsEmpty]: Start isEmpty. Operand 197 states and 266 transitions. [2020-07-28 19:02:12,532 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2020-07-28 19:02:12,532 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:12,532 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:12,532 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:02:12,533 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:12,533 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:12,533 INFO L82 PathProgramCache]: Analyzing trace with hash 989595496, now seen corresponding path program 1 times [2020-07-28 19:02:12,533 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:12,534 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [857579624] [2020-07-28 19:02:12,534 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:12,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:12,641 INFO L280 TraceCheckUtils]: 0: Hoare triple {7766#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {7766#true} is VALID [2020-07-28 19:02:12,642 INFO L280 TraceCheckUtils]: 1: Hoare triple {7766#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {7766#true} is VALID [2020-07-28 19:02:12,642 INFO L280 TraceCheckUtils]: 2: Hoare triple {7766#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {7766#true} is VALID [2020-07-28 19:02:12,643 INFO L280 TraceCheckUtils]: 3: Hoare triple {7766#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {7766#true} is VALID [2020-07-28 19:02:12,643 INFO L280 TraceCheckUtils]: 4: Hoare triple {7766#true} assume 0 != main_~tmp~0; {7766#true} is VALID [2020-07-28 19:02:12,643 INFO L280 TraceCheckUtils]: 5: Hoare triple {7766#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {7766#true} is VALID [2020-07-28 19:02:12,643 INFO L280 TraceCheckUtils]: 6: Hoare triple {7766#true} assume !false; {7766#true} is VALID [2020-07-28 19:02:12,643 INFO L280 TraceCheckUtils]: 7: Hoare triple {7766#true} assume test_~splverifierCounter~0 < 4; {7766#true} is VALID [2020-07-28 19:02:12,644 INFO L280 TraceCheckUtils]: 8: Hoare triple {7766#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {7766#true} is VALID [2020-07-28 19:02:12,644 INFO L280 TraceCheckUtils]: 9: Hoare triple {7766#true} assume 0 != test_~tmp~5; {7766#true} is VALID [2020-07-28 19:02:12,644 INFO L280 TraceCheckUtils]: 10: Hoare triple {7766#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {7766#true} is VALID [2020-07-28 19:02:12,644 INFO L280 TraceCheckUtils]: 11: Hoare triple {7766#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {7766#true} is VALID [2020-07-28 19:02:12,644 INFO L280 TraceCheckUtils]: 12: Hoare triple {7766#true} assume !(0 != test_~tmp___0~1); {7766#true} is VALID [2020-07-28 19:02:12,645 INFO L280 TraceCheckUtils]: 13: Hoare triple {7766#true} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {7766#true} is VALID [2020-07-28 19:02:12,646 INFO L280 TraceCheckUtils]: 14: Hoare triple {7766#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {7768#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:12,647 INFO L280 TraceCheckUtils]: 15: Hoare triple {7768#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {7768#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:12,647 INFO L280 TraceCheckUtils]: 16: Hoare triple {7768#(= 1 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {7766#true} is VALID [2020-07-28 19:02:12,647 INFO L280 TraceCheckUtils]: 17: Hoare triple {7766#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret55, processEnvironment__wrappee__lowWaterSensor_~tmp~7;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~7; {7766#true} is VALID [2020-07-28 19:02:12,648 INFO L280 TraceCheckUtils]: 18: Hoare triple {7766#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {7766#true} is VALID [2020-07-28 19:02:12,648 INFO L280 TraceCheckUtils]: 19: Hoare triple {7766#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {7766#true} is VALID [2020-07-28 19:02:12,648 INFO L280 TraceCheckUtils]: 20: Hoare triple {7766#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {7766#true} is VALID [2020-07-28 19:02:12,648 INFO L280 TraceCheckUtils]: 21: Hoare triple {7766#true} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {7766#true} is VALID [2020-07-28 19:02:12,649 INFO L280 TraceCheckUtils]: 22: Hoare triple {7766#true} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {7766#true} is VALID [2020-07-28 19:02:12,649 INFO L280 TraceCheckUtils]: 23: Hoare triple {7766#true} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {7766#true} is VALID [2020-07-28 19:02:12,650 INFO L280 TraceCheckUtils]: 24: Hoare triple {7766#true} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {7766#true} is VALID [2020-07-28 19:02:12,651 INFO L280 TraceCheckUtils]: 25: Hoare triple {7766#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;~pumpRunning~0 := 1; {7769#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:02:12,652 INFO L280 TraceCheckUtils]: 26: Hoare triple {7769#(not (= 0 ~pumpRunning~0))} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {7769#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:02:12,653 INFO L280 TraceCheckUtils]: 27: Hoare triple {7769#(not (= 0 ~pumpRunning~0))} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {7769#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:02:12,654 INFO L280 TraceCheckUtils]: 28: Hoare triple {7769#(not (= 0 ~pumpRunning~0))} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {7769#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:02:12,656 INFO L280 TraceCheckUtils]: 29: Hoare triple {7769#(not (= 0 ~pumpRunning~0))} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {7769#(not (= 0 ~pumpRunning~0))} is VALID [2020-07-28 19:02:12,657 INFO L280 TraceCheckUtils]: 30: Hoare triple {7769#(not (= 0 ~pumpRunning~0))} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {7770#(not (= 0 |ULTIMATE.start_isPumpRunning_#res|))} is VALID [2020-07-28 19:02:12,660 INFO L280 TraceCheckUtils]: 31: Hoare triple {7770#(not (= 0 |ULTIMATE.start_isPumpRunning_#res|))} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {7771#(not (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~0 0))} is VALID [2020-07-28 19:02:12,662 INFO L280 TraceCheckUtils]: 32: Hoare triple {7771#(not (= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~0 0))} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {7767#false} is VALID [2020-07-28 19:02:12,662 INFO L280 TraceCheckUtils]: 33: Hoare triple {7767#false} assume !false; {7767#false} is VALID [2020-07-28 19:02:12,663 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:12,667 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [857579624] [2020-07-28 19:02:12,667 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:12,667 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-28 19:02:12,667 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [575074015] [2020-07-28 19:02:12,668 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 34 [2020-07-28 19:02:12,668 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:12,668 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:02:12,714 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:12,714 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:02:12,715 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:12,715 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:02:12,715 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:02:12,716 INFO L87 Difference]: Start difference. First operand 197 states and 266 transitions. Second operand 6 states. [2020-07-28 19:02:14,400 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:14,400 INFO L93 Difference]: Finished difference Result 555 states and 763 transitions. [2020-07-28 19:02:14,401 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2020-07-28 19:02:14,401 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 34 [2020-07-28 19:02:14,402 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:14,402 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:14,405 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 335 transitions. [2020-07-28 19:02:14,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:14,409 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 335 transitions. [2020-07-28 19:02:14,409 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 335 transitions. [2020-07-28 19:02:14,760 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 335 edges. 335 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:14,771 INFO L225 Difference]: With dead ends: 555 [2020-07-28 19:02:14,772 INFO L226 Difference]: Without dead ends: 364 [2020-07-28 19:02:14,773 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=54, Invalid=102, Unknown=0, NotChecked=0, Total=156 [2020-07-28 19:02:14,774 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 364 states. [2020-07-28 19:02:15,065 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 364 to 161. [2020-07-28 19:02:15,065 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:15,065 INFO L82 GeneralOperation]: Start isEquivalent. First operand 364 states. Second operand 161 states. [2020-07-28 19:02:15,066 INFO L74 IsIncluded]: Start isIncluded. First operand 364 states. Second operand 161 states. [2020-07-28 19:02:15,066 INFO L87 Difference]: Start difference. First operand 364 states. Second operand 161 states. [2020-07-28 19:02:15,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:15,077 INFO L93 Difference]: Finished difference Result 364 states and 485 transitions. [2020-07-28 19:02:15,077 INFO L276 IsEmpty]: Start isEmpty. Operand 364 states and 485 transitions. [2020-07-28 19:02:15,081 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:15,082 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:15,082 INFO L74 IsIncluded]: Start isIncluded. First operand 161 states. Second operand 364 states. [2020-07-28 19:02:15,082 INFO L87 Difference]: Start difference. First operand 161 states. Second operand 364 states. [2020-07-28 19:02:15,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:15,093 INFO L93 Difference]: Finished difference Result 364 states and 485 transitions. [2020-07-28 19:02:15,093 INFO L276 IsEmpty]: Start isEmpty. Operand 364 states and 485 transitions. [2020-07-28 19:02:15,094 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:15,094 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:15,095 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:15,095 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:15,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 161 states. [2020-07-28 19:02:15,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 161 states to 161 states and 210 transitions. [2020-07-28 19:02:15,102 INFO L78 Accepts]: Start accepts. Automaton has 161 states and 210 transitions. Word has length 34 [2020-07-28 19:02:15,102 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:15,102 INFO L479 AbstractCegarLoop]: Abstraction has 161 states and 210 transitions. [2020-07-28 19:02:15,102 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:15,103 INFO L276 IsEmpty]: Start isEmpty. Operand 161 states and 210 transitions. [2020-07-28 19:02:15,103 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2020-07-28 19:02:15,103 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:15,105 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:15,105 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:02:15,105 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:15,106 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:15,106 INFO L82 PathProgramCache]: Analyzing trace with hash -137800597, now seen corresponding path program 1 times [2020-07-28 19:02:15,106 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:15,107 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [755684589] [2020-07-28 19:02:15,107 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:15,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:15,203 INFO L280 TraceCheckUtils]: 0: Hoare triple {9510#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {9510#true} is VALID [2020-07-28 19:02:15,203 INFO L280 TraceCheckUtils]: 1: Hoare triple {9510#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {9510#true} is VALID [2020-07-28 19:02:15,204 INFO L280 TraceCheckUtils]: 2: Hoare triple {9510#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {9510#true} is VALID [2020-07-28 19:02:15,204 INFO L280 TraceCheckUtils]: 3: Hoare triple {9510#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {9510#true} is VALID [2020-07-28 19:02:15,205 INFO L280 TraceCheckUtils]: 4: Hoare triple {9510#true} assume 0 != main_~tmp~0; {9510#true} is VALID [2020-07-28 19:02:15,205 INFO L280 TraceCheckUtils]: 5: Hoare triple {9510#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {9510#true} is VALID [2020-07-28 19:02:15,205 INFO L280 TraceCheckUtils]: 6: Hoare triple {9510#true} assume !false; {9510#true} is VALID [2020-07-28 19:02:15,205 INFO L280 TraceCheckUtils]: 7: Hoare triple {9510#true} assume test_~splverifierCounter~0 < 4; {9510#true} is VALID [2020-07-28 19:02:15,205 INFO L280 TraceCheckUtils]: 8: Hoare triple {9510#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {9510#true} is VALID [2020-07-28 19:02:15,206 INFO L280 TraceCheckUtils]: 9: Hoare triple {9510#true} assume 0 != test_~tmp~5; {9510#true} is VALID [2020-07-28 19:02:15,206 INFO L280 TraceCheckUtils]: 10: Hoare triple {9510#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {9510#true} is VALID [2020-07-28 19:02:15,206 INFO L280 TraceCheckUtils]: 11: Hoare triple {9510#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {9510#true} is VALID [2020-07-28 19:02:15,206 INFO L280 TraceCheckUtils]: 12: Hoare triple {9510#true} assume !(0 != test_~tmp___0~1); {9510#true} is VALID [2020-07-28 19:02:15,207 INFO L280 TraceCheckUtils]: 13: Hoare triple {9510#true} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {9510#true} is VALID [2020-07-28 19:02:15,209 INFO L280 TraceCheckUtils]: 14: Hoare triple {9510#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {9512#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:15,216 INFO L280 TraceCheckUtils]: 15: Hoare triple {9512#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {9512#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:15,216 INFO L280 TraceCheckUtils]: 16: Hoare triple {9512#(= 1 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {9510#true} is VALID [2020-07-28 19:02:15,217 INFO L280 TraceCheckUtils]: 17: Hoare triple {9510#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret55, processEnvironment__wrappee__lowWaterSensor_~tmp~7;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~7; {9510#true} is VALID [2020-07-28 19:02:15,217 INFO L280 TraceCheckUtils]: 18: Hoare triple {9510#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {9510#true} is VALID [2020-07-28 19:02:15,217 INFO L280 TraceCheckUtils]: 19: Hoare triple {9510#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {9510#true} is VALID [2020-07-28 19:02:15,217 INFO L280 TraceCheckUtils]: 20: Hoare triple {9510#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {9510#true} is VALID [2020-07-28 19:02:15,217 INFO L280 TraceCheckUtils]: 21: Hoare triple {9510#true} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {9510#true} is VALID [2020-07-28 19:02:15,219 INFO L280 TraceCheckUtils]: 22: Hoare triple {9510#true} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {9513#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))} is VALID [2020-07-28 19:02:15,220 INFO L280 TraceCheckUtils]: 23: Hoare triple {9513#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {9514#(not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))} is VALID [2020-07-28 19:02:15,221 INFO L280 TraceCheckUtils]: 24: Hoare triple {9514#(not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {9515#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6))} is VALID [2020-07-28 19:02:15,222 INFO L280 TraceCheckUtils]: 25: Hoare triple {9515#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6))} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~6); {9511#false} is VALID [2020-07-28 19:02:15,223 INFO L280 TraceCheckUtils]: 26: Hoare triple {9511#false} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {9511#false} is VALID [2020-07-28 19:02:15,223 INFO L280 TraceCheckUtils]: 27: Hoare triple {9511#false} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {9511#false} is VALID [2020-07-28 19:02:15,223 INFO L280 TraceCheckUtils]: 28: Hoare triple {9511#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {9511#false} is VALID [2020-07-28 19:02:15,223 INFO L280 TraceCheckUtils]: 29: Hoare triple {9511#false} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {9511#false} is VALID [2020-07-28 19:02:15,224 INFO L280 TraceCheckUtils]: 30: Hoare triple {9511#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {9511#false} is VALID [2020-07-28 19:02:15,224 INFO L280 TraceCheckUtils]: 31: Hoare triple {9511#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {9511#false} is VALID [2020-07-28 19:02:15,224 INFO L280 TraceCheckUtils]: 32: Hoare triple {9511#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {9511#false} is VALID [2020-07-28 19:02:15,224 INFO L280 TraceCheckUtils]: 33: Hoare triple {9511#false} assume !false; {9511#false} is VALID [2020-07-28 19:02:15,227 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:15,227 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [755684589] [2020-07-28 19:02:15,227 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:15,227 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-28 19:02:15,227 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [921230799] [2020-07-28 19:02:15,228 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 34 [2020-07-28 19:02:15,228 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:15,229 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:02:15,276 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:15,276 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:02:15,277 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:15,277 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:02:15,277 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:02:15,277 INFO L87 Difference]: Start difference. First operand 161 states and 210 transitions. Second operand 6 states. [2020-07-28 19:02:16,599 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,599 INFO L93 Difference]: Finished difference Result 413 states and 547 transitions. [2020-07-28 19:02:16,599 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:02:16,599 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 34 [2020-07-28 19:02:16,599 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:16,600 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:16,601 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 208 transitions. [2020-07-28 19:02:16,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:16,601 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 208 transitions. [2020-07-28 19:02:16,602 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 208 transitions. [2020-07-28 19:02:16,853 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 208 edges. 208 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:16,860 INFO L225 Difference]: With dead ends: 413 [2020-07-28 19:02:16,860 INFO L226 Difference]: Without dead ends: 258 [2020-07-28 19:02:16,861 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:02:16,862 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 258 states. [2020-07-28 19:02:17,180 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 258 to 149. [2020-07-28 19:02:17,181 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:17,181 INFO L82 GeneralOperation]: Start isEquivalent. First operand 258 states. Second operand 149 states. [2020-07-28 19:02:17,181 INFO L74 IsIncluded]: Start isIncluded. First operand 258 states. Second operand 149 states. [2020-07-28 19:02:17,181 INFO L87 Difference]: Start difference. First operand 258 states. Second operand 149 states. [2020-07-28 19:02:17,187 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:17,188 INFO L93 Difference]: Finished difference Result 258 states and 340 transitions. [2020-07-28 19:02:17,188 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 340 transitions. [2020-07-28 19:02:17,189 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:17,189 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:17,189 INFO L74 IsIncluded]: Start isIncluded. First operand 149 states. Second operand 258 states. [2020-07-28 19:02:17,189 INFO L87 Difference]: Start difference. First operand 149 states. Second operand 258 states. [2020-07-28 19:02:17,197 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:17,197 INFO L93 Difference]: Finished difference Result 258 states and 340 transitions. [2020-07-28 19:02:17,197 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 340 transitions. [2020-07-28 19:02:17,198 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:17,198 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:17,199 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:17,199 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:17,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149 states. [2020-07-28 19:02:17,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149 states to 149 states and 191 transitions. [2020-07-28 19:02:17,202 INFO L78 Accepts]: Start accepts. Automaton has 149 states and 191 transitions. Word has length 34 [2020-07-28 19:02:17,203 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:17,203 INFO L479 AbstractCegarLoop]: Abstraction has 149 states and 191 transitions. [2020-07-28 19:02:17,203 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:17,203 INFO L276 IsEmpty]: Start isEmpty. Operand 149 states and 191 transitions. [2020-07-28 19:02:17,204 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2020-07-28 19:02:17,204 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:17,205 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:17,205 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-28 19:02:17,205 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:17,206 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:17,206 INFO L82 PathProgramCache]: Analyzing trace with hash 785405984, now seen corresponding path program 1 times [2020-07-28 19:02:17,206 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:17,207 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1852599832] [2020-07-28 19:02:17,207 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:17,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:17,282 INFO L280 TraceCheckUtils]: 0: Hoare triple {10819#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {10819#true} is VALID [2020-07-28 19:02:17,282 INFO L280 TraceCheckUtils]: 1: Hoare triple {10819#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {10819#true} is VALID [2020-07-28 19:02:17,283 INFO L280 TraceCheckUtils]: 2: Hoare triple {10819#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {10819#true} is VALID [2020-07-28 19:02:17,283 INFO L280 TraceCheckUtils]: 3: Hoare triple {10819#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {10819#true} is VALID [2020-07-28 19:02:17,284 INFO L280 TraceCheckUtils]: 4: Hoare triple {10819#true} assume 0 != main_~tmp~0; {10819#true} is VALID [2020-07-28 19:02:17,284 INFO L280 TraceCheckUtils]: 5: Hoare triple {10819#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {10819#true} is VALID [2020-07-28 19:02:17,284 INFO L280 TraceCheckUtils]: 6: Hoare triple {10819#true} assume !false; {10819#true} is VALID [2020-07-28 19:02:17,284 INFO L280 TraceCheckUtils]: 7: Hoare triple {10819#true} assume test_~splverifierCounter~0 < 4; {10819#true} is VALID [2020-07-28 19:02:17,284 INFO L280 TraceCheckUtils]: 8: Hoare triple {10819#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {10819#true} is VALID [2020-07-28 19:02:17,285 INFO L280 TraceCheckUtils]: 9: Hoare triple {10819#true} assume !(0 != test_~tmp~5); {10819#true} is VALID [2020-07-28 19:02:17,285 INFO L280 TraceCheckUtils]: 10: Hoare triple {10819#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {10819#true} is VALID [2020-07-28 19:02:17,285 INFO L280 TraceCheckUtils]: 11: Hoare triple {10819#true} assume !(0 != test_~tmp___0~1); {10819#true} is VALID [2020-07-28 19:02:17,286 INFO L280 TraceCheckUtils]: 12: Hoare triple {10819#true} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {10819#true} is VALID [2020-07-28 19:02:17,287 INFO L280 TraceCheckUtils]: 13: Hoare triple {10819#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {10821#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,288 INFO L280 TraceCheckUtils]: 14: Hoare triple {10821#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {10821#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:17,288 INFO L280 TraceCheckUtils]: 15: Hoare triple {10821#(= 1 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {10819#true} is VALID [2020-07-28 19:02:17,288 INFO L280 TraceCheckUtils]: 16: Hoare triple {10819#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret55, processEnvironment__wrappee__lowWaterSensor_~tmp~7;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~7; {10819#true} is VALID [2020-07-28 19:02:17,288 INFO L280 TraceCheckUtils]: 17: Hoare triple {10819#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {10819#true} is VALID [2020-07-28 19:02:17,289 INFO L280 TraceCheckUtils]: 18: Hoare triple {10819#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {10819#true} is VALID [2020-07-28 19:02:17,291 INFO L280 TraceCheckUtils]: 19: Hoare triple {10819#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~2 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {10822#(not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))} is VALID [2020-07-28 19:02:17,292 INFO L280 TraceCheckUtils]: 20: Hoare triple {10822#(not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {10823#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9))} is VALID [2020-07-28 19:02:17,292 INFO L280 TraceCheckUtils]: 21: Hoare triple {10823#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9))} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {10820#false} is VALID [2020-07-28 19:02:17,292 INFO L280 TraceCheckUtils]: 22: Hoare triple {10820#false} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {10820#false} is VALID [2020-07-28 19:02:17,293 INFO L280 TraceCheckUtils]: 23: Hoare triple {10820#false} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {10820#false} is VALID [2020-07-28 19:02:17,293 INFO L280 TraceCheckUtils]: 24: Hoare triple {10820#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;~pumpRunning~0 := 1; {10820#false} is VALID [2020-07-28 19:02:17,293 INFO L280 TraceCheckUtils]: 25: Hoare triple {10820#false} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {10820#false} is VALID [2020-07-28 19:02:17,293 INFO L280 TraceCheckUtils]: 26: Hoare triple {10820#false} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {10820#false} is VALID [2020-07-28 19:02:17,293 INFO L280 TraceCheckUtils]: 27: Hoare triple {10820#false} assume 0 != __utac_acc__Specification3_spec__1_~tmp~1; {10820#false} is VALID [2020-07-28 19:02:17,294 INFO L280 TraceCheckUtils]: 28: Hoare triple {10820#false} assume !false; {10820#false} is VALID [2020-07-28 19:02:17,294 INFO L280 TraceCheckUtils]: 29: Hoare triple {10820#false} assume test_~splverifierCounter~0 < 4; {10820#false} is VALID [2020-07-28 19:02:17,295 INFO L280 TraceCheckUtils]: 30: Hoare triple {10820#false} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {10820#false} is VALID [2020-07-28 19:02:17,295 INFO L280 TraceCheckUtils]: 31: Hoare triple {10820#false} assume !(0 != test_~tmp~5); {10820#false} is VALID [2020-07-28 19:02:17,295 INFO L280 TraceCheckUtils]: 32: Hoare triple {10820#false} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {10820#false} is VALID [2020-07-28 19:02:17,295 INFO L280 TraceCheckUtils]: 33: Hoare triple {10820#false} assume !(0 != test_~tmp___0~1); {10820#false} is VALID [2020-07-28 19:02:17,295 INFO L280 TraceCheckUtils]: 34: Hoare triple {10820#false} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {10820#false} is VALID [2020-07-28 19:02:17,296 INFO L280 TraceCheckUtils]: 35: Hoare triple {10820#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {10820#false} is VALID [2020-07-28 19:02:17,296 INFO L280 TraceCheckUtils]: 36: Hoare triple {10820#false} assume 0 != ~pumpRunning~0; {10820#false} is VALID [2020-07-28 19:02:17,296 INFO L280 TraceCheckUtils]: 37: Hoare triple {10820#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {10820#false} is VALID [2020-07-28 19:02:17,296 INFO L280 TraceCheckUtils]: 38: Hoare triple {10820#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {10820#false} is VALID [2020-07-28 19:02:17,297 INFO L280 TraceCheckUtils]: 39: Hoare triple {10820#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {10820#false} is VALID [2020-07-28 19:02:17,298 INFO L280 TraceCheckUtils]: 40: Hoare triple {10820#false} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {10820#false} is VALID [2020-07-28 19:02:17,298 INFO L280 TraceCheckUtils]: 41: Hoare triple {10820#false} processEnvironment_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret56 && processEnvironment_#t~ret56 <= 2147483647;processEnvironment_~tmp~8 := processEnvironment_#t~ret56;havoc processEnvironment_#t~ret56; {10820#false} is VALID [2020-07-28 19:02:17,298 INFO L280 TraceCheckUtils]: 42: Hoare triple {10820#false} assume 0 != processEnvironment_~tmp~8;~pumpRunning~0 := 0; {10820#false} is VALID [2020-07-28 19:02:17,298 INFO L280 TraceCheckUtils]: 43: Hoare triple {10820#false} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {10820#false} is VALID [2020-07-28 19:02:17,299 INFO L280 TraceCheckUtils]: 44: Hoare triple {10820#false} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {10820#false} is VALID [2020-07-28 19:02:17,299 INFO L280 TraceCheckUtils]: 45: Hoare triple {10820#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {10820#false} is VALID [2020-07-28 19:02:17,299 INFO L280 TraceCheckUtils]: 46: Hoare triple {10820#false} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {10820#false} is VALID [2020-07-28 19:02:17,299 INFO L280 TraceCheckUtils]: 47: Hoare triple {10820#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {10820#false} is VALID [2020-07-28 19:02:17,301 INFO L280 TraceCheckUtils]: 48: Hoare triple {10820#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {10820#false} is VALID [2020-07-28 19:02:17,301 INFO L280 TraceCheckUtils]: 49: Hoare triple {10820#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {10820#false} is VALID [2020-07-28 19:02:17,302 INFO L280 TraceCheckUtils]: 50: Hoare triple {10820#false} assume !false; {10820#false} is VALID [2020-07-28 19:02:17,304 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:02:17,304 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1852599832] [2020-07-28 19:02:17,305 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:17,305 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:17,305 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [693536654] [2020-07-28 19:02:17,306 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 51 [2020-07-28 19:02:17,306 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:17,306 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:17,385 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:17,385 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:17,385 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:17,386 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:17,386 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:17,386 INFO L87 Difference]: Start difference. First operand 149 states and 191 transitions. Second operand 5 states. [2020-07-28 19:02:18,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:18,346 INFO L93 Difference]: Finished difference Result 301 states and 393 transitions. [2020-07-28 19:02:18,346 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:18,346 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 51 [2020-07-28 19:02:18,347 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:18,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:18,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 161 transitions. [2020-07-28 19:02:18,348 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:18,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 161 transitions. [2020-07-28 19:02:18,348 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 161 transitions. [2020-07-28 19:02:18,546 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 161 edges. 161 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:18,550 INFO L225 Difference]: With dead ends: 301 [2020-07-28 19:02:18,550 INFO L226 Difference]: Without dead ends: 185 [2020-07-28 19:02:18,551 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:18,551 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2020-07-28 19:02:18,858 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 133. [2020-07-28 19:02:18,859 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:18,859 INFO L82 GeneralOperation]: Start isEquivalent. First operand 185 states. Second operand 133 states. [2020-07-28 19:02:18,859 INFO L74 IsIncluded]: Start isIncluded. First operand 185 states. Second operand 133 states. [2020-07-28 19:02:18,859 INFO L87 Difference]: Start difference. First operand 185 states. Second operand 133 states. [2020-07-28 19:02:18,863 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:18,863 INFO L93 Difference]: Finished difference Result 185 states and 240 transitions. [2020-07-28 19:02:18,864 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 240 transitions. [2020-07-28 19:02:18,864 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:18,864 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:18,865 INFO L74 IsIncluded]: Start isIncluded. First operand 133 states. Second operand 185 states. [2020-07-28 19:02:18,865 INFO L87 Difference]: Start difference. First operand 133 states. Second operand 185 states. [2020-07-28 19:02:18,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:18,869 INFO L93 Difference]: Finished difference Result 185 states and 240 transitions. [2020-07-28 19:02:18,869 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 240 transitions. [2020-07-28 19:02:18,869 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:18,870 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:18,870 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:18,870 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:18,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 133 states. [2020-07-28 19:02:18,873 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 133 states to 133 states and 171 transitions. [2020-07-28 19:02:18,873 INFO L78 Accepts]: Start accepts. Automaton has 133 states and 171 transitions. Word has length 51 [2020-07-28 19:02:18,873 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:18,873 INFO L479 AbstractCegarLoop]: Abstraction has 133 states and 171 transitions. [2020-07-28 19:02:18,873 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:18,874 INFO L276 IsEmpty]: Start isEmpty. Operand 133 states and 171 transitions. [2020-07-28 19:02:18,874 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2020-07-28 19:02:18,874 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:18,875 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:18,875 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:02:18,875 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:18,876 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:18,876 INFO L82 PathProgramCache]: Analyzing trace with hash 282802848, now seen corresponding path program 1 times [2020-07-28 19:02:18,876 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:18,876 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2086866588] [2020-07-28 19:02:18,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:18,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:18,942 INFO L280 TraceCheckUtils]: 0: Hoare triple {11799#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,943 INFO L280 TraceCheckUtils]: 1: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,944 INFO L280 TraceCheckUtils]: 2: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,944 INFO L280 TraceCheckUtils]: 3: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,945 INFO L280 TraceCheckUtils]: 4: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~0; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,945 INFO L280 TraceCheckUtils]: 5: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,946 INFO L280 TraceCheckUtils]: 6: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume !false; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,947 INFO L280 TraceCheckUtils]: 7: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,947 INFO L280 TraceCheckUtils]: 8: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,948 INFO L280 TraceCheckUtils]: 9: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp~5; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,948 INFO L280 TraceCheckUtils]: 10: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,949 INFO L280 TraceCheckUtils]: 11: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,949 INFO L280 TraceCheckUtils]: 12: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~1); {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,950 INFO L280 TraceCheckUtils]: 13: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,951 INFO L280 TraceCheckUtils]: 14: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,951 INFO L280 TraceCheckUtils]: 15: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,952 INFO L280 TraceCheckUtils]: 16: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,952 INFO L280 TraceCheckUtils]: 17: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret55, processEnvironment__wrappee__lowWaterSensor_~tmp~7;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~7; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,953 INFO L280 TraceCheckUtils]: 18: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,953 INFO L280 TraceCheckUtils]: 19: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,954 INFO L280 TraceCheckUtils]: 20: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,955 INFO L280 TraceCheckUtils]: 21: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,955 INFO L280 TraceCheckUtils]: 22: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,956 INFO L280 TraceCheckUtils]: 23: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,956 INFO L280 TraceCheckUtils]: 24: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,957 INFO L280 TraceCheckUtils]: 25: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;~pumpRunning~0 := 1; {11801#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:18,958 INFO L280 TraceCheckUtils]: 26: Hoare triple {11801#(= 0 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11802#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:18,958 INFO L280 TraceCheckUtils]: 27: Hoare triple {11802#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {11803#(= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~1)} is VALID [2020-07-28 19:02:18,959 INFO L280 TraceCheckUtils]: 28: Hoare triple {11803#(= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~1)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~1; {11800#false} is VALID [2020-07-28 19:02:18,959 INFO L280 TraceCheckUtils]: 29: Hoare triple {11800#false} assume !false; {11800#false} is VALID [2020-07-28 19:02:18,959 INFO L280 TraceCheckUtils]: 30: Hoare triple {11800#false} assume test_~splverifierCounter~0 < 4; {11800#false} is VALID [2020-07-28 19:02:18,960 INFO L280 TraceCheckUtils]: 31: Hoare triple {11800#false} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {11800#false} is VALID [2020-07-28 19:02:18,960 INFO L280 TraceCheckUtils]: 32: Hoare triple {11800#false} assume !(0 != test_~tmp~5); {11800#false} is VALID [2020-07-28 19:02:18,960 INFO L280 TraceCheckUtils]: 33: Hoare triple {11800#false} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {11800#false} is VALID [2020-07-28 19:02:18,960 INFO L280 TraceCheckUtils]: 34: Hoare triple {11800#false} assume !(0 != test_~tmp___0~1); {11800#false} is VALID [2020-07-28 19:02:18,960 INFO L280 TraceCheckUtils]: 35: Hoare triple {11800#false} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {11800#false} is VALID [2020-07-28 19:02:18,960 INFO L280 TraceCheckUtils]: 36: Hoare triple {11800#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {11800#false} is VALID [2020-07-28 19:02:18,961 INFO L280 TraceCheckUtils]: 37: Hoare triple {11800#false} assume 0 != ~pumpRunning~0; {11800#false} is VALID [2020-07-28 19:02:18,961 INFO L280 TraceCheckUtils]: 38: Hoare triple {11800#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11800#false} is VALID [2020-07-28 19:02:18,961 INFO L280 TraceCheckUtils]: 39: Hoare triple {11800#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {11800#false} is VALID [2020-07-28 19:02:18,961 INFO L280 TraceCheckUtils]: 40: Hoare triple {11800#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11800#false} is VALID [2020-07-28 19:02:18,961 INFO L280 TraceCheckUtils]: 41: Hoare triple {11800#false} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {11800#false} is VALID [2020-07-28 19:02:18,962 INFO L280 TraceCheckUtils]: 42: Hoare triple {11800#false} processEnvironment_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret56 && processEnvironment_#t~ret56 <= 2147483647;processEnvironment_~tmp~8 := processEnvironment_#t~ret56;havoc processEnvironment_#t~ret56; {11800#false} is VALID [2020-07-28 19:02:18,962 INFO L280 TraceCheckUtils]: 43: Hoare triple {11800#false} assume 0 != processEnvironment_~tmp~8;~pumpRunning~0 := 0; {11800#false} is VALID [2020-07-28 19:02:18,962 INFO L280 TraceCheckUtils]: 44: Hoare triple {11800#false} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {11800#false} is VALID [2020-07-28 19:02:18,963 INFO L280 TraceCheckUtils]: 45: Hoare triple {11800#false} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {11800#false} is VALID [2020-07-28 19:02:18,963 INFO L280 TraceCheckUtils]: 46: Hoare triple {11800#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {11800#false} is VALID [2020-07-28 19:02:18,963 INFO L280 TraceCheckUtils]: 47: Hoare triple {11800#false} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {11800#false} is VALID [2020-07-28 19:02:18,964 INFO L280 TraceCheckUtils]: 48: Hoare triple {11800#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {11800#false} is VALID [2020-07-28 19:02:18,964 INFO L280 TraceCheckUtils]: 49: Hoare triple {11800#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {11800#false} is VALID [2020-07-28 19:02:18,964 INFO L280 TraceCheckUtils]: 50: Hoare triple {11800#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {11800#false} is VALID [2020-07-28 19:02:18,965 INFO L280 TraceCheckUtils]: 51: Hoare triple {11800#false} assume !false; {11800#false} is VALID [2020-07-28 19:02:18,967 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:18,968 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2086866588] [2020-07-28 19:02:18,968 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:18,968 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:18,968 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [403427370] [2020-07-28 19:02:18,969 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 52 [2020-07-28 19:02:18,969 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:18,969 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:19,024 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 52 edges. 52 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:19,024 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:19,024 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:19,024 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:19,024 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:19,025 INFO L87 Difference]: Start difference. First operand 133 states and 171 transitions. Second operand 5 states. [2020-07-28 19:02:21,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:21,076 INFO L93 Difference]: Finished difference Result 684 states and 873 transitions. [2020-07-28 19:02:21,076 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 19:02:21,077 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 52 [2020-07-28 19:02:21,077 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:21,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:21,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 329 transitions. [2020-07-28 19:02:21,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:21,081 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 329 transitions. [2020-07-28 19:02:21,081 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 329 transitions. [2020-07-28 19:02:21,477 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 329 edges. 329 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:21,495 INFO L225 Difference]: With dead ends: 684 [2020-07-28 19:02:21,495 INFO L226 Difference]: Without dead ends: 557 [2020-07-28 19:02:21,496 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 8 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:02:21,497 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 557 states. [2020-07-28 19:02:22,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 557 to 258. [2020-07-28 19:02:22,176 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:22,176 INFO L82 GeneralOperation]: Start isEquivalent. First operand 557 states. Second operand 258 states. [2020-07-28 19:02:22,176 INFO L74 IsIncluded]: Start isIncluded. First operand 557 states. Second operand 258 states. [2020-07-28 19:02:22,176 INFO L87 Difference]: Start difference. First operand 557 states. Second operand 258 states. [2020-07-28 19:02:22,192 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:22,192 INFO L93 Difference]: Finished difference Result 557 states and 697 transitions. [2020-07-28 19:02:22,193 INFO L276 IsEmpty]: Start isEmpty. Operand 557 states and 697 transitions. [2020-07-28 19:02:22,194 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:22,194 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:22,195 INFO L74 IsIncluded]: Start isIncluded. First operand 258 states. Second operand 557 states. [2020-07-28 19:02:22,195 INFO L87 Difference]: Start difference. First operand 258 states. Second operand 557 states. [2020-07-28 19:02:22,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:22,210 INFO L93 Difference]: Finished difference Result 557 states and 697 transitions. [2020-07-28 19:02:22,210 INFO L276 IsEmpty]: Start isEmpty. Operand 557 states and 697 transitions. [2020-07-28 19:02:22,212 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:22,212 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:22,212 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:22,212 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:22,213 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 258 states. [2020-07-28 19:02:22,219 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 258 states to 258 states and 326 transitions. [2020-07-28 19:02:22,219 INFO L78 Accepts]: Start accepts. Automaton has 258 states and 326 transitions. Word has length 52 [2020-07-28 19:02:22,220 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:22,220 INFO L479 AbstractCegarLoop]: Abstraction has 258 states and 326 transitions. [2020-07-28 19:02:22,220 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:22,220 INFO L276 IsEmpty]: Start isEmpty. Operand 258 states and 326 transitions. [2020-07-28 19:02:22,221 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2020-07-28 19:02:22,221 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:22,222 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:22,222 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-28 19:02:22,222 INFO L427 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:22,223 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:22,223 INFO L82 PathProgramCache]: Analyzing trace with hash 140278630, now seen corresponding path program 1 times [2020-07-28 19:02:22,223 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:22,223 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1859857340] [2020-07-28 19:02:22,224 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:22,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:22,312 INFO L280 TraceCheckUtils]: 0: Hoare triple {14231#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {14231#true} is VALID [2020-07-28 19:02:22,312 INFO L280 TraceCheckUtils]: 1: Hoare triple {14231#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {14231#true} is VALID [2020-07-28 19:02:22,313 INFO L280 TraceCheckUtils]: 2: Hoare triple {14231#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {14231#true} is VALID [2020-07-28 19:02:22,313 INFO L280 TraceCheckUtils]: 3: Hoare triple {14231#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {14231#true} is VALID [2020-07-28 19:02:22,313 INFO L280 TraceCheckUtils]: 4: Hoare triple {14231#true} assume 0 != main_~tmp~0; {14231#true} is VALID [2020-07-28 19:02:22,313 INFO L280 TraceCheckUtils]: 5: Hoare triple {14231#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {14231#true} is VALID [2020-07-28 19:02:22,314 INFO L280 TraceCheckUtils]: 6: Hoare triple {14231#true} assume !false; {14231#true} is VALID [2020-07-28 19:02:22,314 INFO L280 TraceCheckUtils]: 7: Hoare triple {14231#true} assume test_~splverifierCounter~0 < 4; {14231#true} is VALID [2020-07-28 19:02:22,314 INFO L280 TraceCheckUtils]: 8: Hoare triple {14231#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {14231#true} is VALID [2020-07-28 19:02:22,315 INFO L280 TraceCheckUtils]: 9: Hoare triple {14231#true} assume 0 != test_~tmp~5; {14231#true} is VALID [2020-07-28 19:02:22,315 INFO L280 TraceCheckUtils]: 10: Hoare triple {14231#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {14231#true} is VALID [2020-07-28 19:02:22,315 INFO L280 TraceCheckUtils]: 11: Hoare triple {14231#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {14231#true} is VALID [2020-07-28 19:02:22,316 INFO L280 TraceCheckUtils]: 12: Hoare triple {14231#true} assume 0 != test_~tmp___0~1; {14231#true} is VALID [2020-07-28 19:02:22,317 INFO L280 TraceCheckUtils]: 13: Hoare triple {14231#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,318 INFO L280 TraceCheckUtils]: 14: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,318 INFO L280 TraceCheckUtils]: 15: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,319 INFO L280 TraceCheckUtils]: 16: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,320 INFO L280 TraceCheckUtils]: 17: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,320 INFO L280 TraceCheckUtils]: 18: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret55, processEnvironment__wrappee__lowWaterSensor_~tmp~7;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~7; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,321 INFO L280 TraceCheckUtils]: 19: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,322 INFO L280 TraceCheckUtils]: 20: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,322 INFO L280 TraceCheckUtils]: 21: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,323 INFO L280 TraceCheckUtils]: 22: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,324 INFO L280 TraceCheckUtils]: 23: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,324 INFO L280 TraceCheckUtils]: 24: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,325 INFO L280 TraceCheckUtils]: 25: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,326 INFO L280 TraceCheckUtils]: 26: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;~pumpRunning~0 := 1; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,326 INFO L280 TraceCheckUtils]: 27: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,327 INFO L280 TraceCheckUtils]: 28: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,328 INFO L280 TraceCheckUtils]: 29: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~1; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,329 INFO L280 TraceCheckUtils]: 30: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume !false; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,329 INFO L280 TraceCheckUtils]: 31: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,330 INFO L280 TraceCheckUtils]: 32: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,331 INFO L280 TraceCheckUtils]: 33: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp~5); {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,332 INFO L280 TraceCheckUtils]: 34: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,332 INFO L280 TraceCheckUtils]: 35: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~1); {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,333 INFO L280 TraceCheckUtils]: 36: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,335 INFO L280 TraceCheckUtils]: 37: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,336 INFO L280 TraceCheckUtils]: 38: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,336 INFO L280 TraceCheckUtils]: 39: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,337 INFO L280 TraceCheckUtils]: 40: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,338 INFO L280 TraceCheckUtils]: 41: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,339 INFO L280 TraceCheckUtils]: 42: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,339 INFO L280 TraceCheckUtils]: 43: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} processEnvironment_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret56 && processEnvironment_#t~ret56 <= 2147483647;processEnvironment_~tmp~8 := processEnvironment_#t~ret56;havoc processEnvironment_#t~ret56; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,342 INFO L280 TraceCheckUtils]: 44: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} assume 0 != processEnvironment_~tmp~8;~pumpRunning~0 := 0; {14233#(= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,343 INFO L280 TraceCheckUtils]: 45: Hoare triple {14233#(= 1 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {14234#(= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:22,344 INFO L280 TraceCheckUtils]: 46: Hoare triple {14234#(= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {14235#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~1)} is VALID [2020-07-28 19:02:22,344 INFO L280 TraceCheckUtils]: 47: Hoare triple {14235#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {14232#false} is VALID [2020-07-28 19:02:22,345 INFO L280 TraceCheckUtils]: 48: Hoare triple {14232#false} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {14232#false} is VALID [2020-07-28 19:02:22,345 INFO L280 TraceCheckUtils]: 49: Hoare triple {14232#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {14232#false} is VALID [2020-07-28 19:02:22,345 INFO L280 TraceCheckUtils]: 50: Hoare triple {14232#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {14232#false} is VALID [2020-07-28 19:02:22,345 INFO L280 TraceCheckUtils]: 51: Hoare triple {14232#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {14232#false} is VALID [2020-07-28 19:02:22,346 INFO L280 TraceCheckUtils]: 52: Hoare triple {14232#false} assume !false; {14232#false} is VALID [2020-07-28 19:02:22,352 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 19:02:22,352 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1859857340] [2020-07-28 19:02:22,353 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1123485733] [2020-07-28 19:02:22,353 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:02:22,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:22,521 INFO L263 TraceCheckSpWp]: Trace formula consists of 414 conjuncts, 5 conjunts are in the unsatisfiable core [2020-07-28 19:02:22,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:22,584 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:02:22,820 INFO L280 TraceCheckUtils]: 0: Hoare triple {14231#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {14231#true} is VALID [2020-07-28 19:02:22,820 INFO L280 TraceCheckUtils]: 1: Hoare triple {14231#true} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {14231#true} is VALID [2020-07-28 19:02:22,821 INFO L280 TraceCheckUtils]: 2: Hoare triple {14231#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {14231#true} is VALID [2020-07-28 19:02:22,821 INFO L280 TraceCheckUtils]: 3: Hoare triple {14231#true} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {14231#true} is VALID [2020-07-28 19:02:22,821 INFO L280 TraceCheckUtils]: 4: Hoare triple {14231#true} assume 0 != main_~tmp~0; {14231#true} is VALID [2020-07-28 19:02:22,821 INFO L280 TraceCheckUtils]: 5: Hoare triple {14231#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {14231#true} is VALID [2020-07-28 19:02:22,822 INFO L280 TraceCheckUtils]: 6: Hoare triple {14231#true} assume !false; {14231#true} is VALID [2020-07-28 19:02:22,822 INFO L280 TraceCheckUtils]: 7: Hoare triple {14231#true} assume test_~splverifierCounter~0 < 4; {14231#true} is VALID [2020-07-28 19:02:22,822 INFO L280 TraceCheckUtils]: 8: Hoare triple {14231#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {14231#true} is VALID [2020-07-28 19:02:22,822 INFO L280 TraceCheckUtils]: 9: Hoare triple {14231#true} assume 0 != test_~tmp~5; {14231#true} is VALID [2020-07-28 19:02:22,822 INFO L280 TraceCheckUtils]: 10: Hoare triple {14231#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {14231#true} is VALID [2020-07-28 19:02:22,823 INFO L280 TraceCheckUtils]: 11: Hoare triple {14231#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {14231#true} is VALID [2020-07-28 19:02:22,823 INFO L280 TraceCheckUtils]: 12: Hoare triple {14231#true} assume 0 != test_~tmp___0~1; {14231#true} is VALID [2020-07-28 19:02:22,823 INFO L280 TraceCheckUtils]: 13: Hoare triple {14231#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,824 INFO L280 TraceCheckUtils]: 14: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,824 INFO L280 TraceCheckUtils]: 15: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,825 INFO L280 TraceCheckUtils]: 16: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,825 INFO L280 TraceCheckUtils]: 17: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,825 INFO L280 TraceCheckUtils]: 18: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret55, processEnvironment__wrappee__lowWaterSensor_~tmp~7;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~7; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,826 INFO L280 TraceCheckUtils]: 19: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,826 INFO L280 TraceCheckUtils]: 20: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,827 INFO L280 TraceCheckUtils]: 21: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,827 INFO L280 TraceCheckUtils]: 22: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,827 INFO L280 TraceCheckUtils]: 23: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,828 INFO L280 TraceCheckUtils]: 24: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,828 INFO L280 TraceCheckUtils]: 25: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,829 INFO L280 TraceCheckUtils]: 26: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;~pumpRunning~0 := 1; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,829 INFO L280 TraceCheckUtils]: 27: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,830 INFO L280 TraceCheckUtils]: 28: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,834 INFO L280 TraceCheckUtils]: 29: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~1; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,835 INFO L280 TraceCheckUtils]: 30: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume !false; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,836 INFO L280 TraceCheckUtils]: 31: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,836 INFO L280 TraceCheckUtils]: 32: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,837 INFO L280 TraceCheckUtils]: 33: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp~5); {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,838 INFO L280 TraceCheckUtils]: 34: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,839 INFO L280 TraceCheckUtils]: 35: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~1); {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,839 INFO L280 TraceCheckUtils]: 36: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,840 INFO L280 TraceCheckUtils]: 37: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,841 INFO L280 TraceCheckUtils]: 38: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,842 INFO L280 TraceCheckUtils]: 39: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,842 INFO L280 TraceCheckUtils]: 40: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,843 INFO L280 TraceCheckUtils]: 41: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,843 INFO L280 TraceCheckUtils]: 42: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,844 INFO L280 TraceCheckUtils]: 43: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} processEnvironment_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret56 && processEnvironment_#t~ret56 <= 2147483647;processEnvironment_~tmp~8 := processEnvironment_#t~ret56;havoc processEnvironment_#t~ret56; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,844 INFO L280 TraceCheckUtils]: 44: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} assume 0 != processEnvironment_~tmp~8;~pumpRunning~0 := 0; {14278#(<= 1 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:22,845 INFO L280 TraceCheckUtils]: 45: Hoare triple {14278#(<= 1 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {14375#(<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:22,845 INFO L280 TraceCheckUtils]: 46: Hoare triple {14375#(<= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {14379#(<= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~1)} is VALID [2020-07-28 19:02:22,847 INFO L280 TraceCheckUtils]: 47: Hoare triple {14379#(<= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {14232#false} is VALID [2020-07-28 19:02:22,847 INFO L280 TraceCheckUtils]: 48: Hoare triple {14232#false} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {14232#false} is VALID [2020-07-28 19:02:22,847 INFO L280 TraceCheckUtils]: 49: Hoare triple {14232#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {14232#false} is VALID [2020-07-28 19:02:22,848 INFO L280 TraceCheckUtils]: 50: Hoare triple {14232#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {14232#false} is VALID [2020-07-28 19:02:22,848 INFO L280 TraceCheckUtils]: 51: Hoare triple {14232#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {14232#false} is VALID [2020-07-28 19:02:22,848 INFO L280 TraceCheckUtils]: 52: Hoare triple {14232#false} assume !false; {14232#false} is VALID [2020-07-28 19:02:22,853 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 6 proven. 2 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 19:02:22,854 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:02:22,854 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 8 [2020-07-28 19:02:22,855 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [612390638] [2020-07-28 19:02:22,855 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 53 [2020-07-28 19:02:22,856 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:22,856 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2020-07-28 19:02:22,948 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 82 edges. 82 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:22,949 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2020-07-28 19:02:22,949 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:22,949 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2020-07-28 19:02:22,949 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:22,949 INFO L87 Difference]: Start difference. First operand 258 states and 326 transitions. Second operand 8 states. [2020-07-28 19:02:24,937 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:24,937 INFO L93 Difference]: Finished difference Result 634 states and 796 transitions. [2020-07-28 19:02:24,937 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:24,938 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 53 [2020-07-28 19:02:24,938 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:24,938 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:02:24,942 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 250 transitions. [2020-07-28 19:02:24,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:02:24,948 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 250 transitions. [2020-07-28 19:02:24,950 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 250 transitions. [2020-07-28 19:02:25,271 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 250 edges. 250 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:25,285 INFO L225 Difference]: With dead ends: 634 [2020-07-28 19:02:25,286 INFO L226 Difference]: Without dead ends: 382 [2020-07-28 19:02:25,287 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 52 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=38, Invalid=72, Unknown=0, NotChecked=0, Total=110 [2020-07-28 19:02:25,288 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 382 states. [2020-07-28 19:02:26,050 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 382 to 244. [2020-07-28 19:02:26,050 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:26,050 INFO L82 GeneralOperation]: Start isEquivalent. First operand 382 states. Second operand 244 states. [2020-07-28 19:02:26,051 INFO L74 IsIncluded]: Start isIncluded. First operand 382 states. Second operand 244 states. [2020-07-28 19:02:26,051 INFO L87 Difference]: Start difference. First operand 382 states. Second operand 244 states. [2020-07-28 19:02:26,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:26,063 INFO L93 Difference]: Finished difference Result 382 states and 467 transitions. [2020-07-28 19:02:26,064 INFO L276 IsEmpty]: Start isEmpty. Operand 382 states and 467 transitions. [2020-07-28 19:02:26,064 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:26,065 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:26,065 INFO L74 IsIncluded]: Start isIncluded. First operand 244 states. Second operand 382 states. [2020-07-28 19:02:26,065 INFO L87 Difference]: Start difference. First operand 244 states. Second operand 382 states. [2020-07-28 19:02:26,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:26,077 INFO L93 Difference]: Finished difference Result 382 states and 467 transitions. [2020-07-28 19:02:26,077 INFO L276 IsEmpty]: Start isEmpty. Operand 382 states and 467 transitions. [2020-07-28 19:02:26,078 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:26,078 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:26,078 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:26,079 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:26,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 244 states. [2020-07-28 19:02:26,087 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244 states to 244 states and 299 transitions. [2020-07-28 19:02:26,088 INFO L78 Accepts]: Start accepts. Automaton has 244 states and 299 transitions. Word has length 53 [2020-07-28 19:02:26,088 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:26,088 INFO L479 AbstractCegarLoop]: Abstraction has 244 states and 299 transitions. [2020-07-28 19:02:26,088 INFO L480 AbstractCegarLoop]: Interpolant automaton has 8 states. [2020-07-28 19:02:26,088 INFO L276 IsEmpty]: Start isEmpty. Operand 244 states and 299 transitions. [2020-07-28 19:02:26,089 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2020-07-28 19:02:26,089 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:26,090 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:26,302 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable12 [2020-07-28 19:02:26,303 INFO L427 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:26,303 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:26,303 INFO L82 PathProgramCache]: Analyzing trace with hash 1173555437, now seen corresponding path program 1 times [2020-07-28 19:02:26,304 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:26,304 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1013945500] [2020-07-28 19:02:26,304 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:26,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:26,458 INFO L280 TraceCheckUtils]: 0: Hoare triple {16384#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {16386#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:26,459 INFO L280 TraceCheckUtils]: 1: Hoare triple {16386#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {16386#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:26,460 INFO L280 TraceCheckUtils]: 2: Hoare triple {16386#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {16386#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:26,461 INFO L280 TraceCheckUtils]: 3: Hoare triple {16386#(= 1 ~waterLevel~0)} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {16386#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:26,461 INFO L280 TraceCheckUtils]: 4: Hoare triple {16386#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~0; {16386#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:26,462 INFO L280 TraceCheckUtils]: 5: Hoare triple {16386#(= 1 ~waterLevel~0)} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {16386#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:26,463 INFO L280 TraceCheckUtils]: 6: Hoare triple {16386#(= 1 ~waterLevel~0)} assume !false; {16386#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:26,463 INFO L280 TraceCheckUtils]: 7: Hoare triple {16386#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {16386#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:26,464 INFO L280 TraceCheckUtils]: 8: Hoare triple {16386#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {16386#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:26,465 INFO L280 TraceCheckUtils]: 9: Hoare triple {16386#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~5; {16386#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:26,466 INFO L280 TraceCheckUtils]: 10: Hoare triple {16386#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,466 INFO L280 TraceCheckUtils]: 11: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,467 INFO L280 TraceCheckUtils]: 12: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != test_~tmp___0~1); {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,481 INFO L280 TraceCheckUtils]: 13: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,482 INFO L280 TraceCheckUtils]: 14: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,482 INFO L280 TraceCheckUtils]: 15: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0); {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,483 INFO L280 TraceCheckUtils]: 16: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,484 INFO L280 TraceCheckUtils]: 17: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret55, processEnvironment__wrappee__lowWaterSensor_~tmp~7;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~7; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,487 INFO L280 TraceCheckUtils]: 18: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,488 INFO L280 TraceCheckUtils]: 19: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,489 INFO L280 TraceCheckUtils]: 20: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,489 INFO L280 TraceCheckUtils]: 21: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,490 INFO L280 TraceCheckUtils]: 22: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,491 INFO L280 TraceCheckUtils]: 23: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,492 INFO L280 TraceCheckUtils]: 24: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,493 INFO L280 TraceCheckUtils]: 25: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;~pumpRunning~0 := 1; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,495 INFO L280 TraceCheckUtils]: 26: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,496 INFO L280 TraceCheckUtils]: 27: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} is VALID [2020-07-28 19:02:26,497 INFO L280 TraceCheckUtils]: 28: Hoare triple {16387#(and (<= 2 ~waterLevel~0) (<= ~waterLevel~0 2))} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {16388#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:02:26,498 INFO L280 TraceCheckUtils]: 29: Hoare triple {16388#(and (<= |ULTIMATE.start_getWaterLevel_#res| 2) (<= 2 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {16389#(and (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 2) (<= 2 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0))} is VALID [2020-07-28 19:02:26,499 INFO L280 TraceCheckUtils]: 30: Hoare triple {16389#(and (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 2) (<= 2 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0))} assume !(2 == __utac_acc__Specification3_spec__1_~tmp___0~0); {16385#false} is VALID [2020-07-28 19:02:26,499 INFO L280 TraceCheckUtils]: 31: Hoare triple {16385#false} assume !false; {16385#false} is VALID [2020-07-28 19:02:26,499 INFO L280 TraceCheckUtils]: 32: Hoare triple {16385#false} assume test_~splverifierCounter~0 < 4; {16385#false} is VALID [2020-07-28 19:02:26,499 INFO L280 TraceCheckUtils]: 33: Hoare triple {16385#false} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {16385#false} is VALID [2020-07-28 19:02:26,499 INFO L280 TraceCheckUtils]: 34: Hoare triple {16385#false} assume !(0 != test_~tmp~5); {16385#false} is VALID [2020-07-28 19:02:26,500 INFO L280 TraceCheckUtils]: 35: Hoare triple {16385#false} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {16385#false} is VALID [2020-07-28 19:02:26,500 INFO L280 TraceCheckUtils]: 36: Hoare triple {16385#false} assume !(0 != test_~tmp___0~1); {16385#false} is VALID [2020-07-28 19:02:26,500 INFO L280 TraceCheckUtils]: 37: Hoare triple {16385#false} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {16385#false} is VALID [2020-07-28 19:02:26,501 INFO L280 TraceCheckUtils]: 38: Hoare triple {16385#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {16385#false} is VALID [2020-07-28 19:02:26,501 INFO L280 TraceCheckUtils]: 39: Hoare triple {16385#false} assume 0 != ~pumpRunning~0; {16385#false} is VALID [2020-07-28 19:02:26,501 INFO L280 TraceCheckUtils]: 40: Hoare triple {16385#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {16385#false} is VALID [2020-07-28 19:02:26,501 INFO L280 TraceCheckUtils]: 41: Hoare triple {16385#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {16385#false} is VALID [2020-07-28 19:02:26,501 INFO L280 TraceCheckUtils]: 42: Hoare triple {16385#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {16385#false} is VALID [2020-07-28 19:02:26,502 INFO L280 TraceCheckUtils]: 43: Hoare triple {16385#false} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {16385#false} is VALID [2020-07-28 19:02:26,502 INFO L280 TraceCheckUtils]: 44: Hoare triple {16385#false} processEnvironment_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret56 && processEnvironment_#t~ret56 <= 2147483647;processEnvironment_~tmp~8 := processEnvironment_#t~ret56;havoc processEnvironment_#t~ret56; {16385#false} is VALID [2020-07-28 19:02:26,502 INFO L280 TraceCheckUtils]: 45: Hoare triple {16385#false} assume 0 != processEnvironment_~tmp~8;~pumpRunning~0 := 0; {16385#false} is VALID [2020-07-28 19:02:26,502 INFO L280 TraceCheckUtils]: 46: Hoare triple {16385#false} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {16385#false} is VALID [2020-07-28 19:02:26,502 INFO L280 TraceCheckUtils]: 47: Hoare triple {16385#false} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {16385#false} is VALID [2020-07-28 19:02:26,503 INFO L280 TraceCheckUtils]: 48: Hoare triple {16385#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {16385#false} is VALID [2020-07-28 19:02:26,503 INFO L280 TraceCheckUtils]: 49: Hoare triple {16385#false} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {16385#false} is VALID [2020-07-28 19:02:26,503 INFO L280 TraceCheckUtils]: 50: Hoare triple {16385#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {16385#false} is VALID [2020-07-28 19:02:26,503 INFO L280 TraceCheckUtils]: 51: Hoare triple {16385#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {16385#false} is VALID [2020-07-28 19:02:26,504 INFO L280 TraceCheckUtils]: 52: Hoare triple {16385#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {16385#false} is VALID [2020-07-28 19:02:26,504 INFO L280 TraceCheckUtils]: 53: Hoare triple {16385#false} assume !false; {16385#false} is VALID [2020-07-28 19:02:26,508 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 16 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:26,509 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1013945500] [2020-07-28 19:02:26,509 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:26,509 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:26,509 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1289499457] [2020-07-28 19:02:26,511 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 54 [2020-07-28 19:02:26,511 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:26,511 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:02:26,577 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 54 edges. 54 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:26,578 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:02:26,578 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:26,578 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:02:26,578 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:02:26,578 INFO L87 Difference]: Start difference. First operand 244 states and 299 transitions. Second operand 6 states. [2020-07-28 19:02:31,397 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:31,398 INFO L93 Difference]: Finished difference Result 1258 states and 1585 transitions. [2020-07-28 19:02:31,398 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2020-07-28 19:02:31,398 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 54 [2020-07-28 19:02:31,399 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:31,399 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:31,403 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 507 transitions. [2020-07-28 19:02:31,403 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:31,410 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 507 transitions. [2020-07-28 19:02:31,410 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states and 507 transitions. [2020-07-28 19:02:32,091 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 507 edges. 507 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:32,141 INFO L225 Difference]: With dead ends: 1258 [2020-07-28 19:02:32,142 INFO L226 Difference]: Without dead ends: 1072 [2020-07-28 19:02:32,142 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=39, Invalid=93, Unknown=0, NotChecked=0, Total=132 [2020-07-28 19:02:32,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1072 states. [2020-07-28 19:02:33,479 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1072 to 410. [2020-07-28 19:02:33,479 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:33,479 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1072 states. Second operand 410 states. [2020-07-28 19:02:33,480 INFO L74 IsIncluded]: Start isIncluded. First operand 1072 states. Second operand 410 states. [2020-07-28 19:02:33,480 INFO L87 Difference]: Start difference. First operand 1072 states. Second operand 410 states. [2020-07-28 19:02:33,539 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:33,540 INFO L93 Difference]: Finished difference Result 1072 states and 1319 transitions. [2020-07-28 19:02:33,540 INFO L276 IsEmpty]: Start isEmpty. Operand 1072 states and 1319 transitions. [2020-07-28 19:02:33,542 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:33,542 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:33,542 INFO L74 IsIncluded]: Start isIncluded. First operand 410 states. Second operand 1072 states. [2020-07-28 19:02:33,542 INFO L87 Difference]: Start difference. First operand 410 states. Second operand 1072 states. [2020-07-28 19:02:33,615 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:33,616 INFO L93 Difference]: Finished difference Result 1072 states and 1319 transitions. [2020-07-28 19:02:33,616 INFO L276 IsEmpty]: Start isEmpty. Operand 1072 states and 1319 transitions. [2020-07-28 19:02:33,618 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:33,619 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:33,619 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:33,619 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:33,620 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 410 states. [2020-07-28 19:02:33,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 410 states to 410 states and 498 transitions. [2020-07-28 19:02:33,637 INFO L78 Accepts]: Start accepts. Automaton has 410 states and 498 transitions. Word has length 54 [2020-07-28 19:02:33,637 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:33,637 INFO L479 AbstractCegarLoop]: Abstraction has 410 states and 498 transitions. [2020-07-28 19:02:33,637 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:33,638 INFO L276 IsEmpty]: Start isEmpty. Operand 410 states and 498 transitions. [2020-07-28 19:02:33,638 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2020-07-28 19:02:33,639 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:33,639 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:33,639 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2020-07-28 19:02:33,640 INFO L427 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:33,640 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:33,640 INFO L82 PathProgramCache]: Analyzing trace with hash 1986224888, now seen corresponding path program 1 times [2020-07-28 19:02:33,641 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:33,641 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1419013452] [2020-07-28 19:02:33,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:33,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:33,758 INFO L280 TraceCheckUtils]: 0: Hoare triple {20856#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {20858#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:33,759 INFO L280 TraceCheckUtils]: 1: Hoare triple {20858#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {20858#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:33,759 INFO L280 TraceCheckUtils]: 2: Hoare triple {20858#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {20858#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:33,760 INFO L280 TraceCheckUtils]: 3: Hoare triple {20858#(= 1 ~waterLevel~0)} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {20858#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:33,761 INFO L280 TraceCheckUtils]: 4: Hoare triple {20858#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~0; {20858#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:33,761 INFO L280 TraceCheckUtils]: 5: Hoare triple {20858#(= 1 ~waterLevel~0)} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {20858#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:33,762 INFO L280 TraceCheckUtils]: 6: Hoare triple {20858#(= 1 ~waterLevel~0)} assume !false; {20858#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:33,763 INFO L280 TraceCheckUtils]: 7: Hoare triple {20858#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {20858#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:33,763 INFO L280 TraceCheckUtils]: 8: Hoare triple {20858#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {20858#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:33,764 INFO L280 TraceCheckUtils]: 9: Hoare triple {20858#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~5; {20858#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:33,765 INFO L280 TraceCheckUtils]: 10: Hoare triple {20858#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,765 INFO L280 TraceCheckUtils]: 11: Hoare triple {20859#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,766 INFO L280 TraceCheckUtils]: 12: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___0~1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,766 INFO L280 TraceCheckUtils]: 13: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,767 INFO L280 TraceCheckUtils]: 14: Hoare triple {20859#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,767 INFO L280 TraceCheckUtils]: 15: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,768 INFO L280 TraceCheckUtils]: 16: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,769 INFO L280 TraceCheckUtils]: 17: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,769 INFO L280 TraceCheckUtils]: 18: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret55, processEnvironment__wrappee__lowWaterSensor_~tmp~7;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~7; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,770 INFO L280 TraceCheckUtils]: 19: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,770 INFO L280 TraceCheckUtils]: 20: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,771 INFO L280 TraceCheckUtils]: 21: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,771 INFO L280 TraceCheckUtils]: 22: Hoare triple {20859#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,772 INFO L280 TraceCheckUtils]: 23: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,772 INFO L280 TraceCheckUtils]: 24: Hoare triple {20859#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,773 INFO L280 TraceCheckUtils]: 25: Hoare triple {20859#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,774 INFO L280 TraceCheckUtils]: 26: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;~pumpRunning~0 := 1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,774 INFO L280 TraceCheckUtils]: 27: Hoare triple {20859#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,775 INFO L280 TraceCheckUtils]: 28: Hoare triple {20859#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,775 INFO L280 TraceCheckUtils]: 29: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,776 INFO L280 TraceCheckUtils]: 30: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !false; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,777 INFO L280 TraceCheckUtils]: 31: Hoare triple {20859#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,778 INFO L280 TraceCheckUtils]: 32: Hoare triple {20859#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,779 INFO L280 TraceCheckUtils]: 33: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~5); {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,779 INFO L280 TraceCheckUtils]: 34: Hoare triple {20859#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,780 INFO L280 TraceCheckUtils]: 35: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___0~1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,781 INFO L280 TraceCheckUtils]: 36: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != ~methaneLevelCritical~0;~methaneLevelCritical~0 := 0; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,781 INFO L280 TraceCheckUtils]: 37: Hoare triple {20859#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,782 INFO L280 TraceCheckUtils]: 38: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,782 INFO L280 TraceCheckUtils]: 39: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:33,783 INFO L280 TraceCheckUtils]: 40: Hoare triple {20859#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:33,784 INFO L280 TraceCheckUtils]: 41: Hoare triple {20860#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:33,785 INFO L280 TraceCheckUtils]: 42: Hoare triple {20860#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:33,785 INFO L280 TraceCheckUtils]: 43: Hoare triple {20860#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:33,786 INFO L280 TraceCheckUtils]: 44: Hoare triple {20860#(<= ~waterLevel~0 1)} processEnvironment_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret56 && processEnvironment_#t~ret56 <= 2147483647;processEnvironment_~tmp~8 := processEnvironment_#t~ret56;havoc processEnvironment_#t~ret56; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:33,786 INFO L280 TraceCheckUtils]: 45: Hoare triple {20860#(<= ~waterLevel~0 1)} assume 0 != processEnvironment_~tmp~8;~pumpRunning~0 := 0; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:33,787 INFO L280 TraceCheckUtils]: 46: Hoare triple {20860#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:33,788 INFO L280 TraceCheckUtils]: 47: Hoare triple {20860#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:33,789 INFO L280 TraceCheckUtils]: 48: Hoare triple {20860#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {20861#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:02:33,790 INFO L280 TraceCheckUtils]: 49: Hoare triple {20861#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {20862#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} is VALID [2020-07-28 19:02:33,791 INFO L280 TraceCheckUtils]: 50: Hoare triple {20862#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {20857#false} is VALID [2020-07-28 19:02:33,791 INFO L280 TraceCheckUtils]: 51: Hoare triple {20857#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {20857#false} is VALID [2020-07-28 19:02:33,791 INFO L280 TraceCheckUtils]: 52: Hoare triple {20857#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {20857#false} is VALID [2020-07-28 19:02:33,792 INFO L280 TraceCheckUtils]: 53: Hoare triple {20857#false} assume !false; {20857#false} is VALID [2020-07-28 19:02:33,796 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 5 proven. 4 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 19:02:33,797 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1419013452] [2020-07-28 19:02:33,798 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1520210581] [2020-07-28 19:02:33,798 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:02:33,908 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:33,911 INFO L263 TraceCheckSpWp]: Trace formula consists of 416 conjuncts, 7 conjunts are in the unsatisfiable core [2020-07-28 19:02:33,944 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:33,947 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:02:34,172 INFO L280 TraceCheckUtils]: 0: Hoare triple {20856#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string1.base, #t~string1.offset := #Ultimate.allocOnStack(13);call #t~string3.base, #t~string3.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string3.base, #t~string3.offset, 1);call write~init~int(77, #t~string3.base, 1 + #t~string3.offset, 1);call write~init~int(101, #t~string3.base, 2 + #t~string3.offset, 1);call write~init~int(116, #t~string3.base, 3 + #t~string3.offset, 1);call write~init~int(104, #t~string3.base, 4 + #t~string3.offset, 1);call write~init~int(58, #t~string3.base, 5 + #t~string3.offset, 1);call write~init~int(0, #t~string3.base, 6 + #t~string3.offset, 1);call #t~string5.base, #t~string5.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string5.base, #t~string5.offset, 1);call write~init~int(82, #t~string5.base, 1 + #t~string5.offset, 1);call write~init~int(73, #t~string5.base, 2 + #t~string5.offset, 1);call write~init~int(84, #t~string5.base, 3 + #t~string5.offset, 1);call write~init~int(0, #t~string5.base, 4 + #t~string5.offset, 1);call #t~string7.base, #t~string7.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string7.base, #t~string7.offset, 1);call write~init~int(75, #t~string7.base, 1 + #t~string7.offset, 1);call write~init~int(0, #t~string7.base, 2 + #t~string7.offset, 1);call #t~string9.base, #t~string9.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string9.base, #t~string9.offset, 1);call write~init~int(0, #t~string9.base, 1 + #t~string9.offset, 1);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(30);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(9);call #t~string35.base, #t~string35.offset := #Ultimate.allocOnStack(21);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(30);call #t~string37.base, #t~string37.offset := #Ultimate.allocOnStack(9);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(21);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(30);call #t~string43.base, #t~string43.offset := #Ultimate.allocOnStack(9);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(25);call #t~string45.base, #t~string45.offset := #Ultimate.allocOnStack(30);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(9);call #t~string47.base, #t~string47.offset := #Ultimate.allocOnStack(25);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,173 INFO L280 TraceCheckUtils]: 1: Hoare triple {20860#(<= ~waterLevel~0 1)} havoc main_#res;havoc main_#t~ret10, main_~retValue_acc~4, main_~tmp~0;havoc main_~retValue_acc~4;havoc main_~tmp~0; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,174 INFO L280 TraceCheckUtils]: 2: Hoare triple {20860#(<= ~waterLevel~0 1)} havoc valid_product_#res;havoc valid_product_~retValue_acc~6;havoc valid_product_~retValue_acc~6;valid_product_~retValue_acc~6 := 1;valid_product_#res := valid_product_~retValue_acc~6; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,174 INFO L280 TraceCheckUtils]: 3: Hoare triple {20860#(<= ~waterLevel~0 1)} main_#t~ret10 := valid_product_#res;assume -2147483648 <= main_#t~ret10 && main_#t~ret10 <= 2147483647;main_~tmp~0 := main_#t~ret10;havoc main_#t~ret10; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,175 INFO L280 TraceCheckUtils]: 4: Hoare triple {20860#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~0; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,175 INFO L280 TraceCheckUtils]: 5: Hoare triple {20860#(<= ~waterLevel~0 1)} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,176 INFO L280 TraceCheckUtils]: 6: Hoare triple {20860#(<= ~waterLevel~0 1)} assume !false; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,177 INFO L280 TraceCheckUtils]: 7: Hoare triple {20860#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,177 INFO L280 TraceCheckUtils]: 8: Hoare triple {20860#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,178 INFO L280 TraceCheckUtils]: 9: Hoare triple {20860#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~5; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,179 INFO L280 TraceCheckUtils]: 10: Hoare triple {20860#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,179 INFO L280 TraceCheckUtils]: 11: Hoare triple {20859#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,180 INFO L280 TraceCheckUtils]: 12: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___0~1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,180 INFO L280 TraceCheckUtils]: 13: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,181 INFO L280 TraceCheckUtils]: 14: Hoare triple {20859#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,182 INFO L280 TraceCheckUtils]: 15: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,182 INFO L280 TraceCheckUtils]: 16: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,183 INFO L280 TraceCheckUtils]: 17: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,183 INFO L280 TraceCheckUtils]: 18: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret55, processEnvironment__wrappee__lowWaterSensor_~tmp~7;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~7; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,184 INFO L280 TraceCheckUtils]: 19: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,184 INFO L280 TraceCheckUtils]: 20: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~2;havoc isHighWaterSensorDry_~retValue_acc~2; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,185 INFO L280 TraceCheckUtils]: 21: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~2 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~2; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,185 INFO L280 TraceCheckUtils]: 22: Hoare triple {20859#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,186 INFO L280 TraceCheckUtils]: 23: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,187 INFO L280 TraceCheckUtils]: 24: Hoare triple {20859#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,187 INFO L280 TraceCheckUtils]: 25: Hoare triple {20859#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,188 INFO L280 TraceCheckUtils]: 26: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;~pumpRunning~0 := 1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,188 INFO L280 TraceCheckUtils]: 27: Hoare triple {20859#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,189 INFO L280 TraceCheckUtils]: 28: Hoare triple {20859#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,189 INFO L280 TraceCheckUtils]: 29: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,190 INFO L280 TraceCheckUtils]: 30: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !false; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,191 INFO L280 TraceCheckUtils]: 31: Hoare triple {20859#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,191 INFO L280 TraceCheckUtils]: 32: Hoare triple {20859#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,193 INFO L280 TraceCheckUtils]: 33: Hoare triple {20859#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~5); {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,194 INFO L280 TraceCheckUtils]: 34: Hoare triple {20859#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,194 INFO L280 TraceCheckUtils]: 35: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___0~1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,195 INFO L280 TraceCheckUtils]: 36: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != ~methaneLevelCritical~0;~methaneLevelCritical~0 := 0; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,195 INFO L280 TraceCheckUtils]: 37: Hoare triple {20859#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,196 INFO L280 TraceCheckUtils]: 38: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,197 INFO L280 TraceCheckUtils]: 39: Hoare triple {20859#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {20859#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:34,198 INFO L280 TraceCheckUtils]: 40: Hoare triple {20859#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,198 INFO L280 TraceCheckUtils]: 41: Hoare triple {20860#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret56, processEnvironment_~tmp~8;havoc processEnvironment_~tmp~8; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,199 INFO L280 TraceCheckUtils]: 42: Hoare triple {20860#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,199 INFO L280 TraceCheckUtils]: 43: Hoare triple {20860#(<= ~waterLevel~0 1)} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,200 INFO L280 TraceCheckUtils]: 44: Hoare triple {20860#(<= ~waterLevel~0 1)} processEnvironment_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret56 && processEnvironment_#t~ret56 <= 2147483647;processEnvironment_~tmp~8 := processEnvironment_#t~ret56;havoc processEnvironment_#t~ret56; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,201 INFO L280 TraceCheckUtils]: 45: Hoare triple {20860#(<= ~waterLevel~0 1)} assume 0 != processEnvironment_~tmp~8;~pumpRunning~0 := 0; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,201 INFO L280 TraceCheckUtils]: 46: Hoare triple {20860#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret11, __utac_acc__Specification3_spec__1_#t~ret12, __utac_acc__Specification3_spec__1_#t~ret13, __utac_acc__Specification3_spec__1_~tmp~1, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~1;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~0;havoc isMethaneLevelCritical_~retValue_acc~0;isMethaneLevelCritical_~retValue_acc~0 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~0; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,202 INFO L280 TraceCheckUtils]: 47: Hoare triple {20860#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret11 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret11 && __utac_acc__Specification3_spec__1_#t~ret11 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~1 := __utac_acc__Specification3_spec__1_#t~ret11;havoc __utac_acc__Specification3_spec__1_#t~ret11; {20860#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:34,202 INFO L280 TraceCheckUtils]: 48: Hoare triple {20860#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~1);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~1;havoc getWaterLevel_~retValue_acc~1;getWaterLevel_~retValue_acc~1 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~1; {20861#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:02:34,203 INFO L280 TraceCheckUtils]: 49: Hoare triple {20861#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification3_spec__1_#t~ret12 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret12 && __utac_acc__Specification3_spec__1_#t~ret12 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret12;havoc __utac_acc__Specification3_spec__1_#t~ret12; {20862#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} is VALID [2020-07-28 19:02:34,204 INFO L280 TraceCheckUtils]: 50: Hoare triple {20862#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {20857#false} is VALID [2020-07-28 19:02:34,204 INFO L280 TraceCheckUtils]: 51: Hoare triple {20857#false} __utac_acc__Specification3_spec__1_#t~ret13 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret13 && __utac_acc__Specification3_spec__1_#t~ret13 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret13;havoc __utac_acc__Specification3_spec__1_#t~ret13; {20857#false} is VALID [2020-07-28 19:02:34,204 INFO L280 TraceCheckUtils]: 52: Hoare triple {20857#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {20857#false} is VALID [2020-07-28 19:02:34,204 INFO L280 TraceCheckUtils]: 53: Hoare triple {20857#false} assume !false; {20857#false} is VALID [2020-07-28 19:02:34,208 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 5 proven. 4 refuted. 0 times theorem prover too weak. 6 trivial. 0 not checked. [2020-07-28 19:02:34,208 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:02:34,208 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 6 [2020-07-28 19:02:34,208 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1358013687] [2020-07-28 19:02:34,209 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 54 [2020-07-28 19:02:34,210 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:34,211 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:34,282 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:34,282 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:34,282 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:34,282 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:34,283 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:34,283 INFO L87 Difference]: Start difference. First operand 410 states and 498 transitions. Second operand 7 states. [2020-07-28 19:02:39,060 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:39,060 INFO L93 Difference]: Finished difference Result 1389 states and 1711 transitions. [2020-07-28 19:02:39,060 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2020-07-28 19:02:39,060 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 54 [2020-07-28 19:02:39,060 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:39,060 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:39,062 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 401 transitions. [2020-07-28 19:02:39,062 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:39,064 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 401 transitions. [2020-07-28 19:02:39,064 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 401 transitions. [2020-07-28 19:02:39,577 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 401 edges. 401 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:39,578 INFO L225 Difference]: With dead ends: 1389 [2020-07-28 19:02:39,578 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:02:39,581 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 65 GetRequests, 54 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 21 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=97, Unknown=0, NotChecked=0, Total=156 [2020-07-28 19:02:39,581 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:02:39,581 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:02:39,581 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:39,581 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:39,581 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:39,582 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:39,582 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:39,582 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:39,582 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:39,583 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:39,583 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:39,583 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:39,583 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:39,583 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:39,583 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:39,583 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:39,584 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:39,584 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:39,584 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:39,584 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:39,584 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:02:39,584 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:02:39,584 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 54 [2020-07-28 19:02:39,584 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:39,584 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:02:39,584 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:39,585 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:39,585 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:39,787 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2020-07-28 19:02:39,791 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:02:40,017 WARN L193 SmtUtils]: Spent 215.00 ms on a formula simplification. DAG size of input: 149 DAG size of output: 109 [2020-07-28 19:02:40,553 WARN L193 SmtUtils]: Spent 528.00 ms on a formula simplification. DAG size of input: 244 DAG size of output: 201 [2020-07-28 19:02:41,131 WARN L193 SmtUtils]: Spent 405.00 ms on a formula simplification. DAG size of input: 247 DAG size of output: 207 [2020-07-28 19:02:41,336 WARN L193 SmtUtils]: Spent 133.00 ms on a formula simplification. DAG size of input: 156 DAG size of output: 123 [2020-07-28 19:02:41,963 WARN L193 SmtUtils]: Spent 618.00 ms on a formula simplification. DAG size of input: 307 DAG size of output: 265 [2020-07-28 19:02:42,092 WARN L193 SmtUtils]: Spent 122.00 ms on a formula simplification. DAG size of input: 171 DAG size of output: 139 [2020-07-28 19:02:42,257 WARN L193 SmtUtils]: Spent 154.00 ms on a formula simplification. DAG size of input: 169 DAG size of output: 129 [2020-07-28 19:02:42,789 WARN L193 SmtUtils]: Spent 524.00 ms on a formula simplification. DAG size of input: 307 DAG size of output: 265 [2020-07-28 19:02:43,032 WARN L193 SmtUtils]: Spent 227.00 ms on a formula simplification. DAG size of input: 227 DAG size of output: 182 [2020-07-28 19:02:43,568 WARN L193 SmtUtils]: Spent 446.00 ms on a formula simplification. DAG size of input: 103 DAG size of output: 46 [2020-07-28 19:02:44,831 WARN L193 SmtUtils]: Spent 1.25 s on a formula simplification. DAG size of input: 192 DAG size of output: 50 [2020-07-28 19:02:45,101 WARN L193 SmtUtils]: Spent 263.00 ms on a formula simplification. DAG size of input: 75 DAG size of output: 30 [2020-07-28 19:02:45,375 WARN L193 SmtUtils]: Spent 260.00 ms on a formula simplification. DAG size of input: 75 DAG size of output: 30 [2020-07-28 19:02:46,526 WARN L193 SmtUtils]: Spent 1.13 s on a formula simplification. DAG size of input: 202 DAG size of output: 34 [2020-07-28 19:02:46,792 WARN L193 SmtUtils]: Spent 262.00 ms on a formula simplification. DAG size of input: 75 DAG size of output: 30 [2020-07-28 19:02:47,336 WARN L193 SmtUtils]: Spent 521.00 ms on a formula simplification. DAG size of input: 113 DAG size of output: 30 [2020-07-28 19:02:49,053 WARN L193 SmtUtils]: Spent 1.70 s on a formula simplification. DAG size of input: 259 DAG size of output: 33 [2020-07-28 19:02:49,918 WARN L193 SmtUtils]: Spent 858.00 ms on a formula simplification. DAG size of input: 133 DAG size of output: 59 [2020-07-28 19:02:50,582 WARN L193 SmtUtils]: Spent 641.00 ms on a formula simplification. DAG size of input: 124 DAG size of output: 38 [2020-07-28 19:02:52,362 WARN L193 SmtUtils]: Spent 1.77 s on a formula simplification. DAG size of input: 259 DAG size of output: 33 [2020-07-28 19:02:53,810 WARN L193 SmtUtils]: Spent 1.35 s on a formula simplification. DAG size of input: 175 DAG size of output: 57 [2020-07-28 19:02:54,016 WARN L193 SmtUtils]: Spent 201.00 ms on a formula simplification. DAG size of input: 55 DAG size of output: 40 [2020-07-28 19:02:54,315 WARN L193 SmtUtils]: Spent 282.00 ms on a formula simplification. DAG size of input: 75 DAG size of output: 30 [2020-07-28 19:02:54,322 INFO L268 CegarLoopResult]: For program point L729(lines 729 735) no Hoare annotation was computed. [2020-07-28 19:02:54,322 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 257) no Hoare annotation was computed. [2020-07-28 19:02:54,322 INFO L264 CegarLoopResult]: At program point L729-1(lines 729 735) the Hoare annotation is: (let ((.cse1 (= 1 ~methaneLevelCritical~0)) (.cse2 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse4 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse5 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse8 (= 0 ~methaneLevelCritical~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (= 0 ~pumpRunning~0)) (.cse6 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse3 .cse7 .cse6) (and .cse8 .cse0 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse8 .cse0 .cse3 .cse7 .cse6))) [2020-07-28 19:02:54,323 INFO L268 CegarLoopResult]: For program point L961(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,323 INFO L268 CegarLoopResult]: For program point L961-2(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,323 INFO L268 CegarLoopResult]: For program point L961-3(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,323 INFO L268 CegarLoopResult]: For program point L961-5(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,323 INFO L268 CegarLoopResult]: For program point L961-6(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,323 INFO L268 CegarLoopResult]: For program point L961-8(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,324 INFO L268 CegarLoopResult]: For program point L961-9(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,324 INFO L268 CegarLoopResult]: For program point L961-11(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,324 INFO L268 CegarLoopResult]: For program point L961-12(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,324 INFO L268 CegarLoopResult]: For program point L961-14(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,324 INFO L268 CegarLoopResult]: For program point L961-15(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,324 INFO L268 CegarLoopResult]: For program point L961-17(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,325 INFO L268 CegarLoopResult]: For program point L961-18(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,325 INFO L268 CegarLoopResult]: For program point L961-20(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,325 INFO L268 CegarLoopResult]: For program point L961-21(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,325 INFO L268 CegarLoopResult]: For program point L961-23(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,325 INFO L268 CegarLoopResult]: For program point L961-24(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,325 INFO L264 CegarLoopResult]: At program point L136(lines 127 140) the Hoare annotation is: false [2020-07-28 19:02:54,326 INFO L264 CegarLoopResult]: At program point L136-1(lines 127 140) the Hoare annotation is: false [2020-07-28 19:02:54,326 INFO L268 CegarLoopResult]: For program point L961-26(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,326 INFO L264 CegarLoopResult]: At program point L136-2(lines 127 140) the Hoare annotation is: false [2020-07-28 19:02:54,326 INFO L268 CegarLoopResult]: For program point L961-27(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,326 INFO L264 CegarLoopResult]: At program point L136-3(lines 127 140) the Hoare annotation is: (let ((.cse4 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))) (let ((.cse1 (<= 2 ~waterLevel~0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (= 1 ~methaneLevelCritical~0)) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse5 (= 0 ~pumpRunning~0)) (.cse8 (<= ~waterLevel~0 1)) (.cse9 (not .cse4)) (.cse6 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse1 .cse2 .cse7 .cse3 .cse4 .cse5 .cse6) (and .cse2 .cse7 .cse5 .cse8 .cse9 .cse6) (and .cse0 .cse2 .cse5 .cse8 .cse9 .cse6)))) [2020-07-28 19:02:54,326 INFO L264 CegarLoopResult]: At program point L136-4(lines 127 140) the Hoare annotation is: false [2020-07-28 19:02:54,326 INFO L268 CegarLoopResult]: For program point L961-29(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,327 INFO L264 CegarLoopResult]: At program point L136-5(lines 127 140) the Hoare annotation is: false [2020-07-28 19:02:54,327 INFO L268 CegarLoopResult]: For program point L961-30(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,327 INFO L264 CegarLoopResult]: At program point L136-6(lines 127 140) the Hoare annotation is: false [2020-07-28 19:02:54,327 INFO L264 CegarLoopResult]: At program point L136-7(lines 127 140) the Hoare annotation is: false [2020-07-28 19:02:54,327 INFO L268 CegarLoopResult]: For program point L961-32(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,328 INFO L264 CegarLoopResult]: At program point L136-8(lines 127 140) the Hoare annotation is: false [2020-07-28 19:02:54,328 INFO L268 CegarLoopResult]: For program point L961-33(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,328 INFO L268 CegarLoopResult]: For program point L863(lines 863 871) no Hoare annotation was computed. [2020-07-28 19:02:54,328 INFO L264 CegarLoopResult]: At program point L136-9(lines 127 140) the Hoare annotation is: false [2020-07-28 19:02:54,328 INFO L268 CegarLoopResult]: For program point L863-1(lines 863 871) no Hoare annotation was computed. [2020-07-28 19:02:54,329 INFO L264 CegarLoopResult]: At program point L136-10(lines 127 140) the Hoare annotation is: false [2020-07-28 19:02:54,329 INFO L268 CegarLoopResult]: For program point L961-35(lines 961 965) no Hoare annotation was computed. [2020-07-28 19:02:54,329 INFO L268 CegarLoopResult]: For program point L863-2(lines 863 871) no Hoare annotation was computed. [2020-07-28 19:02:54,329 INFO L264 CegarLoopResult]: At program point L136-11(lines 127 140) the Hoare annotation is: false [2020-07-28 19:02:54,329 INFO L268 CegarLoopResult]: For program point L833(lines 833 850) no Hoare annotation was computed. [2020-07-28 19:02:54,329 INFO L268 CegarLoopResult]: For program point L833-1(lines 833 850) no Hoare annotation was computed. [2020-07-28 19:02:54,330 INFO L268 CegarLoopResult]: For program point L833-2(lines 833 850) no Hoare annotation was computed. [2020-07-28 19:02:54,330 INFO L268 CegarLoopResult]: For program point L833-3(lines 833 850) no Hoare annotation was computed. [2020-07-28 19:02:54,330 INFO L268 CegarLoopResult]: For program point L833-4(lines 833 850) no Hoare annotation was computed. [2020-07-28 19:02:54,330 INFO L268 CegarLoopResult]: For program point L833-5(lines 833 850) no Hoare annotation was computed. [2020-07-28 19:02:54,330 INFO L268 CegarLoopResult]: For program point L272(lines 272 292) no Hoare annotation was computed. [2020-07-28 19:02:54,331 INFO L268 CegarLoopResult]: For program point L239(lines 239 246) no Hoare annotation was computed. [2020-07-28 19:02:54,331 INFO L268 CegarLoopResult]: For program point L272-2(lines 272 292) no Hoare annotation was computed. [2020-07-28 19:02:54,331 INFO L271 CegarLoopResult]: At program point L239-1(lines 239 246) the Hoare annotation is: true [2020-07-28 19:02:54,331 INFO L268 CegarLoopResult]: For program point L272-4(lines 272 292) no Hoare annotation was computed. [2020-07-28 19:02:54,331 INFO L264 CegarLoopResult]: At program point L967(lines 952 970) the Hoare annotation is: false [2020-07-28 19:02:54,332 INFO L264 CegarLoopResult]: At program point L967-1(lines 952 970) the Hoare annotation is: false [2020-07-28 19:02:54,332 INFO L264 CegarLoopResult]: At program point L967-2(lines 952 970) the Hoare annotation is: false [2020-07-28 19:02:54,332 INFO L264 CegarLoopResult]: At program point L967-3(lines 952 970) the Hoare annotation is: (let ((.cse6 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse3 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse15 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2)) (.cse12 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse4 (not .cse12)) (.cse7 (not .cse15)) (.cse2 (= 1 ~methaneLevelCritical~0)) (.cse10 (= 0 ~methaneLevelCritical~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse11 (not .cse3)) (.cse8 (= 0 ~pumpRunning~0)) (.cse13 (<= ~waterLevel~0 1)) (.cse14 (not .cse6)) (.cse9 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse10 .cse0 .cse1 .cse3 .cse5 .cse4 .cse6 .cse7 .cse8 .cse9) (and .cse1 .cse2 .cse11 .cse8 .cse12 .cse13 .cse14 .cse15 .cse9) (and .cse10 .cse1 .cse11 .cse8 .cse12 .cse13 .cse14 .cse15 .cse9)))) [2020-07-28 19:02:54,332 INFO L264 CegarLoopResult]: At program point L967-4(lines 952 970) the Hoare annotation is: false [2020-07-28 19:02:54,332 INFO L264 CegarLoopResult]: At program point L967-5(lines 952 970) the Hoare annotation is: false [2020-07-28 19:02:54,333 INFO L264 CegarLoopResult]: At program point L967-6(lines 952 970) the Hoare annotation is: false [2020-07-28 19:02:54,333 INFO L264 CegarLoopResult]: At program point L967-7(lines 952 970) the Hoare annotation is: false [2020-07-28 19:02:54,333 INFO L264 CegarLoopResult]: At program point L967-8(lines 952 970) the Hoare annotation is: false [2020-07-28 19:02:54,333 INFO L264 CegarLoopResult]: At program point L967-9(lines 952 970) the Hoare annotation is: false [2020-07-28 19:02:54,333 INFO L264 CegarLoopResult]: At program point L967-10(lines 952 970) the Hoare annotation is: false [2020-07-28 19:02:54,334 INFO L264 CegarLoopResult]: At program point L967-11(lines 952 970) the Hoare annotation is: false [2020-07-28 19:02:54,334 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 257) no Hoare annotation was computed. [2020-07-28 19:02:54,334 INFO L264 CegarLoopResult]: At program point L903(lines 896 906) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse2 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse3 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (not (= 0 ~pumpRunning~0))) (.cse6 (= 1 ~systemActive~0))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse6) (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 (= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2020-07-28 19:02:54,334 INFO L264 CegarLoopResult]: At program point L903-1(lines 896 906) the Hoare annotation is: false [2020-07-28 19:02:54,335 INFO L268 CegarLoopResult]: For program point L837(lines 837 845) no Hoare annotation was computed. [2020-07-28 19:02:54,335 INFO L264 CegarLoopResult]: At program point L903-2(lines 896 906) the Hoare annotation is: false [2020-07-28 19:02:54,335 INFO L268 CegarLoopResult]: For program point L837-1(lines 837 845) no Hoare annotation was computed. [2020-07-28 19:02:54,335 INFO L268 CegarLoopResult]: For program point L837-2(lines 837 845) no Hoare annotation was computed. [2020-07-28 19:02:54,335 INFO L268 CegarLoopResult]: For program point L837-3(lines 837 845) no Hoare annotation was computed. [2020-07-28 19:02:54,335 INFO L268 CegarLoopResult]: For program point L837-4(lines 837 845) no Hoare annotation was computed. [2020-07-28 19:02:54,336 INFO L268 CegarLoopResult]: For program point L837-5(lines 837 845) no Hoare annotation was computed. [2020-07-28 19:02:54,336 INFO L268 CegarLoopResult]: For program point L78(lines 78 82) no Hoare annotation was computed. [2020-07-28 19:02:54,336 INFO L268 CegarLoopResult]: For program point L739(lines 739 752) no Hoare annotation was computed. [2020-07-28 19:02:54,336 INFO L268 CegarLoopResult]: For program point L278(lines 278 291) no Hoare annotation was computed. [2020-07-28 19:02:54,337 INFO L264 CegarLoopResult]: At program point L278-1(lines 1 997) the Hoare annotation is: (let ((.cse4 (= 0 ~pumpRunning~0))) (let ((.cse8 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6))) (.cse12 (<= ~waterLevel~0 2)) (.cse14 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse2 (= 1 ~methaneLevelCritical~0)) (.cse11 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse9 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse3 (= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~1)) (.cse13 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse15 (not .cse4)) (.cse7 (= 0 ~methaneLevelCritical~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse17 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)) (.cse5 (<= ~waterLevel~0 1)) (.cse10 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~1)) (.cse16 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse6 (= 1 ~systemActive~0)) (.cse18 (<= |ULTIMATE.start_getWaterLevel_#res| 1))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse7 .cse1 .cse4 (= 1 ~waterLevel~0) .cse6) (and (<= 2 ~waterLevel~0) .cse8 .cse9 .cse10 .cse6 .cse7 .cse1 .cse11 .cse12 .cse13 .cse14 .cse15 .cse16) (and .cse7 .cse1 .cse11 .cse9 .cse17 .cse13 .cse5 .cse15 .cse10 .cse16 .cse6 .cse18) (and .cse0 .cse8 .cse1 .cse2 .cse11 .cse12 .cse3 .cse9 .cse13 .cse14 .cse15 .cse6) (and .cse0 .cse1 .cse2 .cse11 .cse9 .cse3 .cse13 .cse5 .cse15 .cse6) (and .cse7 .cse1 .cse17 .cse4 .cse5 .cse10 .cse16 .cse6 .cse18)))) [2020-07-28 19:02:54,337 INFO L264 CegarLoopResult]: At program point L212(lines 208 214) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:02:54,338 INFO L268 CegarLoopResult]: For program point L278-2(lines 278 291) no Hoare annotation was computed. [2020-07-28 19:02:54,338 INFO L264 CegarLoopResult]: At program point L278-3(lines 1 997) the Hoare annotation is: false [2020-07-28 19:02:54,338 INFO L264 CegarLoopResult]: At program point L146(lines 141 149) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse2 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse3 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (not (= 0 ~pumpRunning~0))) (.cse6 (= 1 ~systemActive~0))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse6) (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 (= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2020-07-28 19:02:54,338 INFO L268 CegarLoopResult]: For program point L278-4(lines 278 291) no Hoare annotation was computed. [2020-07-28 19:02:54,339 INFO L264 CegarLoopResult]: At program point L146-1(lines 141 149) the Hoare annotation is: false [2020-07-28 19:02:54,339 INFO L264 CegarLoopResult]: At program point L278-5(lines 1 997) the Hoare annotation is: false [2020-07-28 19:02:54,339 INFO L264 CegarLoopResult]: At program point L146-2(lines 141 149) the Hoare annotation is: false [2020-07-28 19:02:54,339 INFO L264 CegarLoopResult]: At program point L146-3(lines 141 149) the Hoare annotation is: false [2020-07-28 19:02:54,339 INFO L264 CegarLoopResult]: At program point L146-4(lines 141 149) the Hoare annotation is: false [2020-07-28 19:02:54,339 INFO L264 CegarLoopResult]: At program point L146-5(lines 141 149) the Hoare annotation is: false [2020-07-28 19:02:54,340 INFO L268 CegarLoopResult]: For program point L807(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:02:54,340 INFO L268 CegarLoopResult]: For program point L807-1(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:02:54,341 INFO L268 CegarLoopResult]: For program point L807-2(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:02:54,341 INFO L268 CegarLoopResult]: For program point L807-3(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:02:54,341 INFO L268 CegarLoopResult]: For program point L807-4(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:02:54,341 INFO L268 CegarLoopResult]: For program point L807-5(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:02:54,341 INFO L268 CegarLoopResult]: For program point L807-6(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:02:54,342 INFO L268 CegarLoopResult]: For program point L807-7(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:02:54,342 INFO L268 CegarLoopResult]: For program point L807-8(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:02:54,342 INFO L268 CegarLoopResult]: For program point L807-9(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:02:54,342 INFO L268 CegarLoopResult]: For program point L807-10(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:02:54,342 INFO L268 CegarLoopResult]: For program point L807-11(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:02:54,343 INFO L264 CegarLoopResult]: At program point L775(lines 774 793) the Hoare annotation is: (let ((.cse1 (= 1 ~methaneLevelCritical~0)) (.cse5 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse6 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse7 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse8 (<= ~waterLevel~0 1)) (.cse9 (= 0 ~methaneLevelCritical~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (<= ~waterLevel~0 2)) (.cse3 (= 0 ~pumpRunning~0)) (.cse4 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse5 .cse6 .cse7 .cse8 .cse4) (and .cse9 .cse0 .cse5 .cse6 .cse7 .cse8 .cse4) (and .cse9 .cse0 .cse2 .cse3 .cse4))) [2020-07-28 19:02:54,343 INFO L268 CegarLoopResult]: For program point L775-1(lines 775 781) no Hoare annotation was computed. [2020-07-28 19:02:54,343 INFO L264 CegarLoopResult]: At program point L775-2(lines 774 793) the Hoare annotation is: false [2020-07-28 19:02:54,343 INFO L264 CegarLoopResult]: At program point L775-3(lines 774 793) the Hoare annotation is: false [2020-07-28 19:02:54,343 INFO L268 CegarLoopResult]: For program point L710(lines 709 756) no Hoare annotation was computed. [2020-07-28 19:02:54,344 INFO L271 CegarLoopResult]: At program point L248(lines 229 251) the Hoare annotation is: true [2020-07-28 19:02:54,345 INFO L268 CegarLoopResult]: For program point L711(lines 711 715) no Hoare annotation was computed. [2020-07-28 19:02:54,345 INFO L268 CegarLoopResult]: For program point L282(lines 282 288) no Hoare annotation was computed. [2020-07-28 19:02:54,345 INFO L268 CegarLoopResult]: For program point L282-2(lines 282 288) no Hoare annotation was computed. [2020-07-28 19:02:54,345 INFO L268 CegarLoopResult]: For program point L282-4(lines 282 288) no Hoare annotation was computed. [2020-07-28 19:02:54,345 INFO L268 CegarLoopResult]: For program point L811(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:02:54,346 INFO L268 CegarLoopResult]: For program point L811-1(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:02:54,346 INFO L268 CegarLoopResult]: For program point L811-2(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:02:54,346 INFO L268 CegarLoopResult]: For program point L811-3(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:02:54,346 INFO L268 CegarLoopResult]: For program point L811-4(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:02:54,346 INFO L268 CegarLoopResult]: For program point L811-5(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:02:54,346 INFO L268 CegarLoopResult]: For program point L811-6(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:02:54,347 INFO L268 CegarLoopResult]: For program point L811-7(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:02:54,347 INFO L268 CegarLoopResult]: For program point L811-8(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:02:54,347 INFO L268 CegarLoopResult]: For program point L811-9(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:02:54,347 INFO L268 CegarLoopResult]: For program point L811-10(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:02:54,348 INFO L268 CegarLoopResult]: For program point L811-11(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:02:54,348 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:02:54,348 INFO L264 CegarLoopResult]: At program point L912(lines 907 915) the Hoare annotation is: (and (<= 2 ~waterLevel~0) (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6)) (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 2) (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~1) (= 1 ~systemActive~0) (= 0 ~methaneLevelCritical~0) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9) (not (= 0 |ULTIMATE.start_isPumpRunning_#res|)) (<= ~waterLevel~0 2) (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2)) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) (not (= 0 ~pumpRunning~0)) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (<= 2 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0)) [2020-07-28 19:02:54,348 INFO L264 CegarLoopResult]: At program point L912-1(lines 907 915) the Hoare annotation is: false [2020-07-28 19:02:54,348 INFO L264 CegarLoopResult]: At program point L912-2(lines 907 915) the Hoare annotation is: false [2020-07-28 19:02:54,349 INFO L268 CegarLoopResult]: For program point L747(lines 747 751) no Hoare annotation was computed. [2020-07-28 19:02:54,349 INFO L264 CegarLoopResult]: At program point L747-2(lines 775 781) the Hoare annotation is: (let ((.cse1 (= 1 ~methaneLevelCritical~0)) (.cse2 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse4 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse5 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse8 (= 0 ~methaneLevelCritical~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (<= ~waterLevel~0 2)) (.cse7 (= 0 ~pumpRunning~0)) (.cse6 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse0 .cse1 .cse3 .cse7 .cse6) (and .cse8 .cse0 .cse2 .cse3 .cse4 .cse5 .cse6) (and .cse8 .cse0 .cse3 .cse7 .cse6))) [2020-07-28 19:02:54,349 INFO L268 CegarLoopResult]: For program point L54(lines 54 58) no Hoare annotation was computed. [2020-07-28 19:02:54,349 INFO L268 CegarLoopResult]: For program point L54-3(lines 54 58) no Hoare annotation was computed. [2020-07-28 19:02:54,349 INFO L268 CegarLoopResult]: For program point L54-6(lines 54 58) no Hoare annotation was computed. [2020-07-28 19:02:54,350 INFO L264 CegarLoopResult]: At program point L319(lines 1 997) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:02:54,350 INFO L268 CegarLoopResult]: For program point L980(lines 980 984) no Hoare annotation was computed. [2020-07-28 19:02:54,350 INFO L268 CegarLoopResult]: For program point L980-2(lines 980 984) no Hoare annotation was computed. [2020-07-28 19:02:54,350 INFO L268 CegarLoopResult]: For program point L980-3(lines 980 984) no Hoare annotation was computed. [2020-07-28 19:02:54,350 INFO L268 CegarLoopResult]: For program point L980-5(lines 980 984) no Hoare annotation was computed. [2020-07-28 19:02:54,351 INFO L264 CegarLoopResult]: At program point L782(lines 782 788) the Hoare annotation is: (let ((.cse2 (= 0 ~pumpRunning~0))) (let ((.cse10 (<= 2 ~waterLevel~0)) (.cse11 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6))) (.cse1 (= 1 ~methaneLevelCritical~0)) (.cse6 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse7 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse12 (<= ~waterLevel~0 2)) (.cse13 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse8 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse9 (not .cse2)) (.cse5 (= 0 ~methaneLevelCritical~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (<= ~waterLevel~0 1)) (.cse4 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse5 .cse0 .cse6 .cse7 .cse8 .cse3 .cse9 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse4) (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 .cse1 .cse6 .cse7 .cse8 .cse3 .cse9 .cse4) (and .cse5 .cse10 .cse11 .cse0 .cse6 .cse7 .cse12 .cse13 .cse8 .cse9 .cse4) (and .cse10 .cse11 .cse0 .cse1 .cse6 .cse7 .cse12 .cse13 .cse8 .cse9 .cse4) (and .cse5 .cse0 .cse2 .cse3 .cse4)))) [2020-07-28 19:02:54,351 INFO L268 CegarLoopResult]: For program point L980-6(lines 980 984) no Hoare annotation was computed. [2020-07-28 19:02:54,351 INFO L264 CegarLoopResult]: At program point L782-1(lines 782 788) the Hoare annotation is: false [2020-07-28 19:02:54,351 INFO L268 CegarLoopResult]: For program point L980-8(lines 980 984) no Hoare annotation was computed. [2020-07-28 19:02:54,351 INFO L264 CegarLoopResult]: At program point L782-2(lines 782 788) the Hoare annotation is: false [2020-07-28 19:02:54,351 INFO L268 CegarLoopResult]: For program point L980-9(lines 980 984) no Hoare annotation was computed. [2020-07-28 19:02:54,352 INFO L268 CegarLoopResult]: For program point L980-11(lines 980 984) no Hoare annotation was computed. [2020-07-28 19:02:54,352 INFO L268 CegarLoopResult]: For program point L980-12(lines 980 984) no Hoare annotation was computed. [2020-07-28 19:02:54,352 INFO L268 CegarLoopResult]: For program point L980-14(lines 980 984) no Hoare annotation was computed. [2020-07-28 19:02:54,352 INFO L268 CegarLoopResult]: For program point L980-15(lines 980 984) no Hoare annotation was computed. [2020-07-28 19:02:54,352 INFO L268 CegarLoopResult]: For program point L980-17(lines 980 984) no Hoare annotation was computed. [2020-07-28 19:02:54,353 INFO L264 CegarLoopResult]: At program point L123(lines 118 126) the Hoare annotation is: (let ((.cse5 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse0 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse6 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse3 (= 0 ~methaneLevelCritical~0)) (.cse4 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse7 (= 0 ~pumpRunning~0)) (.cse9 (<= ~waterLevel~0 1)) (.cse1 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~1)) (.cse8 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse2 (= 1 ~systemActive~0)) (.cse10 (<= |ULTIMATE.start_getWaterLevel_#res| 1))) (or (and (<= 2 ~waterLevel~0) (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6)) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (<= ~waterLevel~0 2) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse6 (not .cse7) .cse8) (and .cse3 .cse4 .cse5 .cse0 .cse6 .cse9 .cse1 .cse8 .cse2 .cse10) (and .cse3 .cse4 .cse7 .cse9 .cse1 .cse8 .cse2 .cse10))) [2020-07-28 19:02:54,353 INFO L264 CegarLoopResult]: At program point L123-1(lines 118 126) the Hoare annotation is: false [2020-07-28 19:02:54,353 INFO L264 CegarLoopResult]: At program point L123-2(lines 118 126) the Hoare annotation is: false [2020-07-28 19:02:54,353 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:02:54,353 INFO L264 CegarLoopResult]: At program point L91(lines 86 94) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse2 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse3 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (not (= 0 ~pumpRunning~0))) (.cse6 (= 1 ~systemActive~0))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse6) (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 (= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2020-07-28 19:02:54,354 INFO L264 CegarLoopResult]: At program point L91-1(lines 86 94) the Hoare annotation is: (let ((.cse14 (= 0 ~pumpRunning~0))) (let ((.cse12 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse9 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6))) (.cse13 (= 1 ~methaneLevelCritical~0)) (.cse2 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse3 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse10 (<= ~waterLevel~0 2)) (.cse11 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse4 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse6 (not .cse14)) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse5 (<= ~waterLevel~0 1)) (.cse7 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse8 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse9 .cse1 .cse2 .cse10 .cse3 .cse11 .cse4 .cse6 .cse7 .cse8) (and .cse12 .cse1 .cse13 .cse2 .cse3 .cse4 .cse5 .cse6 .cse8) (and .cse12 .cse1 .cse13 .cse14 .cse5 .cse8) (and .cse12 .cse9 .cse1 .cse13 .cse2 .cse3 .cse10 .cse11 .cse4 .cse6 .cse8) (and .cse0 .cse1 .cse14 .cse5 .cse7 .cse8)))) [2020-07-28 19:02:54,354 INFO L264 CegarLoopResult]: At program point L91-2(lines 86 94) the Hoare annotation is: false [2020-07-28 19:02:54,354 INFO L264 CegarLoopResult]: At program point L91-3(lines 86 94) the Hoare annotation is: false [2020-07-28 19:02:54,354 INFO L264 CegarLoopResult]: At program point L91-4(lines 86 94) the Hoare annotation is: false [2020-07-28 19:02:54,354 INFO L264 CegarLoopResult]: At program point L91-5(lines 86 94) the Hoare annotation is: false [2020-07-28 19:02:54,355 INFO L268 CegarLoopResult]: For program point L719(lines 719 725) no Hoare annotation was computed. [2020-07-28 19:02:54,355 INFO L264 CegarLoopResult]: At program point L719-1(lines 719 725) the Hoare annotation is: (let ((.cse0 (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse2 (= 1 ~methaneLevelCritical~0)) (.cse4 (= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~1)) (.cse12 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)) (.cse9 (= 0 ~pumpRunning~0)) (.cse13 (<= ~waterLevel~0 1)) (.cse16 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse10 (= 0 ~methaneLevelCritical~0)) (.cse11 (= 1 ~waterLevel~0)) (.cse17 (<= 2 ~waterLevel~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse6 (<= ~waterLevel~0 2)) (.cse5 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse7 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse14 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~1)) (.cse15 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse8 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse0 .cse1 .cse2 .cse6 .cse4 .cse9 .cse8) (and .cse10 .cse1 .cse9 .cse11 .cse8) (and .cse10 .cse1 .cse3 .cse5 .cse12 .cse7 .cse13 .cse14 .cse15 .cse8 .cse16) (and .cse17 .cse10 .cse1 .cse6 .cse9 .cse8) (and .cse10 .cse1 .cse12 .cse9 .cse13 .cse14 .cse15 .cse8 .cse16) (and .cse10 (or (and .cse1 .cse3 .cse11) (and .cse17 .cse1 .cse3)) .cse6 .cse5 .cse7 .cse14 .cse15 .cse8))) [2020-07-28 19:02:54,355 INFO L268 CegarLoopResult]: For program point L257(line 257) no Hoare annotation was computed. [2020-07-28 19:02:54,355 INFO L268 CegarLoopResult]: For program point L257-1(line 257) no Hoare annotation was computed. [2020-07-28 19:02:54,356 INFO L268 CegarLoopResult]: For program point L257-2(line 257) no Hoare annotation was computed. [2020-07-28 19:02:54,356 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:02:54,356 INFO L264 CegarLoopResult]: At program point L986(lines 971 989) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse2 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse3 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (not (= 0 ~pumpRunning~0))) (.cse6 (= 1 ~systemActive~0))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse6) (and (= 1 |ULTIMATE.start_isMethaneLevelCritical_#res|) .cse0 (= 1 ~methaneLevelCritical~0) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6))) [2020-07-28 19:02:54,356 INFO L264 CegarLoopResult]: At program point L986-1(lines 971 989) the Hoare annotation is: false [2020-07-28 19:02:54,356 INFO L264 CegarLoopResult]: At program point L986-2(lines 971 989) the Hoare annotation is: false [2020-07-28 19:02:54,356 INFO L264 CegarLoopResult]: At program point L986-3(lines 971 989) the Hoare annotation is: false [2020-07-28 19:02:54,357 INFO L264 CegarLoopResult]: At program point L986-4(lines 971 989) the Hoare annotation is: false [2020-07-28 19:02:54,357 INFO L264 CegarLoopResult]: At program point L986-5(lines 971 989) the Hoare annotation is: false [2020-07-28 19:02:54,357 INFO L264 CegarLoopResult]: At program point L327(lines 322 330) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:02:54,357 INFO L264 CegarLoopResult]: At program point L757(lines 708 758) the Hoare annotation is: false [2020-07-28 19:02:54,357 INFO L264 CegarLoopResult]: At program point L163-2(lines 163 177) the Hoare annotation is: false [2020-07-28 19:02:54,358 INFO L268 CegarLoopResult]: For program point L164(line 164) no Hoare annotation was computed. [2020-07-28 19:02:54,358 INFO L268 CegarLoopResult]: For program point L131(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:02:54,358 INFO L268 CegarLoopResult]: For program point L131-1(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:02:54,358 INFO L268 CegarLoopResult]: For program point L131-2(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:02:54,358 INFO L268 CegarLoopResult]: For program point L131-3(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:02:54,358 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:02:54,358 INFO L268 CegarLoopResult]: For program point L131-4(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:02:54,359 INFO L268 CegarLoopResult]: For program point L131-5(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:02:54,359 INFO L268 CegarLoopResult]: For program point L131-6(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:02:54,359 INFO L268 CegarLoopResult]: For program point L131-7(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:02:54,359 INFO L268 CegarLoopResult]: For program point L131-8(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:02:54,360 INFO L268 CegarLoopResult]: For program point L131-9(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:02:54,360 INFO L268 CegarLoopResult]: For program point L131-10(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:02:54,360 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 257) no Hoare annotation was computed. [2020-07-28 19:02:54,361 INFO L268 CegarLoopResult]: For program point L131-11(lines 131 137) no Hoare annotation was computed. [2020-07-28 19:02:54,361 INFO L268 CegarLoopResult]: For program point L66(lines 66 70) no Hoare annotation was computed. [2020-07-28 19:02:54,361 INFO L268 CegarLoopResult]: For program point L859(lines 859 876) no Hoare annotation was computed. [2020-07-28 19:02:54,361 INFO L268 CegarLoopResult]: For program point L859-1(lines 859 876) no Hoare annotation was computed. [2020-07-28 19:02:54,362 INFO L268 CegarLoopResult]: For program point L859-2(lines 859 876) no Hoare annotation was computed. [2020-07-28 19:02:54,362 INFO L268 CegarLoopResult]: For program point L167(lines 167 171) no Hoare annotation was computed. [2020-07-28 19:02:54,362 INFO L268 CegarLoopResult]: For program point L167-1(lines 775 781) no Hoare annotation was computed. [2020-07-28 19:02:54,367 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:02:54,367 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:02:54,368 WARN L170 areAnnotationChecker]: L239 has no Hoare annotation [2020-07-28 19:02:54,368 WARN L170 areAnnotationChecker]: L239 has no Hoare annotation [2020-07-28 19:02:54,369 WARN L170 areAnnotationChecker]: L239 has no Hoare annotation [2020-07-28 19:02:54,371 WARN L170 areAnnotationChecker]: L710 has no Hoare annotation [2020-07-28 19:02:54,371 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:02:54,371 WARN L170 areAnnotationChecker]: L775-1 has no Hoare annotation [2020-07-28 19:02:54,371 WARN L170 areAnnotationChecker]: L710 has no Hoare annotation [2020-07-28 19:02:54,372 WARN L170 areAnnotationChecker]: L710 has no Hoare annotation [2020-07-28 19:02:54,372 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:02:54,372 WARN L170 areAnnotationChecker]: L775-1 has no Hoare annotation [2020-07-28 19:02:54,372 WARN L170 areAnnotationChecker]: L775-1 has no Hoare annotation [2020-07-28 19:02:54,372 WARN L170 areAnnotationChecker]: L711 has no Hoare annotation [2020-07-28 19:02:54,372 WARN L170 areAnnotationChecker]: L54-3 has no Hoare annotation [2020-07-28 19:02:54,372 WARN L170 areAnnotationChecker]: L54-3 has no Hoare annotation [2020-07-28 19:02:54,372 WARN L170 areAnnotationChecker]: L859-1 has no Hoare annotation [2020-07-28 19:02:54,372 WARN L170 areAnnotationChecker]: L719 has no Hoare annotation [2020-07-28 19:02:54,372 WARN L170 areAnnotationChecker]: L719 has no Hoare annotation [2020-07-28 19:02:54,373 WARN L170 areAnnotationChecker]: L859-1 has no Hoare annotation [2020-07-28 19:02:54,373 WARN L170 areAnnotationChecker]: L859-1 has no Hoare annotation [2020-07-28 19:02:54,373 WARN L170 areAnnotationChecker]: L66 has no Hoare annotation [2020-07-28 19:02:54,373 WARN L170 areAnnotationChecker]: L66 has no Hoare annotation [2020-07-28 19:02:54,373 WARN L170 areAnnotationChecker]: L729 has no Hoare annotation [2020-07-28 19:02:54,373 WARN L170 areAnnotationChecker]: L833-3 has no Hoare annotation [2020-07-28 19:02:54,374 WARN L170 areAnnotationChecker]: L833-3 has no Hoare annotation [2020-07-28 19:02:54,374 WARN L170 areAnnotationChecker]: L272-2 has no Hoare annotation [2020-07-28 19:02:54,374 WARN L170 areAnnotationChecker]: L729 has no Hoare annotation [2020-07-28 19:02:54,374 WARN L170 areAnnotationChecker]: L729 has no Hoare annotation [2020-07-28 19:02:54,374 WARN L170 areAnnotationChecker]: L863-1 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L980-9 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L807-7 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L807-7 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L272-2 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L272-2 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L78 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L78 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L739 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L863-1 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L863-1 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L980-9 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L980-9 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L131-7 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L131-7 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L278-2 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L739 has no Hoare annotation [2020-07-28 19:02:54,375 WARN L170 areAnnotationChecker]: L739 has no Hoare annotation [2020-07-28 19:02:54,376 WARN L170 areAnnotationChecker]: L833-2 has no Hoare annotation [2020-07-28 19:02:54,376 WARN L170 areAnnotationChecker]: L833-2 has no Hoare annotation [2020-07-28 19:02:54,376 WARN L170 areAnnotationChecker]: L980-11 has no Hoare annotation [2020-07-28 19:02:54,376 WARN L170 areAnnotationChecker]: L961-21 has no Hoare annotation [2020-07-28 19:02:54,376 WARN L170 areAnnotationChecker]: L164 has no Hoare annotation [2020-07-28 19:02:54,376 WARN L170 areAnnotationChecker]: L278-2 has no Hoare annotation [2020-07-28 19:02:54,376 WARN L170 areAnnotationChecker]: L278-2 has no Hoare annotation [2020-07-28 19:02:54,376 WARN L170 areAnnotationChecker]: L54 has no Hoare annotation [2020-07-28 19:02:54,378 WARN L170 areAnnotationChecker]: L747 has no Hoare annotation [2020-07-28 19:02:54,378 WARN L170 areAnnotationChecker]: L747 has no Hoare annotation [2020-07-28 19:02:54,378 WARN L170 areAnnotationChecker]: L980-6 has no Hoare annotation [2020-07-28 19:02:54,378 WARN L170 areAnnotationChecker]: L807-5 has no Hoare annotation [2020-07-28 19:02:54,378 WARN L170 areAnnotationChecker]: L807-5 has no Hoare annotation [2020-07-28 19:02:54,378 WARN L170 areAnnotationChecker]: L837-3 has no Hoare annotation [2020-07-28 19:02:54,378 WARN L170 areAnnotationChecker]: L961-21 has no Hoare annotation [2020-07-28 19:02:54,378 WARN L170 areAnnotationChecker]: L961-21 has no Hoare annotation [2020-07-28 19:02:54,379 WARN L170 areAnnotationChecker]: L164 has no Hoare annotation [2020-07-28 19:02:54,379 WARN L170 areAnnotationChecker]: L282-2 has no Hoare annotation [2020-07-28 19:02:54,379 WARN L170 areAnnotationChecker]: L54 has no Hoare annotation [2020-07-28 19:02:54,379 WARN L170 areAnnotationChecker]: L54 has no Hoare annotation [2020-07-28 19:02:54,379 WARN L170 areAnnotationChecker]: L859 has no Hoare annotation [2020-07-28 19:02:54,380 WARN L170 areAnnotationChecker]: L980-6 has no Hoare annotation [2020-07-28 19:02:54,380 WARN L170 areAnnotationChecker]: L980-6 has no Hoare annotation [2020-07-28 19:02:54,380 WARN L170 areAnnotationChecker]: L131-5 has no Hoare annotation [2020-07-28 19:02:54,380 WARN L170 areAnnotationChecker]: L131-5 has no Hoare annotation [2020-07-28 19:02:54,381 WARN L170 areAnnotationChecker]: L837-3 has no Hoare annotation [2020-07-28 19:02:54,381 WARN L170 areAnnotationChecker]: L837-3 has no Hoare annotation [2020-07-28 19:02:54,381 WARN L170 areAnnotationChecker]: L961-23 has no Hoare annotation [2020-07-28 19:02:54,381 WARN L170 areAnnotationChecker]: L167 has no Hoare annotation [2020-07-28 19:02:54,381 WARN L170 areAnnotationChecker]: L167 has no Hoare annotation [2020-07-28 19:02:54,381 WARN L170 areAnnotationChecker]: L282-2 has no Hoare annotation [2020-07-28 19:02:54,381 WARN L170 areAnnotationChecker]: L282-2 has no Hoare annotation [2020-07-28 19:02:54,381 WARN L170 areAnnotationChecker]: L859 has no Hoare annotation [2020-07-28 19:02:54,381 WARN L170 areAnnotationChecker]: L859 has no Hoare annotation [2020-07-28 19:02:54,383 WARN L170 areAnnotationChecker]: L980-8 has no Hoare annotation [2020-07-28 19:02:54,383 WARN L170 areAnnotationChecker]: L961-15 has no Hoare annotation [2020-07-28 19:02:54,383 WARN L170 areAnnotationChecker]: L807-6 has no Hoare annotation [2020-07-28 19:02:54,383 WARN L170 areAnnotationChecker]: L807-6 has no Hoare annotation [2020-07-28 19:02:54,383 WARN L170 areAnnotationChecker]: L811-7 has no Hoare annotation [2020-07-28 19:02:54,383 WARN L170 areAnnotationChecker]: L167-1 has no Hoare annotation [2020-07-28 19:02:54,383 WARN L170 areAnnotationChecker]: L167-1 has no Hoare annotation [2020-07-28 19:02:54,383 WARN L170 areAnnotationChecker]: L257-1 has no Hoare annotation [2020-07-28 19:02:54,384 WARN L170 areAnnotationChecker]: L257-1 has no Hoare annotation [2020-07-28 19:02:54,384 WARN L170 areAnnotationChecker]: L833-1 has no Hoare annotation [2020-07-28 19:02:54,384 WARN L170 areAnnotationChecker]: L833-1 has no Hoare annotation [2020-07-28 19:02:54,384 WARN L170 areAnnotationChecker]: L272 has no Hoare annotation [2020-07-28 19:02:54,384 WARN L170 areAnnotationChecker]: L837-2 has no Hoare annotation [2020-07-28 19:02:54,384 WARN L170 areAnnotationChecker]: L961-15 has no Hoare annotation [2020-07-28 19:02:54,384 WARN L170 areAnnotationChecker]: L961-15 has no Hoare annotation [2020-07-28 19:02:54,385 WARN L170 areAnnotationChecker]: L131-6 has no Hoare annotation [2020-07-28 19:02:54,385 WARN L170 areAnnotationChecker]: L131-6 has no Hoare annotation [2020-07-28 19:02:54,385 WARN L170 areAnnotationChecker]: L811-7 has no Hoare annotation [2020-07-28 19:02:54,385 WARN L170 areAnnotationChecker]: L811-7 has no Hoare annotation [2020-07-28 19:02:54,385 WARN L170 areAnnotationChecker]: L54-6 has no Hoare annotation [2020-07-28 19:02:54,385 WARN L170 areAnnotationChecker]: L54-6 has no Hoare annotation [2020-07-28 19:02:54,385 WARN L170 areAnnotationChecker]: L859-2 has no Hoare annotation [2020-07-28 19:02:54,385 WARN L170 areAnnotationChecker]: L863 has no Hoare annotation [2020-07-28 19:02:54,385 WARN L170 areAnnotationChecker]: L980-3 has no Hoare annotation [2020-07-28 19:02:54,385 WARN L170 areAnnotationChecker]: L807-3 has no Hoare annotation [2020-07-28 19:02:54,385 WARN L170 areAnnotationChecker]: L807-3 has no Hoare annotation [2020-07-28 19:02:54,385 WARN L170 areAnnotationChecker]: L272 has no Hoare annotation [2020-07-28 19:02:54,386 WARN L170 areAnnotationChecker]: L272 has no Hoare annotation [2020-07-28 19:02:54,386 WARN L170 areAnnotationChecker]: L837-2 has no Hoare annotation [2020-07-28 19:02:54,386 WARN L170 areAnnotationChecker]: L837-2 has no Hoare annotation [2020-07-28 19:02:54,386 WARN L170 areAnnotationChecker]: L961-17 has no Hoare annotation [2020-07-28 19:02:54,386 WARN L170 areAnnotationChecker]: L961-18 has no Hoare annotation [2020-07-28 19:02:54,386 WARN L170 areAnnotationChecker]: L859-2 has no Hoare annotation [2020-07-28 19:02:54,386 WARN L170 areAnnotationChecker]: L859-2 has no Hoare annotation [2020-07-28 19:02:54,386 WARN L170 areAnnotationChecker]: L863 has no Hoare annotation [2020-07-28 19:02:54,386 WARN L170 areAnnotationChecker]: L863 has no Hoare annotation [2020-07-28 19:02:54,386 WARN L170 areAnnotationChecker]: L980-3 has no Hoare annotation [2020-07-28 19:02:54,386 WARN L170 areAnnotationChecker]: L980-3 has no Hoare annotation [2020-07-28 19:02:54,386 WARN L170 areAnnotationChecker]: L131-3 has no Hoare annotation [2020-07-28 19:02:54,387 WARN L170 areAnnotationChecker]: L131-3 has no Hoare annotation [2020-07-28 19:02:54,387 WARN L170 areAnnotationChecker]: L278 has no Hoare annotation [2020-07-28 19:02:54,387 WARN L170 areAnnotationChecker]: L807-4 has no Hoare annotation [2020-07-28 19:02:54,387 WARN L170 areAnnotationChecker]: L807-4 has no Hoare annotation [2020-07-28 19:02:54,387 WARN L170 areAnnotationChecker]: L811-5 has no Hoare annotation [2020-07-28 19:02:54,387 WARN L170 areAnnotationChecker]: L961-18 has no Hoare annotation [2020-07-28 19:02:54,387 WARN L170 areAnnotationChecker]: L961-18 has no Hoare annotation [2020-07-28 19:02:54,387 WARN L170 areAnnotationChecker]: L833-5 has no Hoare annotation [2020-07-28 19:02:54,387 WARN L170 areAnnotationChecker]: L833-5 has no Hoare annotation [2020-07-28 19:02:54,387 WARN L170 areAnnotationChecker]: L272-4 has no Hoare annotation [2020-07-28 19:02:54,387 WARN L170 areAnnotationChecker]: L833 has no Hoare annotation [2020-07-28 19:02:54,388 WARN L170 areAnnotationChecker]: L833 has no Hoare annotation [2020-07-28 19:02:54,388 WARN L170 areAnnotationChecker]: L980-5 has no Hoare annotation [2020-07-28 19:02:54,388 WARN L170 areAnnotationChecker]: L961-9 has no Hoare annotation [2020-07-28 19:02:54,388 WARN L170 areAnnotationChecker]: L278 has no Hoare annotation [2020-07-28 19:02:54,388 WARN L170 areAnnotationChecker]: L278 has no Hoare annotation [2020-07-28 19:02:54,388 WARN L170 areAnnotationChecker]: L131-4 has no Hoare annotation [2020-07-28 19:02:54,388 WARN L170 areAnnotationChecker]: L131-4 has no Hoare annotation [2020-07-28 19:02:54,388 WARN L170 areAnnotationChecker]: L811-5 has no Hoare annotation [2020-07-28 19:02:54,388 WARN L170 areAnnotationChecker]: L811-5 has no Hoare annotation [2020-07-28 19:02:54,388 WARN L170 areAnnotationChecker]: L961-20 has no Hoare annotation [2020-07-28 19:02:54,388 WARN L170 areAnnotationChecker]: L863-2 has no Hoare annotation [2020-07-28 19:02:54,389 WARN L170 areAnnotationChecker]: L980-15 has no Hoare annotation [2020-07-28 19:02:54,389 WARN L170 areAnnotationChecker]: L807-11 has no Hoare annotation [2020-07-28 19:02:54,389 WARN L170 areAnnotationChecker]: L807-11 has no Hoare annotation [2020-07-28 19:02:54,389 WARN L170 areAnnotationChecker]: L272-4 has no Hoare annotation [2020-07-28 19:02:54,389 WARN L170 areAnnotationChecker]: L272-4 has no Hoare annotation [2020-07-28 19:02:54,389 WARN L170 areAnnotationChecker]: L980 has no Hoare annotation [2020-07-28 19:02:54,389 WARN L170 areAnnotationChecker]: L807-1 has no Hoare annotation [2020-07-28 19:02:54,389 WARN L170 areAnnotationChecker]: L807-1 has no Hoare annotation [2020-07-28 19:02:54,389 WARN L170 areAnnotationChecker]: L837-1 has no Hoare annotation [2020-07-28 19:02:54,389 WARN L170 areAnnotationChecker]: L961-9 has no Hoare annotation [2020-07-28 19:02:54,390 WARN L170 areAnnotationChecker]: L961-9 has no Hoare annotation [2020-07-28 19:02:54,390 WARN L170 areAnnotationChecker]: L282 has no Hoare annotation [2020-07-28 19:02:54,390 WARN L170 areAnnotationChecker]: L961-12 has no Hoare annotation [2020-07-28 19:02:54,390 WARN L170 areAnnotationChecker]: L811-6 has no Hoare annotation [2020-07-28 19:02:54,390 WARN L170 areAnnotationChecker]: L863-2 has no Hoare annotation [2020-07-28 19:02:54,390 WARN L170 areAnnotationChecker]: L863-2 has no Hoare annotation [2020-07-28 19:02:54,390 WARN L170 areAnnotationChecker]: L980-15 has no Hoare annotation [2020-07-28 19:02:54,390 WARN L170 areAnnotationChecker]: L980-15 has no Hoare annotation [2020-07-28 19:02:54,390 WARN L170 areAnnotationChecker]: L131-11 has no Hoare annotation [2020-07-28 19:02:54,390 WARN L170 areAnnotationChecker]: L131-11 has no Hoare annotation [2020-07-28 19:02:54,390 WARN L170 areAnnotationChecker]: L278-4 has no Hoare annotation [2020-07-28 19:02:54,390 WARN L170 areAnnotationChecker]: L980 has no Hoare annotation [2020-07-28 19:02:54,390 WARN L170 areAnnotationChecker]: L980 has no Hoare annotation [2020-07-28 19:02:54,390 WARN L170 areAnnotationChecker]: L131-1 has no Hoare annotation [2020-07-28 19:02:54,391 WARN L170 areAnnotationChecker]: L131-1 has no Hoare annotation [2020-07-28 19:02:54,391 WARN L170 areAnnotationChecker]: L837-1 has no Hoare annotation [2020-07-28 19:02:54,391 WARN L170 areAnnotationChecker]: L837-1 has no Hoare annotation [2020-07-28 19:02:54,391 WARN L170 areAnnotationChecker]: L961-11 has no Hoare annotation [2020-07-28 19:02:54,391 WARN L170 areAnnotationChecker]: L282 has no Hoare annotation [2020-07-28 19:02:54,391 WARN L170 areAnnotationChecker]: L282 has no Hoare annotation [2020-07-28 19:02:54,391 WARN L170 areAnnotationChecker]: L961-12 has no Hoare annotation [2020-07-28 19:02:54,391 WARN L170 areAnnotationChecker]: L961-12 has no Hoare annotation [2020-07-28 19:02:54,391 WARN L170 areAnnotationChecker]: L811-6 has no Hoare annotation [2020-07-28 19:02:54,391 WARN L170 areAnnotationChecker]: L811-6 has no Hoare annotation [2020-07-28 19:02:54,391 WARN L170 areAnnotationChecker]: L833-4 has no Hoare annotation [2020-07-28 19:02:54,391 WARN L170 areAnnotationChecker]: L833-4 has no Hoare annotation [2020-07-28 19:02:54,392 WARN L170 areAnnotationChecker]: L980-17 has no Hoare annotation [2020-07-28 19:02:54,392 WARN L170 areAnnotationChecker]: L961-33 has no Hoare annotation [2020-07-28 19:02:54,392 WARN L170 areAnnotationChecker]: L278-4 has no Hoare annotation [2020-07-28 19:02:54,392 WARN L170 areAnnotationChecker]: L278-4 has no Hoare annotation [2020-07-28 19:02:54,392 WARN L170 areAnnotationChecker]: L980-2 has no Hoare annotation [2020-07-28 19:02:54,392 WARN L170 areAnnotationChecker]: L961-3 has no Hoare annotation [2020-07-28 19:02:54,392 WARN L170 areAnnotationChecker]: L807-2 has no Hoare annotation [2020-07-28 19:02:54,392 WARN L170 areAnnotationChecker]: L807-2 has no Hoare annotation [2020-07-28 19:02:54,392 WARN L170 areAnnotationChecker]: L811-3 has no Hoare annotation [2020-07-28 19:02:54,392 WARN L170 areAnnotationChecker]: L257 has no Hoare annotation [2020-07-28 19:02:54,392 WARN L170 areAnnotationChecker]: L257 has no Hoare annotation [2020-07-28 19:02:54,392 WARN L170 areAnnotationChecker]: L961-14 has no Hoare annotation [2020-07-28 19:02:54,393 WARN L170 areAnnotationChecker]: L980-12 has no Hoare annotation [2020-07-28 19:02:54,393 WARN L170 areAnnotationChecker]: L807-9 has no Hoare annotation [2020-07-28 19:02:54,393 WARN L170 areAnnotationChecker]: L807-9 has no Hoare annotation [2020-07-28 19:02:54,393 WARN L170 areAnnotationChecker]: L837-5 has no Hoare annotation [2020-07-28 19:02:54,393 WARN L170 areAnnotationChecker]: L961-33 has no Hoare annotation [2020-07-28 19:02:54,393 WARN L170 areAnnotationChecker]: L961-33 has no Hoare annotation [2020-07-28 19:02:54,393 WARN L170 areAnnotationChecker]: L282-4 has no Hoare annotation [2020-07-28 19:02:54,393 WARN L170 areAnnotationChecker]: L837 has no Hoare annotation [2020-07-28 19:02:54,393 WARN L170 areAnnotationChecker]: L961-3 has no Hoare annotation [2020-07-28 19:02:54,393 WARN L170 areAnnotationChecker]: L961-3 has no Hoare annotation [2020-07-28 19:02:54,393 WARN L170 areAnnotationChecker]: L131-2 has no Hoare annotation [2020-07-28 19:02:54,393 WARN L170 areAnnotationChecker]: L131-2 has no Hoare annotation [2020-07-28 19:02:54,394 WARN L170 areAnnotationChecker]: L811-3 has no Hoare annotation [2020-07-28 19:02:54,394 WARN L170 areAnnotationChecker]: L811-3 has no Hoare annotation [2020-07-28 19:02:54,394 WARN L170 areAnnotationChecker]: L811-4 has no Hoare annotation [2020-07-28 19:02:54,394 WARN L170 areAnnotationChecker]: L980-12 has no Hoare annotation [2020-07-28 19:02:54,394 WARN L170 areAnnotationChecker]: L980-12 has no Hoare annotation [2020-07-28 19:02:54,394 WARN L170 areAnnotationChecker]: L131-9 has no Hoare annotation [2020-07-28 19:02:54,394 WARN L170 areAnnotationChecker]: L131-9 has no Hoare annotation [2020-07-28 19:02:54,394 WARN L170 areAnnotationChecker]: L837-5 has no Hoare annotation [2020-07-28 19:02:54,394 WARN L170 areAnnotationChecker]: L837-5 has no Hoare annotation [2020-07-28 19:02:54,394 WARN L170 areAnnotationChecker]: L961-35 has no Hoare annotation [2020-07-28 19:02:54,394 WARN L170 areAnnotationChecker]: L282-4 has no Hoare annotation [2020-07-28 19:02:54,394 WARN L170 areAnnotationChecker]: L282-4 has no Hoare annotation [2020-07-28 19:02:54,395 WARN L170 areAnnotationChecker]: L837 has no Hoare annotation [2020-07-28 19:02:54,395 WARN L170 areAnnotationChecker]: L837 has no Hoare annotation [2020-07-28 19:02:54,395 WARN L170 areAnnotationChecker]: L961-5 has no Hoare annotation [2020-07-28 19:02:54,395 WARN L170 areAnnotationChecker]: L961-6 has no Hoare annotation [2020-07-28 19:02:54,395 WARN L170 areAnnotationChecker]: L811-4 has no Hoare annotation [2020-07-28 19:02:54,395 WARN L170 areAnnotationChecker]: L811-4 has no Hoare annotation [2020-07-28 19:02:54,395 WARN L170 areAnnotationChecker]: L980-14 has no Hoare annotation [2020-07-28 19:02:54,395 WARN L170 areAnnotationChecker]: L961-27 has no Hoare annotation [2020-07-28 19:02:54,395 WARN L170 areAnnotationChecker]: L807-10 has no Hoare annotation [2020-07-28 19:02:54,395 WARN L170 areAnnotationChecker]: L807-10 has no Hoare annotation [2020-07-28 19:02:54,395 WARN L170 areAnnotationChecker]: L811-11 has no Hoare annotation [2020-07-28 19:02:54,396 WARN L170 areAnnotationChecker]: L257-2 has no Hoare annotation [2020-07-28 19:02:54,396 WARN L170 areAnnotationChecker]: L257-2 has no Hoare annotation [2020-07-28 19:02:54,396 WARN L170 areAnnotationChecker]: L807 has no Hoare annotation [2020-07-28 19:02:54,396 WARN L170 areAnnotationChecker]: L807 has no Hoare annotation [2020-07-28 19:02:54,396 WARN L170 areAnnotationChecker]: L811-1 has no Hoare annotation [2020-07-28 19:02:54,396 WARN L170 areAnnotationChecker]: L961-6 has no Hoare annotation [2020-07-28 19:02:54,396 WARN L170 areAnnotationChecker]: L961-6 has no Hoare annotation [2020-07-28 19:02:54,396 WARN L170 areAnnotationChecker]: L837-4 has no Hoare annotation [2020-07-28 19:02:54,396 WARN L170 areAnnotationChecker]: L961-27 has no Hoare annotation [2020-07-28 19:02:54,397 WARN L170 areAnnotationChecker]: L961-27 has no Hoare annotation [2020-07-28 19:02:54,397 WARN L170 areAnnotationChecker]: L131-10 has no Hoare annotation [2020-07-28 19:02:54,397 WARN L170 areAnnotationChecker]: L131-10 has no Hoare annotation [2020-07-28 19:02:54,397 WARN L170 areAnnotationChecker]: L811-11 has no Hoare annotation [2020-07-28 19:02:54,397 WARN L170 areAnnotationChecker]: L811-11 has no Hoare annotation [2020-07-28 19:02:54,397 WARN L170 areAnnotationChecker]: L131 has no Hoare annotation [2020-07-28 19:02:54,397 WARN L170 areAnnotationChecker]: L131 has no Hoare annotation [2020-07-28 19:02:54,397 WARN L170 areAnnotationChecker]: L811-1 has no Hoare annotation [2020-07-28 19:02:54,397 WARN L170 areAnnotationChecker]: L811-1 has no Hoare annotation [2020-07-28 19:02:54,397 WARN L170 areAnnotationChecker]: L961-8 has no Hoare annotation [2020-07-28 19:02:54,398 WARN L170 areAnnotationChecker]: L837-4 has no Hoare annotation [2020-07-28 19:02:54,398 WARN L170 areAnnotationChecker]: L837-4 has no Hoare annotation [2020-07-28 19:02:54,398 WARN L170 areAnnotationChecker]: L961-29 has no Hoare annotation [2020-07-28 19:02:54,398 WARN L170 areAnnotationChecker]: L961-30 has no Hoare annotation [2020-07-28 19:02:54,398 WARN L170 areAnnotationChecker]: L961 has no Hoare annotation [2020-07-28 19:02:54,398 WARN L170 areAnnotationChecker]: L811-2 has no Hoare annotation [2020-07-28 19:02:54,398 WARN L170 areAnnotationChecker]: L807-8 has no Hoare annotation [2020-07-28 19:02:54,398 WARN L170 areAnnotationChecker]: L807-8 has no Hoare annotation [2020-07-28 19:02:54,398 WARN L170 areAnnotationChecker]: L811-9 has no Hoare annotation [2020-07-28 19:02:54,398 WARN L170 areAnnotationChecker]: L961-30 has no Hoare annotation [2020-07-28 19:02:54,398 WARN L170 areAnnotationChecker]: L961-30 has no Hoare annotation [2020-07-28 19:02:54,399 WARN L170 areAnnotationChecker]: L961 has no Hoare annotation [2020-07-28 19:02:54,399 WARN L170 areAnnotationChecker]: L961 has no Hoare annotation [2020-07-28 19:02:54,399 WARN L170 areAnnotationChecker]: L811-2 has no Hoare annotation [2020-07-28 19:02:54,399 WARN L170 areAnnotationChecker]: L811-2 has no Hoare annotation [2020-07-28 19:02:54,399 WARN L170 areAnnotationChecker]: L131-8 has no Hoare annotation [2020-07-28 19:02:54,399 WARN L170 areAnnotationChecker]: L131-8 has no Hoare annotation [2020-07-28 19:02:54,399 WARN L170 areAnnotationChecker]: L811-9 has no Hoare annotation [2020-07-28 19:02:54,399 WARN L170 areAnnotationChecker]: L811-9 has no Hoare annotation [2020-07-28 19:02:54,399 WARN L170 areAnnotationChecker]: L961-32 has no Hoare annotation [2020-07-28 19:02:54,399 WARN L170 areAnnotationChecker]: L961-2 has no Hoare annotation [2020-07-28 19:02:54,399 WARN L170 areAnnotationChecker]: L961-24 has no Hoare annotation [2020-07-28 19:02:54,399 WARN L170 areAnnotationChecker]: L811-10 has no Hoare annotation [2020-07-28 19:02:54,400 WARN L170 areAnnotationChecker]: L811 has no Hoare annotation [2020-07-28 19:02:54,400 WARN L170 areAnnotationChecker]: L961-24 has no Hoare annotation [2020-07-28 19:02:54,400 WARN L170 areAnnotationChecker]: L961-24 has no Hoare annotation [2020-07-28 19:02:54,400 WARN L170 areAnnotationChecker]: L811-10 has no Hoare annotation [2020-07-28 19:02:54,400 WARN L170 areAnnotationChecker]: L811-10 has no Hoare annotation [2020-07-28 19:02:54,400 WARN L170 areAnnotationChecker]: L811 has no Hoare annotation [2020-07-28 19:02:54,400 WARN L170 areAnnotationChecker]: L811 has no Hoare annotation [2020-07-28 19:02:54,400 WARN L170 areAnnotationChecker]: L961-26 has no Hoare annotation [2020-07-28 19:02:54,400 WARN L170 areAnnotationChecker]: L811-8 has no Hoare annotation [2020-07-28 19:02:54,400 WARN L170 areAnnotationChecker]: L811-8 has no Hoare annotation [2020-07-28 19:02:54,400 WARN L170 areAnnotationChecker]: L811-8 has no Hoare annotation [2020-07-28 19:02:54,401 INFO L163 areAnnotationChecker]: CFG has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:02:54,445 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:02:54 BoogieIcfgContainer [2020-07-28 19:02:54,445 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:02:54,445 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:02:54,446 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:02:54,446 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:02:54,447 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:02:01" (3/4) ... [2020-07-28 19:02:54,451 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:02:54,476 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:02:54,478 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:02:54,480 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:02:54,482 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:02:54,484 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:02:54,486 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:02:54,488 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:02:54,525 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && 0 == tmp) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && !(0 == pumpRunning)) && 0 == \result)) || (((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && tmp___0 <= 1) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1)) || (((((((((((1 == \result && !(0 == tmp)) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && waterLevel <= 2) && 1 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && 0 == \result) && !(0 == pumpRunning)) && 1 == systemActive)) || (((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 1 == systemActive)) || ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && tmp___0 <= 1) && 0 == pumpRunning) && waterLevel <= 1) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1) [2020-07-28 19:02:54,526 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && 1 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 1 == systemActive) || ((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && tmp___0 <= 1) && !(0 == tmp___0)) && waterLevel <= 1) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1)) || (((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive)) || ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && tmp___0 <= 1) && 0 == pumpRunning) && waterLevel <= 1) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1)) || (((((((0 == methaneLevelCritical && (((0 == splverifierCounter && 0 == tmp) && 1 == waterLevel) || ((2 <= waterLevel && 0 == splverifierCounter) && 0 == tmp))) && waterLevel <= 2) && !(0 == \result)) && !(0 == tmp___0)) && 0 == tmp) && 0 == \result) && 1 == systemActive) [2020-07-28 19:02:54,526 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == tmp) && waterLevel <= 2) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) || ((((0 == splverifierCounter && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:02:54,527 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == tmp) && waterLevel <= 2) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) || ((((0 == splverifierCounter && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:02:54,527 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:02:54,528 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) || ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == \result) && 1 == systemActive)) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 1 == systemActive)) || ((((((((((0 == methaneLevelCritical && 2 <= waterLevel) && !(0 == tmp)) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && !(0 == tmp___0)) && !(0 == pumpRunning)) && 1 == systemActive)) || ((((((((((2 <= waterLevel && !(0 == tmp)) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && !(0 == tmp___0)) && !(0 == pumpRunning)) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) [2020-07-28 19:02:54,529 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == \result) && 1 == systemActive) || ((((((((((0 == methaneLevelCritical && !(0 == tmp)) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == \result)) && 0 == \result) && !(0 == tmp___0)) && !(0 == pumpRunning)) && 0 == \result) && 1 == systemActive)) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 1 == systemActive)) || (((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive)) || ((((((((((1 == \result && !(0 == tmp)) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && !(0 == tmp___0)) && !(0 == pumpRunning)) && 1 == systemActive)) || (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && 0 == \result) && 1 == systemActive) [2020-07-28 19:02:54,530 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == \result) && 1 == systemActive) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 1 == systemActive) [2020-07-28 19:02:54,531 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == \result) && 1 == systemActive) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 1 == systemActive) [2020-07-28 19:02:54,532 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && 0 == tmp) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == \result) && !(0 == tmp___0)) && !(0 == pumpRunning)) && 0 == \result) || (((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1)) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1) [2020-07-28 19:02:54,533 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) || ((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive)) || (((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result)) && 1 == systemActive)) || (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result)) && 1 == systemActive) [2020-07-28 19:02:54,535 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && !(0 == tmp___0)) && 0 == pumpRunning) && 1 == systemActive) || (((((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == \result)) && 0 == \result) && !(0 == tmp___0)) && 0 == pumpRunning) && 1 == systemActive)) || ((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && !(0 == tmp)) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && !(0 == \result)) && 0 == tmp___0) && 1 == systemActive)) || ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && !(0 == tmp)) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && !(0 == \result)) && 0 == tmp___0) && 1 == systemActive) [2020-07-28 19:02:54,535 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && tmp___0 <= 2) && 0 == tmp) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && !(0 == pumpRunning)) && 0 == \result) && 2 <= tmp___0 [2020-07-28 19:02:54,536 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == \result) && 1 == systemActive) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 1 == systemActive) [2020-07-28 19:02:54,537 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == \result) && 1 == systemActive) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 1 == systemActive) [2020-07-28 19:02:54,656 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:02:54,656 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:02:54,659 INFO L168 Benchmark]: Toolchain (without parser) took 56215.81 ms. Allocated memory was 1.0 GB in the beginning and 1.8 GB in the end (delta: 785.9 MB). Free memory was 956.2 MB in the beginning and 921.1 MB in the end (delta: 35.1 MB). Peak memory consumption was 821.0 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:54,659 INFO L168 Benchmark]: CDTParser took 0.70 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:02:54,660 INFO L168 Benchmark]: CACSL2BoogieTranslator took 738.78 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 137.9 MB). Free memory was 950.8 MB in the beginning and 1.1 GB in the end (delta: -167.5 MB). Peak memory consumption was 26.4 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:54,660 INFO L168 Benchmark]: Boogie Procedure Inliner took 98.78 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:54,660 INFO L168 Benchmark]: Boogie Preprocessor took 81.47 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:54,661 INFO L168 Benchmark]: RCFGBuilder took 2147.28 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 862.3 MB in the end (delta: 242.6 MB). Peak memory consumption was 242.6 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:54,661 INFO L168 Benchmark]: TraceAbstraction took 52931.15 ms. Allocated memory was 1.2 GB in the beginning and 1.8 GB in the end (delta: 648.0 MB). Free memory was 862.3 MB in the beginning and 940.5 MB in the end (delta: -78.2 MB). Peak memory consumption was 569.8 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:54,662 INFO L168 Benchmark]: Witness Printer took 211.03 ms. Allocated memory is still 1.8 GB. Free memory was 940.5 MB in the beginning and 921.1 MB in the end (delta: 19.5 MB). Peak memory consumption was 19.5 MB. Max. memory is 11.5 GB. [2020-07-28 19:02:54,665 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.70 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 738.78 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 137.9 MB). Free memory was 950.8 MB in the beginning and 1.1 GB in the end (delta: -167.5 MB). Peak memory consumption was 26.4 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 98.78 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 81.47 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 2147.28 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 862.3 MB in the end (delta: 242.6 MB). Peak memory consumption was 242.6 MB. Max. memory is 11.5 GB. * TraceAbstraction took 52931.15 ms. Allocated memory was 1.2 GB in the beginning and 1.8 GB in the end (delta: 648.0 MB). Free memory was 862.3 MB in the beginning and 940.5 MB in the end (delta: -78.2 MB). Peak memory consumption was 569.8 MB. Max. memory is 11.5 GB. * Witness Printer took 211.03 ms. Allocated memory is still 1.8 GB. Free memory was 940.5 MB in the beginning and 921.1 MB in the end (delta: 19.5 MB). Peak memory consumption was 19.5 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 257]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 257]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 257]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: ((((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == \result) && 1 == systemActive) || ((((((((((0 == methaneLevelCritical && !(0 == tmp)) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == \result)) && 0 == \result) && !(0 == tmp___0)) && !(0 == pumpRunning)) && 0 == \result) && 1 == systemActive)) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 1 == systemActive)) || (((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive)) || ((((((((((1 == \result && !(0 == tmp)) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && !(0 == tmp___0)) && !(0 == pumpRunning)) && 1 == systemActive)) || (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && 0 == \result) && 1 == systemActive) - InvariantResult [Line: 782]: Loop Invariant Derived loop invariant: ((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) || ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == \result) && 1 == systemActive)) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 1 == systemActive)) || ((((((((((0 == methaneLevelCritical && 2 <= waterLevel) && !(0 == tmp)) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && !(0 == tmp___0)) && !(0 == pumpRunning)) && 1 == systemActive)) || ((((((((((2 <= waterLevel && !(0 == tmp)) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && !(0 == tmp___0)) && !(0 == pumpRunning)) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == \result) && 1 == systemActive) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 1 == systemActive) - InvariantResult [Line: 782]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 782]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == \result) && 1 == systemActive) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 1 == systemActive) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 208]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) || ((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == \result) && 1 == systemActive) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 1 == systemActive) - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 229]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 141]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 86]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: ((((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive) || ((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == systemActive)) || (((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result)) && 1 == systemActive)) || (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == \result)) && 1 == systemActive) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 708]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 775]: Loop Invariant Derived loop invariant: ((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == tmp) && waterLevel <= 2) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) || ((((0 == splverifierCounter && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 1 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && 1 == systemActive) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && 0 == tmp) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && !(0 == pumpRunning)) && 0 == \result)) || (((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && tmp___0 <= 1) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1)) || (((((((((((1 == \result && !(0 == tmp)) && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && waterLevel <= 2) && 1 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && 0 == \result) && !(0 == pumpRunning)) && 1 == systemActive)) || (((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && 1 == tmp) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 1 == systemActive)) || ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && tmp___0 <= 1) && 0 == pumpRunning) && waterLevel <= 1) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1) - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 127]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: (((((((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && !(0 == tmp___0)) && 0 == pumpRunning) && 1 == systemActive) || (((((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == \result)) && 0 == \result) && !(0 == tmp___0)) && 0 == pumpRunning) && 1 == systemActive)) || ((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && !(0 == tmp)) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && !(0 == \result)) && 0 == tmp___0) && 1 == systemActive)) || ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && !(0 == tmp)) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && !(0 == \result)) && 0 == tmp___0) && 1 == systemActive) - InvariantResult [Line: 907]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 729]: Loop Invariant Derived loop invariant: ((((((((0 == splverifierCounter && 1 == methaneLevelCritical) && 0 == tmp) && waterLevel <= 2) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) || ((((0 == splverifierCounter && 1 == methaneLevelCritical) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 322]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 907]: Loop Invariant Derived loop invariant: ((((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && tmp___0 <= 2) && 0 == tmp) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && !(0 == pumpRunning)) && 0 == \result) && 2 <= tmp___0 - InvariantResult [Line: 239]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 952]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 907]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 971]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: (((((((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && 1 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 1 == systemActive) || ((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && waterLevel <= 2) && 1 == tmp) && 0 == pumpRunning) && 1 == systemActive)) || ((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && tmp___0 <= 1) && !(0 == tmp___0)) && waterLevel <= 1) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1)) || (((((2 <= waterLevel && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && 1 == systemActive)) || ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && tmp___0 <= 1) && 0 == pumpRunning) && waterLevel <= 1) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1)) || (((((((0 == methaneLevelCritical && (((0 == splverifierCounter && 0 == tmp) && 1 == waterLevel) || ((2 <= waterLevel && 0 == splverifierCounter) && 0 == tmp))) && waterLevel <= 2) && !(0 == \result)) && !(0 == tmp___0)) && 0 == tmp) && 0 == \result) && 1 == systemActive) - InvariantResult [Line: 971]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: (((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && 0 == tmp) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == \result) && !(0 == tmp___0)) && !(0 == pumpRunning)) && 0 == \result) || (((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1)) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1) - InvariantResult [Line: 971]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 971]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 971]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 163]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 118]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 971]: Loop Invariant Derived loop invariant: ((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 0 == \result) && 1 == systemActive) || ((((((((1 == \result && 0 == splverifierCounter) && 1 == methaneLevelCritical) && 0 == tmp) && !(0 == \result)) && !(0 == tmp___0)) && waterLevel <= 1) && !(0 == pumpRunning)) && 1 == systemActive) - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 195 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 38.2s, OverallIterations: 15, TraceHistogramMax: 2, AutomataDifference: 28.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 14.5s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1991 SDtfs, 2864 SDslu, 3275 SDs, 0 SdLazy, 548 SolverSat, 102 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.9s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 220 GetRequests, 141 SyntacticMatches, 0 SemanticMatches, 79 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.6s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=410occurred in iteration=14, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 5.2s AutomataMinimizationTime, 15 MinimizatonAttempts, 1871 StatesRemovedByMinimization, 11 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 70 LocationsWithAnnotation, 70 PreInvPairs, 472 NumberOfFragments, 1726 HoareAnnotationTreeSize, 70 FomulaSimplifications, 15080267 FormulaSimplificationTreeSizeReduction, 3.3s HoareSimplificationTime, 70 FomulaSimplificationsInter, 3368013 FormulaSimplificationTreeSizeReductionInter, 11.0s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.6s SatisfiabilityAnalysisTime, 2.0s InterpolantComputationTime, 661 NumberOfCodeBlocks, 661 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 644 ConstructedInterpolants, 0 QuantifiedInterpolants, 61460 SizeOfPredicates, 8 NumberOfNonLiveVariables, 830 ConjunctsInSsa, 12 ConjunctsInUnsatCore, 17 InterpolantComputations, 13 PerfectInterpolantSequences, 90/102 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...