./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 324eb41748355c32a9add81086317d66d1f7b200 ............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:02:08,506 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:02:08,509 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:02:08,524 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:02:08,525 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:02:08,528 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:02:08,530 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:02:08,533 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:02:08,537 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:02:08,546 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:02:08,547 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:02:08,549 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:02:08,552 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:02:08,554 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:02:08,557 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:02:08,558 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:02:08,562 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:02:08,563 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:02:08,567 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:02:08,570 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:02:08,574 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:02:08,578 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:02:08,580 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:02:08,583 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:02:08,588 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:02:08,589 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:02:08,589 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:02:08,591 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:02:08,592 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:02:08,593 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:02:08,593 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:02:08,594 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:02:08,596 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:02:08,597 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:02:08,599 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:02:08,599 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:02:08,600 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:02:08,600 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:02:08,600 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:02:08,601 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:02:08,603 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:02:08,604 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:02:08,627 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:02:08,628 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:02:08,630 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:02:08,630 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:02:08,631 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:02:08,631 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:02:08,631 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:02:08,631 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:02:08,632 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:02:08,632 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:02:08,632 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:02:08,634 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:02:08,634 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:02:08,635 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:02:08,635 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:02:08,635 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:02:08,635 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:02:08,636 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:02:08,636 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:02:08,636 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:02:08,636 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:02:08,636 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:02:08,637 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:02:08,637 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:02:08,637 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:02:08,637 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:02:08,637 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:02:08,637 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:02:08,638 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:02:08,638 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 324eb41748355c32a9add81086317d66d1f7b200 [2020-07-28 19:02:08,987 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:02:09,009 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:02:09,012 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:02:09,014 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:02:09,016 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:02:09,017 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c [2020-07-28 19:02:09,091 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b2bcfde36/ac765716b6b1472384d4fce8aaafd556/FLAG57efc358a [2020-07-28 19:02:09,622 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:02:09,622 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product57.cil.c [2020-07-28 19:02:09,636 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b2bcfde36/ac765716b6b1472384d4fce8aaafd556/FLAG57efc358a [2020-07-28 19:02:09,932 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b2bcfde36/ac765716b6b1472384d4fce8aaafd556 [2020-07-28 19:02:09,936 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:02:09,939 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:02:09,940 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:02:09,940 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:02:09,943 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:02:09,945 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:02:09" (1/1) ... [2020-07-28 19:02:09,948 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@195abc55 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:09, skipping insertion in model container [2020-07-28 19:02:09,948 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:02:09" (1/1) ... [2020-07-28 19:02:09,956 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:02:10,024 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:02:10,453 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:02:10,466 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:02:10,566 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:02:10,608 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:02:10,608 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:10 WrapperNode [2020-07-28 19:02:10,609 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:02:10,611 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:02:10,611 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:02:10,611 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:02:10,620 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:10" (1/1) ... [2020-07-28 19:02:10,645 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:10" (1/1) ... [2020-07-28 19:02:10,744 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:02:10,745 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:02:10,746 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:02:10,746 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:02:10,756 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:10" (1/1) ... [2020-07-28 19:02:10,758 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:10" (1/1) ... [2020-07-28 19:02:10,764 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:10" (1/1) ... [2020-07-28 19:02:10,765 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:10" (1/1) ... [2020-07-28 19:02:10,783 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:10" (1/1) ... [2020-07-28 19:02:10,794 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:10" (1/1) ... [2020-07-28 19:02:10,802 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:10" (1/1) ... [2020-07-28 19:02:10,819 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:02:10,820 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:02:10,820 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:02:10,820 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:02:10,821 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:10" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:02:10,904 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:02:10,905 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:02:10,905 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:02:10,906 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:02:12,686 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:02:12,687 INFO L295 CfgBuilder]: Removed 198 assume(true) statements. [2020-07-28 19:02:12,692 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:02:12 BoogieIcfgContainer [2020-07-28 19:02:12,693 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:02:12,694 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:02:12,694 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:02:12,698 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:02:12,698 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:02:09" (1/3) ... [2020-07-28 19:02:12,699 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@10245ccd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:02:12, skipping insertion in model container [2020-07-28 19:02:12,699 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:10" (2/3) ... [2020-07-28 19:02:12,700 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@10245ccd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:02:12, skipping insertion in model container [2020-07-28 19:02:12,700 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:02:12" (3/3) ... [2020-07-28 19:02:12,702 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product57.cil.c [2020-07-28 19:02:12,712 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:02:12,720 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:02:12,735 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:02:12,762 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:02:12,763 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:02:12,763 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:02:12,763 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:02:12,763 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:02:12,764 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:02:12,764 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:02:12,764 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:02:12,786 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states. [2020-07-28 19:02:12,795 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-28 19:02:12,795 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:12,796 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:12,797 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:12,804 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:12,805 INFO L82 PathProgramCache]: Analyzing trace with hash -38817959, now seen corresponding path program 1 times [2020-07-28 19:02:12,817 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:12,818 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1315577664] [2020-07-28 19:02:12,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:13,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:13,226 INFO L280 TraceCheckUtils]: 0: Hoare triple {144#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {144#true} is VALID [2020-07-28 19:02:13,227 INFO L280 TraceCheckUtils]: 1: Hoare triple {144#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {144#true} is VALID [2020-07-28 19:02:13,228 INFO L280 TraceCheckUtils]: 2: Hoare triple {144#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {144#true} is VALID [2020-07-28 19:02:13,228 INFO L280 TraceCheckUtils]: 3: Hoare triple {144#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {144#true} is VALID [2020-07-28 19:02:13,229 INFO L280 TraceCheckUtils]: 4: Hoare triple {144#true} assume 0 != main_~tmp~10; {144#true} is VALID [2020-07-28 19:02:13,229 INFO L280 TraceCheckUtils]: 5: Hoare triple {144#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {144#true} is VALID [2020-07-28 19:02:13,230 INFO L280 TraceCheckUtils]: 6: Hoare triple {144#true} assume false; {145#false} is VALID [2020-07-28 19:02:13,231 INFO L280 TraceCheckUtils]: 7: Hoare triple {145#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {145#false} is VALID [2020-07-28 19:02:13,231 INFO L280 TraceCheckUtils]: 8: Hoare triple {145#false} assume !(0 != ~pumpRunning~0); {145#false} is VALID [2020-07-28 19:02:13,231 INFO L280 TraceCheckUtils]: 9: Hoare triple {145#false} assume !(0 != ~systemActive~0); {145#false} is VALID [2020-07-28 19:02:13,232 INFO L280 TraceCheckUtils]: 10: Hoare triple {145#false} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {145#false} is VALID [2020-07-28 19:02:13,232 INFO L280 TraceCheckUtils]: 11: Hoare triple {145#false} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {145#false} is VALID [2020-07-28 19:02:13,233 INFO L280 TraceCheckUtils]: 12: Hoare triple {145#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {145#false} is VALID [2020-07-28 19:02:13,233 INFO L280 TraceCheckUtils]: 13: Hoare triple {145#false} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {145#false} is VALID [2020-07-28 19:02:13,233 INFO L280 TraceCheckUtils]: 14: Hoare triple {145#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {145#false} is VALID [2020-07-28 19:02:13,234 INFO L280 TraceCheckUtils]: 15: Hoare triple {145#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {145#false} is VALID [2020-07-28 19:02:13,234 INFO L280 TraceCheckUtils]: 16: Hoare triple {145#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {145#false} is VALID [2020-07-28 19:02:13,235 INFO L280 TraceCheckUtils]: 17: Hoare triple {145#false} assume !false; {145#false} is VALID [2020-07-28 19:02:13,238 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:13,239 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1315577664] [2020-07-28 19:02:13,240 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:13,240 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:02:13,241 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [894458563] [2020-07-28 19:02:13,248 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:02:13,249 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:13,253 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:02:13,301 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:13,301 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:02:13,302 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:13,310 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:02:13,311 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:02:13,314 INFO L87 Difference]: Start difference. First operand 141 states. Second operand 2 states. [2020-07-28 19:02:13,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:13,644 INFO L93 Difference]: Finished difference Result 276 states and 413 transitions. [2020-07-28 19:02:13,644 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:02:13,644 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:02:13,644 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:13,646 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:02:13,659 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 413 transitions. [2020-07-28 19:02:13,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:02:13,666 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 413 transitions. [2020-07-28 19:02:13,667 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 413 transitions. [2020-07-28 19:02:14,201 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 413 edges. 413 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:14,219 INFO L225 Difference]: With dead ends: 276 [2020-07-28 19:02:14,220 INFO L226 Difference]: Without dead ends: 137 [2020-07-28 19:02:14,224 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:02:14,244 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2020-07-28 19:02:14,287 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 137. [2020-07-28 19:02:14,288 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:14,288 INFO L82 GeneralOperation]: Start isEquivalent. First operand 137 states. Second operand 137 states. [2020-07-28 19:02:14,289 INFO L74 IsIncluded]: Start isIncluded. First operand 137 states. Second operand 137 states. [2020-07-28 19:02:14,289 INFO L87 Difference]: Start difference. First operand 137 states. Second operand 137 states. [2020-07-28 19:02:14,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:14,299 INFO L93 Difference]: Finished difference Result 137 states and 198 transitions. [2020-07-28 19:02:14,299 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 198 transitions. [2020-07-28 19:02:14,301 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:14,301 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:14,301 INFO L74 IsIncluded]: Start isIncluded. First operand 137 states. Second operand 137 states. [2020-07-28 19:02:14,302 INFO L87 Difference]: Start difference. First operand 137 states. Second operand 137 states. [2020-07-28 19:02:14,309 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:14,310 INFO L93 Difference]: Finished difference Result 137 states and 198 transitions. [2020-07-28 19:02:14,310 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 198 transitions. [2020-07-28 19:02:14,312 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:14,312 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:14,312 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:14,313 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:14,313 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 137 states. [2020-07-28 19:02:14,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137 states to 137 states and 198 transitions. [2020-07-28 19:02:14,322 INFO L78 Accepts]: Start accepts. Automaton has 137 states and 198 transitions. Word has length 18 [2020-07-28 19:02:14,323 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:14,323 INFO L479 AbstractCegarLoop]: Abstraction has 137 states and 198 transitions. [2020-07-28 19:02:14,323 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:02:14,323 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 198 transitions. [2020-07-28 19:02:14,324 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 19:02:14,325 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:14,325 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:14,325 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:02:14,326 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:14,326 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:14,326 INFO L82 PathProgramCache]: Analyzing trace with hash -949848712, now seen corresponding path program 1 times [2020-07-28 19:02:14,327 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:14,327 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1218089367] [2020-07-28 19:02:14,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:14,365 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:14,450 INFO L280 TraceCheckUtils]: 0: Hoare triple {1001#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {1001#true} is VALID [2020-07-28 19:02:14,451 INFO L280 TraceCheckUtils]: 1: Hoare triple {1001#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {1001#true} is VALID [2020-07-28 19:02:14,451 INFO L280 TraceCheckUtils]: 2: Hoare triple {1001#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1001#true} is VALID [2020-07-28 19:02:14,452 INFO L280 TraceCheckUtils]: 3: Hoare triple {1001#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {1001#true} is VALID [2020-07-28 19:02:14,452 INFO L280 TraceCheckUtils]: 4: Hoare triple {1001#true} assume 0 != main_~tmp~10; {1001#true} is VALID [2020-07-28 19:02:14,455 INFO L280 TraceCheckUtils]: 5: Hoare triple {1001#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1003#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:02:14,456 INFO L280 TraceCheckUtils]: 6: Hoare triple {1003#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {1003#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:02:14,457 INFO L280 TraceCheckUtils]: 7: Hoare triple {1003#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {1002#false} is VALID [2020-07-28 19:02:14,457 INFO L280 TraceCheckUtils]: 8: Hoare triple {1002#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {1002#false} is VALID [2020-07-28 19:02:14,458 INFO L280 TraceCheckUtils]: 9: Hoare triple {1002#false} assume !(0 != ~pumpRunning~0); {1002#false} is VALID [2020-07-28 19:02:14,458 INFO L280 TraceCheckUtils]: 10: Hoare triple {1002#false} assume !(0 != ~systemActive~0); {1002#false} is VALID [2020-07-28 19:02:14,458 INFO L280 TraceCheckUtils]: 11: Hoare triple {1002#false} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {1002#false} is VALID [2020-07-28 19:02:14,458 INFO L280 TraceCheckUtils]: 12: Hoare triple {1002#false} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {1002#false} is VALID [2020-07-28 19:02:14,459 INFO L280 TraceCheckUtils]: 13: Hoare triple {1002#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {1002#false} is VALID [2020-07-28 19:02:14,459 INFO L280 TraceCheckUtils]: 14: Hoare triple {1002#false} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {1002#false} is VALID [2020-07-28 19:02:14,460 INFO L280 TraceCheckUtils]: 15: Hoare triple {1002#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {1002#false} is VALID [2020-07-28 19:02:14,460 INFO L280 TraceCheckUtils]: 16: Hoare triple {1002#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {1002#false} is VALID [2020-07-28 19:02:14,460 INFO L280 TraceCheckUtils]: 17: Hoare triple {1002#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {1002#false} is VALID [2020-07-28 19:02:14,460 INFO L280 TraceCheckUtils]: 18: Hoare triple {1002#false} assume !false; {1002#false} is VALID [2020-07-28 19:02:14,462 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:14,463 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1218089367] [2020-07-28 19:02:14,463 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:14,463 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:02:14,464 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1083762037] [2020-07-28 19:02:14,465 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:02:14,466 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:14,466 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:02:14,498 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:14,499 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:02:14,499 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:14,500 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:02:14,500 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:14,500 INFO L87 Difference]: Start difference. First operand 137 states and 198 transitions. Second operand 3 states. [2020-07-28 19:02:14,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:14,745 INFO L93 Difference]: Finished difference Result 137 states and 198 transitions. [2020-07-28 19:02:14,745 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:02:14,745 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:02:14,745 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:14,746 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:14,753 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 198 transitions. [2020-07-28 19:02:14,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:14,762 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 198 transitions. [2020-07-28 19:02:14,762 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 198 transitions. [2020-07-28 19:02:15,017 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 198 edges. 198 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:15,019 INFO L225 Difference]: With dead ends: 137 [2020-07-28 19:02:15,019 INFO L226 Difference]: Without dead ends: 55 [2020-07-28 19:02:15,021 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:15,021 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2020-07-28 19:02:15,047 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2020-07-28 19:02:15,047 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:15,047 INFO L82 GeneralOperation]: Start isEquivalent. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:15,048 INFO L74 IsIncluded]: Start isIncluded. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:15,048 INFO L87 Difference]: Start difference. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:15,051 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:15,052 INFO L93 Difference]: Finished difference Result 55 states and 79 transitions. [2020-07-28 19:02:15,052 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 79 transitions. [2020-07-28 19:02:15,052 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:15,053 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:15,053 INFO L74 IsIncluded]: Start isIncluded. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:15,053 INFO L87 Difference]: Start difference. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:15,056 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:15,056 INFO L93 Difference]: Finished difference Result 55 states and 79 transitions. [2020-07-28 19:02:15,057 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 79 transitions. [2020-07-28 19:02:15,057 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:15,057 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:15,057 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:15,058 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:15,058 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55 states. [2020-07-28 19:02:15,065 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 79 transitions. [2020-07-28 19:02:15,068 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 79 transitions. Word has length 19 [2020-07-28 19:02:15,068 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:15,068 INFO L479 AbstractCegarLoop]: Abstraction has 55 states and 79 transitions. [2020-07-28 19:02:15,068 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:02:15,069 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 79 transitions. [2020-07-28 19:02:15,069 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 19:02:15,070 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:15,070 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:15,071 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:02:15,071 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:15,071 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:15,073 INFO L82 PathProgramCache]: Analyzing trace with hash -1573067069, now seen corresponding path program 1 times [2020-07-28 19:02:15,073 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:15,074 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1943117589] [2020-07-28 19:02:15,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:15,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:15,237 INFO L280 TraceCheckUtils]: 0: Hoare triple {1384#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {1386#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:15,239 INFO L280 TraceCheckUtils]: 1: Hoare triple {1386#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {1386#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:02:15,240 INFO L280 TraceCheckUtils]: 2: Hoare triple {1386#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1387#(= |ULTIMATE.start_valid_product_#res| ~systemActive~0)} is VALID [2020-07-28 19:02:15,241 INFO L280 TraceCheckUtils]: 3: Hoare triple {1387#(= |ULTIMATE.start_valid_product_#res| ~systemActive~0)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {1388#(= ULTIMATE.start_main_~tmp~10 ~systemActive~0)} is VALID [2020-07-28 19:02:15,241 INFO L280 TraceCheckUtils]: 4: Hoare triple {1388#(= ULTIMATE.start_main_~tmp~10 ~systemActive~0)} assume 0 != main_~tmp~10; {1389#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:15,242 INFO L280 TraceCheckUtils]: 5: Hoare triple {1389#(not (= 0 ~systemActive~0))} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1389#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:15,243 INFO L280 TraceCheckUtils]: 6: Hoare triple {1389#(not (= 0 ~systemActive~0))} assume !false; {1389#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:15,244 INFO L280 TraceCheckUtils]: 7: Hoare triple {1389#(not (= 0 ~systemActive~0))} assume test_~splverifierCounter~0 < 4; {1389#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:15,244 INFO L280 TraceCheckUtils]: 8: Hoare triple {1389#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {1389#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:15,245 INFO L280 TraceCheckUtils]: 9: Hoare triple {1389#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp~9); {1389#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:15,246 INFO L280 TraceCheckUtils]: 10: Hoare triple {1389#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {1389#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:15,246 INFO L280 TraceCheckUtils]: 11: Hoare triple {1389#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___0~3); {1389#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:15,247 INFO L280 TraceCheckUtils]: 12: Hoare triple {1389#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {1389#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:15,248 INFO L280 TraceCheckUtils]: 13: Hoare triple {1389#(not (= 0 ~systemActive~0))} assume 0 != test_~tmp___2~0; {1389#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:15,249 INFO L280 TraceCheckUtils]: 14: Hoare triple {1389#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {1389#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:15,249 INFO L280 TraceCheckUtils]: 15: Hoare triple {1389#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {1385#false} is VALID [2020-07-28 19:02:15,250 INFO L280 TraceCheckUtils]: 16: Hoare triple {1385#false} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {1385#false} is VALID [2020-07-28 19:02:15,250 INFO L280 TraceCheckUtils]: 17: Hoare triple {1385#false} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {1385#false} is VALID [2020-07-28 19:02:15,250 INFO L280 TraceCheckUtils]: 18: Hoare triple {1385#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {1385#false} is VALID [2020-07-28 19:02:15,251 INFO L280 TraceCheckUtils]: 19: Hoare triple {1385#false} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {1385#false} is VALID [2020-07-28 19:02:15,251 INFO L280 TraceCheckUtils]: 20: Hoare triple {1385#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {1385#false} is VALID [2020-07-28 19:02:15,251 INFO L280 TraceCheckUtils]: 21: Hoare triple {1385#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {1385#false} is VALID [2020-07-28 19:02:15,252 INFO L280 TraceCheckUtils]: 22: Hoare triple {1385#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {1385#false} is VALID [2020-07-28 19:02:15,252 INFO L280 TraceCheckUtils]: 23: Hoare triple {1385#false} assume !false; {1385#false} is VALID [2020-07-28 19:02:15,254 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:15,255 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1943117589] [2020-07-28 19:02:15,255 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:15,255 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:15,256 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2082503582] [2020-07-28 19:02:15,256 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 24 [2020-07-28 19:02:15,256 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:15,257 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:02:15,289 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:15,290 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:02:15,290 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:15,290 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:02:15,290 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:02:15,291 INFO L87 Difference]: Start difference. First operand 55 states and 79 transitions. Second operand 6 states. [2020-07-28 19:02:15,756 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:15,756 INFO L93 Difference]: Finished difference Result 104 states and 152 transitions. [2020-07-28 19:02:15,757 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:15,757 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 24 [2020-07-28 19:02:15,757 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:15,757 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:15,761 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 152 transitions. [2020-07-28 19:02:15,761 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:15,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 152 transitions. [2020-07-28 19:02:15,765 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 152 transitions. [2020-07-28 19:02:15,961 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 152 edges. 152 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:15,963 INFO L225 Difference]: With dead ends: 104 [2020-07-28 19:02:15,964 INFO L226 Difference]: Without dead ends: 55 [2020-07-28 19:02:15,965 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:15,965 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2020-07-28 19:02:16,020 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2020-07-28 19:02:16,020 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:16,020 INFO L82 GeneralOperation]: Start isEquivalent. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:16,021 INFO L74 IsIncluded]: Start isIncluded. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:16,021 INFO L87 Difference]: Start difference. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:16,023 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,023 INFO L93 Difference]: Finished difference Result 55 states and 78 transitions. [2020-07-28 19:02:16,023 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 78 transitions. [2020-07-28 19:02:16,023 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:16,024 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:16,024 INFO L74 IsIncluded]: Start isIncluded. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:16,024 INFO L87 Difference]: Start difference. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:16,026 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,026 INFO L93 Difference]: Finished difference Result 55 states and 78 transitions. [2020-07-28 19:02:16,027 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 78 transitions. [2020-07-28 19:02:16,027 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:16,027 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:16,027 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:16,027 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:16,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55 states. [2020-07-28 19:02:16,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 78 transitions. [2020-07-28 19:02:16,030 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 78 transitions. Word has length 24 [2020-07-28 19:02:16,030 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:16,030 INFO L479 AbstractCegarLoop]: Abstraction has 55 states and 78 transitions. [2020-07-28 19:02:16,030 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:16,031 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 78 transitions. [2020-07-28 19:02:16,031 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2020-07-28 19:02:16,031 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:16,031 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:16,032 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:02:16,032 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:16,032 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:16,032 INFO L82 PathProgramCache]: Analyzing trace with hash -630835270, now seen corresponding path program 1 times [2020-07-28 19:02:16,032 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:16,033 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1295025081] [2020-07-28 19:02:16,033 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:16,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:16,107 INFO L280 TraceCheckUtils]: 0: Hoare triple {1725#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,108 INFO L280 TraceCheckUtils]: 1: Hoare triple {1727#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,109 INFO L280 TraceCheckUtils]: 2: Hoare triple {1727#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,109 INFO L280 TraceCheckUtils]: 3: Hoare triple {1727#(= 0 ~pumpRunning~0)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,110 INFO L280 TraceCheckUtils]: 4: Hoare triple {1727#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~10; {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,111 INFO L280 TraceCheckUtils]: 5: Hoare triple {1727#(= 0 ~pumpRunning~0)} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,111 INFO L280 TraceCheckUtils]: 6: Hoare triple {1727#(= 0 ~pumpRunning~0)} assume !false; {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,112 INFO L280 TraceCheckUtils]: 7: Hoare triple {1727#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,112 INFO L280 TraceCheckUtils]: 8: Hoare triple {1727#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,113 INFO L280 TraceCheckUtils]: 9: Hoare triple {1727#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~9); {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,113 INFO L280 TraceCheckUtils]: 10: Hoare triple {1727#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,114 INFO L280 TraceCheckUtils]: 11: Hoare triple {1727#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~3); {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,115 INFO L280 TraceCheckUtils]: 12: Hoare triple {1727#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,115 INFO L280 TraceCheckUtils]: 13: Hoare triple {1727#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,116 INFO L280 TraceCheckUtils]: 14: Hoare triple {1727#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,116 INFO L280 TraceCheckUtils]: 15: Hoare triple {1727#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,117 INFO L280 TraceCheckUtils]: 16: Hoare triple {1727#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {1727#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:16,118 INFO L280 TraceCheckUtils]: 17: Hoare triple {1727#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {1726#false} is VALID [2020-07-28 19:02:16,118 INFO L280 TraceCheckUtils]: 18: Hoare triple {1726#false} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {1726#false} is VALID [2020-07-28 19:02:16,118 INFO L280 TraceCheckUtils]: 19: Hoare triple {1726#false} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {1726#false} is VALID [2020-07-28 19:02:16,118 INFO L280 TraceCheckUtils]: 20: Hoare triple {1726#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {1726#false} is VALID [2020-07-28 19:02:16,119 INFO L280 TraceCheckUtils]: 21: Hoare triple {1726#false} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {1726#false} is VALID [2020-07-28 19:02:16,119 INFO L280 TraceCheckUtils]: 22: Hoare triple {1726#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {1726#false} is VALID [2020-07-28 19:02:16,119 INFO L280 TraceCheckUtils]: 23: Hoare triple {1726#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {1726#false} is VALID [2020-07-28 19:02:16,119 INFO L280 TraceCheckUtils]: 24: Hoare triple {1726#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {1726#false} is VALID [2020-07-28 19:02:16,120 INFO L280 TraceCheckUtils]: 25: Hoare triple {1726#false} assume !false; {1726#false} is VALID [2020-07-28 19:02:16,121 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:16,121 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1295025081] [2020-07-28 19:02:16,121 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:16,122 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:02:16,122 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1886762399] [2020-07-28 19:02:16,122 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:02:16,123 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:16,123 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:02:16,155 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:16,156 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:02:16,156 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:16,156 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:02:16,156 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:16,156 INFO L87 Difference]: Start difference. First operand 55 states and 78 transitions. Second operand 3 states. [2020-07-28 19:02:16,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,414 INFO L93 Difference]: Finished difference Result 127 states and 183 transitions. [2020-07-28 19:02:16,414 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:02:16,414 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:02:16,415 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:16,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:16,417 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 183 transitions. [2020-07-28 19:02:16,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:16,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 183 transitions. [2020-07-28 19:02:16,420 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 183 transitions. [2020-07-28 19:02:16,645 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 183 edges. 183 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:16,648 INFO L225 Difference]: With dead ends: 127 [2020-07-28 19:02:16,648 INFO L226 Difference]: Without dead ends: 78 [2020-07-28 19:02:16,649 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:16,650 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2020-07-28 19:02:16,752 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 76. [2020-07-28 19:02:16,752 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:16,752 INFO L82 GeneralOperation]: Start isEquivalent. First operand 78 states. Second operand 76 states. [2020-07-28 19:02:16,753 INFO L74 IsIncluded]: Start isIncluded. First operand 78 states. Second operand 76 states. [2020-07-28 19:02:16,753 INFO L87 Difference]: Start difference. First operand 78 states. Second operand 76 states. [2020-07-28 19:02:16,756 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,757 INFO L93 Difference]: Finished difference Result 78 states and 108 transitions. [2020-07-28 19:02:16,757 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 108 transitions. [2020-07-28 19:02:16,757 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:16,757 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:16,758 INFO L74 IsIncluded]: Start isIncluded. First operand 76 states. Second operand 78 states. [2020-07-28 19:02:16,758 INFO L87 Difference]: Start difference. First operand 76 states. Second operand 78 states. [2020-07-28 19:02:16,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,761 INFO L93 Difference]: Finished difference Result 78 states and 108 transitions. [2020-07-28 19:02:16,761 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 108 transitions. [2020-07-28 19:02:16,762 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:16,762 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:16,762 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:16,762 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:16,763 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 76 states. [2020-07-28 19:02:16,766 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 107 transitions. [2020-07-28 19:02:16,766 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 107 transitions. Word has length 26 [2020-07-28 19:02:16,766 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:16,766 INFO L479 AbstractCegarLoop]: Abstraction has 76 states and 107 transitions. [2020-07-28 19:02:16,766 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:02:16,767 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 107 transitions. [2020-07-28 19:02:16,767 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2020-07-28 19:02:16,767 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:16,768 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:16,768 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:02:16,768 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:16,769 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:16,769 INFO L82 PathProgramCache]: Analyzing trace with hash -1446451218, now seen corresponding path program 1 times [2020-07-28 19:02:16,769 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:16,769 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1275384410] [2020-07-28 19:02:16,769 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:16,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:16,869 INFO L280 TraceCheckUtils]: 0: Hoare triple {2165#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,870 INFO L280 TraceCheckUtils]: 1: Hoare triple {2167#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,871 INFO L280 TraceCheckUtils]: 2: Hoare triple {2167#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,872 INFO L280 TraceCheckUtils]: 3: Hoare triple {2167#(= 1 ~waterLevel~0)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,872 INFO L280 TraceCheckUtils]: 4: Hoare triple {2167#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,873 INFO L280 TraceCheckUtils]: 5: Hoare triple {2167#(= 1 ~waterLevel~0)} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,874 INFO L280 TraceCheckUtils]: 6: Hoare triple {2167#(= 1 ~waterLevel~0)} assume !false; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,874 INFO L280 TraceCheckUtils]: 7: Hoare triple {2167#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,875 INFO L280 TraceCheckUtils]: 8: Hoare triple {2167#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,876 INFO L280 TraceCheckUtils]: 9: Hoare triple {2167#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~9); {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,876 INFO L280 TraceCheckUtils]: 10: Hoare triple {2167#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,877 INFO L280 TraceCheckUtils]: 11: Hoare triple {2167#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~3); {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,877 INFO L280 TraceCheckUtils]: 12: Hoare triple {2167#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,878 INFO L280 TraceCheckUtils]: 13: Hoare triple {2167#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,879 INFO L280 TraceCheckUtils]: 14: Hoare triple {2167#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,879 INFO L280 TraceCheckUtils]: 15: Hoare triple {2167#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,881 INFO L280 TraceCheckUtils]: 16: Hoare triple {2167#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,882 INFO L280 TraceCheckUtils]: 17: Hoare triple {2167#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret69, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~5;havoc isHighWaterSensorDry_~retValue_acc~5; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,882 INFO L280 TraceCheckUtils]: 18: Hoare triple {2167#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~5 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~5; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,883 INFO L280 TraceCheckUtils]: 19: Hoare triple {2167#(= 1 ~waterLevel~0)} isHighWaterLevel_#t~ret69 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret69 && isHighWaterLevel_#t~ret69 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret69;havoc isHighWaterLevel_#t~ret69; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,887 INFO L280 TraceCheckUtils]: 20: Hoare triple {2167#(= 1 ~waterLevel~0)} assume 0 != isHighWaterLevel_~tmp~7;isHighWaterLevel_~tmp___0~1 := 0; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,888 INFO L280 TraceCheckUtils]: 21: Hoare triple {2167#(= 1 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,889 INFO L280 TraceCheckUtils]: 22: Hoare triple {2167#(= 1 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,890 INFO L280 TraceCheckUtils]: 23: Hoare triple {2167#(= 1 ~waterLevel~0)} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~4); {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,890 INFO L280 TraceCheckUtils]: 24: Hoare triple {2167#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,891 INFO L280 TraceCheckUtils]: 25: Hoare triple {2167#(= 1 ~waterLevel~0)} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {2167#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:16,891 INFO L280 TraceCheckUtils]: 26: Hoare triple {2167#(= 1 ~waterLevel~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {2168#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:02:16,892 INFO L280 TraceCheckUtils]: 27: Hoare triple {2168#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {2169#(= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} is VALID [2020-07-28 19:02:16,893 INFO L280 TraceCheckUtils]: 28: Hoare triple {2169#(= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {2166#false} is VALID [2020-07-28 19:02:16,893 INFO L280 TraceCheckUtils]: 29: Hoare triple {2166#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {2166#false} is VALID [2020-07-28 19:02:16,893 INFO L280 TraceCheckUtils]: 30: Hoare triple {2166#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {2166#false} is VALID [2020-07-28 19:02:16,893 INFO L280 TraceCheckUtils]: 31: Hoare triple {2166#false} assume !false; {2166#false} is VALID [2020-07-28 19:02:16,896 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:16,896 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1275384410] [2020-07-28 19:02:16,896 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:16,896 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:16,897 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [414364357] [2020-07-28 19:02:16,897 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2020-07-28 19:02:16,897 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:16,898 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:16,966 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:16,966 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:16,967 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:16,967 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:16,967 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:16,967 INFO L87 Difference]: Start difference. First operand 76 states and 107 transitions. Second operand 5 states. [2020-07-28 19:02:18,129 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:18,130 INFO L93 Difference]: Finished difference Result 381 states and 553 transitions. [2020-07-28 19:02:18,130 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:18,130 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2020-07-28 19:02:18,134 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:18,134 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:18,139 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 389 transitions. [2020-07-28 19:02:18,139 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:18,145 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 389 transitions. [2020-07-28 19:02:18,146 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 389 transitions. [2020-07-28 19:02:18,596 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 389 edges. 389 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:18,606 INFO L225 Difference]: With dead ends: 381 [2020-07-28 19:02:18,607 INFO L226 Difference]: Without dead ends: 311 [2020-07-28 19:02:18,607 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:18,608 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 311 states. [2020-07-28 19:02:18,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 311 to 123. [2020-07-28 19:02:18,794 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:18,794 INFO L82 GeneralOperation]: Start isEquivalent. First operand 311 states. Second operand 123 states. [2020-07-28 19:02:18,795 INFO L74 IsIncluded]: Start isIncluded. First operand 311 states. Second operand 123 states. [2020-07-28 19:02:18,795 INFO L87 Difference]: Start difference. First operand 311 states. Second operand 123 states. [2020-07-28 19:02:18,809 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:18,809 INFO L93 Difference]: Finished difference Result 311 states and 438 transitions. [2020-07-28 19:02:18,809 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 438 transitions. [2020-07-28 19:02:18,810 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:18,811 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:18,811 INFO L74 IsIncluded]: Start isIncluded. First operand 123 states. Second operand 311 states. [2020-07-28 19:02:18,811 INFO L87 Difference]: Start difference. First operand 123 states. Second operand 311 states. [2020-07-28 19:02:18,824 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:18,824 INFO L93 Difference]: Finished difference Result 311 states and 438 transitions. [2020-07-28 19:02:18,825 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 438 transitions. [2020-07-28 19:02:18,826 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:18,826 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:18,826 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:18,826 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:18,826 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 123 states. [2020-07-28 19:02:18,831 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 170 transitions. [2020-07-28 19:02:18,831 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 170 transitions. Word has length 32 [2020-07-28 19:02:18,832 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:18,832 INFO L479 AbstractCegarLoop]: Abstraction has 123 states and 170 transitions. [2020-07-28 19:02:18,832 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:18,832 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 170 transitions. [2020-07-28 19:02:18,833 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:18,833 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:18,834 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:18,834 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:02:18,834 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:18,834 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:18,835 INFO L82 PathProgramCache]: Analyzing trace with hash 1777469548, now seen corresponding path program 1 times [2020-07-28 19:02:18,835 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:18,835 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1029245963] [2020-07-28 19:02:18,836 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:18,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:18,908 INFO L280 TraceCheckUtils]: 0: Hoare triple {3490#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {3492#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,909 INFO L280 TraceCheckUtils]: 1: Hoare triple {3492#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {3492#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,910 INFO L280 TraceCheckUtils]: 2: Hoare triple {3492#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {3492#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,911 INFO L280 TraceCheckUtils]: 3: Hoare triple {3492#(= 1 ~waterLevel~0)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {3492#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,911 INFO L280 TraceCheckUtils]: 4: Hoare triple {3492#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {3492#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,912 INFO L280 TraceCheckUtils]: 5: Hoare triple {3492#(= 1 ~waterLevel~0)} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3492#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,913 INFO L280 TraceCheckUtils]: 6: Hoare triple {3492#(= 1 ~waterLevel~0)} assume !false; {3492#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,913 INFO L280 TraceCheckUtils]: 7: Hoare triple {3492#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {3492#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,914 INFO L280 TraceCheckUtils]: 8: Hoare triple {3492#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {3492#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,915 INFO L280 TraceCheckUtils]: 9: Hoare triple {3492#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~9; {3492#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,916 INFO L280 TraceCheckUtils]: 10: Hoare triple {3492#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {3493#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,916 INFO L280 TraceCheckUtils]: 11: Hoare triple {3493#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {3493#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,917 INFO L280 TraceCheckUtils]: 12: Hoare triple {3493#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3); {3493#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,918 INFO L280 TraceCheckUtils]: 13: Hoare triple {3493#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {3493#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,918 INFO L280 TraceCheckUtils]: 14: Hoare triple {3493#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {3493#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,919 INFO L280 TraceCheckUtils]: 15: Hoare triple {3493#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {3493#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,920 INFO L280 TraceCheckUtils]: 16: Hoare triple {3493#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {3493#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,920 INFO L280 TraceCheckUtils]: 17: Hoare triple {3493#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {3493#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,921 INFO L280 TraceCheckUtils]: 18: Hoare triple {3493#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret69, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~5;havoc isHighWaterSensorDry_~retValue_acc~5; {3493#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:18,922 INFO L280 TraceCheckUtils]: 19: Hoare triple {3493#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~5 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~5; {3491#false} is VALID [2020-07-28 19:02:18,922 INFO L280 TraceCheckUtils]: 20: Hoare triple {3491#false} isHighWaterLevel_#t~ret69 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret69 && isHighWaterLevel_#t~ret69 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret69;havoc isHighWaterLevel_#t~ret69; {3491#false} is VALID [2020-07-28 19:02:18,922 INFO L280 TraceCheckUtils]: 21: Hoare triple {3491#false} assume 0 != isHighWaterLevel_~tmp~7;isHighWaterLevel_~tmp___0~1 := 0; {3491#false} is VALID [2020-07-28 19:02:18,923 INFO L280 TraceCheckUtils]: 22: Hoare triple {3491#false} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {3491#false} is VALID [2020-07-28 19:02:18,923 INFO L280 TraceCheckUtils]: 23: Hoare triple {3491#false} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {3491#false} is VALID [2020-07-28 19:02:18,923 INFO L280 TraceCheckUtils]: 24: Hoare triple {3491#false} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~4); {3491#false} is VALID [2020-07-28 19:02:18,923 INFO L280 TraceCheckUtils]: 25: Hoare triple {3491#false} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {3491#false} is VALID [2020-07-28 19:02:18,923 INFO L280 TraceCheckUtils]: 26: Hoare triple {3491#false} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {3491#false} is VALID [2020-07-28 19:02:18,924 INFO L280 TraceCheckUtils]: 27: Hoare triple {3491#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {3491#false} is VALID [2020-07-28 19:02:18,924 INFO L280 TraceCheckUtils]: 28: Hoare triple {3491#false} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {3491#false} is VALID [2020-07-28 19:02:18,924 INFO L280 TraceCheckUtils]: 29: Hoare triple {3491#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {3491#false} is VALID [2020-07-28 19:02:18,924 INFO L280 TraceCheckUtils]: 30: Hoare triple {3491#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {3491#false} is VALID [2020-07-28 19:02:18,925 INFO L280 TraceCheckUtils]: 31: Hoare triple {3491#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {3491#false} is VALID [2020-07-28 19:02:18,925 INFO L280 TraceCheckUtils]: 32: Hoare triple {3491#false} assume !false; {3491#false} is VALID [2020-07-28 19:02:18,927 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:18,928 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1029245963] [2020-07-28 19:02:18,928 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:18,928 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:02:18,928 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1982162149] [2020-07-28 19:02:18,929 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:18,929 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:18,930 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:18,975 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:18,975 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:18,975 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:18,975 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:18,976 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:18,976 INFO L87 Difference]: Start difference. First operand 123 states and 170 transitions. Second operand 4 states. [2020-07-28 19:02:19,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:19,658 INFO L93 Difference]: Finished difference Result 254 states and 358 transitions. [2020-07-28 19:02:19,658 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:02:19,658 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:19,659 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:19,659 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:19,662 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 247 transitions. [2020-07-28 19:02:19,663 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:19,666 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 247 transitions. [2020-07-28 19:02:19,666 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 247 transitions. [2020-07-28 19:02:19,955 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 247 edges. 247 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:19,959 INFO L225 Difference]: With dead ends: 254 [2020-07-28 19:02:19,959 INFO L226 Difference]: Without dead ends: 184 [2020-07-28 19:02:19,960 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:19,961 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2020-07-28 19:02:20,243 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 181. [2020-07-28 19:02:20,244 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:20,244 INFO L82 GeneralOperation]: Start isEquivalent. First operand 184 states. Second operand 181 states. [2020-07-28 19:02:20,244 INFO L74 IsIncluded]: Start isIncluded. First operand 184 states. Second operand 181 states. [2020-07-28 19:02:20,244 INFO L87 Difference]: Start difference. First operand 184 states. Second operand 181 states. [2020-07-28 19:02:20,250 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:20,250 INFO L93 Difference]: Finished difference Result 184 states and 253 transitions. [2020-07-28 19:02:20,250 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 253 transitions. [2020-07-28 19:02:20,251 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:20,251 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:20,251 INFO L74 IsIncluded]: Start isIncluded. First operand 181 states. Second operand 184 states. [2020-07-28 19:02:20,251 INFO L87 Difference]: Start difference. First operand 181 states. Second operand 184 states. [2020-07-28 19:02:20,255 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:20,256 INFO L93 Difference]: Finished difference Result 184 states and 253 transitions. [2020-07-28 19:02:20,256 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 253 transitions. [2020-07-28 19:02:20,256 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:20,256 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:20,257 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:20,257 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:20,257 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 181 states. [2020-07-28 19:02:20,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 181 states to 181 states and 251 transitions. [2020-07-28 19:02:20,261 INFO L78 Accepts]: Start accepts. Automaton has 181 states and 251 transitions. Word has length 33 [2020-07-28 19:02:20,262 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:20,262 INFO L479 AbstractCegarLoop]: Abstraction has 181 states and 251 transitions. [2020-07-28 19:02:20,262 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:20,262 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 251 transitions. [2020-07-28 19:02:20,263 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:20,263 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:20,263 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:20,263 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:02:20,263 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:20,263 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:20,264 INFO L82 PathProgramCache]: Analyzing trace with hash 766352298, now seen corresponding path program 1 times [2020-07-28 19:02:20,264 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:20,264 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1006205962] [2020-07-28 19:02:20,264 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:20,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:20,322 INFO L280 TraceCheckUtils]: 0: Hoare triple {4463#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {4463#true} is VALID [2020-07-28 19:02:20,322 INFO L280 TraceCheckUtils]: 1: Hoare triple {4463#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {4463#true} is VALID [2020-07-28 19:02:20,322 INFO L280 TraceCheckUtils]: 2: Hoare triple {4463#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {4463#true} is VALID [2020-07-28 19:02:20,322 INFO L280 TraceCheckUtils]: 3: Hoare triple {4463#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {4463#true} is VALID [2020-07-28 19:02:20,323 INFO L280 TraceCheckUtils]: 4: Hoare triple {4463#true} assume 0 != main_~tmp~10; {4463#true} is VALID [2020-07-28 19:02:20,323 INFO L280 TraceCheckUtils]: 5: Hoare triple {4463#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {4463#true} is VALID [2020-07-28 19:02:20,323 INFO L280 TraceCheckUtils]: 6: Hoare triple {4463#true} assume !false; {4463#true} is VALID [2020-07-28 19:02:20,323 INFO L280 TraceCheckUtils]: 7: Hoare triple {4463#true} assume test_~splverifierCounter~0 < 4; {4463#true} is VALID [2020-07-28 19:02:20,324 INFO L280 TraceCheckUtils]: 8: Hoare triple {4463#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {4463#true} is VALID [2020-07-28 19:02:20,324 INFO L280 TraceCheckUtils]: 9: Hoare triple {4463#true} assume 0 != test_~tmp~9; {4463#true} is VALID [2020-07-28 19:02:20,324 INFO L280 TraceCheckUtils]: 10: Hoare triple {4463#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {4463#true} is VALID [2020-07-28 19:02:20,324 INFO L280 TraceCheckUtils]: 11: Hoare triple {4463#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {4463#true} is VALID [2020-07-28 19:02:20,324 INFO L280 TraceCheckUtils]: 12: Hoare triple {4463#true} assume !(0 != test_~tmp___0~3); {4463#true} is VALID [2020-07-28 19:02:20,325 INFO L280 TraceCheckUtils]: 13: Hoare triple {4463#true} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {4463#true} is VALID [2020-07-28 19:02:20,325 INFO L280 TraceCheckUtils]: 14: Hoare triple {4463#true} assume 0 != test_~tmp___2~0; {4463#true} is VALID [2020-07-28 19:02:20,325 INFO L280 TraceCheckUtils]: 15: Hoare triple {4463#true} assume !(0 != ~pumpRunning~0); {4463#true} is VALID [2020-07-28 19:02:20,325 INFO L280 TraceCheckUtils]: 16: Hoare triple {4463#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {4463#true} is VALID [2020-07-28 19:02:20,326 INFO L280 TraceCheckUtils]: 17: Hoare triple {4463#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {4463#true} is VALID [2020-07-28 19:02:20,326 INFO L280 TraceCheckUtils]: 18: Hoare triple {4463#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret69, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~5;havoc isHighWaterSensorDry_~retValue_acc~5; {4463#true} is VALID [2020-07-28 19:02:20,327 INFO L280 TraceCheckUtils]: 19: Hoare triple {4463#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~5; {4465#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:02:20,327 INFO L280 TraceCheckUtils]: 20: Hoare triple {4465#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret69 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret69 && isHighWaterLevel_#t~ret69 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret69;havoc isHighWaterLevel_#t~ret69; {4466#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~7)} is VALID [2020-07-28 19:02:20,328 INFO L280 TraceCheckUtils]: 21: Hoare triple {4466#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~7)} assume 0 != isHighWaterLevel_~tmp~7;isHighWaterLevel_~tmp___0~1 := 0; {4464#false} is VALID [2020-07-28 19:02:20,328 INFO L280 TraceCheckUtils]: 22: Hoare triple {4464#false} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {4464#false} is VALID [2020-07-28 19:02:20,328 INFO L280 TraceCheckUtils]: 23: Hoare triple {4464#false} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {4464#false} is VALID [2020-07-28 19:02:20,329 INFO L280 TraceCheckUtils]: 24: Hoare triple {4464#false} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~4); {4464#false} is VALID [2020-07-28 19:02:20,329 INFO L280 TraceCheckUtils]: 25: Hoare triple {4464#false} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {4464#false} is VALID [2020-07-28 19:02:20,329 INFO L280 TraceCheckUtils]: 26: Hoare triple {4464#false} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {4464#false} is VALID [2020-07-28 19:02:20,329 INFO L280 TraceCheckUtils]: 27: Hoare triple {4464#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {4464#false} is VALID [2020-07-28 19:02:20,330 INFO L280 TraceCheckUtils]: 28: Hoare triple {4464#false} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {4464#false} is VALID [2020-07-28 19:02:20,330 INFO L280 TraceCheckUtils]: 29: Hoare triple {4464#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {4464#false} is VALID [2020-07-28 19:02:20,330 INFO L280 TraceCheckUtils]: 30: Hoare triple {4464#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {4464#false} is VALID [2020-07-28 19:02:20,331 INFO L280 TraceCheckUtils]: 31: Hoare triple {4464#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {4464#false} is VALID [2020-07-28 19:02:20,331 INFO L280 TraceCheckUtils]: 32: Hoare triple {4464#false} assume !false; {4464#false} is VALID [2020-07-28 19:02:20,332 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:20,333 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1006205962] [2020-07-28 19:02:20,333 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:20,333 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:20,333 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [979711995] [2020-07-28 19:02:20,334 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:20,334 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:20,334 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:20,394 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:20,394 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:20,394 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:20,394 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:20,395 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:20,395 INFO L87 Difference]: Start difference. First operand 181 states and 251 transitions. Second operand 4 states. [2020-07-28 19:02:21,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:21,452 INFO L93 Difference]: Finished difference Result 505 states and 712 transitions. [2020-07-28 19:02:21,452 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:21,452 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:21,452 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:21,453 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:21,455 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 276 transitions. [2020-07-28 19:02:21,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:21,457 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 276 transitions. [2020-07-28 19:02:21,457 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 276 transitions. [2020-07-28 19:02:21,735 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 276 edges. 276 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:21,746 INFO L225 Difference]: With dead ends: 505 [2020-07-28 19:02:21,747 INFO L226 Difference]: Without dead ends: 376 [2020-07-28 19:02:21,748 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:21,749 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 376 states. [2020-07-28 19:02:22,046 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 376 to 181. [2020-07-28 19:02:22,047 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:22,047 INFO L82 GeneralOperation]: Start isEquivalent. First operand 376 states. Second operand 181 states. [2020-07-28 19:02:22,047 INFO L74 IsIncluded]: Start isIncluded. First operand 376 states. Second operand 181 states. [2020-07-28 19:02:22,047 INFO L87 Difference]: Start difference. First operand 376 states. Second operand 181 states. [2020-07-28 19:02:22,059 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:22,059 INFO L93 Difference]: Finished difference Result 376 states and 527 transitions. [2020-07-28 19:02:22,060 INFO L276 IsEmpty]: Start isEmpty. Operand 376 states and 527 transitions. [2020-07-28 19:02:22,061 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:22,061 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:22,061 INFO L74 IsIncluded]: Start isIncluded. First operand 181 states. Second operand 376 states. [2020-07-28 19:02:22,061 INFO L87 Difference]: Start difference. First operand 181 states. Second operand 376 states. [2020-07-28 19:02:22,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:22,073 INFO L93 Difference]: Finished difference Result 376 states and 527 transitions. [2020-07-28 19:02:22,073 INFO L276 IsEmpty]: Start isEmpty. Operand 376 states and 527 transitions. [2020-07-28 19:02:22,074 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:22,074 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:22,074 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:22,075 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:22,075 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 181 states. [2020-07-28 19:02:22,080 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 181 states to 181 states and 249 transitions. [2020-07-28 19:02:22,080 INFO L78 Accepts]: Start accepts. Automaton has 181 states and 249 transitions. Word has length 33 [2020-07-28 19:02:22,080 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:22,081 INFO L479 AbstractCegarLoop]: Abstraction has 181 states and 249 transitions. [2020-07-28 19:02:22,081 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:22,081 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 249 transitions. [2020-07-28 19:02:22,081 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:22,082 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:22,082 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:22,082 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:02:22,082 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:22,083 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:22,083 INFO L82 PathProgramCache]: Analyzing trace with hash 1024517736, now seen corresponding path program 1 times [2020-07-28 19:02:22,083 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:22,084 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1318157518] [2020-07-28 19:02:22,084 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:22,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:22,167 INFO L280 TraceCheckUtils]: 0: Hoare triple {6165#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {6165#true} is VALID [2020-07-28 19:02:22,167 INFO L280 TraceCheckUtils]: 1: Hoare triple {6165#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {6165#true} is VALID [2020-07-28 19:02:22,168 INFO L280 TraceCheckUtils]: 2: Hoare triple {6165#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {6167#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:02:22,169 INFO L280 TraceCheckUtils]: 3: Hoare triple {6167#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {6168#(= 1 ULTIMATE.start_main_~tmp~10)} is VALID [2020-07-28 19:02:22,169 INFO L280 TraceCheckUtils]: 4: Hoare triple {6168#(= 1 ULTIMATE.start_main_~tmp~10)} assume 0 != main_~tmp~10; {6165#true} is VALID [2020-07-28 19:02:22,169 INFO L280 TraceCheckUtils]: 5: Hoare triple {6165#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6165#true} is VALID [2020-07-28 19:02:22,170 INFO L280 TraceCheckUtils]: 6: Hoare triple {6165#true} assume !false; {6165#true} is VALID [2020-07-28 19:02:22,170 INFO L280 TraceCheckUtils]: 7: Hoare triple {6165#true} assume test_~splverifierCounter~0 < 4; {6165#true} is VALID [2020-07-28 19:02:22,170 INFO L280 TraceCheckUtils]: 8: Hoare triple {6165#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {6165#true} is VALID [2020-07-28 19:02:22,170 INFO L280 TraceCheckUtils]: 9: Hoare triple {6165#true} assume 0 != test_~tmp~9; {6165#true} is VALID [2020-07-28 19:02:22,171 INFO L280 TraceCheckUtils]: 10: Hoare triple {6165#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6165#true} is VALID [2020-07-28 19:02:22,171 INFO L280 TraceCheckUtils]: 11: Hoare triple {6165#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {6165#true} is VALID [2020-07-28 19:02:22,171 INFO L280 TraceCheckUtils]: 12: Hoare triple {6165#true} assume !(0 != test_~tmp___0~3); {6165#true} is VALID [2020-07-28 19:02:22,171 INFO L280 TraceCheckUtils]: 13: Hoare triple {6165#true} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {6165#true} is VALID [2020-07-28 19:02:22,171 INFO L280 TraceCheckUtils]: 14: Hoare triple {6165#true} assume 0 != test_~tmp___2~0; {6165#true} is VALID [2020-07-28 19:02:22,172 INFO L280 TraceCheckUtils]: 15: Hoare triple {6165#true} assume !(0 != ~pumpRunning~0); {6165#true} is VALID [2020-07-28 19:02:22,172 INFO L280 TraceCheckUtils]: 16: Hoare triple {6165#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {6165#true} is VALID [2020-07-28 19:02:22,172 INFO L280 TraceCheckUtils]: 17: Hoare triple {6165#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {6165#true} is VALID [2020-07-28 19:02:22,173 INFO L280 TraceCheckUtils]: 18: Hoare triple {6165#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret69, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~5;havoc isHighWaterSensorDry_~retValue_acc~5; {6165#true} is VALID [2020-07-28 19:02:22,173 INFO L280 TraceCheckUtils]: 19: Hoare triple {6165#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~5; {6165#true} is VALID [2020-07-28 19:02:22,173 INFO L280 TraceCheckUtils]: 20: Hoare triple {6165#true} isHighWaterLevel_#t~ret69 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret69 && isHighWaterLevel_#t~ret69 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret69;havoc isHighWaterLevel_#t~ret69; {6165#true} is VALID [2020-07-28 19:02:22,174 INFO L280 TraceCheckUtils]: 21: Hoare triple {6165#true} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {6169#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))} is VALID [2020-07-28 19:02:22,175 INFO L280 TraceCheckUtils]: 22: Hoare triple {6169#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {6170#(not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))} is VALID [2020-07-28 19:02:22,176 INFO L280 TraceCheckUtils]: 23: Hoare triple {6170#(not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {6171#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~4))} is VALID [2020-07-28 19:02:22,177 INFO L280 TraceCheckUtils]: 24: Hoare triple {6171#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~4))} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~4); {6166#false} is VALID [2020-07-28 19:02:22,177 INFO L280 TraceCheckUtils]: 25: Hoare triple {6166#false} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {6166#false} is VALID [2020-07-28 19:02:22,177 INFO L280 TraceCheckUtils]: 26: Hoare triple {6166#false} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {6166#false} is VALID [2020-07-28 19:02:22,178 INFO L280 TraceCheckUtils]: 27: Hoare triple {6166#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {6166#false} is VALID [2020-07-28 19:02:22,178 INFO L280 TraceCheckUtils]: 28: Hoare triple {6166#false} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {6166#false} is VALID [2020-07-28 19:02:22,178 INFO L280 TraceCheckUtils]: 29: Hoare triple {6166#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {6166#false} is VALID [2020-07-28 19:02:22,178 INFO L280 TraceCheckUtils]: 30: Hoare triple {6166#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {6166#false} is VALID [2020-07-28 19:02:22,178 INFO L280 TraceCheckUtils]: 31: Hoare triple {6166#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {6166#false} is VALID [2020-07-28 19:02:22,179 INFO L280 TraceCheckUtils]: 32: Hoare triple {6166#false} assume !false; {6166#false} is VALID [2020-07-28 19:02:22,180 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:22,181 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1318157518] [2020-07-28 19:02:22,181 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:22,181 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2020-07-28 19:02:22,181 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [553251733] [2020-07-28 19:02:22,182 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 33 [2020-07-28 19:02:22,182 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:22,182 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:22,220 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:22,220 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:22,221 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:22,221 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:22,221 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:22,222 INFO L87 Difference]: Start difference. First operand 181 states and 249 transitions. Second operand 7 states. [2020-07-28 19:02:24,277 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:24,277 INFO L93 Difference]: Finished difference Result 634 states and 889 transitions. [2020-07-28 19:02:24,278 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 19:02:24,278 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 33 [2020-07-28 19:02:24,278 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:24,279 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:24,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 293 transitions. [2020-07-28 19:02:24,283 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:24,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 293 transitions. [2020-07-28 19:02:24,286 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 293 transitions. [2020-07-28 19:02:24,606 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 293 edges. 293 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:24,624 INFO L225 Difference]: With dead ends: 634 [2020-07-28 19:02:24,624 INFO L226 Difference]: Without dead ends: 459 [2020-07-28 19:02:24,625 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2020-07-28 19:02:24,626 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 459 states. [2020-07-28 19:02:25,040 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 459 to 190. [2020-07-28 19:02:25,040 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:25,040 INFO L82 GeneralOperation]: Start isEquivalent. First operand 459 states. Second operand 190 states. [2020-07-28 19:02:25,041 INFO L74 IsIncluded]: Start isIncluded. First operand 459 states. Second operand 190 states. [2020-07-28 19:02:25,041 INFO L87 Difference]: Start difference. First operand 459 states. Second operand 190 states. [2020-07-28 19:02:25,061 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:25,062 INFO L93 Difference]: Finished difference Result 459 states and 641 transitions. [2020-07-28 19:02:25,062 INFO L276 IsEmpty]: Start isEmpty. Operand 459 states and 641 transitions. [2020-07-28 19:02:25,063 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:25,063 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:25,064 INFO L74 IsIncluded]: Start isIncluded. First operand 190 states. Second operand 459 states. [2020-07-28 19:02:25,064 INFO L87 Difference]: Start difference. First operand 190 states. Second operand 459 states. [2020-07-28 19:02:25,085 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:25,085 INFO L93 Difference]: Finished difference Result 459 states and 641 transitions. [2020-07-28 19:02:25,086 INFO L276 IsEmpty]: Start isEmpty. Operand 459 states and 641 transitions. [2020-07-28 19:02:25,087 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:25,088 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:25,088 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:25,088 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:25,088 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 190 states. [2020-07-28 19:02:25,093 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 190 states to 190 states and 256 transitions. [2020-07-28 19:02:25,094 INFO L78 Accepts]: Start accepts. Automaton has 190 states and 256 transitions. Word has length 33 [2020-07-28 19:02:25,094 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:25,094 INFO L479 AbstractCegarLoop]: Abstraction has 190 states and 256 transitions. [2020-07-28 19:02:25,094 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:25,095 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 256 transitions. [2020-07-28 19:02:25,095 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:02:25,095 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:25,095 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:25,096 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:02:25,096 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:25,096 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:25,096 INFO L82 PathProgramCache]: Analyzing trace with hash 416532263, now seen corresponding path program 1 times [2020-07-28 19:02:25,097 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:25,098 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1074777055] [2020-07-28 19:02:25,098 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:25,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:25,230 INFO L280 TraceCheckUtils]: 0: Hoare triple {8235#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,233 INFO L280 TraceCheckUtils]: 1: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,234 INFO L280 TraceCheckUtils]: 2: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,234 INFO L280 TraceCheckUtils]: 3: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,235 INFO L280 TraceCheckUtils]: 4: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~10; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,235 INFO L280 TraceCheckUtils]: 5: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,236 INFO L280 TraceCheckUtils]: 6: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume !false; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,237 INFO L280 TraceCheckUtils]: 7: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,237 INFO L280 TraceCheckUtils]: 8: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,238 INFO L280 TraceCheckUtils]: 9: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp~9; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,239 INFO L280 TraceCheckUtils]: 10: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,239 INFO L280 TraceCheckUtils]: 11: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,240 INFO L280 TraceCheckUtils]: 12: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~3); {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,240 INFO L280 TraceCheckUtils]: 13: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,241 INFO L280 TraceCheckUtils]: 14: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,242 INFO L280 TraceCheckUtils]: 15: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,242 INFO L280 TraceCheckUtils]: 16: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,243 INFO L280 TraceCheckUtils]: 17: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,244 INFO L280 TraceCheckUtils]: 18: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret69, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~5;havoc isHighWaterSensorDry_~retValue_acc~5; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,245 INFO L280 TraceCheckUtils]: 19: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~5; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,245 INFO L280 TraceCheckUtils]: 20: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret69 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret69 && isHighWaterLevel_#t~ret69 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret69;havoc isHighWaterLevel_#t~ret69; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,246 INFO L280 TraceCheckUtils]: 21: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,250 INFO L280 TraceCheckUtils]: 22: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,251 INFO L280 TraceCheckUtils]: 23: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {8237#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:25,252 INFO L280 TraceCheckUtils]: 24: Hoare triple {8237#(= 0 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc activatePump_#t~ret51, activatePump_~tmp~6;havoc activatePump_~tmp~6;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret52, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {8238#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:25,253 INFO L280 TraceCheckUtils]: 25: Hoare triple {8238#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} isMethaneAlarm_#t~ret52 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret52 && isMethaneAlarm_#t~ret52 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret52;havoc isMethaneAlarm_#t~ret52;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {8239#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} is VALID [2020-07-28 19:02:25,254 INFO L280 TraceCheckUtils]: 26: Hoare triple {8239#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} activatePump_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret51 && activatePump_#t~ret51 <= 2147483647;activatePump_~tmp~6 := activatePump_#t~ret51;havoc activatePump_#t~ret51; {8240#(= 0 ULTIMATE.start_activatePump_~tmp~6)} is VALID [2020-07-28 19:02:25,256 INFO L280 TraceCheckUtils]: 27: Hoare triple {8240#(= 0 ULTIMATE.start_activatePump_~tmp~6)} assume 0 != activatePump_~tmp~6; {8236#false} is VALID [2020-07-28 19:02:25,257 INFO L280 TraceCheckUtils]: 28: Hoare triple {8236#false} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {8236#false} is VALID [2020-07-28 19:02:25,257 INFO L280 TraceCheckUtils]: 29: Hoare triple {8236#false} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {8236#false} is VALID [2020-07-28 19:02:25,257 INFO L280 TraceCheckUtils]: 30: Hoare triple {8236#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {8236#false} is VALID [2020-07-28 19:02:25,257 INFO L280 TraceCheckUtils]: 31: Hoare triple {8236#false} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {8236#false} is VALID [2020-07-28 19:02:25,258 INFO L280 TraceCheckUtils]: 32: Hoare triple {8236#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {8236#false} is VALID [2020-07-28 19:02:25,258 INFO L280 TraceCheckUtils]: 33: Hoare triple {8236#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {8236#false} is VALID [2020-07-28 19:02:25,258 INFO L280 TraceCheckUtils]: 34: Hoare triple {8236#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {8236#false} is VALID [2020-07-28 19:02:25,260 INFO L280 TraceCheckUtils]: 35: Hoare triple {8236#false} assume !false; {8236#false} is VALID [2020-07-28 19:02:25,262 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:25,264 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1074777055] [2020-07-28 19:02:25,264 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:25,264 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:25,265 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [216261321] [2020-07-28 19:02:25,266 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 36 [2020-07-28 19:02:25,266 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:25,267 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:02:25,316 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:25,316 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:02:25,317 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:25,317 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:02:25,317 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:02:25,317 INFO L87 Difference]: Start difference. First operand 190 states and 256 transitions. Second operand 6 states. [2020-07-28 19:02:29,589 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:29,590 INFO L93 Difference]: Finished difference Result 1391 states and 1856 transitions. [2020-07-28 19:02:29,590 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2020-07-28 19:02:29,590 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 36 [2020-07-28 19:02:29,591 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:29,591 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:29,595 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 640 transitions. [2020-07-28 19:02:29,596 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:29,602 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 640 transitions. [2020-07-28 19:02:29,602 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 14 states and 640 transitions. [2020-07-28 19:02:30,329 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 640 edges. 640 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:30,421 INFO L225 Difference]: With dead ends: 1391 [2020-07-28 19:02:30,421 INFO L226 Difference]: Without dead ends: 1207 [2020-07-28 19:02:30,422 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2020-07-28 19:02:30,424 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1207 states. [2020-07-28 19:02:31,285 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1207 to 360. [2020-07-28 19:02:31,286 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:31,286 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1207 states. Second operand 360 states. [2020-07-28 19:02:31,286 INFO L74 IsIncluded]: Start isIncluded. First operand 1207 states. Second operand 360 states. [2020-07-28 19:02:31,286 INFO L87 Difference]: Start difference. First operand 1207 states. Second operand 360 states. [2020-07-28 19:02:31,353 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:31,353 INFO L93 Difference]: Finished difference Result 1207 states and 1585 transitions. [2020-07-28 19:02:31,353 INFO L276 IsEmpty]: Start isEmpty. Operand 1207 states and 1585 transitions. [2020-07-28 19:02:31,355 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:31,355 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:31,356 INFO L74 IsIncluded]: Start isIncluded. First operand 360 states. Second operand 1207 states. [2020-07-28 19:02:31,356 INFO L87 Difference]: Start difference. First operand 360 states. Second operand 1207 states. [2020-07-28 19:02:31,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:31,449 INFO L93 Difference]: Finished difference Result 1207 states and 1585 transitions. [2020-07-28 19:02:31,449 INFO L276 IsEmpty]: Start isEmpty. Operand 1207 states and 1585 transitions. [2020-07-28 19:02:31,452 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:31,453 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:31,453 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:31,453 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:31,453 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 360 states. [2020-07-28 19:02:31,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 360 states to 360 states and 478 transitions. [2020-07-28 19:02:31,467 INFO L78 Accepts]: Start accepts. Automaton has 360 states and 478 transitions. Word has length 36 [2020-07-28 19:02:31,467 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:31,468 INFO L479 AbstractCegarLoop]: Abstraction has 360 states and 478 transitions. [2020-07-28 19:02:31,468 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:31,468 INFO L276 IsEmpty]: Start isEmpty. Operand 360 states and 478 transitions. [2020-07-28 19:02:31,470 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:02:31,470 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:31,470 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:31,471 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:02:31,471 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:31,471 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:31,472 INFO L82 PathProgramCache]: Analyzing trace with hash 1096590633, now seen corresponding path program 1 times [2020-07-28 19:02:31,472 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:31,472 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [250142099] [2020-07-28 19:02:31,472 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:31,532 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:31,579 INFO L280 TraceCheckUtils]: 0: Hoare triple {13050#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {13050#true} is VALID [2020-07-28 19:02:31,579 INFO L280 TraceCheckUtils]: 1: Hoare triple {13050#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {13050#true} is VALID [2020-07-28 19:02:31,579 INFO L280 TraceCheckUtils]: 2: Hoare triple {13050#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {13050#true} is VALID [2020-07-28 19:02:31,580 INFO L280 TraceCheckUtils]: 3: Hoare triple {13050#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {13050#true} is VALID [2020-07-28 19:02:31,580 INFO L280 TraceCheckUtils]: 4: Hoare triple {13050#true} assume 0 != main_~tmp~10; {13050#true} is VALID [2020-07-28 19:02:31,580 INFO L280 TraceCheckUtils]: 5: Hoare triple {13050#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {13050#true} is VALID [2020-07-28 19:02:31,580 INFO L280 TraceCheckUtils]: 6: Hoare triple {13050#true} assume !false; {13050#true} is VALID [2020-07-28 19:02:31,580 INFO L280 TraceCheckUtils]: 7: Hoare triple {13050#true} assume test_~splverifierCounter~0 < 4; {13050#true} is VALID [2020-07-28 19:02:31,581 INFO L280 TraceCheckUtils]: 8: Hoare triple {13050#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {13050#true} is VALID [2020-07-28 19:02:31,581 INFO L280 TraceCheckUtils]: 9: Hoare triple {13050#true} assume 0 != test_~tmp~9; {13050#true} is VALID [2020-07-28 19:02:31,581 INFO L280 TraceCheckUtils]: 10: Hoare triple {13050#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13050#true} is VALID [2020-07-28 19:02:31,582 INFO L280 TraceCheckUtils]: 11: Hoare triple {13050#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {13050#true} is VALID [2020-07-28 19:02:31,582 INFO L280 TraceCheckUtils]: 12: Hoare triple {13050#true} assume !(0 != test_~tmp___0~3); {13050#true} is VALID [2020-07-28 19:02:31,582 INFO L280 TraceCheckUtils]: 13: Hoare triple {13050#true} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {13050#true} is VALID [2020-07-28 19:02:31,583 INFO L280 TraceCheckUtils]: 14: Hoare triple {13050#true} assume 0 != test_~tmp___2~0; {13050#true} is VALID [2020-07-28 19:02:31,583 INFO L280 TraceCheckUtils]: 15: Hoare triple {13050#true} assume !(0 != ~pumpRunning~0); {13050#true} is VALID [2020-07-28 19:02:31,583 INFO L280 TraceCheckUtils]: 16: Hoare triple {13050#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {13050#true} is VALID [2020-07-28 19:02:31,583 INFO L280 TraceCheckUtils]: 17: Hoare triple {13050#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {13050#true} is VALID [2020-07-28 19:02:31,583 INFO L280 TraceCheckUtils]: 18: Hoare triple {13050#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret69, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~5;havoc isHighWaterSensorDry_~retValue_acc~5; {13050#true} is VALID [2020-07-28 19:02:31,584 INFO L280 TraceCheckUtils]: 19: Hoare triple {13050#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~5; {13050#true} is VALID [2020-07-28 19:02:31,584 INFO L280 TraceCheckUtils]: 20: Hoare triple {13050#true} isHighWaterLevel_#t~ret69 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret69 && isHighWaterLevel_#t~ret69 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret69;havoc isHighWaterLevel_#t~ret69; {13050#true} is VALID [2020-07-28 19:02:31,584 INFO L280 TraceCheckUtils]: 21: Hoare triple {13050#true} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {13050#true} is VALID [2020-07-28 19:02:31,585 INFO L280 TraceCheckUtils]: 22: Hoare triple {13050#true} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {13050#true} is VALID [2020-07-28 19:02:31,585 INFO L280 TraceCheckUtils]: 23: Hoare triple {13050#true} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {13050#true} is VALID [2020-07-28 19:02:31,585 INFO L280 TraceCheckUtils]: 24: Hoare triple {13050#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc activatePump_#t~ret51, activatePump_~tmp~6;havoc activatePump_~tmp~6;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret52, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {13050#true} is VALID [2020-07-28 19:02:31,585 INFO L280 TraceCheckUtils]: 25: Hoare triple {13050#true} isMethaneAlarm_#t~ret52 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret52 && isMethaneAlarm_#t~ret52 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret52;havoc isMethaneAlarm_#t~ret52;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {13050#true} is VALID [2020-07-28 19:02:31,585 INFO L280 TraceCheckUtils]: 26: Hoare triple {13050#true} activatePump_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret51 && activatePump_#t~ret51 <= 2147483647;activatePump_~tmp~6 := activatePump_#t~ret51;havoc activatePump_#t~ret51; {13050#true} is VALID [2020-07-28 19:02:31,586 INFO L280 TraceCheckUtils]: 27: Hoare triple {13050#true} assume !(0 != activatePump_~tmp~6);~pumpRunning~0 := 1; {13052#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:31,587 INFO L280 TraceCheckUtils]: 28: Hoare triple {13052#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {13052#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:31,588 INFO L280 TraceCheckUtils]: 29: Hoare triple {13052#(= 1 ~pumpRunning~0)} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {13052#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:31,588 INFO L280 TraceCheckUtils]: 30: Hoare triple {13052#(= 1 ~pumpRunning~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {13052#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:31,589 INFO L280 TraceCheckUtils]: 31: Hoare triple {13052#(= 1 ~pumpRunning~0)} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {13052#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:31,590 INFO L280 TraceCheckUtils]: 32: Hoare triple {13052#(= 1 ~pumpRunning~0)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {13053#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:02:31,591 INFO L280 TraceCheckUtils]: 33: Hoare triple {13053#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {13054#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~0)} is VALID [2020-07-28 19:02:31,592 INFO L280 TraceCheckUtils]: 34: Hoare triple {13054#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {13051#false} is VALID [2020-07-28 19:02:31,592 INFO L280 TraceCheckUtils]: 35: Hoare triple {13051#false} assume !false; {13051#false} is VALID [2020-07-28 19:02:31,594 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:31,594 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [250142099] [2020-07-28 19:02:31,594 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:31,595 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:31,595 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [521315283] [2020-07-28 19:02:31,595 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 36 [2020-07-28 19:02:31,595 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:31,596 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:31,638 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:31,638 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:31,638 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:31,639 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:31,639 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:31,639 INFO L87 Difference]: Start difference. First operand 360 states and 478 transitions. Second operand 5 states. [2020-07-28 19:02:33,887 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:33,887 INFO L93 Difference]: Finished difference Result 946 states and 1283 transitions. [2020-07-28 19:02:33,887 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:33,888 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 36 [2020-07-28 19:02:33,888 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:33,888 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:33,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 281 transitions. [2020-07-28 19:02:33,889 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:33,890 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 281 transitions. [2020-07-28 19:02:33,890 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 281 transitions. [2020-07-28 19:02:34,208 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 281 edges. 281 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:34,231 INFO L225 Difference]: With dead ends: 946 [2020-07-28 19:02:34,231 INFO L226 Difference]: Without dead ends: 592 [2020-07-28 19:02:34,232 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:34,233 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 592 states. [2020-07-28 19:02:35,042 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 592 to 306. [2020-07-28 19:02:35,042 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:35,042 INFO L82 GeneralOperation]: Start isEquivalent. First operand 592 states. Second operand 306 states. [2020-07-28 19:02:35,042 INFO L74 IsIncluded]: Start isIncluded. First operand 592 states. Second operand 306 states. [2020-07-28 19:02:35,042 INFO L87 Difference]: Start difference. First operand 592 states. Second operand 306 states. [2020-07-28 19:02:35,064 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:35,065 INFO L93 Difference]: Finished difference Result 592 states and 781 transitions. [2020-07-28 19:02:35,065 INFO L276 IsEmpty]: Start isEmpty. Operand 592 states and 781 transitions. [2020-07-28 19:02:35,066 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:35,066 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:35,066 INFO L74 IsIncluded]: Start isIncluded. First operand 306 states. Second operand 592 states. [2020-07-28 19:02:35,067 INFO L87 Difference]: Start difference. First operand 306 states. Second operand 592 states. [2020-07-28 19:02:35,095 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:35,095 INFO L93 Difference]: Finished difference Result 592 states and 781 transitions. [2020-07-28 19:02:35,095 INFO L276 IsEmpty]: Start isEmpty. Operand 592 states and 781 transitions. [2020-07-28 19:02:35,097 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:35,097 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:35,097 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:35,097 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:35,097 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 306 states. [2020-07-28 19:02:35,105 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 306 states to 306 states and 395 transitions. [2020-07-28 19:02:35,106 INFO L78 Accepts]: Start accepts. Automaton has 306 states and 395 transitions. Word has length 36 [2020-07-28 19:02:35,106 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:35,106 INFO L479 AbstractCegarLoop]: Abstraction has 306 states and 395 transitions. [2020-07-28 19:02:35,106 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:35,106 INFO L276 IsEmpty]: Start isEmpty. Operand 306 states and 395 transitions. [2020-07-28 19:02:35,108 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2020-07-28 19:02:35,108 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:35,108 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:35,108 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-28 19:02:35,109 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:35,109 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:35,109 INFO L82 PathProgramCache]: Analyzing trace with hash 361452525, now seen corresponding path program 1 times [2020-07-28 19:02:35,109 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:35,110 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1411228232] [2020-07-28 19:02:35,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:35,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:35,216 INFO L280 TraceCheckUtils]: 0: Hoare triple {15960#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {15960#true} is VALID [2020-07-28 19:02:35,217 INFO L280 TraceCheckUtils]: 1: Hoare triple {15960#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {15960#true} is VALID [2020-07-28 19:02:35,217 INFO L280 TraceCheckUtils]: 2: Hoare triple {15960#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {15962#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:02:35,218 INFO L280 TraceCheckUtils]: 3: Hoare triple {15962#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {15963#(= 1 ULTIMATE.start_main_~tmp~10)} is VALID [2020-07-28 19:02:35,218 INFO L280 TraceCheckUtils]: 4: Hoare triple {15963#(= 1 ULTIMATE.start_main_~tmp~10)} assume 0 != main_~tmp~10; {15960#true} is VALID [2020-07-28 19:02:35,218 INFO L280 TraceCheckUtils]: 5: Hoare triple {15960#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {15960#true} is VALID [2020-07-28 19:02:35,219 INFO L280 TraceCheckUtils]: 6: Hoare triple {15960#true} assume !false; {15960#true} is VALID [2020-07-28 19:02:35,219 INFO L280 TraceCheckUtils]: 7: Hoare triple {15960#true} assume test_~splverifierCounter~0 < 4; {15960#true} is VALID [2020-07-28 19:02:35,219 INFO L280 TraceCheckUtils]: 8: Hoare triple {15960#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {15960#true} is VALID [2020-07-28 19:02:35,219 INFO L280 TraceCheckUtils]: 9: Hoare triple {15960#true} assume 0 != test_~tmp~9; {15960#true} is VALID [2020-07-28 19:02:35,219 INFO L280 TraceCheckUtils]: 10: Hoare triple {15960#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15960#true} is VALID [2020-07-28 19:02:35,220 INFO L280 TraceCheckUtils]: 11: Hoare triple {15960#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {15960#true} is VALID [2020-07-28 19:02:35,220 INFO L280 TraceCheckUtils]: 12: Hoare triple {15960#true} assume 0 != test_~tmp___0~3; {15960#true} is VALID [2020-07-28 19:02:35,221 INFO L280 TraceCheckUtils]: 13: Hoare triple {15960#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,226 INFO L280 TraceCheckUtils]: 14: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,227 INFO L280 TraceCheckUtils]: 15: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} assume 0 != test_~tmp___2~0; {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,228 INFO L280 TraceCheckUtils]: 16: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0); {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,228 INFO L280 TraceCheckUtils]: 17: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,229 INFO L280 TraceCheckUtils]: 18: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,230 INFO L280 TraceCheckUtils]: 19: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret69, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~5;havoc isHighWaterSensorDry_~retValue_acc~5; {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,231 INFO L280 TraceCheckUtils]: 20: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~5; {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,232 INFO L280 TraceCheckUtils]: 21: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_#t~ret69 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret69 && isHighWaterLevel_#t~ret69 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret69;havoc isHighWaterLevel_#t~ret69; {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,232 INFO L280 TraceCheckUtils]: 22: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,233 INFO L280 TraceCheckUtils]: 23: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,233 INFO L280 TraceCheckUtils]: 24: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,234 INFO L280 TraceCheckUtils]: 25: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc activatePump_#t~ret51, activatePump_~tmp~6;havoc activatePump_~tmp~6;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret52, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,234 INFO L280 TraceCheckUtils]: 26: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} isMethaneAlarm_#t~ret52 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret52 && isMethaneAlarm_#t~ret52 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret52;havoc isMethaneAlarm_#t~ret52;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,236 INFO L280 TraceCheckUtils]: 27: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} activatePump_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret51 && activatePump_#t~ret51 <= 2147483647;activatePump_~tmp~6 := activatePump_#t~ret51;havoc activatePump_#t~ret51; {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,236 INFO L280 TraceCheckUtils]: 28: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} assume 0 != activatePump_~tmp~6; {15964#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:35,237 INFO L280 TraceCheckUtils]: 29: Hoare triple {15964#(not (= 0 ~methaneLevelCritical~0))} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {15965#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} is VALID [2020-07-28 19:02:35,238 INFO L280 TraceCheckUtils]: 30: Hoare triple {15965#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {15966#(not (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~3))} is VALID [2020-07-28 19:02:35,238 INFO L280 TraceCheckUtils]: 31: Hoare triple {15966#(not (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~3))} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {15961#false} is VALID [2020-07-28 19:02:35,238 INFO L280 TraceCheckUtils]: 32: Hoare triple {15961#false} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {15961#false} is VALID [2020-07-28 19:02:35,238 INFO L280 TraceCheckUtils]: 33: Hoare triple {15961#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {15961#false} is VALID [2020-07-28 19:02:35,239 INFO L280 TraceCheckUtils]: 34: Hoare triple {15961#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {15961#false} is VALID [2020-07-28 19:02:35,239 INFO L280 TraceCheckUtils]: 35: Hoare triple {15961#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {15961#false} is VALID [2020-07-28 19:02:35,239 INFO L280 TraceCheckUtils]: 36: Hoare triple {15961#false} assume !false; {15961#false} is VALID [2020-07-28 19:02:35,241 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:35,241 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1411228232] [2020-07-28 19:02:35,241 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:35,242 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2020-07-28 19:02:35,242 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1262224809] [2020-07-28 19:02:35,242 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 37 [2020-07-28 19:02:35,242 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:35,243 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:35,285 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 37 edges. 37 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:35,285 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:35,285 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:35,285 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:35,286 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:35,286 INFO L87 Difference]: Start difference. First operand 306 states and 395 transitions. Second operand 7 states. [2020-07-28 19:02:38,205 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:38,205 INFO L93 Difference]: Finished difference Result 916 states and 1175 transitions. [2020-07-28 19:02:38,206 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2020-07-28 19:02:38,206 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 37 [2020-07-28 19:02:38,206 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:38,206 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:38,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 311 transitions. [2020-07-28 19:02:38,208 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:38,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 311 transitions. [2020-07-28 19:02:38,210 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 311 transitions. [2020-07-28 19:02:38,633 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 311 edges. 311 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:38,653 INFO L225 Difference]: With dead ends: 916 [2020-07-28 19:02:38,654 INFO L226 Difference]: Without dead ends: 616 [2020-07-28 19:02:38,655 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=65, Invalid=117, Unknown=0, NotChecked=0, Total=182 [2020-07-28 19:02:38,655 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 616 states. [2020-07-28 19:02:39,529 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 616 to 286. [2020-07-28 19:02:39,529 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:39,529 INFO L82 GeneralOperation]: Start isEquivalent. First operand 616 states. Second operand 286 states. [2020-07-28 19:02:39,530 INFO L74 IsIncluded]: Start isIncluded. First operand 616 states. Second operand 286 states. [2020-07-28 19:02:39,530 INFO L87 Difference]: Start difference. First operand 616 states. Second operand 286 states. [2020-07-28 19:02:39,551 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:39,551 INFO L93 Difference]: Finished difference Result 616 states and 775 transitions. [2020-07-28 19:02:39,551 INFO L276 IsEmpty]: Start isEmpty. Operand 616 states and 775 transitions. [2020-07-28 19:02:39,552 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:39,553 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:39,553 INFO L74 IsIncluded]: Start isIncluded. First operand 286 states. Second operand 616 states. [2020-07-28 19:02:39,553 INFO L87 Difference]: Start difference. First operand 286 states. Second operand 616 states. [2020-07-28 19:02:39,569 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:39,569 INFO L93 Difference]: Finished difference Result 616 states and 775 transitions. [2020-07-28 19:02:39,569 INFO L276 IsEmpty]: Start isEmpty. Operand 616 states and 775 transitions. [2020-07-28 19:02:39,570 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:39,570 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:39,570 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:39,570 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:39,571 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 286 states. [2020-07-28 19:02:39,578 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 286 states to 286 states and 358 transitions. [2020-07-28 19:02:39,578 INFO L78 Accepts]: Start accepts. Automaton has 286 states and 358 transitions. Word has length 37 [2020-07-28 19:02:39,578 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:39,578 INFO L479 AbstractCegarLoop]: Abstraction has 286 states and 358 transitions. [2020-07-28 19:02:39,578 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:39,578 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 358 transitions. [2020-07-28 19:02:39,579 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2020-07-28 19:02:39,579 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:39,579 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:39,579 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:02:39,580 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:39,580 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:39,580 INFO L82 PathProgramCache]: Analyzing trace with hash 1002384948, now seen corresponding path program 1 times [2020-07-28 19:02:39,580 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:39,580 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1563803403] [2020-07-28 19:02:39,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:39,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:39,675 INFO L280 TraceCheckUtils]: 0: Hoare triple {18857#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {18857#true} is VALID [2020-07-28 19:02:39,675 INFO L280 TraceCheckUtils]: 1: Hoare triple {18857#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {18857#true} is VALID [2020-07-28 19:02:39,676 INFO L280 TraceCheckUtils]: 2: Hoare triple {18857#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {18857#true} is VALID [2020-07-28 19:02:39,676 INFO L280 TraceCheckUtils]: 3: Hoare triple {18857#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {18857#true} is VALID [2020-07-28 19:02:39,676 INFO L280 TraceCheckUtils]: 4: Hoare triple {18857#true} assume 0 != main_~tmp~10; {18857#true} is VALID [2020-07-28 19:02:39,676 INFO L280 TraceCheckUtils]: 5: Hoare triple {18857#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {18857#true} is VALID [2020-07-28 19:02:39,677 INFO L280 TraceCheckUtils]: 6: Hoare triple {18857#true} assume !false; {18857#true} is VALID [2020-07-28 19:02:39,677 INFO L280 TraceCheckUtils]: 7: Hoare triple {18857#true} assume test_~splverifierCounter~0 < 4; {18857#true} is VALID [2020-07-28 19:02:39,677 INFO L280 TraceCheckUtils]: 8: Hoare triple {18857#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {18857#true} is VALID [2020-07-28 19:02:39,678 INFO L280 TraceCheckUtils]: 9: Hoare triple {18857#true} assume !(0 != test_~tmp~9); {18857#true} is VALID [2020-07-28 19:02:39,678 INFO L280 TraceCheckUtils]: 10: Hoare triple {18857#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {18857#true} is VALID [2020-07-28 19:02:39,678 INFO L280 TraceCheckUtils]: 11: Hoare triple {18857#true} assume !(0 != test_~tmp___0~3); {18857#true} is VALID [2020-07-28 19:02:39,678 INFO L280 TraceCheckUtils]: 12: Hoare triple {18857#true} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {18857#true} is VALID [2020-07-28 19:02:39,678 INFO L280 TraceCheckUtils]: 13: Hoare triple {18857#true} assume 0 != test_~tmp___2~0; {18857#true} is VALID [2020-07-28 19:02:39,679 INFO L280 TraceCheckUtils]: 14: Hoare triple {18857#true} assume !(0 != ~pumpRunning~0); {18857#true} is VALID [2020-07-28 19:02:39,679 INFO L280 TraceCheckUtils]: 15: Hoare triple {18857#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {18857#true} is VALID [2020-07-28 19:02:39,679 INFO L280 TraceCheckUtils]: 16: Hoare triple {18857#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {18857#true} is VALID [2020-07-28 19:02:39,679 INFO L280 TraceCheckUtils]: 17: Hoare triple {18857#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret69, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~5;havoc isHighWaterSensorDry_~retValue_acc~5; {18857#true} is VALID [2020-07-28 19:02:39,679 INFO L280 TraceCheckUtils]: 18: Hoare triple {18857#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~5 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~5; {18857#true} is VALID [2020-07-28 19:02:39,680 INFO L280 TraceCheckUtils]: 19: Hoare triple {18857#true} isHighWaterLevel_#t~ret69 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret69 && isHighWaterLevel_#t~ret69 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret69;havoc isHighWaterLevel_#t~ret69; {18857#true} is VALID [2020-07-28 19:02:39,680 INFO L280 TraceCheckUtils]: 20: Hoare triple {18857#true} assume 0 != isHighWaterLevel_~tmp~7;isHighWaterLevel_~tmp___0~1 := 0; {18859#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} is VALID [2020-07-28 19:02:39,681 INFO L280 TraceCheckUtils]: 21: Hoare triple {18859#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {18860#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:02:39,682 INFO L280 TraceCheckUtils]: 22: Hoare triple {18860#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {18861#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~4)} is VALID [2020-07-28 19:02:39,683 INFO L280 TraceCheckUtils]: 23: Hoare triple {18861#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~4)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc activatePump_#t~ret51, activatePump_~tmp~6;havoc activatePump_~tmp~6;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret52, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {18858#false} is VALID [2020-07-28 19:02:39,683 INFO L280 TraceCheckUtils]: 24: Hoare triple {18858#false} isMethaneAlarm_#t~ret52 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret52 && isMethaneAlarm_#t~ret52 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret52;havoc isMethaneAlarm_#t~ret52;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {18858#false} is VALID [2020-07-28 19:02:39,683 INFO L280 TraceCheckUtils]: 25: Hoare triple {18858#false} activatePump_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret51 && activatePump_#t~ret51 <= 2147483647;activatePump_~tmp~6 := activatePump_#t~ret51;havoc activatePump_#t~ret51; {18858#false} is VALID [2020-07-28 19:02:39,683 INFO L280 TraceCheckUtils]: 26: Hoare triple {18858#false} assume !(0 != activatePump_~tmp~6);~pumpRunning~0 := 1; {18858#false} is VALID [2020-07-28 19:02:39,684 INFO L280 TraceCheckUtils]: 27: Hoare triple {18858#false} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {18858#false} is VALID [2020-07-28 19:02:39,684 INFO L280 TraceCheckUtils]: 28: Hoare triple {18858#false} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {18858#false} is VALID [2020-07-28 19:02:39,684 INFO L280 TraceCheckUtils]: 29: Hoare triple {18858#false} assume 0 != __utac_acc__Specification3_spec__1_~tmp~3; {18858#false} is VALID [2020-07-28 19:02:39,684 INFO L280 TraceCheckUtils]: 30: Hoare triple {18858#false} assume !false; {18858#false} is VALID [2020-07-28 19:02:39,684 INFO L280 TraceCheckUtils]: 31: Hoare triple {18858#false} assume test_~splverifierCounter~0 < 4; {18858#false} is VALID [2020-07-28 19:02:39,685 INFO L280 TraceCheckUtils]: 32: Hoare triple {18858#false} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {18858#false} is VALID [2020-07-28 19:02:39,685 INFO L280 TraceCheckUtils]: 33: Hoare triple {18858#false} assume !(0 != test_~tmp~9); {18858#false} is VALID [2020-07-28 19:02:39,685 INFO L280 TraceCheckUtils]: 34: Hoare triple {18858#false} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {18858#false} is VALID [2020-07-28 19:02:39,685 INFO L280 TraceCheckUtils]: 35: Hoare triple {18858#false} assume !(0 != test_~tmp___0~3); {18858#false} is VALID [2020-07-28 19:02:39,686 INFO L280 TraceCheckUtils]: 36: Hoare triple {18858#false} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {18858#false} is VALID [2020-07-28 19:02:39,686 INFO L280 TraceCheckUtils]: 37: Hoare triple {18858#false} assume 0 != test_~tmp___2~0; {18858#false} is VALID [2020-07-28 19:02:39,686 INFO L280 TraceCheckUtils]: 38: Hoare triple {18858#false} assume 0 != ~pumpRunning~0; {18858#false} is VALID [2020-07-28 19:02:39,687 INFO L280 TraceCheckUtils]: 39: Hoare triple {18858#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {18858#false} is VALID [2020-07-28 19:02:39,687 INFO L280 TraceCheckUtils]: 40: Hoare triple {18858#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {18858#false} is VALID [2020-07-28 19:02:39,687 INFO L280 TraceCheckUtils]: 41: Hoare triple {18858#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret70, isLowWaterLevel_~retValue_acc~12, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~12;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~6;havoc isLowWaterSensorDry_~retValue_acc~6;isLowWaterSensorDry_~retValue_acc~6 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~6; {18858#false} is VALID [2020-07-28 19:02:39,688 INFO L280 TraceCheckUtils]: 42: Hoare triple {18858#false} isLowWaterLevel_#t~ret70 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret70 && isLowWaterLevel_#t~ret70 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret70;havoc isLowWaterLevel_#t~ret70; {18858#false} is VALID [2020-07-28 19:02:39,688 INFO L280 TraceCheckUtils]: 43: Hoare triple {18858#false} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {18858#false} is VALID [2020-07-28 19:02:39,688 INFO L280 TraceCheckUtils]: 44: Hoare triple {18858#false} isLowWaterLevel_~retValue_acc~12 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~12; {18858#false} is VALID [2020-07-28 19:02:39,688 INFO L280 TraceCheckUtils]: 45: Hoare triple {18858#false} processEnvironment_#t~ret50 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret50 && processEnvironment_#t~ret50 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret50;havoc processEnvironment_#t~ret50; {18858#false} is VALID [2020-07-28 19:02:39,689 INFO L280 TraceCheckUtils]: 46: Hoare triple {18858#false} assume 0 != processEnvironment_~tmp~5;~pumpRunning~0 := 0; {18858#false} is VALID [2020-07-28 19:02:39,689 INFO L280 TraceCheckUtils]: 47: Hoare triple {18858#false} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {18858#false} is VALID [2020-07-28 19:02:39,689 INFO L280 TraceCheckUtils]: 48: Hoare triple {18858#false} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {18858#false} is VALID [2020-07-28 19:02:39,689 INFO L280 TraceCheckUtils]: 49: Hoare triple {18858#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {18858#false} is VALID [2020-07-28 19:02:39,690 INFO L280 TraceCheckUtils]: 50: Hoare triple {18858#false} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {18858#false} is VALID [2020-07-28 19:02:39,690 INFO L280 TraceCheckUtils]: 51: Hoare triple {18858#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {18858#false} is VALID [2020-07-28 19:02:39,690 INFO L280 TraceCheckUtils]: 52: Hoare triple {18858#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {18858#false} is VALID [2020-07-28 19:02:39,690 INFO L280 TraceCheckUtils]: 53: Hoare triple {18858#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {18858#false} is VALID [2020-07-28 19:02:39,690 INFO L280 TraceCheckUtils]: 54: Hoare triple {18858#false} assume !false; {18858#false} is VALID [2020-07-28 19:02:39,693 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:02:39,693 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1563803403] [2020-07-28 19:02:39,693 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:39,693 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:39,694 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1436694887] [2020-07-28 19:02:39,694 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 55 [2020-07-28 19:02:39,694 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:39,694 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:39,766 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:39,767 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:39,767 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:39,767 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:39,767 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:39,767 INFO L87 Difference]: Start difference. First operand 286 states and 358 transitions. Second operand 5 states. [2020-07-28 19:02:41,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:41,488 INFO L93 Difference]: Finished difference Result 661 states and 831 transitions. [2020-07-28 19:02:41,488 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:41,488 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 55 [2020-07-28 19:02:41,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:41,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:41,489 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 155 transitions. [2020-07-28 19:02:41,489 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:41,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 155 transitions. [2020-07-28 19:02:41,490 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 155 transitions. [2020-07-28 19:02:41,673 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 155 edges. 155 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:41,683 INFO L225 Difference]: With dead ends: 661 [2020-07-28 19:02:41,683 INFO L226 Difference]: Without dead ends: 381 [2020-07-28 19:02:41,684 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:41,684 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 381 states. [2020-07-28 19:02:42,567 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 381 to 286. [2020-07-28 19:02:42,568 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:42,568 INFO L82 GeneralOperation]: Start isEquivalent. First operand 381 states. Second operand 286 states. [2020-07-28 19:02:42,568 INFO L74 IsIncluded]: Start isIncluded. First operand 381 states. Second operand 286 states. [2020-07-28 19:02:42,568 INFO L87 Difference]: Start difference. First operand 381 states. Second operand 286 states. [2020-07-28 19:02:42,576 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:42,577 INFO L93 Difference]: Finished difference Result 381 states and 475 transitions. [2020-07-28 19:02:42,577 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states and 475 transitions. [2020-07-28 19:02:42,577 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:42,577 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:42,578 INFO L74 IsIncluded]: Start isIncluded. First operand 286 states. Second operand 381 states. [2020-07-28 19:02:42,578 INFO L87 Difference]: Start difference. First operand 286 states. Second operand 381 states. [2020-07-28 19:02:42,588 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:42,588 INFO L93 Difference]: Finished difference Result 381 states and 475 transitions. [2020-07-28 19:02:42,588 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states and 475 transitions. [2020-07-28 19:02:42,589 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:42,589 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:42,589 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:42,589 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:42,589 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 286 states. [2020-07-28 19:02:42,596 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 286 states to 286 states and 354 transitions. [2020-07-28 19:02:42,596 INFO L78 Accepts]: Start accepts. Automaton has 286 states and 354 transitions. Word has length 55 [2020-07-28 19:02:42,597 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:42,597 INFO L479 AbstractCegarLoop]: Abstraction has 286 states and 354 transitions. [2020-07-28 19:02:42,597 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:42,597 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 354 transitions. [2020-07-28 19:02:42,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2020-07-28 19:02:42,598 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:42,598 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:42,598 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-28 19:02:42,598 INFO L427 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:42,599 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:42,599 INFO L82 PathProgramCache]: Analyzing trace with hash 158379446, now seen corresponding path program 1 times [2020-07-28 19:02:42,599 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:42,599 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [339619066] [2020-07-28 19:02:42,599 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:42,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:42,655 INFO L280 TraceCheckUtils]: 0: Hoare triple {20918#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {20918#true} is VALID [2020-07-28 19:02:42,655 INFO L280 TraceCheckUtils]: 1: Hoare triple {20918#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {20918#true} is VALID [2020-07-28 19:02:42,655 INFO L280 TraceCheckUtils]: 2: Hoare triple {20918#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {20918#true} is VALID [2020-07-28 19:02:42,656 INFO L280 TraceCheckUtils]: 3: Hoare triple {20918#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {20918#true} is VALID [2020-07-28 19:02:42,656 INFO L280 TraceCheckUtils]: 4: Hoare triple {20918#true} assume 0 != main_~tmp~10; {20918#true} is VALID [2020-07-28 19:02:42,656 INFO L280 TraceCheckUtils]: 5: Hoare triple {20918#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {20918#true} is VALID [2020-07-28 19:02:42,656 INFO L280 TraceCheckUtils]: 6: Hoare triple {20918#true} assume !false; {20918#true} is VALID [2020-07-28 19:02:42,656 INFO L280 TraceCheckUtils]: 7: Hoare triple {20918#true} assume test_~splverifierCounter~0 < 4; {20918#true} is VALID [2020-07-28 19:02:42,657 INFO L280 TraceCheckUtils]: 8: Hoare triple {20918#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {20918#true} is VALID [2020-07-28 19:02:42,657 INFO L280 TraceCheckUtils]: 9: Hoare triple {20918#true} assume !(0 != test_~tmp~9); {20918#true} is VALID [2020-07-28 19:02:42,657 INFO L280 TraceCheckUtils]: 10: Hoare triple {20918#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {20918#true} is VALID [2020-07-28 19:02:42,657 INFO L280 TraceCheckUtils]: 11: Hoare triple {20918#true} assume !(0 != test_~tmp___0~3); {20918#true} is VALID [2020-07-28 19:02:42,657 INFO L280 TraceCheckUtils]: 12: Hoare triple {20918#true} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {20918#true} is VALID [2020-07-28 19:02:42,658 INFO L280 TraceCheckUtils]: 13: Hoare triple {20918#true} assume 0 != test_~tmp___2~0; {20918#true} is VALID [2020-07-28 19:02:42,658 INFO L280 TraceCheckUtils]: 14: Hoare triple {20918#true} assume !(0 != ~pumpRunning~0); {20918#true} is VALID [2020-07-28 19:02:42,658 INFO L280 TraceCheckUtils]: 15: Hoare triple {20918#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {20918#true} is VALID [2020-07-28 19:02:42,658 INFO L280 TraceCheckUtils]: 16: Hoare triple {20918#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {20918#true} is VALID [2020-07-28 19:02:42,659 INFO L280 TraceCheckUtils]: 17: Hoare triple {20918#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret69, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~5;havoc isHighWaterSensorDry_~retValue_acc~5; {20918#true} is VALID [2020-07-28 19:02:42,659 INFO L280 TraceCheckUtils]: 18: Hoare triple {20918#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~5 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~5; {20920#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:02:42,660 INFO L280 TraceCheckUtils]: 19: Hoare triple {20920#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret69 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret69 && isHighWaterLevel_#t~ret69 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret69;havoc isHighWaterLevel_#t~ret69; {20921#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~7)} is VALID [2020-07-28 19:02:42,661 INFO L280 TraceCheckUtils]: 20: Hoare triple {20921#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~7)} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {20919#false} is VALID [2020-07-28 19:02:42,661 INFO L280 TraceCheckUtils]: 21: Hoare triple {20919#false} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {20919#false} is VALID [2020-07-28 19:02:42,662 INFO L280 TraceCheckUtils]: 22: Hoare triple {20919#false} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {20919#false} is VALID [2020-07-28 19:02:42,662 INFO L280 TraceCheckUtils]: 23: Hoare triple {20919#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc activatePump_#t~ret51, activatePump_~tmp~6;havoc activatePump_~tmp~6;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret52, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {20919#false} is VALID [2020-07-28 19:02:42,662 INFO L280 TraceCheckUtils]: 24: Hoare triple {20919#false} isMethaneAlarm_#t~ret52 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret52 && isMethaneAlarm_#t~ret52 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret52;havoc isMethaneAlarm_#t~ret52;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {20919#false} is VALID [2020-07-28 19:02:42,662 INFO L280 TraceCheckUtils]: 25: Hoare triple {20919#false} activatePump_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret51 && activatePump_#t~ret51 <= 2147483647;activatePump_~tmp~6 := activatePump_#t~ret51;havoc activatePump_#t~ret51; {20919#false} is VALID [2020-07-28 19:02:42,662 INFO L280 TraceCheckUtils]: 26: Hoare triple {20919#false} assume !(0 != activatePump_~tmp~6);~pumpRunning~0 := 1; {20919#false} is VALID [2020-07-28 19:02:42,663 INFO L280 TraceCheckUtils]: 27: Hoare triple {20919#false} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {20919#false} is VALID [2020-07-28 19:02:42,663 INFO L280 TraceCheckUtils]: 28: Hoare triple {20919#false} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {20919#false} is VALID [2020-07-28 19:02:42,663 INFO L280 TraceCheckUtils]: 29: Hoare triple {20919#false} assume 0 != __utac_acc__Specification3_spec__1_~tmp~3; {20919#false} is VALID [2020-07-28 19:02:42,663 INFO L280 TraceCheckUtils]: 30: Hoare triple {20919#false} assume !false; {20919#false} is VALID [2020-07-28 19:02:42,663 INFO L280 TraceCheckUtils]: 31: Hoare triple {20919#false} assume test_~splverifierCounter~0 < 4; {20919#false} is VALID [2020-07-28 19:02:42,663 INFO L280 TraceCheckUtils]: 32: Hoare triple {20919#false} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {20919#false} is VALID [2020-07-28 19:02:42,664 INFO L280 TraceCheckUtils]: 33: Hoare triple {20919#false} assume !(0 != test_~tmp~9); {20919#false} is VALID [2020-07-28 19:02:42,664 INFO L280 TraceCheckUtils]: 34: Hoare triple {20919#false} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {20919#false} is VALID [2020-07-28 19:02:42,664 INFO L280 TraceCheckUtils]: 35: Hoare triple {20919#false} assume !(0 != test_~tmp___0~3); {20919#false} is VALID [2020-07-28 19:02:42,664 INFO L280 TraceCheckUtils]: 36: Hoare triple {20919#false} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {20919#false} is VALID [2020-07-28 19:02:42,665 INFO L280 TraceCheckUtils]: 37: Hoare triple {20919#false} assume 0 != test_~tmp___2~0; {20919#false} is VALID [2020-07-28 19:02:42,665 INFO L280 TraceCheckUtils]: 38: Hoare triple {20919#false} assume 0 != ~pumpRunning~0; {20919#false} is VALID [2020-07-28 19:02:42,665 INFO L280 TraceCheckUtils]: 39: Hoare triple {20919#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {20919#false} is VALID [2020-07-28 19:02:42,665 INFO L280 TraceCheckUtils]: 40: Hoare triple {20919#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {20919#false} is VALID [2020-07-28 19:02:42,666 INFO L280 TraceCheckUtils]: 41: Hoare triple {20919#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret70, isLowWaterLevel_~retValue_acc~12, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~12;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~6;havoc isLowWaterSensorDry_~retValue_acc~6;isLowWaterSensorDry_~retValue_acc~6 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~6; {20919#false} is VALID [2020-07-28 19:02:42,666 INFO L280 TraceCheckUtils]: 42: Hoare triple {20919#false} isLowWaterLevel_#t~ret70 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret70 && isLowWaterLevel_#t~ret70 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret70;havoc isLowWaterLevel_#t~ret70; {20919#false} is VALID [2020-07-28 19:02:42,666 INFO L280 TraceCheckUtils]: 43: Hoare triple {20919#false} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {20919#false} is VALID [2020-07-28 19:02:42,666 INFO L280 TraceCheckUtils]: 44: Hoare triple {20919#false} isLowWaterLevel_~retValue_acc~12 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~12; {20919#false} is VALID [2020-07-28 19:02:42,667 INFO L280 TraceCheckUtils]: 45: Hoare triple {20919#false} processEnvironment_#t~ret50 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret50 && processEnvironment_#t~ret50 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret50;havoc processEnvironment_#t~ret50; {20919#false} is VALID [2020-07-28 19:02:42,667 INFO L280 TraceCheckUtils]: 46: Hoare triple {20919#false} assume 0 != processEnvironment_~tmp~5;~pumpRunning~0 := 0; {20919#false} is VALID [2020-07-28 19:02:42,667 INFO L280 TraceCheckUtils]: 47: Hoare triple {20919#false} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {20919#false} is VALID [2020-07-28 19:02:42,667 INFO L280 TraceCheckUtils]: 48: Hoare triple {20919#false} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {20919#false} is VALID [2020-07-28 19:02:42,668 INFO L280 TraceCheckUtils]: 49: Hoare triple {20919#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {20919#false} is VALID [2020-07-28 19:02:42,668 INFO L280 TraceCheckUtils]: 50: Hoare triple {20919#false} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {20919#false} is VALID [2020-07-28 19:02:42,668 INFO L280 TraceCheckUtils]: 51: Hoare triple {20919#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {20919#false} is VALID [2020-07-28 19:02:42,668 INFO L280 TraceCheckUtils]: 52: Hoare triple {20919#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {20919#false} is VALID [2020-07-28 19:02:42,669 INFO L280 TraceCheckUtils]: 53: Hoare triple {20919#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {20919#false} is VALID [2020-07-28 19:02:42,669 INFO L280 TraceCheckUtils]: 54: Hoare triple {20919#false} assume !false; {20919#false} is VALID [2020-07-28 19:02:42,672 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:02:42,672 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [339619066] [2020-07-28 19:02:42,673 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:42,673 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:42,673 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1442120470] [2020-07-28 19:02:42,674 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2020-07-28 19:02:42,674 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:42,674 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:42,739 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:42,739 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:42,740 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:42,740 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:42,740 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:42,740 INFO L87 Difference]: Start difference. First operand 286 states and 354 transitions. Second operand 4 states. [2020-07-28 19:02:44,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:44,200 INFO L93 Difference]: Finished difference Result 608 states and 763 transitions. [2020-07-28 19:02:44,201 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:02:44,201 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2020-07-28 19:02:44,201 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:44,201 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:44,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 156 transitions. [2020-07-28 19:02:44,202 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:44,202 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 156 transitions. [2020-07-28 19:02:44,203 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 156 transitions. [2020-07-28 19:02:44,387 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 156 edges. 156 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:44,394 INFO L225 Difference]: With dead ends: 608 [2020-07-28 19:02:44,394 INFO L226 Difference]: Without dead ends: 328 [2020-07-28 19:02:44,395 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:44,395 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 328 states. [2020-07-28 19:02:45,133 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 328 to 244. [2020-07-28 19:02:45,134 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:45,134 INFO L82 GeneralOperation]: Start isEquivalent. First operand 328 states. Second operand 244 states. [2020-07-28 19:02:45,134 INFO L74 IsIncluded]: Start isIncluded. First operand 328 states. Second operand 244 states. [2020-07-28 19:02:45,134 INFO L87 Difference]: Start difference. First operand 328 states. Second operand 244 states. [2020-07-28 19:02:45,141 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:45,141 INFO L93 Difference]: Finished difference Result 328 states and 411 transitions. [2020-07-28 19:02:45,141 INFO L276 IsEmpty]: Start isEmpty. Operand 328 states and 411 transitions. [2020-07-28 19:02:45,142 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:45,142 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:45,142 INFO L74 IsIncluded]: Start isIncluded. First operand 244 states. Second operand 328 states. [2020-07-28 19:02:45,142 INFO L87 Difference]: Start difference. First operand 244 states. Second operand 328 states. [2020-07-28 19:02:45,149 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:45,149 INFO L93 Difference]: Finished difference Result 328 states and 411 transitions. [2020-07-28 19:02:45,149 INFO L276 IsEmpty]: Start isEmpty. Operand 328 states and 411 transitions. [2020-07-28 19:02:45,150 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:45,150 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:45,150 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:45,150 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:45,150 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 244 states. [2020-07-28 19:02:45,155 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244 states to 244 states and 303 transitions. [2020-07-28 19:02:45,156 INFO L78 Accepts]: Start accepts. Automaton has 244 states and 303 transitions. Word has length 55 [2020-07-28 19:02:45,156 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:45,156 INFO L479 AbstractCegarLoop]: Abstraction has 244 states and 303 transitions. [2020-07-28 19:02:45,156 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:45,156 INFO L276 IsEmpty]: Start isEmpty. Operand 244 states and 303 transitions. [2020-07-28 19:02:45,157 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2020-07-28 19:02:45,157 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:45,157 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:45,157 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2020-07-28 19:02:45,157 INFO L427 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:45,157 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:45,157 INFO L82 PathProgramCache]: Analyzing trace with hash -1927838086, now seen corresponding path program 1 times [2020-07-28 19:02:45,158 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:45,158 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [667917365] [2020-07-28 19:02:45,158 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:45,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:45,252 INFO L280 TraceCheckUtils]: 0: Hoare triple {22732#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,253 INFO L280 TraceCheckUtils]: 1: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,253 INFO L280 TraceCheckUtils]: 2: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,254 INFO L280 TraceCheckUtils]: 3: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,255 INFO L280 TraceCheckUtils]: 4: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~10; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,255 INFO L280 TraceCheckUtils]: 5: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,256 INFO L280 TraceCheckUtils]: 6: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume !false; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,257 INFO L280 TraceCheckUtils]: 7: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,257 INFO L280 TraceCheckUtils]: 8: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,258 INFO L280 TraceCheckUtils]: 9: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp~9; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,258 INFO L280 TraceCheckUtils]: 10: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,259 INFO L280 TraceCheckUtils]: 11: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,260 INFO L280 TraceCheckUtils]: 12: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~3); {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,260 INFO L280 TraceCheckUtils]: 13: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,261 INFO L280 TraceCheckUtils]: 14: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,261 INFO L280 TraceCheckUtils]: 15: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,262 INFO L280 TraceCheckUtils]: 16: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,263 INFO L280 TraceCheckUtils]: 17: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,263 INFO L280 TraceCheckUtils]: 18: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret69, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~5;havoc isHighWaterSensorDry_~retValue_acc~5; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,264 INFO L280 TraceCheckUtils]: 19: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~5; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,264 INFO L280 TraceCheckUtils]: 20: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret69 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret69 && isHighWaterLevel_#t~ret69 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret69;havoc isHighWaterLevel_#t~ret69; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,265 INFO L280 TraceCheckUtils]: 21: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,266 INFO L280 TraceCheckUtils]: 22: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,266 INFO L280 TraceCheckUtils]: 23: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,267 INFO L280 TraceCheckUtils]: 24: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc activatePump_#t~ret51, activatePump_~tmp~6;havoc activatePump_~tmp~6;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret52, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,267 INFO L280 TraceCheckUtils]: 25: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret52 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret52 && isMethaneAlarm_#t~ret52 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret52;havoc isMethaneAlarm_#t~ret52;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,268 INFO L280 TraceCheckUtils]: 26: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} activatePump_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret51 && activatePump_#t~ret51 <= 2147483647;activatePump_~tmp~6 := activatePump_#t~ret51;havoc activatePump_#t~ret51; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,268 INFO L280 TraceCheckUtils]: 27: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} assume !(0 != activatePump_~tmp~6);~pumpRunning~0 := 1; {22734#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:45,269 INFO L280 TraceCheckUtils]: 28: Hoare triple {22734#(= 0 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {22735#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:45,270 INFO L280 TraceCheckUtils]: 29: Hoare triple {22735#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {22736#(= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~3)} is VALID [2020-07-28 19:02:45,271 INFO L280 TraceCheckUtils]: 30: Hoare triple {22736#(= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~3)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~3; {22733#false} is VALID [2020-07-28 19:02:45,271 INFO L280 TraceCheckUtils]: 31: Hoare triple {22733#false} assume !false; {22733#false} is VALID [2020-07-28 19:02:45,271 INFO L280 TraceCheckUtils]: 32: Hoare triple {22733#false} assume test_~splverifierCounter~0 < 4; {22733#false} is VALID [2020-07-28 19:02:45,271 INFO L280 TraceCheckUtils]: 33: Hoare triple {22733#false} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {22733#false} is VALID [2020-07-28 19:02:45,271 INFO L280 TraceCheckUtils]: 34: Hoare triple {22733#false} assume !(0 != test_~tmp~9); {22733#false} is VALID [2020-07-28 19:02:45,272 INFO L280 TraceCheckUtils]: 35: Hoare triple {22733#false} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {22733#false} is VALID [2020-07-28 19:02:45,272 INFO L280 TraceCheckUtils]: 36: Hoare triple {22733#false} assume !(0 != test_~tmp___0~3); {22733#false} is VALID [2020-07-28 19:02:45,272 INFO L280 TraceCheckUtils]: 37: Hoare triple {22733#false} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {22733#false} is VALID [2020-07-28 19:02:45,272 INFO L280 TraceCheckUtils]: 38: Hoare triple {22733#false} assume 0 != test_~tmp___2~0; {22733#false} is VALID [2020-07-28 19:02:45,272 INFO L280 TraceCheckUtils]: 39: Hoare triple {22733#false} assume 0 != ~pumpRunning~0; {22733#false} is VALID [2020-07-28 19:02:45,272 INFO L280 TraceCheckUtils]: 40: Hoare triple {22733#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {22733#false} is VALID [2020-07-28 19:02:45,273 INFO L280 TraceCheckUtils]: 41: Hoare triple {22733#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {22733#false} is VALID [2020-07-28 19:02:45,273 INFO L280 TraceCheckUtils]: 42: Hoare triple {22733#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret70, isLowWaterLevel_~retValue_acc~12, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~12;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~6;havoc isLowWaterSensorDry_~retValue_acc~6;isLowWaterSensorDry_~retValue_acc~6 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~6; {22733#false} is VALID [2020-07-28 19:02:45,273 INFO L280 TraceCheckUtils]: 43: Hoare triple {22733#false} isLowWaterLevel_#t~ret70 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret70 && isLowWaterLevel_#t~ret70 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret70;havoc isLowWaterLevel_#t~ret70; {22733#false} is VALID [2020-07-28 19:02:45,273 INFO L280 TraceCheckUtils]: 44: Hoare triple {22733#false} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {22733#false} is VALID [2020-07-28 19:02:45,274 INFO L280 TraceCheckUtils]: 45: Hoare triple {22733#false} isLowWaterLevel_~retValue_acc~12 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~12; {22733#false} is VALID [2020-07-28 19:02:45,274 INFO L280 TraceCheckUtils]: 46: Hoare triple {22733#false} processEnvironment_#t~ret50 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret50 && processEnvironment_#t~ret50 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret50;havoc processEnvironment_#t~ret50; {22733#false} is VALID [2020-07-28 19:02:45,274 INFO L280 TraceCheckUtils]: 47: Hoare triple {22733#false} assume 0 != processEnvironment_~tmp~5;~pumpRunning~0 := 0; {22733#false} is VALID [2020-07-28 19:02:45,274 INFO L280 TraceCheckUtils]: 48: Hoare triple {22733#false} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {22733#false} is VALID [2020-07-28 19:02:45,274 INFO L280 TraceCheckUtils]: 49: Hoare triple {22733#false} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {22733#false} is VALID [2020-07-28 19:02:45,275 INFO L280 TraceCheckUtils]: 50: Hoare triple {22733#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {22733#false} is VALID [2020-07-28 19:02:45,275 INFO L280 TraceCheckUtils]: 51: Hoare triple {22733#false} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {22733#false} is VALID [2020-07-28 19:02:45,275 INFO L280 TraceCheckUtils]: 52: Hoare triple {22733#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {22733#false} is VALID [2020-07-28 19:02:45,275 INFO L280 TraceCheckUtils]: 53: Hoare triple {22733#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {22733#false} is VALID [2020-07-28 19:02:45,275 INFO L280 TraceCheckUtils]: 54: Hoare triple {22733#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {22733#false} is VALID [2020-07-28 19:02:45,275 INFO L280 TraceCheckUtils]: 55: Hoare triple {22733#false} assume !false; {22733#false} is VALID [2020-07-28 19:02:45,280 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:45,281 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [667917365] [2020-07-28 19:02:45,281 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:45,282 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:45,282 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [746714268] [2020-07-28 19:02:45,284 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 56 [2020-07-28 19:02:45,284 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:45,285 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:45,354 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:45,354 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:45,355 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:45,355 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:45,355 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:45,355 INFO L87 Difference]: Start difference. First operand 244 states and 303 transitions. Second operand 5 states. [2020-07-28 19:02:47,437 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:47,437 INFO L93 Difference]: Finished difference Result 622 states and 772 transitions. [2020-07-28 19:02:47,437 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:47,438 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 56 [2020-07-28 19:02:47,438 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:47,438 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:47,439 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 247 transitions. [2020-07-28 19:02:47,439 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:47,440 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 247 transitions. [2020-07-28 19:02:47,440 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 247 transitions. [2020-07-28 19:02:47,738 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 247 edges. 247 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:47,749 INFO L225 Difference]: With dead ends: 622 [2020-07-28 19:02:47,749 INFO L226 Difference]: Without dead ends: 384 [2020-07-28 19:02:47,750 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:47,750 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 384 states. [2020-07-28 19:02:48,633 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 384 to 244. [2020-07-28 19:02:48,634 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:48,634 INFO L82 GeneralOperation]: Start isEquivalent. First operand 384 states. Second operand 244 states. [2020-07-28 19:02:48,634 INFO L74 IsIncluded]: Start isIncluded. First operand 384 states. Second operand 244 states. [2020-07-28 19:02:48,634 INFO L87 Difference]: Start difference. First operand 384 states. Second operand 244 states. [2020-07-28 19:02:48,642 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:48,642 INFO L93 Difference]: Finished difference Result 384 states and 471 transitions. [2020-07-28 19:02:48,642 INFO L276 IsEmpty]: Start isEmpty. Operand 384 states and 471 transitions. [2020-07-28 19:02:48,643 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:48,643 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:48,643 INFO L74 IsIncluded]: Start isIncluded. First operand 244 states. Second operand 384 states. [2020-07-28 19:02:48,643 INFO L87 Difference]: Start difference. First operand 244 states. Second operand 384 states. [2020-07-28 19:02:48,651 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:48,651 INFO L93 Difference]: Finished difference Result 384 states and 471 transitions. [2020-07-28 19:02:48,651 INFO L276 IsEmpty]: Start isEmpty. Operand 384 states and 471 transitions. [2020-07-28 19:02:48,651 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:48,651 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:48,652 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:48,652 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:48,652 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 244 states. [2020-07-28 19:02:48,657 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244 states to 244 states and 299 transitions. [2020-07-28 19:02:48,657 INFO L78 Accepts]: Start accepts. Automaton has 244 states and 299 transitions. Word has length 56 [2020-07-28 19:02:48,657 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:48,658 INFO L479 AbstractCegarLoop]: Abstraction has 244 states and 299 transitions. [2020-07-28 19:02:48,658 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:48,658 INFO L276 IsEmpty]: Start isEmpty. Operand 244 states and 299 transitions. [2020-07-28 19:02:48,658 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2020-07-28 19:02:48,658 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:48,659 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:48,659 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2020-07-28 19:02:48,659 INFO L427 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:48,659 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:48,659 INFO L82 PathProgramCache]: Analyzing trace with hash 1671822983, now seen corresponding path program 1 times [2020-07-28 19:02:48,660 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:48,660 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1637109035] [2020-07-28 19:02:48,660 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:48,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:48,732 INFO L280 TraceCheckUtils]: 0: Hoare triple {24681#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {24681#true} is VALID [2020-07-28 19:02:48,732 INFO L280 TraceCheckUtils]: 1: Hoare triple {24681#true} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {24681#true} is VALID [2020-07-28 19:02:48,732 INFO L280 TraceCheckUtils]: 2: Hoare triple {24681#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {24681#true} is VALID [2020-07-28 19:02:48,733 INFO L280 TraceCheckUtils]: 3: Hoare triple {24681#true} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {24681#true} is VALID [2020-07-28 19:02:48,733 INFO L280 TraceCheckUtils]: 4: Hoare triple {24681#true} assume 0 != main_~tmp~10; {24681#true} is VALID [2020-07-28 19:02:48,733 INFO L280 TraceCheckUtils]: 5: Hoare triple {24681#true} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {24681#true} is VALID [2020-07-28 19:02:48,733 INFO L280 TraceCheckUtils]: 6: Hoare triple {24681#true} assume !false; {24681#true} is VALID [2020-07-28 19:02:48,733 INFO L280 TraceCheckUtils]: 7: Hoare triple {24681#true} assume test_~splverifierCounter~0 < 4; {24681#true} is VALID [2020-07-28 19:02:48,733 INFO L280 TraceCheckUtils]: 8: Hoare triple {24681#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {24681#true} is VALID [2020-07-28 19:02:48,734 INFO L280 TraceCheckUtils]: 9: Hoare triple {24681#true} assume 0 != test_~tmp~9; {24681#true} is VALID [2020-07-28 19:02:48,734 INFO L280 TraceCheckUtils]: 10: Hoare triple {24681#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {24681#true} is VALID [2020-07-28 19:02:48,734 INFO L280 TraceCheckUtils]: 11: Hoare triple {24681#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {24681#true} is VALID [2020-07-28 19:02:48,734 INFO L280 TraceCheckUtils]: 12: Hoare triple {24681#true} assume !(0 != test_~tmp___0~3); {24681#true} is VALID [2020-07-28 19:02:48,734 INFO L280 TraceCheckUtils]: 13: Hoare triple {24681#true} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {24681#true} is VALID [2020-07-28 19:02:48,734 INFO L280 TraceCheckUtils]: 14: Hoare triple {24681#true} assume 0 != test_~tmp___2~0; {24681#true} is VALID [2020-07-28 19:02:48,734 INFO L280 TraceCheckUtils]: 15: Hoare triple {24681#true} assume !(0 != ~pumpRunning~0); {24681#true} is VALID [2020-07-28 19:02:48,735 INFO L280 TraceCheckUtils]: 16: Hoare triple {24681#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {24681#true} is VALID [2020-07-28 19:02:48,735 INFO L280 TraceCheckUtils]: 17: Hoare triple {24681#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {24681#true} is VALID [2020-07-28 19:02:48,735 INFO L280 TraceCheckUtils]: 18: Hoare triple {24681#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret69, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~5;havoc isHighWaterSensorDry_~retValue_acc~5; {24681#true} is VALID [2020-07-28 19:02:48,735 INFO L280 TraceCheckUtils]: 19: Hoare triple {24681#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~5; {24681#true} is VALID [2020-07-28 19:02:48,735 INFO L280 TraceCheckUtils]: 20: Hoare triple {24681#true} isHighWaterLevel_#t~ret69 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret69 && isHighWaterLevel_#t~ret69 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret69;havoc isHighWaterLevel_#t~ret69; {24681#true} is VALID [2020-07-28 19:02:48,736 INFO L280 TraceCheckUtils]: 21: Hoare triple {24681#true} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {24681#true} is VALID [2020-07-28 19:02:48,736 INFO L280 TraceCheckUtils]: 22: Hoare triple {24681#true} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {24681#true} is VALID [2020-07-28 19:02:48,736 INFO L280 TraceCheckUtils]: 23: Hoare triple {24681#true} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {24681#true} is VALID [2020-07-28 19:02:48,736 INFO L280 TraceCheckUtils]: 24: Hoare triple {24681#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc activatePump_#t~ret51, activatePump_~tmp~6;havoc activatePump_~tmp~6;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret52, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {24681#true} is VALID [2020-07-28 19:02:48,736 INFO L280 TraceCheckUtils]: 25: Hoare triple {24681#true} isMethaneAlarm_#t~ret52 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret52 && isMethaneAlarm_#t~ret52 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret52;havoc isMethaneAlarm_#t~ret52;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {24681#true} is VALID [2020-07-28 19:02:48,736 INFO L280 TraceCheckUtils]: 26: Hoare triple {24681#true} activatePump_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret51 && activatePump_#t~ret51 <= 2147483647;activatePump_~tmp~6 := activatePump_#t~ret51;havoc activatePump_#t~ret51; {24681#true} is VALID [2020-07-28 19:02:48,737 INFO L280 TraceCheckUtils]: 27: Hoare triple {24681#true} assume !(0 != activatePump_~tmp~6);~pumpRunning~0 := 1; {24681#true} is VALID [2020-07-28 19:02:48,737 INFO L280 TraceCheckUtils]: 28: Hoare triple {24681#true} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {24681#true} is VALID [2020-07-28 19:02:48,737 INFO L280 TraceCheckUtils]: 29: Hoare triple {24681#true} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {24681#true} is VALID [2020-07-28 19:02:48,737 INFO L280 TraceCheckUtils]: 30: Hoare triple {24681#true} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {24681#true} is VALID [2020-07-28 19:02:48,737 INFO L280 TraceCheckUtils]: 31: Hoare triple {24681#true} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {24681#true} is VALID [2020-07-28 19:02:48,738 INFO L280 TraceCheckUtils]: 32: Hoare triple {24681#true} assume !(2 == __utac_acc__Specification3_spec__1_~tmp___0~0); {24681#true} is VALID [2020-07-28 19:02:48,738 INFO L280 TraceCheckUtils]: 33: Hoare triple {24681#true} assume !false; {24681#true} is VALID [2020-07-28 19:02:48,738 INFO L280 TraceCheckUtils]: 34: Hoare triple {24681#true} assume test_~splverifierCounter~0 < 4; {24681#true} is VALID [2020-07-28 19:02:48,738 INFO L280 TraceCheckUtils]: 35: Hoare triple {24681#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {24681#true} is VALID [2020-07-28 19:02:48,738 INFO L280 TraceCheckUtils]: 36: Hoare triple {24681#true} assume !(0 != test_~tmp~9); {24681#true} is VALID [2020-07-28 19:02:48,739 INFO L280 TraceCheckUtils]: 37: Hoare triple {24681#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {24681#true} is VALID [2020-07-28 19:02:48,739 INFO L280 TraceCheckUtils]: 38: Hoare triple {24681#true} assume !(0 != test_~tmp___0~3); {24681#true} is VALID [2020-07-28 19:02:48,739 INFO L280 TraceCheckUtils]: 39: Hoare triple {24681#true} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {24681#true} is VALID [2020-07-28 19:02:48,739 INFO L280 TraceCheckUtils]: 40: Hoare triple {24681#true} assume 0 != test_~tmp___2~0; {24681#true} is VALID [2020-07-28 19:02:48,739 INFO L280 TraceCheckUtils]: 41: Hoare triple {24681#true} assume 0 != ~pumpRunning~0; {24681#true} is VALID [2020-07-28 19:02:48,739 INFO L280 TraceCheckUtils]: 42: Hoare triple {24681#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {24681#true} is VALID [2020-07-28 19:02:48,740 INFO L280 TraceCheckUtils]: 43: Hoare triple {24681#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {24681#true} is VALID [2020-07-28 19:02:48,740 INFO L280 TraceCheckUtils]: 44: Hoare triple {24681#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret70, isLowWaterLevel_~retValue_acc~12, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~12;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~6;havoc isLowWaterSensorDry_~retValue_acc~6;isLowWaterSensorDry_~retValue_acc~6 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~6; {24681#true} is VALID [2020-07-28 19:02:48,740 INFO L280 TraceCheckUtils]: 45: Hoare triple {24681#true} isLowWaterLevel_#t~ret70 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret70 && isLowWaterLevel_#t~ret70 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret70;havoc isLowWaterLevel_#t~ret70; {24681#true} is VALID [2020-07-28 19:02:48,741 INFO L280 TraceCheckUtils]: 46: Hoare triple {24681#true} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {24683#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2)} is VALID [2020-07-28 19:02:48,751 INFO L280 TraceCheckUtils]: 47: Hoare triple {24683#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2)} isLowWaterLevel_~retValue_acc~12 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~12; {24684#(= 0 |ULTIMATE.start_isLowWaterLevel_#res|)} is VALID [2020-07-28 19:02:48,752 INFO L280 TraceCheckUtils]: 48: Hoare triple {24684#(= 0 |ULTIMATE.start_isLowWaterLevel_#res|)} processEnvironment_#t~ret50 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret50 && processEnvironment_#t~ret50 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret50;havoc processEnvironment_#t~ret50; {24685#(= 0 ULTIMATE.start_processEnvironment_~tmp~5)} is VALID [2020-07-28 19:02:48,752 INFO L280 TraceCheckUtils]: 49: Hoare triple {24685#(= 0 ULTIMATE.start_processEnvironment_~tmp~5)} assume 0 != processEnvironment_~tmp~5;~pumpRunning~0 := 0; {24682#false} is VALID [2020-07-28 19:02:48,752 INFO L280 TraceCheckUtils]: 50: Hoare triple {24682#false} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {24682#false} is VALID [2020-07-28 19:02:48,752 INFO L280 TraceCheckUtils]: 51: Hoare triple {24682#false} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {24682#false} is VALID [2020-07-28 19:02:48,753 INFO L280 TraceCheckUtils]: 52: Hoare triple {24682#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {24682#false} is VALID [2020-07-28 19:02:48,753 INFO L280 TraceCheckUtils]: 53: Hoare triple {24682#false} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {24682#false} is VALID [2020-07-28 19:02:48,753 INFO L280 TraceCheckUtils]: 54: Hoare triple {24682#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {24682#false} is VALID [2020-07-28 19:02:48,753 INFO L280 TraceCheckUtils]: 55: Hoare triple {24682#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {24682#false} is VALID [2020-07-28 19:02:48,753 INFO L280 TraceCheckUtils]: 56: Hoare triple {24682#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {24682#false} is VALID [2020-07-28 19:02:48,753 INFO L280 TraceCheckUtils]: 57: Hoare triple {24682#false} assume !false; {24682#false} is VALID [2020-07-28 19:02:48,755 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 19:02:48,756 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1637109035] [2020-07-28 19:02:48,756 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:48,756 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:48,756 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1106549019] [2020-07-28 19:02:48,757 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 58 [2020-07-28 19:02:48,757 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:48,757 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:48,819 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:48,819 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:48,820 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:48,820 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:48,820 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:48,820 INFO L87 Difference]: Start difference. First operand 244 states and 299 transitions. Second operand 5 states. [2020-07-28 19:02:50,318 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:50,318 INFO L93 Difference]: Finished difference Result 514 states and 643 transitions. [2020-07-28 19:02:50,318 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:02:50,318 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 58 [2020-07-28 19:02:50,319 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:50,319 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:50,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 185 transitions. [2020-07-28 19:02:50,320 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:50,320 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 185 transitions. [2020-07-28 19:02:50,321 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 185 transitions. [2020-07-28 19:02:50,547 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 185 edges. 185 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:50,555 INFO L225 Difference]: With dead ends: 514 [2020-07-28 19:02:50,555 INFO L226 Difference]: Without dead ends: 326 [2020-07-28 19:02:50,556 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:50,556 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 326 states. [2020-07-28 19:02:51,393 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 326 to 250. [2020-07-28 19:02:51,393 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:51,394 INFO L82 GeneralOperation]: Start isEquivalent. First operand 326 states. Second operand 250 states. [2020-07-28 19:02:51,394 INFO L74 IsIncluded]: Start isIncluded. First operand 326 states. Second operand 250 states. [2020-07-28 19:02:51,394 INFO L87 Difference]: Start difference. First operand 326 states. Second operand 250 states. [2020-07-28 19:02:51,400 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:51,400 INFO L93 Difference]: Finished difference Result 326 states and 406 transitions. [2020-07-28 19:02:51,400 INFO L276 IsEmpty]: Start isEmpty. Operand 326 states and 406 transitions. [2020-07-28 19:02:51,400 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:51,401 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:51,401 INFO L74 IsIncluded]: Start isIncluded. First operand 250 states. Second operand 326 states. [2020-07-28 19:02:51,401 INFO L87 Difference]: Start difference. First operand 250 states. Second operand 326 states. [2020-07-28 19:02:51,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:51,410 INFO L93 Difference]: Finished difference Result 326 states and 406 transitions. [2020-07-28 19:02:51,410 INFO L276 IsEmpty]: Start isEmpty. Operand 326 states and 406 transitions. [2020-07-28 19:02:51,411 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:51,411 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:51,411 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:51,411 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:51,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 250 states. [2020-07-28 19:02:51,416 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 250 states to 250 states and 305 transitions. [2020-07-28 19:02:51,416 INFO L78 Accepts]: Start accepts. Automaton has 250 states and 305 transitions. Word has length 58 [2020-07-28 19:02:51,416 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:51,416 INFO L479 AbstractCegarLoop]: Abstraction has 250 states and 305 transitions. [2020-07-28 19:02:51,416 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:51,417 INFO L276 IsEmpty]: Start isEmpty. Operand 250 states and 305 transitions. [2020-07-28 19:02:51,417 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2020-07-28 19:02:51,417 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:51,417 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:51,418 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2020-07-28 19:02:51,418 INFO L427 AbstractCegarLoop]: === Iteration 16 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:51,418 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:51,418 INFO L82 PathProgramCache]: Analyzing trace with hash 1929988421, now seen corresponding path program 1 times [2020-07-28 19:02:51,418 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:51,419 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1224503288] [2020-07-28 19:02:51,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:51,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:51,532 INFO L280 TraceCheckUtils]: 0: Hoare triple {26373#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {26375#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:51,533 INFO L280 TraceCheckUtils]: 1: Hoare triple {26375#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {26375#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:51,534 INFO L280 TraceCheckUtils]: 2: Hoare triple {26375#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {26375#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:51,534 INFO L280 TraceCheckUtils]: 3: Hoare triple {26375#(= 1 ~waterLevel~0)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {26375#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:51,535 INFO L280 TraceCheckUtils]: 4: Hoare triple {26375#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {26375#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:51,535 INFO L280 TraceCheckUtils]: 5: Hoare triple {26375#(= 1 ~waterLevel~0)} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {26375#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:51,536 INFO L280 TraceCheckUtils]: 6: Hoare triple {26375#(= 1 ~waterLevel~0)} assume !false; {26375#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:51,536 INFO L280 TraceCheckUtils]: 7: Hoare triple {26375#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {26375#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:51,537 INFO L280 TraceCheckUtils]: 8: Hoare triple {26375#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {26375#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:51,539 INFO L280 TraceCheckUtils]: 9: Hoare triple {26375#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~9; {26375#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:51,540 INFO L280 TraceCheckUtils]: 10: Hoare triple {26375#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,540 INFO L280 TraceCheckUtils]: 11: Hoare triple {26376#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,541 INFO L280 TraceCheckUtils]: 12: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~3); {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,541 INFO L280 TraceCheckUtils]: 13: Hoare triple {26376#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,542 INFO L280 TraceCheckUtils]: 14: Hoare triple {26376#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,543 INFO L280 TraceCheckUtils]: 15: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,543 INFO L280 TraceCheckUtils]: 16: Hoare triple {26376#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,544 INFO L280 TraceCheckUtils]: 17: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,544 INFO L280 TraceCheckUtils]: 18: Hoare triple {26376#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret69, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~5;havoc isHighWaterSensorDry_~retValue_acc~5; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,545 INFO L280 TraceCheckUtils]: 19: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~5; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,546 INFO L280 TraceCheckUtils]: 20: Hoare triple {26376#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret69 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret69 && isHighWaterLevel_#t~ret69 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret69;havoc isHighWaterLevel_#t~ret69; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,546 INFO L280 TraceCheckUtils]: 21: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,547 INFO L280 TraceCheckUtils]: 22: Hoare triple {26376#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,547 INFO L280 TraceCheckUtils]: 23: Hoare triple {26376#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,548 INFO L280 TraceCheckUtils]: 24: Hoare triple {26376#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc activatePump_#t~ret51, activatePump_~tmp~6;havoc activatePump_~tmp~6;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret52, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,548 INFO L280 TraceCheckUtils]: 25: Hoare triple {26376#(<= ~waterLevel~0 2)} isMethaneAlarm_#t~ret52 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret52 && isMethaneAlarm_#t~ret52 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret52;havoc isMethaneAlarm_#t~ret52;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,549 INFO L280 TraceCheckUtils]: 26: Hoare triple {26376#(<= ~waterLevel~0 2)} activatePump_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret51 && activatePump_#t~ret51 <= 2147483647;activatePump_~tmp~6 := activatePump_#t~ret51;havoc activatePump_#t~ret51; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,550 INFO L280 TraceCheckUtils]: 27: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != activatePump_~tmp~6);~pumpRunning~0 := 1; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,550 INFO L280 TraceCheckUtils]: 28: Hoare triple {26376#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,551 INFO L280 TraceCheckUtils]: 29: Hoare triple {26376#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,552 INFO L280 TraceCheckUtils]: 30: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,552 INFO L280 TraceCheckUtils]: 31: Hoare triple {26376#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,553 INFO L280 TraceCheckUtils]: 32: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(2 == __utac_acc__Specification3_spec__1_~tmp___0~0); {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,554 INFO L280 TraceCheckUtils]: 33: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !false; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,555 INFO L280 TraceCheckUtils]: 34: Hoare triple {26376#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,555 INFO L280 TraceCheckUtils]: 35: Hoare triple {26376#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,556 INFO L280 TraceCheckUtils]: 36: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~9); {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,556 INFO L280 TraceCheckUtils]: 37: Hoare triple {26376#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,557 INFO L280 TraceCheckUtils]: 38: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~3); {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,558 INFO L280 TraceCheckUtils]: 39: Hoare triple {26376#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,558 INFO L280 TraceCheckUtils]: 40: Hoare triple {26376#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,559 INFO L280 TraceCheckUtils]: 41: Hoare triple {26376#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:51,560 INFO L280 TraceCheckUtils]: 42: Hoare triple {26376#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:51,560 INFO L280 TraceCheckUtils]: 43: Hoare triple {26377#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:51,561 INFO L280 TraceCheckUtils]: 44: Hoare triple {26377#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret70, isLowWaterLevel_~retValue_acc~12, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~12;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~6;havoc isLowWaterSensorDry_~retValue_acc~6;isLowWaterSensorDry_~retValue_acc~6 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~6; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:51,563 INFO L280 TraceCheckUtils]: 45: Hoare triple {26377#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret70 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret70 && isLowWaterLevel_#t~ret70 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret70;havoc isLowWaterLevel_#t~ret70; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:51,563 INFO L280 TraceCheckUtils]: 46: Hoare triple {26377#(<= ~waterLevel~0 1)} assume !(0 != isLowWaterLevel_~tmp~8);isLowWaterLevel_~tmp___0~2 := 1; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:51,564 INFO L280 TraceCheckUtils]: 47: Hoare triple {26377#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~12 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~12; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:51,565 INFO L280 TraceCheckUtils]: 48: Hoare triple {26377#(<= ~waterLevel~0 1)} processEnvironment_#t~ret50 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret50 && processEnvironment_#t~ret50 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret50;havoc processEnvironment_#t~ret50; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:51,565 INFO L280 TraceCheckUtils]: 49: Hoare triple {26377#(<= ~waterLevel~0 1)} assume 0 != processEnvironment_~tmp~5;~pumpRunning~0 := 0; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:51,566 INFO L280 TraceCheckUtils]: 50: Hoare triple {26377#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:51,566 INFO L280 TraceCheckUtils]: 51: Hoare triple {26377#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:51,567 INFO L280 TraceCheckUtils]: 52: Hoare triple {26377#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {26378#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:02:51,568 INFO L280 TraceCheckUtils]: 53: Hoare triple {26378#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {26379#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} is VALID [2020-07-28 19:02:51,568 INFO L280 TraceCheckUtils]: 54: Hoare triple {26379#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {26374#false} is VALID [2020-07-28 19:02:51,569 INFO L280 TraceCheckUtils]: 55: Hoare triple {26374#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {26374#false} is VALID [2020-07-28 19:02:51,569 INFO L280 TraceCheckUtils]: 56: Hoare triple {26374#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {26374#false} is VALID [2020-07-28 19:02:51,569 INFO L280 TraceCheckUtils]: 57: Hoare triple {26374#false} assume !false; {26374#false} is VALID [2020-07-28 19:02:51,572 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2020-07-28 19:02:51,572 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1224503288] [2020-07-28 19:02:51,573 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [251649165] [2020-07-28 19:02:51,573 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:02:51,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:51,704 INFO L263 TraceCheckSpWp]: Trace formula consists of 437 conjuncts, 7 conjunts are in the unsatisfiable core [2020-07-28 19:02:51,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:51,737 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:02:52,062 INFO L280 TraceCheckUtils]: 0: Hoare triple {26373#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string36.base, #t~string36.offset := #Ultimate.allocOnStack(13);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string38.base, #t~string38.offset, 1);call write~init~int(77, #t~string38.base, 1 + #t~string38.offset, 1);call write~init~int(101, #t~string38.base, 2 + #t~string38.offset, 1);call write~init~int(116, #t~string38.base, 3 + #t~string38.offset, 1);call write~init~int(104, #t~string38.base, 4 + #t~string38.offset, 1);call write~init~int(58, #t~string38.base, 5 + #t~string38.offset, 1);call write~init~int(0, #t~string38.base, 6 + #t~string38.offset, 1);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string40.base, #t~string40.offset, 1);call write~init~int(82, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(73, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(84, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 4 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string42.base, #t~string42.offset, 1);call write~init~int(75, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 2 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string44.base, #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 1 + #t~string44.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(13);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string56.base, #t~string56.offset, 1);call write~init~int(110, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string58.base, #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 1 + #t~string58.offset, 1);call write~init~int(102, #t~string58.base, 2 + #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 3 + #t~string58.offset, 1);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string60.base, #t~string60.offset, 1);call write~init~int(80, #t~string60.base, 1 + #t~string60.offset, 1);call write~init~int(117, #t~string60.base, 2 + #t~string60.offset, 1);call write~init~int(109, #t~string60.base, 3 + #t~string60.offset, 1);call write~init~int(112, #t~string60.base, 4 + #t~string60.offset, 1);call write~init~int(58, #t~string60.base, 5 + #t~string60.offset, 1);call write~init~int(0, #t~string60.base, 6 + #t~string60.offset, 1);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string62.base, #t~string62.offset, 1);call write~init~int(110, #t~string62.base, 1 + #t~string62.offset, 1);call write~init~int(0, #t~string62.base, 2 + #t~string62.offset, 1);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string64.base, #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 1 + #t~string64.offset, 1);call write~init~int(102, #t~string64.base, 2 + #t~string64.offset, 1);call write~init~int(0, #t~string64.base, 3 + #t~string64.offset, 1);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string66.base, #t~string66.offset, 1);call write~init~int(32, #t~string66.base, 1 + #t~string66.offset, 1);call write~init~int(0, #t~string66.base, 2 + #t~string66.offset, 1);call #t~string68.base, #t~string68.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string68.base, #t~string68.offset, 1);call write~init~int(0, #t~string68.base, 1 + #t~string68.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,063 INFO L280 TraceCheckUtils]: 1: Hoare triple {26377#(<= ~waterLevel~0 1)} havoc main_#res;havoc main_#t~ret75, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,063 INFO L280 TraceCheckUtils]: 2: Hoare triple {26377#(<= ~waterLevel~0 1)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,064 INFO L280 TraceCheckUtils]: 3: Hoare triple {26377#(<= ~waterLevel~0 1)} main_#t~ret75 := valid_product_#res;assume -2147483648 <= main_#t~ret75 && main_#t~ret75 <= 2147483647;main_~tmp~10 := main_#t~ret75;havoc main_#t~ret75; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,064 INFO L280 TraceCheckUtils]: 4: Hoare triple {26377#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~10; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,065 INFO L280 TraceCheckUtils]: 5: Hoare triple {26377#(<= ~waterLevel~0 1)} havoc test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_#t~nondet74, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,066 INFO L280 TraceCheckUtils]: 6: Hoare triple {26377#(<= ~waterLevel~0 1)} assume !false; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,066 INFO L280 TraceCheckUtils]: 7: Hoare triple {26377#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,067 INFO L280 TraceCheckUtils]: 8: Hoare triple {26377#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,067 INFO L280 TraceCheckUtils]: 9: Hoare triple {26377#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~9; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,068 INFO L280 TraceCheckUtils]: 10: Hoare triple {26377#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,069 INFO L280 TraceCheckUtils]: 11: Hoare triple {26376#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,069 INFO L280 TraceCheckUtils]: 12: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~3); {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,070 INFO L280 TraceCheckUtils]: 13: Hoare triple {26376#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,071 INFO L280 TraceCheckUtils]: 14: Hoare triple {26376#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,071 INFO L280 TraceCheckUtils]: 15: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,072 INFO L280 TraceCheckUtils]: 16: Hoare triple {26376#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,072 INFO L280 TraceCheckUtils]: 17: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,073 INFO L280 TraceCheckUtils]: 18: Hoare triple {26376#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret69, isHighWaterLevel_~retValue_acc~11, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~11;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~5;havoc isHighWaterSensorDry_~retValue_acc~5; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,073 INFO L280 TraceCheckUtils]: 19: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~5 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~5; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,074 INFO L280 TraceCheckUtils]: 20: Hoare triple {26376#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret69 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret69 && isHighWaterLevel_#t~ret69 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret69;havoc isHighWaterLevel_#t~ret69; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,075 INFO L280 TraceCheckUtils]: 21: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,075 INFO L280 TraceCheckUtils]: 22: Hoare triple {26376#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~11 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~11; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,076 INFO L280 TraceCheckUtils]: 23: Hoare triple {26376#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,076 INFO L280 TraceCheckUtils]: 24: Hoare triple {26376#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc activatePump_#t~ret51, activatePump_~tmp~6;havoc activatePump_~tmp~6;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret52, isMethaneAlarm_~retValue_acc~9;havoc isMethaneAlarm_~retValue_acc~9;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,077 INFO L280 TraceCheckUtils]: 25: Hoare triple {26376#(<= ~waterLevel~0 2)} isMethaneAlarm_#t~ret52 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret52 && isMethaneAlarm_#t~ret52 <= 2147483647;isMethaneAlarm_~retValue_acc~9 := isMethaneAlarm_#t~ret52;havoc isMethaneAlarm_#t~ret52;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~9; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,077 INFO L280 TraceCheckUtils]: 26: Hoare triple {26376#(<= ~waterLevel~0 2)} activatePump_#t~ret51 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret51 && activatePump_#t~ret51 <= 2147483647;activatePump_~tmp~6 := activatePump_#t~ret51;havoc activatePump_#t~ret51; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,078 INFO L280 TraceCheckUtils]: 27: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != activatePump_~tmp~6);~pumpRunning~0 := 1; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,079 INFO L280 TraceCheckUtils]: 28: Hoare triple {26376#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,079 INFO L280 TraceCheckUtils]: 29: Hoare triple {26376#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,080 INFO L280 TraceCheckUtils]: 30: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,080 INFO L280 TraceCheckUtils]: 31: Hoare triple {26376#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,081 INFO L280 TraceCheckUtils]: 32: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(2 == __utac_acc__Specification3_spec__1_~tmp___0~0); {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,081 INFO L280 TraceCheckUtils]: 33: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !false; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,082 INFO L280 TraceCheckUtils]: 34: Hoare triple {26376#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,082 INFO L280 TraceCheckUtils]: 35: Hoare triple {26376#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp~9 := test_#t~nondet71;havoc test_#t~nondet71; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,083 INFO L280 TraceCheckUtils]: 36: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~9); {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,084 INFO L280 TraceCheckUtils]: 37: Hoare triple {26376#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___0~3 := test_#t~nondet72;havoc test_#t~nondet72; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,084 INFO L280 TraceCheckUtils]: 38: Hoare triple {26376#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~3); {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,085 INFO L280 TraceCheckUtils]: 39: Hoare triple {26376#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet73 && test_#t~nondet73 <= 2147483647;test_~tmp___2~0 := test_#t~nondet73;havoc test_#t~nondet73; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,085 INFO L280 TraceCheckUtils]: 40: Hoare triple {26376#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,086 INFO L280 TraceCheckUtils]: 41: Hoare triple {26376#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {26376#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,087 INFO L280 TraceCheckUtils]: 42: Hoare triple {26376#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,087 INFO L280 TraceCheckUtils]: 43: Hoare triple {26377#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~5;havoc processEnvironment_~tmp~5; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,088 INFO L280 TraceCheckUtils]: 44: Hoare triple {26377#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret70, isLowWaterLevel_~retValue_acc~12, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~12;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~6;havoc isLowWaterSensorDry_~retValue_acc~6;isLowWaterSensorDry_~retValue_acc~6 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~6; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,088 INFO L280 TraceCheckUtils]: 45: Hoare triple {26377#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret70 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret70 && isLowWaterLevel_#t~ret70 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret70;havoc isLowWaterLevel_#t~ret70; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,089 INFO L280 TraceCheckUtils]: 46: Hoare triple {26377#(<= ~waterLevel~0 1)} assume !(0 != isLowWaterLevel_~tmp~8);isLowWaterLevel_~tmp___0~2 := 1; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,090 INFO L280 TraceCheckUtils]: 47: Hoare triple {26377#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~12 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~12; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,090 INFO L280 TraceCheckUtils]: 48: Hoare triple {26377#(<= ~waterLevel~0 1)} processEnvironment_#t~ret50 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret50 && processEnvironment_#t~ret50 <= 2147483647;processEnvironment_~tmp~5 := processEnvironment_#t~ret50;havoc processEnvironment_#t~ret50; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,091 INFO L280 TraceCheckUtils]: 49: Hoare triple {26377#(<= ~waterLevel~0 1)} assume 0 != processEnvironment_~tmp~5;~pumpRunning~0 := 0; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,091 INFO L280 TraceCheckUtils]: 50: Hoare triple {26377#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_~tmp~3, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~3;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~3;havoc isMethaneLevelCritical_~retValue_acc~3;isMethaneLevelCritical_~retValue_acc~3 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~3; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,092 INFO L280 TraceCheckUtils]: 51: Hoare triple {26377#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret46 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret46 && __utac_acc__Specification3_spec__1_#t~ret46 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~3 := __utac_acc__Specification3_spec__1_#t~ret46;havoc __utac_acc__Specification3_spec__1_#t~ret46; {26377#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,093 INFO L280 TraceCheckUtils]: 52: Hoare triple {26377#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~3);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~4;havoc getWaterLevel_~retValue_acc~4;getWaterLevel_~retValue_acc~4 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~4; {26378#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:02:52,094 INFO L280 TraceCheckUtils]: 53: Hoare triple {26378#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification3_spec__1_#t~ret47 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {26379#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} is VALID [2020-07-28 19:02:52,094 INFO L280 TraceCheckUtils]: 54: Hoare triple {26379#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~10;havoc isPumpRunning_~retValue_acc~10;isPumpRunning_~retValue_acc~10 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~10; {26374#false} is VALID [2020-07-28 19:02:52,094 INFO L280 TraceCheckUtils]: 55: Hoare triple {26374#false} __utac_acc__Specification3_spec__1_#t~ret48 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {26374#false} is VALID [2020-07-28 19:02:52,095 INFO L280 TraceCheckUtils]: 56: Hoare triple {26374#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {26374#false} is VALID [2020-07-28 19:02:52,095 INFO L280 TraceCheckUtils]: 57: Hoare triple {26374#false} assume !false; {26374#false} is VALID [2020-07-28 19:02:52,100 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2020-07-28 19:02:52,101 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:02:52,101 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 6 [2020-07-28 19:02:52,101 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [562418999] [2020-07-28 19:02:52,102 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 58 [2020-07-28 19:02:52,102 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:52,102 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:52,185 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:52,186 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:52,186 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:52,186 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:52,186 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:52,186 INFO L87 Difference]: Start difference. First operand 250 states and 305 transitions. Second operand 7 states. [2020-07-28 19:02:55,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:55,631 INFO L93 Difference]: Finished difference Result 863 states and 1076 transitions. [2020-07-28 19:02:55,631 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2020-07-28 19:02:55,631 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 58 [2020-07-28 19:02:55,631 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:55,631 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:55,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 387 transitions. [2020-07-28 19:02:55,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:55,637 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 387 transitions. [2020-07-28 19:02:55,637 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 387 transitions. [2020-07-28 19:02:56,089 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 387 edges. 387 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:56,089 INFO L225 Difference]: With dead ends: 863 [2020-07-28 19:02:56,090 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:02:56,091 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 58 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=59, Invalid=97, Unknown=0, NotChecked=0, Total=156 [2020-07-28 19:02:56,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:02:56,092 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:02:56,092 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:56,092 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:56,092 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:56,092 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:56,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:56,093 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:56,093 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:56,093 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:56,093 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:56,093 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:56,093 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:56,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:56,093 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:56,094 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:56,094 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:56,094 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:56,095 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:56,095 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:56,095 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:02:56,095 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:02:56,095 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 58 [2020-07-28 19:02:56,096 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:56,096 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:02:56,096 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:56,096 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:56,096 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:56,306 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2020-07-28 19:02:56,310 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:02:56,695 WARN L193 SmtUtils]: Spent 276.00 ms on a formula simplification. DAG size of input: 166 DAG size of output: 144 [2020-07-28 19:02:57,456 WARN L193 SmtUtils]: Spent 675.00 ms on a formula simplification. DAG size of input: 287 DAG size of output: 247 [2020-07-28 19:02:57,925 WARN L193 SmtUtils]: Spent 383.00 ms on a formula simplification. DAG size of input: 262 DAG size of output: 214 [2020-07-28 19:02:58,099 WARN L193 SmtUtils]: Spent 152.00 ms on a formula simplification. DAG size of input: 162 DAG size of output: 114 [2020-07-28 19:02:58,743 WARN L193 SmtUtils]: Spent 637.00 ms on a formula simplification. DAG size of input: 361 DAG size of output: 304 [2020-07-28 19:02:58,907 WARN L193 SmtUtils]: Spent 158.00 ms on a formula simplification. DAG size of input: 195 DAG size of output: 158 [2020-07-28 19:02:59,098 WARN L193 SmtUtils]: Spent 188.00 ms on a formula simplification. DAG size of input: 176 DAG size of output: 136 [2020-07-28 19:02:59,494 WARN L193 SmtUtils]: Spent 281.00 ms on a formula simplification. DAG size of input: 273 DAG size of output: 227 [2020-07-28 19:02:59,748 WARN L193 SmtUtils]: Spent 219.00 ms on a formula simplification. DAG size of input: 55 DAG size of output: 40 [2020-07-28 19:03:00,652 WARN L193 SmtUtils]: Spent 893.00 ms on a formula simplification. DAG size of input: 138 DAG size of output: 61 [2020-07-28 19:03:00,902 WARN L193 SmtUtils]: Spent 230.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 42 [2020-07-28 19:03:03,202 WARN L193 SmtUtils]: Spent 2.28 s on a formula simplification. DAG size of input: 242 DAG size of output: 28 [2020-07-28 19:03:03,478 WARN L193 SmtUtils]: Spent 266.00 ms on a formula simplification. DAG size of input: 90 DAG size of output: 21 [2020-07-28 19:03:05,399 WARN L193 SmtUtils]: Spent 1.91 s on a formula simplification. DAG size of input: 207 DAG size of output: 59 [2020-07-28 19:03:06,070 WARN L193 SmtUtils]: Spent 503.00 ms on a formula simplification. DAG size of input: 105 DAG size of output: 26 [2020-07-28 19:03:08,890 WARN L193 SmtUtils]: Spent 2.81 s on a formula simplification. DAG size of input: 292 DAG size of output: 41 [2020-07-28 19:03:10,056 WARN L193 SmtUtils]: Spent 1.13 s on a formula simplification. DAG size of input: 152 DAG size of output: 71 [2020-07-28 19:03:10,898 WARN L193 SmtUtils]: Spent 829.00 ms on a formula simplification. DAG size of input: 133 DAG size of output: 34 [2020-07-28 19:03:11,235 WARN L193 SmtUtils]: Spent 331.00 ms on a formula simplification. DAG size of input: 100 DAG size of output: 21 [2020-07-28 19:03:11,581 WARN L193 SmtUtils]: Spent 332.00 ms on a formula simplification. DAG size of input: 87 DAG size of output: 54 [2020-07-28 19:03:13,118 WARN L193 SmtUtils]: Spent 1.53 s on a formula simplification. DAG size of input: 220 DAG size of output: 76 [2020-07-28 19:03:13,127 INFO L264 CegarLoopResult]: At program point L795(lines 780 798) the Hoare annotation is: false [2020-07-28 19:03:13,128 INFO L264 CegarLoopResult]: At program point L795-1(lines 780 798) the Hoare annotation is: (let ((.cse3 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 0 ~pumpRunning~0)) (.cse1 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse4 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse5 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse6 (= 1 ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 (not .cse1) (<= ~waterLevel~0 2) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse2 (not .cse3) .cse4 .cse5 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~7) .cse6) (and (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse3 .cse0 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp~7) .cse2 .cse1 (<= ~waterLevel~0 1) .cse4 .cse5 .cse6))) [2020-07-28 19:03:13,128 INFO L264 CegarLoopResult]: At program point L795-2(lines 780 798) the Hoare annotation is: false [2020-07-28 19:03:13,128 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 595) no Hoare annotation was computed. [2020-07-28 19:03:13,128 INFO L264 CegarLoopResult]: At program point L795-3(lines 780 798) the Hoare annotation is: false [2020-07-28 19:03:13,128 INFO L264 CegarLoopResult]: At program point L795-4(lines 780 798) the Hoare annotation is: false [2020-07-28 19:03:13,128 INFO L264 CegarLoopResult]: At program point L795-5(lines 780 798) the Hoare annotation is: false [2020-07-28 19:03:13,128 INFO L268 CegarLoopResult]: For program point L432(lines 432 436) no Hoare annotation was computed. [2020-07-28 19:03:13,128 INFO L264 CegarLoopResult]: At program point L896-2(lines 896 910) the Hoare annotation is: false [2020-07-28 19:03:13,128 INFO L264 CegarLoopResult]: At program point L731(lines 724 734) the Hoare annotation is: false [2020-07-28 19:03:13,129 INFO L264 CegarLoopResult]: At program point L731-1(lines 724 734) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~4))) (.cse5 (= 0 ~methaneLevelCritical~0)) (.cse2 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse3 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse4 (= 1 ~systemActive~0)) (.cse6 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse13 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse7 (<= ~waterLevel~0 2)) (.cse8 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse9 (= 0 ~pumpRunning~0)) (.cse10 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse11 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse12 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~7))) (or (and .cse0 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 (not .cse5) .cse2 .cse3 .cse4 .cse6 (not .cse13) .cse7 .cse8 .cse9 .cse10 .cse11 .cse12))) [2020-07-28 19:03:13,129 INFO L264 CegarLoopResult]: At program point L731-2(lines 724 734) the Hoare annotation is: false [2020-07-28 19:03:13,129 INFO L264 CegarLoopResult]: At program point L731-3(lines 724 734) the Hoare annotation is: false [2020-07-28 19:03:13,129 INFO L264 CegarLoopResult]: At program point L731-4(lines 724 734) the Hoare annotation is: false [2020-07-28 19:03:13,129 INFO L268 CegarLoopResult]: For program point L566(lines 566 586) no Hoare annotation was computed. [2020-07-28 19:03:13,129 INFO L264 CegarLoopResult]: At program point L731-5(lines 724 734) the Hoare annotation is: false [2020-07-28 19:03:13,129 INFO L268 CegarLoopResult]: For program point L566-2(lines 566 586) no Hoare annotation was computed. [2020-07-28 19:03:13,129 INFO L268 CegarLoopResult]: For program point L566-4(lines 566 586) no Hoare annotation was computed. [2020-07-28 19:03:13,130 INFO L268 CegarLoopResult]: For program point L897(line 897) no Hoare annotation was computed. [2020-07-28 19:03:13,130 INFO L268 CegarLoopResult]: For program point L831(lines 830 875) no Hoare annotation was computed. [2020-07-28 19:03:13,130 INFO L268 CegarLoopResult]: For program point L832(lines 832 836) no Hoare annotation was computed. [2020-07-28 19:03:13,130 INFO L264 CegarLoopResult]: At program point L502(lines 493 506) the Hoare annotation is: false [2020-07-28 19:03:13,130 INFO L264 CegarLoopResult]: At program point L502-1(lines 493 506) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse3 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 (<= ~waterLevel~0 2) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse1 .cse2 .cse3 .cse4) (and (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse0 .cse1 (<= ~waterLevel~0 1) .cse2 .cse3 .cse4))) [2020-07-28 19:03:13,130 INFO L264 CegarLoopResult]: At program point L502-2(lines 493 506) the Hoare annotation is: false [2020-07-28 19:03:13,130 INFO L264 CegarLoopResult]: At program point L502-3(lines 493 506) the Hoare annotation is: false [2020-07-28 19:03:13,130 INFO L264 CegarLoopResult]: At program point L502-4(lines 493 506) the Hoare annotation is: false [2020-07-28 19:03:13,130 INFO L264 CegarLoopResult]: At program point L502-5(lines 493 506) the Hoare annotation is: false [2020-07-28 19:03:13,131 INFO L268 CegarLoopResult]: For program point L866(lines 866 870) no Hoare annotation was computed. [2020-07-28 19:03:13,131 INFO L268 CegarLoopResult]: For program point L866-2(lines 611 617) no Hoare annotation was computed. [2020-07-28 19:03:13,131 INFO L268 CegarLoopResult]: For program point L900(lines 900 904) no Hoare annotation was computed. [2020-07-28 19:03:13,131 INFO L268 CegarLoopResult]: For program point L900-1(lines 611 617) no Hoare annotation was computed. [2020-07-28 19:03:13,131 INFO L268 CegarLoopResult]: For program point L669(lines 669 686) no Hoare annotation was computed. [2020-07-28 19:03:13,131 INFO L268 CegarLoopResult]: For program point L669-1(lines 669 686) no Hoare annotation was computed. [2020-07-28 19:03:13,131 INFO L268 CegarLoopResult]: For program point L669-2(lines 669 686) no Hoare annotation was computed. [2020-07-28 19:03:13,131 INFO L268 CegarLoopResult]: For program point L967(lines 967 974) no Hoare annotation was computed. [2020-07-28 19:03:13,131 INFO L271 CegarLoopResult]: At program point L967-1(lines 967 974) the Hoare annotation is: true [2020-07-28 19:03:13,131 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 595) no Hoare annotation was computed. [2020-07-28 19:03:13,132 INFO L268 CegarLoopResult]: For program point L572(lines 572 585) no Hoare annotation was computed. [2020-07-28 19:03:13,132 INFO L264 CegarLoopResult]: At program point L572-1(lines 1 979) the Hoare annotation is: (let ((.cse15 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse14 (= 0 ~methaneLevelCritical~0)) (.cse12 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~3))) (let ((.cse3 (= 0 ULTIMATE.start_processEnvironment_~tmp~5)) (.cse0 (= 0 ULTIMATE.start_activatePump_~tmp~6)) (.cse16 (<= 2 ~waterLevel~0)) (.cse10 (= 1 ~pumpRunning~0)) (.cse11 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)) (.cse13 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse6 (<= ~waterLevel~0 1)) (.cse1 (not .cse12)) (.cse17 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~4))) (.cse5 (not .cse14)) (.cse18 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse19 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse9 (= 1 ~systemActive~0)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (not .cse15)) (.cse20 (<= ~waterLevel~0 2)) (.cse21 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse23 (= 0 ~pumpRunning~0)) (.cse7 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse8 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse22 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~7))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse0 .cse3 .cse11 .cse6 .cse12 .cse9 .cse13 .cse14 .cse2 .cse7 .cse8 .cse15 .cse10) (and .cse0 .cse16 .cse1 .cse17 .cse5 .cse18 .cse19 .cse9 .cse2 .cse4 .cse20 .cse21 .cse7 .cse8 .cse22 .cse10) (and .cse0 .cse16 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse17 .cse18 .cse19 .cse12 .cse9 .cse14 .cse2 .cse20 .cse21 .cse7 .cse8 .cse22 .cse15 .cse10) (and .cse14 .cse2 .cse23 .cse7 .cse8 (= 1 ~waterLevel~0) .cse9) (and .cse14 .cse2 .cse11 .cse23 .cse6 .cse7 .cse8 .cse12 .cse15 .cse9 .cse13) (and .cse1 .cse2 .cse4 .cse5 .cse23 .cse6 .cse7 .cse8 .cse9) (and .cse1 .cse17 .cse5 .cse18 .cse19 .cse9 .cse2 .cse4 .cse20 .cse21 .cse23 .cse7 .cse8 .cse22)))) [2020-07-28 19:03:13,132 INFO L268 CegarLoopResult]: For program point L572-2(lines 572 585) no Hoare annotation was computed. [2020-07-28 19:03:13,132 INFO L264 CegarLoopResult]: At program point L572-3(lines 1 979) the Hoare annotation is: false [2020-07-28 19:03:13,132 INFO L268 CegarLoopResult]: For program point L572-4(lines 572 585) no Hoare annotation was computed. [2020-07-28 19:03:13,132 INFO L264 CegarLoopResult]: At program point L572-5(lines 1 979) the Hoare annotation is: false [2020-07-28 19:03:13,132 INFO L268 CegarLoopResult]: For program point L706(lines 706 712) no Hoare annotation was computed. [2020-07-28 19:03:13,133 INFO L268 CegarLoopResult]: For program point L673(lines 673 681) no Hoare annotation was computed. [2020-07-28 19:03:13,133 INFO L268 CegarLoopResult]: For program point L706-2(lines 706 712) no Hoare annotation was computed. [2020-07-28 19:03:13,133 INFO L268 CegarLoopResult]: For program point L673-1(lines 673 681) no Hoare annotation was computed. [2020-07-28 19:03:13,133 INFO L268 CegarLoopResult]: For program point L673-2(lines 673 681) no Hoare annotation was computed. [2020-07-28 19:03:13,133 INFO L268 CegarLoopResult]: For program point L706-4(lines 706 712) no Hoare annotation was computed. [2020-07-28 19:03:13,133 INFO L268 CegarLoopResult]: For program point L706-6(lines 706 712) no Hoare annotation was computed. [2020-07-28 19:03:13,133 INFO L268 CegarLoopResult]: For program point L706-8(lines 706 712) no Hoare annotation was computed. [2020-07-28 19:03:13,133 INFO L268 CegarLoopResult]: For program point L706-10(lines 706 712) no Hoare annotation was computed. [2020-07-28 19:03:13,133 INFO L264 CegarLoopResult]: At program point L740(lines 735 743) the Hoare annotation is: (and (= 0 ULTIMATE.start_activatePump_~tmp~6) (<= 2 ~waterLevel~0) (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~4)) (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~3) (= 1 ~systemActive~0) (= 0 ~methaneLevelCritical~0) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= ~waterLevel~0 2) (= 1 |ULTIMATE.start_isPumpRunning_#res|) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~7) (= 1 ~pumpRunning~0)) [2020-07-28 19:03:13,134 INFO L264 CegarLoopResult]: At program point L740-1(lines 735 743) the Hoare annotation is: false [2020-07-28 19:03:13,134 INFO L264 CegarLoopResult]: At program point L740-2(lines 735 743) the Hoare annotation is: false [2020-07-28 19:03:13,134 INFO L264 CegarLoopResult]: At program point L542(lines 1 979) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:03:13,134 INFO L268 CegarLoopResult]: For program point L840(lines 840 846) no Hoare annotation was computed. [2020-07-28 19:03:13,134 INFO L264 CegarLoopResult]: At program point L840-1(lines 840 846) the Hoare annotation is: (let ((.cse13 (= 0 ~methaneLevelCritical~0)) (.cse17 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse16 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~3))) (let ((.cse0 (not .cse16)) (.cse1 (not .cse17)) (.cse3 (not .cse13)) (.cse15 (= 0 ~pumpRunning~0)) (.cse2 (<= ~waterLevel~0 2)) (.cse5 (<= 2 ~waterLevel~0)) (.cse11 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~4))) (.cse7 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse12 (= 1 ~waterLevel~0)) (.cse4 (= 0 ULTIMATE.start_activatePump_~tmp~6)) (.cse20 (= 0 ULTIMATE.start_processEnvironment_~tmp~5)) (.cse19 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse14 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)) (.cse9 (= 1 ~systemActive~0)) (.cse18 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse6 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse8 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse10 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 (or (and .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse4 .cse6 .cse11 .cse7 .cse8 .cse12 .cse9 .cse10))) (and .cse13 .cse6 .cse2 .cse14 .cse15 .cse7 .cse8 .cse16 .cse17 .cse9 .cse18) (and .cse13 .cse5 .cse6 .cse2 .cse15 .cse7 .cse8 .cse9) (and .cse4 .cse0 .cse6 .cse19 .cse20 .cse1 .cse3 .cse2 .cse8 .cse9 .cse10) (and .cse0 .cse6 .cse1 .cse2 .cse3 .cse15 .cse7 .cse8 .cse9) (and .cse13 .cse6 .cse15 .cse7 .cse8 .cse12 .cse9) (and .cse2 (or (and .cse4 .cse13 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse4 .cse13 .cse6 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse11 .cse7 .cse8 .cse12 .cse9 .cse10)) .cse16 .cse17) (and .cse4 .cse20 .cse19 .cse14 (<= ~waterLevel~0 1) .cse16 .cse9 .cse18 .cse13 .cse6 .cse8 .cse17 .cse10)))) [2020-07-28 19:03:13,134 INFO L268 CegarLoopResult]: For program point L576(lines 576 582) no Hoare annotation was computed. [2020-07-28 19:03:13,134 INFO L268 CegarLoopResult]: For program point L576-2(lines 576 582) no Hoare annotation was computed. [2020-07-28 19:03:13,135 INFO L268 CegarLoopResult]: For program point L444(lines 444 448) no Hoare annotation was computed. [2020-07-28 19:03:13,135 INFO L268 CegarLoopResult]: For program point L576-4(lines 576 582) no Hoare annotation was computed. [2020-07-28 19:03:13,135 INFO L268 CegarLoopResult]: For program point L808(lines 808 812) no Hoare annotation was computed. [2020-07-28 19:03:13,135 INFO L268 CegarLoopResult]: For program point L808-2(lines 808 812) no Hoare annotation was computed. [2020-07-28 19:03:13,135 INFO L268 CegarLoopResult]: For program point L808-3(lines 808 812) no Hoare annotation was computed. [2020-07-28 19:03:13,135 INFO L268 CegarLoopResult]: For program point L643(lines 643 660) no Hoare annotation was computed. [2020-07-28 19:03:13,135 INFO L268 CegarLoopResult]: For program point L808-5(lines 808 812) no Hoare annotation was computed. [2020-07-28 19:03:13,135 INFO L268 CegarLoopResult]: For program point L643-1(lines 643 660) no Hoare annotation was computed. [2020-07-28 19:03:13,135 INFO L268 CegarLoopResult]: For program point L808-6(lines 808 812) no Hoare annotation was computed. [2020-07-28 19:03:13,135 INFO L268 CegarLoopResult]: For program point L643-2(lines 643 660) no Hoare annotation was computed. [2020-07-28 19:03:13,135 INFO L268 CegarLoopResult]: For program point L643-3(lines 643 660) no Hoare annotation was computed. [2020-07-28 19:03:13,135 INFO L268 CegarLoopResult]: For program point L808-8(lines 808 812) no Hoare annotation was computed. [2020-07-28 19:03:13,136 INFO L268 CegarLoopResult]: For program point L643-4(lines 643 660) no Hoare annotation was computed. [2020-07-28 19:03:13,136 INFO L268 CegarLoopResult]: For program point L643-5(lines 643 660) no Hoare annotation was computed. [2020-07-28 19:03:13,136 INFO L264 CegarLoopResult]: At program point L611(lines 610 629) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse2 (= 1 ~systemActive~0))) (or (and (= 0 ULTIMATE.start_activatePump_~tmp~6) .cse0 (= 1 |ULTIMATE.start_valid_product_#res|) (<= ~waterLevel~0 1) .cse1 .cse2 (= 1 ~pumpRunning~0)) (and .cse0 (<= ~waterLevel~0 2) (= 0 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) .cse1 .cse2))) [2020-07-28 19:03:13,136 INFO L268 CegarLoopResult]: For program point L611-1(lines 611 617) no Hoare annotation was computed. [2020-07-28 19:03:13,136 INFO L264 CegarLoopResult]: At program point L611-2(lines 610 629) the Hoare annotation is: false [2020-07-28 19:03:13,136 INFO L264 CegarLoopResult]: At program point L512(lines 507 515) the Hoare annotation is: (and (= 0 ULTIMATE.start_activatePump_~tmp~6) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 1 |ULTIMATE.start_valid_product_#res|) (<= ~waterLevel~0 1) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 1 ~systemActive~0) (= 1 ~pumpRunning~0)) [2020-07-28 19:03:13,136 INFO L264 CegarLoopResult]: At program point L611-3(lines 610 629) the Hoare annotation is: false [2020-07-28 19:03:13,136 INFO L264 CegarLoopResult]: At program point L512-1(lines 507 515) the Hoare annotation is: false [2020-07-28 19:03:13,136 INFO L264 CegarLoopResult]: At program point L512-2(lines 507 515) the Hoare annotation is: false [2020-07-28 19:03:13,137 INFO L264 CegarLoopResult]: At program point L876(lines 829 877) the Hoare annotation is: false [2020-07-28 19:03:13,137 INFO L271 CegarLoopResult]: At program point L976(lines 957 979) the Hoare annotation is: true [2020-07-28 19:03:13,137 INFO L264 CegarLoopResult]: At program point L944(lines 940 946) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= 1 ~waterLevel~0) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 1 ~systemActive~0)) [2020-07-28 19:03:13,137 INFO L268 CegarLoopResult]: For program point L647(lines 647 655) no Hoare annotation was computed. [2020-07-28 19:03:13,137 INFO L268 CegarLoopResult]: For program point L647-1(lines 647 655) no Hoare annotation was computed. [2020-07-28 19:03:13,137 INFO L268 CegarLoopResult]: For program point L647-2(lines 647 655) no Hoare annotation was computed. [2020-07-28 19:03:13,137 INFO L268 CegarLoopResult]: For program point L647-3(lines 647 655) no Hoare annotation was computed. [2020-07-28 19:03:13,137 INFO L268 CegarLoopResult]: For program point L647-4(lines 647 655) no Hoare annotation was computed. [2020-07-28 19:03:13,137 INFO L268 CegarLoopResult]: For program point L647-5(lines 647 655) no Hoare annotation was computed. [2020-07-28 19:03:13,137 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:03:13,138 INFO L264 CegarLoopResult]: At program point L814(lines 799 817) the Hoare annotation is: (and (= 0 ULTIMATE.start_activatePump_~tmp~6) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 1 |ULTIMATE.start_valid_product_#res|) (<= ~waterLevel~0 1) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 1 ~systemActive~0) (= 1 ~pumpRunning~0)) [2020-07-28 19:03:13,138 INFO L264 CegarLoopResult]: At program point L814-1(lines 799 817) the Hoare annotation is: false [2020-07-28 19:03:13,138 INFO L264 CegarLoopResult]: At program point L814-2(lines 799 817) the Hoare annotation is: false [2020-07-28 19:03:13,138 INFO L264 CegarLoopResult]: At program point L550(lines 545 553) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:03:13,138 INFO L264 CegarLoopResult]: At program point L618(lines 618 624) the Hoare annotation is: (let ((.cse18 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse17 (= 0 ~methaneLevelCritical~0))) (let ((.cse13 (= 0 ULTIMATE.start_activatePump_~tmp~6)) (.cse16 (<= 2 ~waterLevel~0)) (.cse0 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~4))) (.cse1 (not .cse17)) (.cse2 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse3 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse6 (not .cse18)) (.cse7 (<= ~waterLevel~0 2)) (.cse8 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse12 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~7)) (.cse15 (= 1 ~pumpRunning~0)) (.cse5 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse9 (= 0 ~pumpRunning~0)) (.cse14 (<= ~waterLevel~0 1)) (.cse10 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse11 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse13 .cse5 (= 1 |ULTIMATE.start_valid_product_#res|) (= 0 ULTIMATE.start_processEnvironment_~tmp~5) .cse14 .cse11 .cse4 .cse15) (and .cse13 .cse16 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse0 .cse2 .cse3 .cse4 .cse17 .cse5 .cse7 .cse8 .cse10 .cse11 .cse18 .cse12 .cse15) (and .cse13 .cse16 .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse10 .cse11 .cse12 .cse15) (and .cse5 .cse9 .cse14 .cse10 .cse11 .cse4)))) [2020-07-28 19:03:13,138 INFO L264 CegarLoopResult]: At program point L618-1(lines 618 624) the Hoare annotation is: false [2020-07-28 19:03:13,138 INFO L264 CegarLoopResult]: At program point L618-2(lines 618 624) the Hoare annotation is: false [2020-07-28 19:03:13,139 INFO L268 CegarLoopResult]: For program point L420(lines 420 424) no Hoare annotation was computed. [2020-07-28 19:03:13,139 INFO L268 CegarLoopResult]: For program point L420-3(lines 420 424) no Hoare annotation was computed. [2020-07-28 19:03:13,139 INFO L268 CegarLoopResult]: For program point L420-6(lines 420 424) no Hoare annotation was computed. [2020-07-28 19:03:13,139 INFO L268 CegarLoopResult]: For program point L850(lines 850 856) no Hoare annotation was computed. [2020-07-28 19:03:13,139 INFO L264 CegarLoopResult]: At program point L850-1(lines 850 856) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_activatePump_~tmp~6)) (.cse4 (= 1 ~pumpRunning~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse5 (<= ~waterLevel~0 2)) (.cse6 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse2 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse3 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 (= 1 |ULTIMATE.start_valid_product_#res|) (= 0 ULTIMATE.start_processEnvironment_~tmp~5) (<= ~waterLevel~0 1) .cse2 .cse3 .cse4) (and .cse5 (or (and .cse0 (<= 2 ~waterLevel~0) .cse1 .cse6 .cse2 .cse3 .cse4) (and .cse0 .cse1 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~4)) .cse6 .cse2 (= 1 ~waterLevel~0) .cse3 .cse4))) (and .cse1 .cse5 (= 0 ~pumpRunning~0) .cse6 .cse2 .cse3))) [2020-07-28 19:03:13,139 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:03:13,139 INFO L264 CegarLoopResult]: At program point L489(lines 484 492) the Hoare annotation is: (let ((.cse2 (<= ~waterLevel~0 1)) (.cse8 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse9 (= 0 ULTIMATE.start_activatePump_~tmp~6)) (.cse5 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~3)) (.cse7 (= 1 ~systemActive~0)) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse3 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse4 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse6 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse10 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 (= 0 ~pumpRunning~0) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse0 .cse1 (= 0 ULTIMATE.start_processEnvironment_~tmp~5) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse10 .cse8) (and .cse9 (<= 2 ~waterLevel~0) (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~4)) (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)) .cse5 .cse7 .cse0 .cse1 (<= ~waterLevel~0 2) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse3 .cse4 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~7) .cse6 .cse10))) [2020-07-28 19:03:13,139 INFO L264 CegarLoopResult]: At program point L489-1(lines 484 492) the Hoare annotation is: false [2020-07-28 19:03:13,139 INFO L264 CegarLoopResult]: At program point L489-2(lines 484 492) the Hoare annotation is: false [2020-07-28 19:03:13,140 INFO L264 CegarLoopResult]: At program point L457(lines 452 460) the Hoare annotation is: false [2020-07-28 19:03:13,140 INFO L264 CegarLoopResult]: At program point L457-1(lines 452 460) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~4))) (.cse5 (= 0 ~methaneLevelCritical~0)) (.cse2 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse3 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse4 (= 1 ~systemActive~0)) (.cse6 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse12 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse7 (<= ~waterLevel~0 2)) (.cse8 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse9 (= 0 ~pumpRunning~0)) (.cse10 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse11 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse13 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~7))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 (not .cse5) .cse2 .cse3 .cse4 .cse6 (not .cse12) .cse7 .cse8 .cse9 .cse10 .cse11 .cse13))) [2020-07-28 19:03:13,140 INFO L264 CegarLoopResult]: At program point L457-2(lines 452 460) the Hoare annotation is: (let ((.cse15 (= 0 ~methaneLevelCritical~0)) (.cse16 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (let ((.cse14 (<= 2 ~waterLevel~0)) (.cse0 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~4))) (.cse2 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse3 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1))) (.cse7 (<= ~waterLevel~0 2)) (.cse8 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse12 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~7)) (.cse9 (= 0 ~pumpRunning~0)) (.cse13 (= 0 ULTIMATE.start_activatePump_~tmp~6)) (.cse5 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse18 (= 0 ULTIMATE.start_processEnvironment_~tmp~5)) (.cse6 (not .cse16)) (.cse1 (not .cse15)) (.cse19 (<= ~waterLevel~0 1)) (.cse10 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse11 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0)) (.cse17 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12) (and .cse13 .cse14 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse0 .cse2 .cse3 .cse4 .cse15 .cse5 .cse7 .cse8 .cse10 .cse11 .cse12 .cse16 .cse17) (and .cse13 .cse15 .cse5 .cse18 .cse19 .cse10 .cse11 .cse16 .cse4 .cse17) (and .cse13 .cse14 .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse10 .cse11 .cse12 .cse17) (and .cse15 .cse5 .cse9 .cse19 .cse10 .cse11 .cse16 .cse4) (and .cse5 .cse6 .cse1 .cse9 .cse19 .cse10 .cse11 .cse4) (and .cse13 .cse5 .cse18 .cse6 .cse1 .cse19 .cse10 .cse11 .cse4 .cse17)))) [2020-07-28 19:03:13,140 INFO L264 CegarLoopResult]: At program point L457-3(lines 452 460) the Hoare annotation is: false [2020-07-28 19:03:13,140 INFO L264 CegarLoopResult]: At program point L457-4(lines 452 460) the Hoare annotation is: false [2020-07-28 19:03:13,140 INFO L264 CegarLoopResult]: At program point L457-5(lines 452 460) the Hoare annotation is: false [2020-07-28 19:03:13,140 INFO L264 CegarLoopResult]: At program point L457-6(lines 452 460) the Hoare annotation is: false [2020-07-28 19:03:13,140 INFO L264 CegarLoopResult]: At program point L457-7(lines 452 460) the Hoare annotation is: false [2020-07-28 19:03:13,141 INFO L264 CegarLoopResult]: At program point L457-8(lines 452 460) the Hoare annotation is: false [2020-07-28 19:03:13,141 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:03:13,141 INFO L268 CegarLoopResult]: For program point L789(lines 789 793) no Hoare annotation was computed. [2020-07-28 19:03:13,141 INFO L268 CegarLoopResult]: For program point L789-2(lines 789 793) no Hoare annotation was computed. [2020-07-28 19:03:13,141 INFO L268 CegarLoopResult]: For program point L789-3(lines 789 793) no Hoare annotation was computed. [2020-07-28 19:03:13,141 INFO L268 CegarLoopResult]: For program point L789-5(lines 789 793) no Hoare annotation was computed. [2020-07-28 19:03:13,141 INFO L268 CegarLoopResult]: For program point L789-6(lines 789 793) no Hoare annotation was computed. [2020-07-28 19:03:13,141 INFO L268 CegarLoopResult]: For program point L789-8(lines 789 793) no Hoare annotation was computed. [2020-07-28 19:03:13,141 INFO L268 CegarLoopResult]: For program point L789-9(lines 789 793) no Hoare annotation was computed. [2020-07-28 19:03:13,141 INFO L268 CegarLoopResult]: For program point L789-11(lines 789 793) no Hoare annotation was computed. [2020-07-28 19:03:13,141 INFO L268 CegarLoopResult]: For program point L789-12(lines 789 793) no Hoare annotation was computed. [2020-07-28 19:03:13,141 INFO L268 CegarLoopResult]: For program point L789-14(lines 789 793) no Hoare annotation was computed. [2020-07-28 19:03:13,142 INFO L268 CegarLoopResult]: For program point L789-15(lines 789 793) no Hoare annotation was computed. [2020-07-28 19:03:13,142 INFO L268 CegarLoopResult]: For program point L789-17(lines 789 793) no Hoare annotation was computed. [2020-07-28 19:03:13,142 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:03:13,142 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 595) no Hoare annotation was computed. [2020-07-28 19:03:13,142 INFO L268 CegarLoopResult]: For program point L595(line 595) no Hoare annotation was computed. [2020-07-28 19:03:13,142 INFO L268 CegarLoopResult]: For program point L595-1(line 595) no Hoare annotation was computed. [2020-07-28 19:03:13,142 INFO L268 CegarLoopResult]: For program point L595-2(line 595) no Hoare annotation was computed. [2020-07-28 19:03:13,142 INFO L268 CegarLoopResult]: For program point L860(lines 860 871) no Hoare annotation was computed. [2020-07-28 19:03:13,142 INFO L268 CegarLoopResult]: For program point L497(lines 497 503) no Hoare annotation was computed. [2020-07-28 19:03:13,142 INFO L268 CegarLoopResult]: For program point L497-1(lines 497 503) no Hoare annotation was computed. [2020-07-28 19:03:13,142 INFO L268 CegarLoopResult]: For program point L497-2(lines 497 503) no Hoare annotation was computed. [2020-07-28 19:03:13,142 INFO L268 CegarLoopResult]: For program point L497-3(lines 497 503) no Hoare annotation was computed. [2020-07-28 19:03:13,143 INFO L268 CegarLoopResult]: For program point L497-4(lines 497 503) no Hoare annotation was computed. [2020-07-28 19:03:13,143 INFO L268 CegarLoopResult]: For program point L497-5(lines 497 503) no Hoare annotation was computed. [2020-07-28 19:03:13,146 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:03:13,146 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:03:13,147 WARN L170 areAnnotationChecker]: L967 has no Hoare annotation [2020-07-28 19:03:13,147 WARN L170 areAnnotationChecker]: L967 has no Hoare annotation [2020-07-28 19:03:13,147 WARN L170 areAnnotationChecker]: L967 has no Hoare annotation [2020-07-28 19:03:13,149 WARN L170 areAnnotationChecker]: L831 has no Hoare annotation [2020-07-28 19:03:13,149 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:03:13,149 WARN L170 areAnnotationChecker]: L611-1 has no Hoare annotation [2020-07-28 19:03:13,149 WARN L170 areAnnotationChecker]: L831 has no Hoare annotation [2020-07-28 19:03:13,149 WARN L170 areAnnotationChecker]: L831 has no Hoare annotation [2020-07-28 19:03:13,150 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:03:13,150 WARN L170 areAnnotationChecker]: L611-1 has no Hoare annotation [2020-07-28 19:03:13,150 WARN L170 areAnnotationChecker]: L611-1 has no Hoare annotation [2020-07-28 19:03:13,150 WARN L170 areAnnotationChecker]: L832 has no Hoare annotation [2020-07-28 19:03:13,150 WARN L170 areAnnotationChecker]: L420-3 has no Hoare annotation [2020-07-28 19:03:13,150 WARN L170 areAnnotationChecker]: L420-3 has no Hoare annotation [2020-07-28 19:03:13,150 WARN L170 areAnnotationChecker]: L669-1 has no Hoare annotation [2020-07-28 19:03:13,150 WARN L170 areAnnotationChecker]: L840 has no Hoare annotation [2020-07-28 19:03:13,150 WARN L170 areAnnotationChecker]: L840 has no Hoare annotation [2020-07-28 19:03:13,150 WARN L170 areAnnotationChecker]: L669-1 has no Hoare annotation [2020-07-28 19:03:13,150 WARN L170 areAnnotationChecker]: L669-1 has no Hoare annotation [2020-07-28 19:03:13,150 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2020-07-28 19:03:13,151 WARN L170 areAnnotationChecker]: L432 has no Hoare annotation [2020-07-28 19:03:13,151 WARN L170 areAnnotationChecker]: L850 has no Hoare annotation [2020-07-28 19:03:13,151 WARN L170 areAnnotationChecker]: L808-3 has no Hoare annotation [2020-07-28 19:03:13,151 WARN L170 areAnnotationChecker]: L643-3 has no Hoare annotation [2020-07-28 19:03:13,151 WARN L170 areAnnotationChecker]: L643-3 has no Hoare annotation [2020-07-28 19:03:13,151 WARN L170 areAnnotationChecker]: L566-2 has no Hoare annotation [2020-07-28 19:03:13,151 WARN L170 areAnnotationChecker]: L850 has no Hoare annotation [2020-07-28 19:03:13,151 WARN L170 areAnnotationChecker]: L850 has no Hoare annotation [2020-07-28 19:03:13,151 WARN L170 areAnnotationChecker]: L808-3 has no Hoare annotation [2020-07-28 19:03:13,151 WARN L170 areAnnotationChecker]: L808-3 has no Hoare annotation [2020-07-28 19:03:13,151 WARN L170 areAnnotationChecker]: L497-3 has no Hoare annotation [2020-07-28 19:03:13,151 WARN L170 areAnnotationChecker]: L497-3 has no Hoare annotation [2020-07-28 19:03:13,152 WARN L170 areAnnotationChecker]: L566-2 has no Hoare annotation [2020-07-28 19:03:13,152 WARN L170 areAnnotationChecker]: L566-2 has no Hoare annotation [2020-07-28 19:03:13,152 WARN L170 areAnnotationChecker]: L444 has no Hoare annotation [2020-07-28 19:03:13,152 WARN L170 areAnnotationChecker]: L444 has no Hoare annotation [2020-07-28 19:03:13,152 WARN L170 areAnnotationChecker]: L860 has no Hoare annotation [2020-07-28 19:03:13,152 WARN L170 areAnnotationChecker]: L808-5 has no Hoare annotation [2020-07-28 19:03:13,152 WARN L170 areAnnotationChecker]: L789-9 has no Hoare annotation [2020-07-28 19:03:13,152 WARN L170 areAnnotationChecker]: L572-2 has no Hoare annotation [2020-07-28 19:03:13,152 WARN L170 areAnnotationChecker]: L860 has no Hoare annotation [2020-07-28 19:03:13,152 WARN L170 areAnnotationChecker]: L860 has no Hoare annotation [2020-07-28 19:03:13,152 WARN L170 areAnnotationChecker]: L673-1 has no Hoare annotation [2020-07-28 19:03:13,152 WARN L170 areAnnotationChecker]: L789-9 has no Hoare annotation [2020-07-28 19:03:13,153 WARN L170 areAnnotationChecker]: L789-9 has no Hoare annotation [2020-07-28 19:03:13,153 WARN L170 areAnnotationChecker]: L897 has no Hoare annotation [2020-07-28 19:03:13,153 WARN L170 areAnnotationChecker]: L572-2 has no Hoare annotation [2020-07-28 19:03:13,153 WARN L170 areAnnotationChecker]: L572-2 has no Hoare annotation [2020-07-28 19:03:13,153 WARN L170 areAnnotationChecker]: L866-2 has no Hoare annotation [2020-07-28 19:03:13,153 WARN L170 areAnnotationChecker]: L866-2 has no Hoare annotation [2020-07-28 19:03:13,153 WARN L170 areAnnotationChecker]: L866 has no Hoare annotation [2020-07-28 19:03:13,153 WARN L170 areAnnotationChecker]: L866 has no Hoare annotation [2020-07-28 19:03:13,153 WARN L170 areAnnotationChecker]: L673-1 has no Hoare annotation [2020-07-28 19:03:13,153 WARN L170 areAnnotationChecker]: L673-1 has no Hoare annotation [2020-07-28 19:03:13,153 WARN L170 areAnnotationChecker]: L789-11 has no Hoare annotation [2020-07-28 19:03:13,153 WARN L170 areAnnotationChecker]: L897 has no Hoare annotation [2020-07-28 19:03:13,154 WARN L170 areAnnotationChecker]: L576-2 has no Hoare annotation [2020-07-28 19:03:13,154 WARN L170 areAnnotationChecker]: L420 has no Hoare annotation [2020-07-28 19:03:13,154 WARN L170 areAnnotationChecker]: L420 has no Hoare annotation [2020-07-28 19:03:13,154 WARN L170 areAnnotationChecker]: L669 has no Hoare annotation [2020-07-28 19:03:13,155 WARN L170 areAnnotationChecker]: L643-2 has no Hoare annotation [2020-07-28 19:03:13,155 WARN L170 areAnnotationChecker]: L643-2 has no Hoare annotation [2020-07-28 19:03:13,155 WARN L170 areAnnotationChecker]: L647-3 has no Hoare annotation [2020-07-28 19:03:13,155 WARN L170 areAnnotationChecker]: L900 has no Hoare annotation [2020-07-28 19:03:13,156 WARN L170 areAnnotationChecker]: L900 has no Hoare annotation [2020-07-28 19:03:13,156 WARN L170 areAnnotationChecker]: L576-2 has no Hoare annotation [2020-07-28 19:03:13,156 WARN L170 areAnnotationChecker]: L576-2 has no Hoare annotation [2020-07-28 19:03:13,156 WARN L170 areAnnotationChecker]: L669 has no Hoare annotation [2020-07-28 19:03:13,156 WARN L170 areAnnotationChecker]: L669 has no Hoare annotation [2020-07-28 19:03:13,158 WARN L170 areAnnotationChecker]: L497-2 has no Hoare annotation [2020-07-28 19:03:13,158 WARN L170 areAnnotationChecker]: L497-2 has no Hoare annotation [2020-07-28 19:03:13,158 WARN L170 areAnnotationChecker]: L647-3 has no Hoare annotation [2020-07-28 19:03:13,158 WARN L170 areAnnotationChecker]: L647-3 has no Hoare annotation [2020-07-28 19:03:13,158 WARN L170 areAnnotationChecker]: L900-1 has no Hoare annotation [2020-07-28 19:03:13,158 WARN L170 areAnnotationChecker]: L900-1 has no Hoare annotation [2020-07-28 19:03:13,158 WARN L170 areAnnotationChecker]: L595-1 has no Hoare annotation [2020-07-28 19:03:13,158 WARN L170 areAnnotationChecker]: L595-1 has no Hoare annotation [2020-07-28 19:03:13,158 WARN L170 areAnnotationChecker]: L808 has no Hoare annotation [2020-07-28 19:03:13,158 WARN L170 areAnnotationChecker]: L643-1 has no Hoare annotation [2020-07-28 19:03:13,159 WARN L170 areAnnotationChecker]: L643-1 has no Hoare annotation [2020-07-28 19:03:13,159 WARN L170 areAnnotationChecker]: L566 has no Hoare annotation [2020-07-28 19:03:13,159 WARN L170 areAnnotationChecker]: L789-6 has no Hoare annotation [2020-07-28 19:03:13,159 WARN L170 areAnnotationChecker]: L420-6 has no Hoare annotation [2020-07-28 19:03:13,159 WARN L170 areAnnotationChecker]: L420-6 has no Hoare annotation [2020-07-28 19:03:13,159 WARN L170 areAnnotationChecker]: L669-2 has no Hoare annotation [2020-07-28 19:03:13,159 WARN L170 areAnnotationChecker]: L808 has no Hoare annotation [2020-07-28 19:03:13,159 WARN L170 areAnnotationChecker]: L808 has no Hoare annotation [2020-07-28 19:03:13,159 WARN L170 areAnnotationChecker]: L497-1 has no Hoare annotation [2020-07-28 19:03:13,159 WARN L170 areAnnotationChecker]: L497-1 has no Hoare annotation [2020-07-28 19:03:13,159 WARN L170 areAnnotationChecker]: L566 has no Hoare annotation [2020-07-28 19:03:13,159 WARN L170 areAnnotationChecker]: L566 has no Hoare annotation [2020-07-28 19:03:13,159 WARN L170 areAnnotationChecker]: L789-6 has no Hoare annotation [2020-07-28 19:03:13,160 WARN L170 areAnnotationChecker]: L789-6 has no Hoare annotation [2020-07-28 19:03:13,160 WARN L170 areAnnotationChecker]: L706-6 has no Hoare annotation [2020-07-28 19:03:13,160 WARN L170 areAnnotationChecker]: L669-2 has no Hoare annotation [2020-07-28 19:03:13,160 WARN L170 areAnnotationChecker]: L669-2 has no Hoare annotation [2020-07-28 19:03:13,160 WARN L170 areAnnotationChecker]: L808-2 has no Hoare annotation [2020-07-28 19:03:13,160 WARN L170 areAnnotationChecker]: L789-3 has no Hoare annotation [2020-07-28 19:03:13,160 WARN L170 areAnnotationChecker]: L572 has no Hoare annotation [2020-07-28 19:03:13,160 WARN L170 areAnnotationChecker]: L789-8 has no Hoare annotation [2020-07-28 19:03:13,160 WARN L170 areAnnotationChecker]: L706-6 has no Hoare annotation [2020-07-28 19:03:13,160 WARN L170 areAnnotationChecker]: L706-6 has no Hoare annotation [2020-07-28 19:03:13,160 WARN L170 areAnnotationChecker]: L808-6 has no Hoare annotation [2020-07-28 19:03:13,160 WARN L170 areAnnotationChecker]: L643-5 has no Hoare annotation [2020-07-28 19:03:13,161 WARN L170 areAnnotationChecker]: L643-5 has no Hoare annotation [2020-07-28 19:03:13,161 WARN L170 areAnnotationChecker]: L566-4 has no Hoare annotation [2020-07-28 19:03:13,161 WARN L170 areAnnotationChecker]: L673 has no Hoare annotation [2020-07-28 19:03:13,161 WARN L170 areAnnotationChecker]: L789-3 has no Hoare annotation [2020-07-28 19:03:13,161 WARN L170 areAnnotationChecker]: L789-3 has no Hoare annotation [2020-07-28 19:03:13,161 WARN L170 areAnnotationChecker]: L572 has no Hoare annotation [2020-07-28 19:03:13,161 WARN L170 areAnnotationChecker]: L572 has no Hoare annotation [2020-07-28 19:03:13,161 WARN L170 areAnnotationChecker]: L647-2 has no Hoare annotation [2020-07-28 19:03:13,161 WARN L170 areAnnotationChecker]: L808-6 has no Hoare annotation [2020-07-28 19:03:13,161 WARN L170 areAnnotationChecker]: L808-6 has no Hoare annotation [2020-07-28 19:03:13,161 WARN L170 areAnnotationChecker]: L497-5 has no Hoare annotation [2020-07-28 19:03:13,161 WARN L170 areAnnotationChecker]: L497-5 has no Hoare annotation [2020-07-28 19:03:13,162 WARN L170 areAnnotationChecker]: L566-4 has no Hoare annotation [2020-07-28 19:03:13,162 WARN L170 areAnnotationChecker]: L566-4 has no Hoare annotation [2020-07-28 19:03:13,162 WARN L170 areAnnotationChecker]: L673 has no Hoare annotation [2020-07-28 19:03:13,162 WARN L170 areAnnotationChecker]: L673 has no Hoare annotation [2020-07-28 19:03:13,162 WARN L170 areAnnotationChecker]: L789-5 has no Hoare annotation [2020-07-28 19:03:13,162 WARN L170 areAnnotationChecker]: L576 has no Hoare annotation [2020-07-28 19:03:13,162 WARN L170 areAnnotationChecker]: L647-2 has no Hoare annotation [2020-07-28 19:03:13,162 WARN L170 areAnnotationChecker]: L647-2 has no Hoare annotation [2020-07-28 19:03:13,162 WARN L170 areAnnotationChecker]: L808-8 has no Hoare annotation [2020-07-28 19:03:13,162 WARN L170 areAnnotationChecker]: L789-15 has no Hoare annotation [2020-07-28 19:03:13,162 WARN L170 areAnnotationChecker]: L572-4 has no Hoare annotation [2020-07-28 19:03:13,162 WARN L170 areAnnotationChecker]: L643 has no Hoare annotation [2020-07-28 19:03:13,163 WARN L170 areAnnotationChecker]: L643 has no Hoare annotation [2020-07-28 19:03:13,163 WARN L170 areAnnotationChecker]: L647-1 has no Hoare annotation [2020-07-28 19:03:13,163 WARN L170 areAnnotationChecker]: L576 has no Hoare annotation [2020-07-28 19:03:13,163 WARN L170 areAnnotationChecker]: L576 has no Hoare annotation [2020-07-28 19:03:13,163 WARN L170 areAnnotationChecker]: L673-2 has no Hoare annotation [2020-07-28 19:03:13,163 WARN L170 areAnnotationChecker]: L789-15 has no Hoare annotation [2020-07-28 19:03:13,163 WARN L170 areAnnotationChecker]: L789-15 has no Hoare annotation [2020-07-28 19:03:13,163 WARN L170 areAnnotationChecker]: L572-4 has no Hoare annotation [2020-07-28 19:03:13,163 WARN L170 areAnnotationChecker]: L572-4 has no Hoare annotation [2020-07-28 19:03:13,163 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2020-07-28 19:03:13,163 WARN L170 areAnnotationChecker]: L497 has no Hoare annotation [2020-07-28 19:03:13,163 WARN L170 areAnnotationChecker]: L647-1 has no Hoare annotation [2020-07-28 19:03:13,163 WARN L170 areAnnotationChecker]: L647-1 has no Hoare annotation [2020-07-28 19:03:13,164 WARN L170 areAnnotationChecker]: L595 has no Hoare annotation [2020-07-28 19:03:13,164 WARN L170 areAnnotationChecker]: L595 has no Hoare annotation [2020-07-28 19:03:13,164 WARN L170 areAnnotationChecker]: L706-4 has no Hoare annotation [2020-07-28 19:03:13,164 WARN L170 areAnnotationChecker]: L673-2 has no Hoare annotation [2020-07-28 19:03:13,164 WARN L170 areAnnotationChecker]: L673-2 has no Hoare annotation [2020-07-28 19:03:13,164 WARN L170 areAnnotationChecker]: L789-17 has no Hoare annotation [2020-07-28 19:03:13,164 WARN L170 areAnnotationChecker]: L576-4 has no Hoare annotation [2020-07-28 19:03:13,164 WARN L170 areAnnotationChecker]: L789 has no Hoare annotation [2020-07-28 19:03:13,165 WARN L170 areAnnotationChecker]: L706-4 has no Hoare annotation [2020-07-28 19:03:13,165 WARN L170 areAnnotationChecker]: L706-4 has no Hoare annotation [2020-07-28 19:03:13,165 WARN L170 areAnnotationChecker]: L643-4 has no Hoare annotation [2020-07-28 19:03:13,166 WARN L170 areAnnotationChecker]: L643-4 has no Hoare annotation [2020-07-28 19:03:13,166 WARN L170 areAnnotationChecker]: L647-5 has no Hoare annotation [2020-07-28 19:03:13,166 WARN L170 areAnnotationChecker]: L576-4 has no Hoare annotation [2020-07-28 19:03:13,166 WARN L170 areAnnotationChecker]: L576-4 has no Hoare annotation [2020-07-28 19:03:13,166 WARN L170 areAnnotationChecker]: L789 has no Hoare annotation [2020-07-28 19:03:13,166 WARN L170 areAnnotationChecker]: L789 has no Hoare annotation [2020-07-28 19:03:13,166 WARN L170 areAnnotationChecker]: L706-2 has no Hoare annotation [2020-07-28 19:03:13,166 WARN L170 areAnnotationChecker]: L497-4 has no Hoare annotation [2020-07-28 19:03:13,166 WARN L170 areAnnotationChecker]: L497-4 has no Hoare annotation [2020-07-28 19:03:13,166 WARN L170 areAnnotationChecker]: L647-5 has no Hoare annotation [2020-07-28 19:03:13,166 WARN L170 areAnnotationChecker]: L647-5 has no Hoare annotation [2020-07-28 19:03:13,166 WARN L170 areAnnotationChecker]: L595-2 has no Hoare annotation [2020-07-28 19:03:13,167 WARN L170 areAnnotationChecker]: L595-2 has no Hoare annotation [2020-07-28 19:03:13,167 WARN L170 areAnnotationChecker]: L789-2 has no Hoare annotation [2020-07-28 19:03:13,167 WARN L170 areAnnotationChecker]: L706-2 has no Hoare annotation [2020-07-28 19:03:13,167 WARN L170 areAnnotationChecker]: L706-2 has no Hoare annotation [2020-07-28 19:03:13,167 WARN L170 areAnnotationChecker]: L789-12 has no Hoare annotation [2020-07-28 19:03:13,167 WARN L170 areAnnotationChecker]: L647 has no Hoare annotation [2020-07-28 19:03:13,167 WARN L170 areAnnotationChecker]: L789-12 has no Hoare annotation [2020-07-28 19:03:13,167 WARN L170 areAnnotationChecker]: L789-12 has no Hoare annotation [2020-07-28 19:03:13,167 WARN L170 areAnnotationChecker]: L706-10 has no Hoare annotation [2020-07-28 19:03:13,167 WARN L170 areAnnotationChecker]: L647 has no Hoare annotation [2020-07-28 19:03:13,167 WARN L170 areAnnotationChecker]: L647 has no Hoare annotation [2020-07-28 19:03:13,167 WARN L170 areAnnotationChecker]: L789-14 has no Hoare annotation [2020-07-28 19:03:13,167 WARN L170 areAnnotationChecker]: L706-10 has no Hoare annotation [2020-07-28 19:03:13,168 WARN L170 areAnnotationChecker]: L706-10 has no Hoare annotation [2020-07-28 19:03:13,168 WARN L170 areAnnotationChecker]: L647-4 has no Hoare annotation [2020-07-28 19:03:13,168 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2020-07-28 19:03:13,168 WARN L170 areAnnotationChecker]: L647-4 has no Hoare annotation [2020-07-28 19:03:13,168 WARN L170 areAnnotationChecker]: L647-4 has no Hoare annotation [2020-07-28 19:03:13,168 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2020-07-28 19:03:13,168 WARN L170 areAnnotationChecker]: L706 has no Hoare annotation [2020-07-28 19:03:13,168 WARN L170 areAnnotationChecker]: L706-8 has no Hoare annotation [2020-07-28 19:03:13,168 WARN L170 areAnnotationChecker]: L706-8 has no Hoare annotation [2020-07-28 19:03:13,168 WARN L170 areAnnotationChecker]: L706-8 has no Hoare annotation [2020-07-28 19:03:13,168 INFO L163 areAnnotationChecker]: CFG has 21 edges. 21 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:03:13,224 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:03:13 BoogieIcfgContainer [2020-07-28 19:03:13,225 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:03:13,225 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:03:13,225 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:03:13,226 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:03:13,226 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:02:12" (3/4) ... [2020-07-28 19:03:13,230 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:03:13,252 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:03:13,253 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:03:13,255 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:03:13,256 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:03:13,257 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:03:13,259 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:03:13,260 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:03:13,292 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == methaneLevelCritical && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && 1 == systemActive [2020-07-28 19:03:13,292 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == methaneLevelCritical && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && 1 == systemActive [2020-07-28 19:03:13,293 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((0 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == methaneLevelCritical)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning) || ((((((((((((0 == tmp && 0 == tmp) && tmp___0 <= 1) && waterLevel <= 1) && 0 == tmp) && 1 == systemActive) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 1 == pumpRunning)) || (((((((((((((((0 == tmp && 2 <= waterLevel) && !(0 == tmp)) && !(0 == tmp)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || ((((((((((((((((0 == tmp && 2 <= waterLevel) && 0 == \result) && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 0 == tmp) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && tmp___0 <= 1) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1)) || ((((((((!(0 == tmp) && 0 == splverifierCounter) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((((((((!(0 == tmp) && !(0 == tmp)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) [2020-07-28 19:03:13,293 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((!(0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == methaneLevelCritical)) && (((((((0 == tmp && 2 <= waterLevel) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning) || (((((((0 == tmp && 0 == splverifierCounter) && !(0 == tmp)) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive) && 1 == pumpRunning))) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && tmp___0 <= 1) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1)) || (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || ((((((((((0 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && 1 == \result) && 0 == tmp) && !(0 == \result)) && !(0 == methaneLevelCritical)) && waterLevel <= 2) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning)) || ((((((((!(0 == tmp) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive)) || (((waterLevel <= 2 && ((((((((0 == tmp && 0 == methaneLevelCritical) && 2 <= waterLevel) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning) || (((((((((0 == tmp && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == \result) && !(0 == tmp)) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive) && 1 == pumpRunning))) && 0 == tmp) && 0 == \result)) || ((((((((((((0 == tmp && 0 == tmp) && 1 == \result) && tmp___0 <= 1) && waterLevel <= 1) && 0 == tmp) && 1 == systemActive) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && tmp == systemActive) && 0 == \result) && 1 == pumpRunning) [2020-07-28 19:03:13,294 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == tmp) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning) || (waterLevel <= 2 && (((((((0 == tmp && 2 <= waterLevel) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning) || (((((((0 == tmp && 0 == splverifierCounter) && !(0 == tmp)) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive) && 1 == pumpRunning)))) || (((((0 == splverifierCounter && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:03:13,295 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning) || (((((0 == splverifierCounter && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:03:13,295 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((!(0 == tmp) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) || (((((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == tmp) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning)) || (((((((((((((((0 == tmp && 2 <= waterLevel) && 0 == \result) && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 0 == tmp) && 1 == pumpRunning)) || ((((((((((((((0 == tmp && 2 <= waterLevel) && !(0 == tmp)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || (((((0 == splverifierCounter && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:03:13,296 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((((((!(0 == tmp) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) || (((((((((((((((0 == tmp && 2 <= waterLevel) && 0 == \result) && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || (((((((((0 == tmp && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 1 == systemActive) && 1 == pumpRunning)) || ((((((((((((((0 == tmp && 2 <= waterLevel) && !(0 == tmp)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 1 == systemActive)) || (((((((0 == splverifierCounter && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((((0 == tmp && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == methaneLevelCritical)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning) [2020-07-28 19:03:13,297 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning [2020-07-28 19:03:13,298 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || ((((((1 == \result && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:03:13,299 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1) || (((((((((((0 == tmp && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == systemActive) && 1 == pumpRunning) && \result <= 1)) || ((((((((((((((((0 == tmp && 2 <= waterLevel) && 0 == \result) && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 0 == tmp) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) [2020-07-28 19:03:13,299 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning [2020-07-28 19:03:13,300 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && !(0 == tmp___0)) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) || (((((((((1 == \result && 0 == tmp___0) && 0 == splverifierCounter) && 1 == tmp) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:03:13,301 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((0 == tmp && 2 <= waterLevel) && 0 == \result) && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 0 == tmp) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 1 == \result) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 0 == tmp) && 1 == pumpRunning [2020-07-28 19:03:13,303 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 0 == tmp) || (((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) [2020-07-28 19:03:13,303 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((2 <= waterLevel && 0 == \result) && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) || (((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) [2020-07-28 19:03:13,395 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:03:13,395 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:03:13,397 INFO L168 Benchmark]: Toolchain (without parser) took 63460.18 ms. Allocated memory was 1.0 GB in the beginning and 1.9 GB in the end (delta: 850.9 MB). Free memory was 954.9 MB in the beginning and 1.3 GB in the end (delta: -354.3 MB). Peak memory consumption was 496.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:13,398 INFO L168 Benchmark]: CDTParser took 0.71 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:03:13,398 INFO L168 Benchmark]: CACSL2BoogieTranslator took 669.65 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 137.9 MB). Free memory was 954.9 MB in the beginning and 1.1 GB in the end (delta: -151.2 MB). Peak memory consumption was 25.9 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:13,399 INFO L168 Benchmark]: Boogie Procedure Inliner took 133.10 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:13,399 INFO L168 Benchmark]: Boogie Preprocessor took 74.27 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:03:13,399 INFO L168 Benchmark]: RCFGBuilder took 1872.82 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 901.1 MB in the end (delta: 198.3 MB). Peak memory consumption was 198.3 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:13,400 INFO L168 Benchmark]: TraceAbstraction took 60530.84 ms. Allocated memory was 1.2 GB in the beginning and 1.9 GB in the end (delta: 713.0 MB). Free memory was 901.1 MB in the beginning and 1.3 GB in the end (delta: -428.7 MB). Peak memory consumption was 284.4 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:13,400 INFO L168 Benchmark]: Witness Printer took 169.94 ms. Allocated memory is still 1.9 GB. Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: 20.7 MB). Peak memory consumption was 20.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:13,402 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.71 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 669.65 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 137.9 MB). Free memory was 954.9 MB in the beginning and 1.1 GB in the end (delta: -151.2 MB). Peak memory consumption was 25.9 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 133.10 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 74.27 ms. Allocated memory is still 1.2 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 1872.82 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 901.1 MB in the end (delta: 198.3 MB). Peak memory consumption was 198.3 MB. Max. memory is 11.5 GB. * TraceAbstraction took 60530.84 ms. Allocated memory was 1.2 GB in the beginning and 1.9 GB in the end (delta: 713.0 MB). Free memory was 901.1 MB in the beginning and 1.3 GB in the end (delta: -428.7 MB). Peak memory consumption was 284.4 MB. Max. memory is 11.5 GB. * Witness Printer took 169.94 ms. Allocated memory is still 1.9 GB. Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: 20.7 MB). Peak memory consumption was 20.7 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 595]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 595]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 595]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 452]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 724]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 452]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 724]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 452]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 724]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 452]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 724]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 618]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 452]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 618]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 452]: Loop Invariant Derived loop invariant: (((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 0 == tmp) || (((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) - InvariantResult [Line: 452]: Loop Invariant Derived loop invariant: (((((((((((((((((!(0 == tmp) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) || (((((((((((((((0 == tmp && 2 <= waterLevel) && 0 == \result) && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || (((((((((0 == tmp && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 1 == systemActive) && 1 == pumpRunning)) || ((((((((((((((0 == tmp && 2 <= waterLevel) && !(0 == tmp)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 1 == systemActive)) || (((((((0 == splverifierCounter && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((((0 == tmp && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == methaneLevelCritical)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning) - InvariantResult [Line: 452]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 724]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 957]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 452]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 724]: Loop Invariant Derived loop invariant: ((((((((((((((2 <= waterLevel && 0 == \result) && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) || (((((((((((((2 <= waterLevel && !(0 == tmp)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) - InvariantResult [Line: 610]: Loop Invariant Derived loop invariant: ((((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning) || (((((0 == splverifierCounter && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 610]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: (((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning - InvariantResult [Line: 610]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 618]: Loop Invariant Derived loop invariant: (((((((((((((((!(0 == tmp) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) || (((((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == tmp) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning)) || (((((((((((((((0 == tmp && 2 <= waterLevel) && 0 == \result) && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 0 == tmp) && 1 == pumpRunning)) || ((((((((((((((0 == tmp && 2 <= waterLevel) && !(0 == tmp)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || (((((0 == splverifierCounter && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 507]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 940]: Loop Invariant Derived loop invariant: ((((0 == methaneLevelCritical && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && 1 == systemActive - InvariantResult [Line: 735]: Loop Invariant Derived loop invariant: ((((((((((((((((0 == tmp && 2 <= waterLevel) && 0 == \result) && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 0 == tmp) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 1 == \result) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 0 == tmp) && 1 == pumpRunning - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 780]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 735]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 780]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 735]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 780]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 780]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 493]: Loop Invariant Derived loop invariant: (((((((2 <= waterLevel && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || ((((((1 == \result && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 850]: Loop Invariant Derived loop invariant: ((((((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && 0 == tmp) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning) || (waterLevel <= 2 && (((((((0 == tmp && 2 <= waterLevel) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning) || (((((((0 == tmp && 0 == splverifierCounter) && !(0 == tmp)) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive) && 1 == pumpRunning)))) || (((((0 == splverifierCounter && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 545]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 967]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 780]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((((0 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && !(0 == methaneLevelCritical)) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning) || ((((((((((((0 == tmp && 0 == tmp) && tmp___0 <= 1) && waterLevel <= 1) && 0 == tmp) && 1 == systemActive) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 0 == \result) && 1 == pumpRunning)) || (((((((((((((((0 == tmp && 2 <= waterLevel) && !(0 == tmp)) && !(0 == tmp)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == pumpRunning)) || ((((((((((((((((0 == tmp && 2 <= waterLevel) && 0 == \result) && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 0 == tmp) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && tmp___0 <= 1) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1)) || ((((((((!(0 == tmp) && 0 == splverifierCounter) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || (((((((((((((!(0 == tmp) && !(0 == tmp)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp___0)) && 1 == systemActive) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) - InvariantResult [Line: 780]: Loop Invariant Derived loop invariant: ((((((((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && !(0 == tmp___0)) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 1 == systemActive) || (((((((((1 == \result && 0 == tmp___0) && 0 == splverifierCounter) && 1 == tmp) && 0 == pumpRunning) && 0 == \result) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 799]: Loop Invariant Derived loop invariant: (((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && waterLevel <= 1) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning - InvariantResult [Line: 799]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 829]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 799]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1) || (((((((((((0 == tmp && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 1) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == systemActive) && 1 == pumpRunning) && \result <= 1)) || ((((((((((((((((0 == tmp && 2 <= waterLevel) && 0 == \result) && !(0 == tmp)) && !(0 == \result)) && !(0 == tmp___0)) && 0 == tmp) && 1 == systemActive) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == \result) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == pumpRunning) - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 840]: Loop Invariant Derived loop invariant: ((((((((((!(0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == methaneLevelCritical)) && (((((((0 == tmp && 2 <= waterLevel) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning) || (((((((0 == tmp && 0 == splverifierCounter) && !(0 == tmp)) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive) && 1 == pumpRunning))) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && waterLevel <= 2) && tmp___0 <= 1) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 0 == tmp) && 0 == \result) && 1 == systemActive) && \result <= 1)) || (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || ((((((((((0 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && 1 == \result) && 0 == tmp) && !(0 == \result)) && !(0 == methaneLevelCritical)) && waterLevel <= 2) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning)) || ((((((((!(0 == tmp) && 0 == splverifierCounter) && !(0 == \result)) && waterLevel <= 2) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive)) || (((waterLevel <= 2 && ((((((((0 == tmp && 0 == methaneLevelCritical) && 2 <= waterLevel) && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) && 1 == pumpRunning) || (((((((((0 == tmp && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == \result) && !(0 == tmp)) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive) && 1 == pumpRunning))) && 0 == tmp) && 0 == \result)) || ((((((((((((0 == tmp && 0 == tmp) && 1 == \result) && tmp___0 <= 1) && waterLevel <= 1) && 0 == tmp) && 1 == systemActive) && \result <= 1) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && tmp == systemActive) && 0 == \result) && 1 == pumpRunning) - InvariantResult [Line: 484]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 141 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 43.5s, OverallIterations: 16, TraceHistogramMax: 2, AutomataDifference: 31.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 16.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1885 SDtfs, 3129 SDslu, 3391 SDs, 0 SdLazy, 486 SolverSat, 80 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.7s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 189 GetRequests, 99 SyntacticMatches, 0 SemanticMatches, 90 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 65 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=360occurred in iteration=9, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 7.9s AutomataMinimizationTime, 16 MinimizatonAttempts, 2515 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 57 LocationsWithAnnotation, 57 PreInvPairs, 283 NumberOfFragments, 1868 HoareAnnotationTreeSize, 57 FomulaSimplifications, 15633392 FormulaSimplificationTreeSizeReduction, 3.1s HoareSimplificationTime, 57 FomulaSimplificationsInter, 1746663 FormulaSimplificationTreeSizeReductionInter, 13.5s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.8s InterpolantComputationTime, 667 NumberOfCodeBlocks, 667 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 650 ConstructedInterpolants, 0 QuantifiedInterpolants, 54473 SizeOfPredicates, 4 NumberOfNonLiveVariables, 437 ConjunctsInSsa, 7 ConjunctsInUnsatCore, 17 InterpolantComputations, 15 PerfectInterpolantSequences, 78/90 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...