./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash f0abcca86e101e0402ce9c7a98a1409292a39ee1 ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:02:09,332 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:02:09,335 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:02:09,348 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:02:09,348 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:02:09,349 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:02:09,351 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:02:09,353 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:02:09,354 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:02:09,355 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:02:09,356 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:02:09,358 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:02:09,358 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:02:09,359 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:02:09,360 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:02:09,361 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:02:09,362 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:02:09,363 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:02:09,365 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:02:09,367 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:02:09,368 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:02:09,369 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:02:09,371 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:02:09,371 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:02:09,374 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:02:09,374 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:02:09,374 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:02:09,375 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:02:09,376 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:02:09,377 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:02:09,377 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:02:09,378 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:02:09,379 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:02:09,380 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:02:09,381 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:02:09,381 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:02:09,382 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:02:09,382 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:02:09,382 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:02:09,383 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:02:09,384 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:02:09,385 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:02:09,403 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:02:09,403 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:02:09,405 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:02:09,405 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:02:09,405 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:02:09,405 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:02:09,405 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:02:09,406 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:02:09,406 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:02:09,406 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:02:09,406 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:02:09,407 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:02:09,407 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:02:09,407 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:02:09,407 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:02:09,407 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:02:09,408 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:02:09,408 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:02:09,408 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:02:09,408 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:02:09,408 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:02:09,409 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:02:09,409 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:02:09,409 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:02:09,409 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:02:09,410 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:02:09,410 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:02:09,410 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:02:09,410 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:02:09,410 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f0abcca86e101e0402ce9c7a98a1409292a39ee1 [2020-07-28 19:02:09,739 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:02:09,751 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:02:09,755 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:02:09,756 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:02:09,756 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:02:09,757 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c [2020-07-28 19:02:09,832 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f412485b2/e9118e3961734236a176ca06c22c92a4/FLAGe9916217f [2020-07-28 19:02:10,441 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:02:10,441 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec3_product58.cil.c [2020-07-28 19:02:10,454 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f412485b2/e9118e3961734236a176ca06c22c92a4/FLAGe9916217f [2020-07-28 19:02:10,698 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f412485b2/e9118e3961734236a176ca06c22c92a4 [2020-07-28 19:02:10,701 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:02:10,704 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:02:10,705 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:02:10,705 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:02:10,709 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:02:10,710 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:02:10" (1/1) ... [2020-07-28 19:02:10,715 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@170972dd and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:10, skipping insertion in model container [2020-07-28 19:02:10,716 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:02:10" (1/1) ... [2020-07-28 19:02:10,723 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:02:10,788 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:02:11,242 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:02:11,267 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:02:11,464 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:02:11,511 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:02:11,512 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:11 WrapperNode [2020-07-28 19:02:11,512 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:02:11,513 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:02:11,513 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:02:11,513 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:02:11,522 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:11" (1/1) ... [2020-07-28 19:02:11,542 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:11" (1/1) ... [2020-07-28 19:02:11,618 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:02:11,618 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:02:11,618 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:02:11,618 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:02:11,635 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:11" (1/1) ... [2020-07-28 19:02:11,635 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:11" (1/1) ... [2020-07-28 19:02:11,642 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:11" (1/1) ... [2020-07-28 19:02:11,642 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:11" (1/1) ... [2020-07-28 19:02:11,665 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:11" (1/1) ... [2020-07-28 19:02:11,676 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:11" (1/1) ... [2020-07-28 19:02:11,680 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:11" (1/1) ... [2020-07-28 19:02:11,686 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:02:11,687 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:02:11,687 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:02:11,687 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:02:11,688 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:11" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:02:11,781 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:02:11,781 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:02:11,781 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:02:11,782 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:02:13,551 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:02:13,551 INFO L295 CfgBuilder]: Removed 200 assume(true) statements. [2020-07-28 19:02:13,560 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:02:13 BoogieIcfgContainer [2020-07-28 19:02:13,560 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:02:13,563 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:02:13,564 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:02:13,568 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:02:13,568 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:02:10" (1/3) ... [2020-07-28 19:02:13,570 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3c97dd75 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:02:13, skipping insertion in model container [2020-07-28 19:02:13,570 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:02:11" (2/3) ... [2020-07-28 19:02:13,570 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3c97dd75 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:02:13, skipping insertion in model container [2020-07-28 19:02:13,570 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:02:13" (3/3) ... [2020-07-28 19:02:13,572 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec3_product58.cil.c [2020-07-28 19:02:13,585 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:02:13,595 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:02:13,611 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:02:13,648 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:02:13,648 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:02:13,649 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:02:13,649 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:02:13,649 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:02:13,650 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:02:13,650 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:02:13,650 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:02:13,672 INFO L276 IsEmpty]: Start isEmpty. Operand 141 states. [2020-07-28 19:02:13,678 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2020-07-28 19:02:13,678 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:13,680 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:13,680 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:13,686 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:13,686 INFO L82 PathProgramCache]: Analyzing trace with hash -1179839814, now seen corresponding path program 1 times [2020-07-28 19:02:13,694 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:13,695 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [524230306] [2020-07-28 19:02:13,695 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:13,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:13,999 INFO L280 TraceCheckUtils]: 0: Hoare triple {144#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {144#true} is VALID [2020-07-28 19:02:14,000 INFO L280 TraceCheckUtils]: 1: Hoare triple {144#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {144#true} is VALID [2020-07-28 19:02:14,000 INFO L280 TraceCheckUtils]: 2: Hoare triple {144#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {144#true} is VALID [2020-07-28 19:02:14,000 INFO L280 TraceCheckUtils]: 3: Hoare triple {144#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {144#true} is VALID [2020-07-28 19:02:14,001 INFO L280 TraceCheckUtils]: 4: Hoare triple {144#true} assume 0 != main_~tmp~0; {144#true} is VALID [2020-07-28 19:02:14,001 INFO L280 TraceCheckUtils]: 5: Hoare triple {144#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {144#true} is VALID [2020-07-28 19:02:14,003 INFO L280 TraceCheckUtils]: 6: Hoare triple {144#true} assume false; {145#false} is VALID [2020-07-28 19:02:14,003 INFO L280 TraceCheckUtils]: 7: Hoare triple {145#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {145#false} is VALID [2020-07-28 19:02:14,004 INFO L280 TraceCheckUtils]: 8: Hoare triple {145#false} assume !(0 != ~pumpRunning~0); {145#false} is VALID [2020-07-28 19:02:14,004 INFO L280 TraceCheckUtils]: 9: Hoare triple {145#false} assume !(0 != ~systemActive~0); {145#false} is VALID [2020-07-28 19:02:14,005 INFO L280 TraceCheckUtils]: 10: Hoare triple {145#false} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {145#false} is VALID [2020-07-28 19:02:14,005 INFO L280 TraceCheckUtils]: 11: Hoare triple {145#false} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {145#false} is VALID [2020-07-28 19:02:14,005 INFO L280 TraceCheckUtils]: 12: Hoare triple {145#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {145#false} is VALID [2020-07-28 19:02:14,006 INFO L280 TraceCheckUtils]: 13: Hoare triple {145#false} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {145#false} is VALID [2020-07-28 19:02:14,008 INFO L280 TraceCheckUtils]: 14: Hoare triple {145#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {145#false} is VALID [2020-07-28 19:02:14,008 INFO L280 TraceCheckUtils]: 15: Hoare triple {145#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {145#false} is VALID [2020-07-28 19:02:14,009 INFO L280 TraceCheckUtils]: 16: Hoare triple {145#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {145#false} is VALID [2020-07-28 19:02:14,009 INFO L280 TraceCheckUtils]: 17: Hoare triple {145#false} assume !false; {145#false} is VALID [2020-07-28 19:02:14,016 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:14,017 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [524230306] [2020-07-28 19:02:14,018 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:14,019 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:02:14,020 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2028988091] [2020-07-28 19:02:14,026 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:02:14,028 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:14,033 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:02:14,089 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:14,089 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:02:14,089 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:14,098 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:02:14,099 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:02:14,102 INFO L87 Difference]: Start difference. First operand 141 states. Second operand 2 states. [2020-07-28 19:02:14,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:14,522 INFO L93 Difference]: Finished difference Result 276 states and 413 transitions. [2020-07-28 19:02:14,522 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:02:14,523 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 18 [2020-07-28 19:02:14,523 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:14,524 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:02:14,537 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 413 transitions. [2020-07-28 19:02:14,538 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:02:14,546 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 413 transitions. [2020-07-28 19:02:14,547 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 413 transitions. [2020-07-28 19:02:15,074 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 413 edges. 413 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:15,092 INFO L225 Difference]: With dead ends: 276 [2020-07-28 19:02:15,093 INFO L226 Difference]: Without dead ends: 137 [2020-07-28 19:02:15,097 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:02:15,116 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 137 states. [2020-07-28 19:02:15,158 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 137 to 137. [2020-07-28 19:02:15,159 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:15,159 INFO L82 GeneralOperation]: Start isEquivalent. First operand 137 states. Second operand 137 states. [2020-07-28 19:02:15,160 INFO L74 IsIncluded]: Start isIncluded. First operand 137 states. Second operand 137 states. [2020-07-28 19:02:15,160 INFO L87 Difference]: Start difference. First operand 137 states. Second operand 137 states. [2020-07-28 19:02:15,169 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:15,169 INFO L93 Difference]: Finished difference Result 137 states and 198 transitions. [2020-07-28 19:02:15,170 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 198 transitions. [2020-07-28 19:02:15,171 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:15,171 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:15,172 INFO L74 IsIncluded]: Start isIncluded. First operand 137 states. Second operand 137 states. [2020-07-28 19:02:15,172 INFO L87 Difference]: Start difference. First operand 137 states. Second operand 137 states. [2020-07-28 19:02:15,180 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:15,180 INFO L93 Difference]: Finished difference Result 137 states and 198 transitions. [2020-07-28 19:02:15,180 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 198 transitions. [2020-07-28 19:02:15,182 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:15,182 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:15,182 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:15,182 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:15,183 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 137 states. [2020-07-28 19:02:15,189 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 137 states to 137 states and 198 transitions. [2020-07-28 19:02:15,191 INFO L78 Accepts]: Start accepts. Automaton has 137 states and 198 transitions. Word has length 18 [2020-07-28 19:02:15,191 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:15,191 INFO L479 AbstractCegarLoop]: Abstraction has 137 states and 198 transitions. [2020-07-28 19:02:15,192 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:02:15,192 INFO L276 IsEmpty]: Start isEmpty. Operand 137 states and 198 transitions. [2020-07-28 19:02:15,193 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2020-07-28 19:02:15,193 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:15,193 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:15,193 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:02:15,194 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:15,194 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:15,194 INFO L82 PathProgramCache]: Analyzing trace with hash -2090870567, now seen corresponding path program 1 times [2020-07-28 19:02:15,194 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:15,195 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [812189600] [2020-07-28 19:02:15,195 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:15,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:15,362 INFO L280 TraceCheckUtils]: 0: Hoare triple {1004#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1004#true} is VALID [2020-07-28 19:02:15,362 INFO L280 TraceCheckUtils]: 1: Hoare triple {1004#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {1004#true} is VALID [2020-07-28 19:02:15,363 INFO L280 TraceCheckUtils]: 2: Hoare triple {1004#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {1004#true} is VALID [2020-07-28 19:02:15,363 INFO L280 TraceCheckUtils]: 3: Hoare triple {1004#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {1004#true} is VALID [2020-07-28 19:02:15,363 INFO L280 TraceCheckUtils]: 4: Hoare triple {1004#true} assume 0 != main_~tmp~0; {1004#true} is VALID [2020-07-28 19:02:15,364 INFO L280 TraceCheckUtils]: 5: Hoare triple {1004#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1006#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:02:15,365 INFO L280 TraceCheckUtils]: 6: Hoare triple {1006#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {1006#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:02:15,366 INFO L280 TraceCheckUtils]: 7: Hoare triple {1006#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {1005#false} is VALID [2020-07-28 19:02:15,366 INFO L280 TraceCheckUtils]: 8: Hoare triple {1005#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {1005#false} is VALID [2020-07-28 19:02:15,366 INFO L280 TraceCheckUtils]: 9: Hoare triple {1005#false} assume !(0 != ~pumpRunning~0); {1005#false} is VALID [2020-07-28 19:02:15,367 INFO L280 TraceCheckUtils]: 10: Hoare triple {1005#false} assume !(0 != ~systemActive~0); {1005#false} is VALID [2020-07-28 19:02:15,367 INFO L280 TraceCheckUtils]: 11: Hoare triple {1005#false} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {1005#false} is VALID [2020-07-28 19:02:15,367 INFO L280 TraceCheckUtils]: 12: Hoare triple {1005#false} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {1005#false} is VALID [2020-07-28 19:02:15,368 INFO L280 TraceCheckUtils]: 13: Hoare triple {1005#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {1005#false} is VALID [2020-07-28 19:02:15,368 INFO L280 TraceCheckUtils]: 14: Hoare triple {1005#false} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {1005#false} is VALID [2020-07-28 19:02:15,368 INFO L280 TraceCheckUtils]: 15: Hoare triple {1005#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {1005#false} is VALID [2020-07-28 19:02:15,368 INFO L280 TraceCheckUtils]: 16: Hoare triple {1005#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {1005#false} is VALID [2020-07-28 19:02:15,369 INFO L280 TraceCheckUtils]: 17: Hoare triple {1005#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {1005#false} is VALID [2020-07-28 19:02:15,369 INFO L280 TraceCheckUtils]: 18: Hoare triple {1005#false} assume !false; {1005#false} is VALID [2020-07-28 19:02:15,370 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:15,370 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [812189600] [2020-07-28 19:02:15,370 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:15,371 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:02:15,371 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [846258546] [2020-07-28 19:02:15,373 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:02:15,373 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:15,373 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:02:15,403 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:15,403 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:02:15,404 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:15,404 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:02:15,404 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:15,405 INFO L87 Difference]: Start difference. First operand 137 states and 198 transitions. Second operand 3 states. [2020-07-28 19:02:15,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:15,792 INFO L93 Difference]: Finished difference Result 137 states and 198 transitions. [2020-07-28 19:02:15,792 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:02:15,792 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 19 [2020-07-28 19:02:15,792 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:15,792 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:15,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 198 transitions. [2020-07-28 19:02:15,795 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:15,797 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 198 transitions. [2020-07-28 19:02:15,797 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 198 transitions. [2020-07-28 19:02:15,995 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 198 edges. 198 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:15,997 INFO L225 Difference]: With dead ends: 137 [2020-07-28 19:02:15,997 INFO L226 Difference]: Without dead ends: 55 [2020-07-28 19:02:15,998 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:15,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2020-07-28 19:02:16,018 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2020-07-28 19:02:16,019 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:16,019 INFO L82 GeneralOperation]: Start isEquivalent. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:16,019 INFO L74 IsIncluded]: Start isIncluded. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:16,019 INFO L87 Difference]: Start difference. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:16,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,022 INFO L93 Difference]: Finished difference Result 55 states and 79 transitions. [2020-07-28 19:02:16,022 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 79 transitions. [2020-07-28 19:02:16,023 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:16,023 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:16,023 INFO L74 IsIncluded]: Start isIncluded. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:16,023 INFO L87 Difference]: Start difference. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:16,026 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,026 INFO L93 Difference]: Finished difference Result 55 states and 79 transitions. [2020-07-28 19:02:16,026 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 79 transitions. [2020-07-28 19:02:16,027 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:16,027 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:16,027 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:16,027 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:16,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55 states. [2020-07-28 19:02:16,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 79 transitions. [2020-07-28 19:02:16,030 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 79 transitions. Word has length 19 [2020-07-28 19:02:16,030 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:16,030 INFO L479 AbstractCegarLoop]: Abstraction has 55 states and 79 transitions. [2020-07-28 19:02:16,031 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:02:16,031 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 79 transitions. [2020-07-28 19:02:16,031 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 19:02:16,032 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:16,032 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:16,032 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:02:16,032 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:16,033 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:16,033 INFO L82 PathProgramCache]: Analyzing trace with hash -917137565, now seen corresponding path program 1 times [2020-07-28 19:02:16,033 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:16,033 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [662904056] [2020-07-28 19:02:16,034 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:16,082 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:16,182 INFO L280 TraceCheckUtils]: 0: Hoare triple {1389#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1389#true} is VALID [2020-07-28 19:02:16,182 INFO L280 TraceCheckUtils]: 1: Hoare triple {1389#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {1389#true} is VALID [2020-07-28 19:02:16,183 INFO L280 TraceCheckUtils]: 2: Hoare triple {1389#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {1391#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:02:16,184 INFO L280 TraceCheckUtils]: 3: Hoare triple {1391#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {1392#(= 1 ULTIMATE.start_main_~tmp~0)} is VALID [2020-07-28 19:02:16,184 INFO L280 TraceCheckUtils]: 4: Hoare triple {1392#(= 1 ULTIMATE.start_main_~tmp~0)} assume 0 != main_~tmp~0; {1389#true} is VALID [2020-07-28 19:02:16,185 INFO L280 TraceCheckUtils]: 5: Hoare triple {1389#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1389#true} is VALID [2020-07-28 19:02:16,185 INFO L280 TraceCheckUtils]: 6: Hoare triple {1389#true} assume !false; {1389#true} is VALID [2020-07-28 19:02:16,185 INFO L280 TraceCheckUtils]: 7: Hoare triple {1389#true} assume test_~splverifierCounter~0 < 4; {1389#true} is VALID [2020-07-28 19:02:16,185 INFO L280 TraceCheckUtils]: 8: Hoare triple {1389#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {1389#true} is VALID [2020-07-28 19:02:16,186 INFO L280 TraceCheckUtils]: 9: Hoare triple {1389#true} assume !(0 != test_~tmp~5); {1389#true} is VALID [2020-07-28 19:02:16,186 INFO L280 TraceCheckUtils]: 10: Hoare triple {1389#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {1389#true} is VALID [2020-07-28 19:02:16,186 INFO L280 TraceCheckUtils]: 11: Hoare triple {1389#true} assume !(0 != test_~tmp___0~1); {1389#true} is VALID [2020-07-28 19:02:16,187 INFO L280 TraceCheckUtils]: 12: Hoare triple {1389#true} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {1389#true} is VALID [2020-07-28 19:02:16,188 INFO L280 TraceCheckUtils]: 13: Hoare triple {1389#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1393#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:16,188 INFO L280 TraceCheckUtils]: 14: Hoare triple {1393#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {1393#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:02:16,189 INFO L280 TraceCheckUtils]: 15: Hoare triple {1393#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {1390#false} is VALID [2020-07-28 19:02:16,189 INFO L280 TraceCheckUtils]: 16: Hoare triple {1390#false} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {1390#false} is VALID [2020-07-28 19:02:16,189 INFO L280 TraceCheckUtils]: 17: Hoare triple {1390#false} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {1390#false} is VALID [2020-07-28 19:02:16,190 INFO L280 TraceCheckUtils]: 18: Hoare triple {1390#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {1390#false} is VALID [2020-07-28 19:02:16,190 INFO L280 TraceCheckUtils]: 19: Hoare triple {1390#false} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {1390#false} is VALID [2020-07-28 19:02:16,190 INFO L280 TraceCheckUtils]: 20: Hoare triple {1390#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {1390#false} is VALID [2020-07-28 19:02:16,191 INFO L280 TraceCheckUtils]: 21: Hoare triple {1390#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {1390#false} is VALID [2020-07-28 19:02:16,191 INFO L280 TraceCheckUtils]: 22: Hoare triple {1390#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {1390#false} is VALID [2020-07-28 19:02:16,191 INFO L280 TraceCheckUtils]: 23: Hoare triple {1390#false} assume !false; {1390#false} is VALID [2020-07-28 19:02:16,192 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:16,193 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [662904056] [2020-07-28 19:02:16,193 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:16,193 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:16,193 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1288219328] [2020-07-28 19:02:16,194 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 24 [2020-07-28 19:02:16,194 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:16,194 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:16,224 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:16,224 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:16,224 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:16,225 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:16,225 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:16,225 INFO L87 Difference]: Start difference. First operand 55 states and 79 transitions. Second operand 5 states. [2020-07-28 19:02:16,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,633 INFO L93 Difference]: Finished difference Result 104 states and 152 transitions. [2020-07-28 19:02:16,633 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:16,634 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 24 [2020-07-28 19:02:16,634 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:16,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:16,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 152 transitions. [2020-07-28 19:02:16,637 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:16,639 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 152 transitions. [2020-07-28 19:02:16,639 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 152 transitions. [2020-07-28 19:02:16,828 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 152 edges. 152 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:16,830 INFO L225 Difference]: With dead ends: 104 [2020-07-28 19:02:16,830 INFO L226 Difference]: Without dead ends: 55 [2020-07-28 19:02:16,831 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:16,832 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55 states. [2020-07-28 19:02:16,886 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55 to 55. [2020-07-28 19:02:16,886 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:16,887 INFO L82 GeneralOperation]: Start isEquivalent. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:16,887 INFO L74 IsIncluded]: Start isIncluded. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:16,887 INFO L87 Difference]: Start difference. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:16,890 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,890 INFO L93 Difference]: Finished difference Result 55 states and 78 transitions. [2020-07-28 19:02:16,890 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 78 transitions. [2020-07-28 19:02:16,890 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:16,890 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:16,891 INFO L74 IsIncluded]: Start isIncluded. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:16,891 INFO L87 Difference]: Start difference. First operand 55 states. Second operand 55 states. [2020-07-28 19:02:16,893 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:16,893 INFO L93 Difference]: Finished difference Result 55 states and 78 transitions. [2020-07-28 19:02:16,893 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 78 transitions. [2020-07-28 19:02:16,893 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:16,894 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:16,894 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:16,894 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:16,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55 states. [2020-07-28 19:02:16,896 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55 states to 55 states and 78 transitions. [2020-07-28 19:02:16,896 INFO L78 Accepts]: Start accepts. Automaton has 55 states and 78 transitions. Word has length 24 [2020-07-28 19:02:16,896 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:16,896 INFO L479 AbstractCegarLoop]: Abstraction has 55 states and 78 transitions. [2020-07-28 19:02:16,897 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:16,897 INFO L276 IsEmpty]: Start isEmpty. Operand 55 states and 78 transitions. [2020-07-28 19:02:16,897 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2020-07-28 19:02:16,897 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:16,897 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:16,898 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:02:16,898 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:16,898 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:16,898 INFO L82 PathProgramCache]: Analyzing trace with hash -1642774406, now seen corresponding path program 1 times [2020-07-28 19:02:16,899 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:16,899 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [766990435] [2020-07-28 19:02:16,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:16,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:17,002 INFO L280 TraceCheckUtils]: 0: Hoare triple {1733#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,003 INFO L280 TraceCheckUtils]: 1: Hoare triple {1735#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,004 INFO L280 TraceCheckUtils]: 2: Hoare triple {1735#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,005 INFO L280 TraceCheckUtils]: 3: Hoare triple {1735#(= 0 ~pumpRunning~0)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,006 INFO L280 TraceCheckUtils]: 4: Hoare triple {1735#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~0; {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,007 INFO L280 TraceCheckUtils]: 5: Hoare triple {1735#(= 0 ~pumpRunning~0)} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,007 INFO L280 TraceCheckUtils]: 6: Hoare triple {1735#(= 0 ~pumpRunning~0)} assume !false; {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,008 INFO L280 TraceCheckUtils]: 7: Hoare triple {1735#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,008 INFO L280 TraceCheckUtils]: 8: Hoare triple {1735#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,009 INFO L280 TraceCheckUtils]: 9: Hoare triple {1735#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~5); {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,010 INFO L280 TraceCheckUtils]: 10: Hoare triple {1735#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,010 INFO L280 TraceCheckUtils]: 11: Hoare triple {1735#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~1); {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,011 INFO L280 TraceCheckUtils]: 12: Hoare triple {1735#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,011 INFO L280 TraceCheckUtils]: 13: Hoare triple {1735#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,012 INFO L280 TraceCheckUtils]: 14: Hoare triple {1735#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,013 INFO L280 TraceCheckUtils]: 15: Hoare triple {1735#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,017 INFO L280 TraceCheckUtils]: 16: Hoare triple {1735#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {1735#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:02:17,018 INFO L280 TraceCheckUtils]: 17: Hoare triple {1735#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {1734#false} is VALID [2020-07-28 19:02:17,018 INFO L280 TraceCheckUtils]: 18: Hoare triple {1734#false} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {1734#false} is VALID [2020-07-28 19:02:17,018 INFO L280 TraceCheckUtils]: 19: Hoare triple {1734#false} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {1734#false} is VALID [2020-07-28 19:02:17,019 INFO L280 TraceCheckUtils]: 20: Hoare triple {1734#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {1734#false} is VALID [2020-07-28 19:02:17,019 INFO L280 TraceCheckUtils]: 21: Hoare triple {1734#false} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {1734#false} is VALID [2020-07-28 19:02:17,019 INFO L280 TraceCheckUtils]: 22: Hoare triple {1734#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {1734#false} is VALID [2020-07-28 19:02:17,019 INFO L280 TraceCheckUtils]: 23: Hoare triple {1734#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {1734#false} is VALID [2020-07-28 19:02:17,020 INFO L280 TraceCheckUtils]: 24: Hoare triple {1734#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {1734#false} is VALID [2020-07-28 19:02:17,020 INFO L280 TraceCheckUtils]: 25: Hoare triple {1734#false} assume !false; {1734#false} is VALID [2020-07-28 19:02:17,021 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:17,022 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [766990435] [2020-07-28 19:02:17,022 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:17,022 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:02:17,023 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2010643047] [2020-07-28 19:02:17,023 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:02:17,024 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:17,024 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:02:17,053 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 26 edges. 26 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:17,054 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:02:17,054 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:17,054 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:02:17,054 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:17,054 INFO L87 Difference]: Start difference. First operand 55 states and 78 transitions. Second operand 3 states. [2020-07-28 19:02:17,316 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:17,316 INFO L93 Difference]: Finished difference Result 127 states and 183 transitions. [2020-07-28 19:02:17,316 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:02:17,317 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 26 [2020-07-28 19:02:17,317 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:17,317 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:17,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 183 transitions. [2020-07-28 19:02:17,319 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:02:17,322 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 183 transitions. [2020-07-28 19:02:17,322 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 183 transitions. [2020-07-28 19:02:17,548 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 183 edges. 183 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:17,550 INFO L225 Difference]: With dead ends: 127 [2020-07-28 19:02:17,551 INFO L226 Difference]: Without dead ends: 78 [2020-07-28 19:02:17,552 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:02:17,552 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78 states. [2020-07-28 19:02:17,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78 to 76. [2020-07-28 19:02:17,649 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:17,649 INFO L82 GeneralOperation]: Start isEquivalent. First operand 78 states. Second operand 76 states. [2020-07-28 19:02:17,650 INFO L74 IsIncluded]: Start isIncluded. First operand 78 states. Second operand 76 states. [2020-07-28 19:02:17,650 INFO L87 Difference]: Start difference. First operand 78 states. Second operand 76 states. [2020-07-28 19:02:17,653 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:17,653 INFO L93 Difference]: Finished difference Result 78 states and 108 transitions. [2020-07-28 19:02:17,653 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 108 transitions. [2020-07-28 19:02:17,654 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:17,654 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:17,654 INFO L74 IsIncluded]: Start isIncluded. First operand 76 states. Second operand 78 states. [2020-07-28 19:02:17,654 INFO L87 Difference]: Start difference. First operand 76 states. Second operand 78 states. [2020-07-28 19:02:17,657 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:17,657 INFO L93 Difference]: Finished difference Result 78 states and 108 transitions. [2020-07-28 19:02:17,657 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 108 transitions. [2020-07-28 19:02:17,658 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:17,658 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:17,658 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:17,658 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:17,658 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 76 states. [2020-07-28 19:02:17,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76 states to 76 states and 107 transitions. [2020-07-28 19:02:17,661 INFO L78 Accepts]: Start accepts. Automaton has 76 states and 107 transitions. Word has length 26 [2020-07-28 19:02:17,662 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:17,662 INFO L479 AbstractCegarLoop]: Abstraction has 76 states and 107 transitions. [2020-07-28 19:02:17,662 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:02:17,662 INFO L276 IsEmpty]: Start isEmpty. Operand 76 states and 107 transitions. [2020-07-28 19:02:17,663 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2020-07-28 19:02:17,663 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:17,663 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:17,663 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:02:17,664 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:17,664 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:17,664 INFO L82 PathProgramCache]: Analyzing trace with hash -1904097010, now seen corresponding path program 1 times [2020-07-28 19:02:17,664 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:17,665 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1111610138] [2020-07-28 19:02:17,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:17,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:17,774 INFO L280 TraceCheckUtils]: 0: Hoare triple {2178#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,777 INFO L280 TraceCheckUtils]: 1: Hoare triple {2180#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,778 INFO L280 TraceCheckUtils]: 2: Hoare triple {2180#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,788 INFO L280 TraceCheckUtils]: 3: Hoare triple {2180#(= 1 ~waterLevel~0)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,791 INFO L280 TraceCheckUtils]: 4: Hoare triple {2180#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~0; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,797 INFO L280 TraceCheckUtils]: 5: Hoare triple {2180#(= 1 ~waterLevel~0)} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,800 INFO L280 TraceCheckUtils]: 6: Hoare triple {2180#(= 1 ~waterLevel~0)} assume !false; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,800 INFO L280 TraceCheckUtils]: 7: Hoare triple {2180#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,801 INFO L280 TraceCheckUtils]: 8: Hoare triple {2180#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,801 INFO L280 TraceCheckUtils]: 9: Hoare triple {2180#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~5); {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,802 INFO L280 TraceCheckUtils]: 10: Hoare triple {2180#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,802 INFO L280 TraceCheckUtils]: 11: Hoare triple {2180#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~1); {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,803 INFO L280 TraceCheckUtils]: 12: Hoare triple {2180#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,804 INFO L280 TraceCheckUtils]: 13: Hoare triple {2180#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,804 INFO L280 TraceCheckUtils]: 14: Hoare triple {2180#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,805 INFO L280 TraceCheckUtils]: 15: Hoare triple {2180#(= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,805 INFO L280 TraceCheckUtils]: 16: Hoare triple {2180#(= 1 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,806 INFO L280 TraceCheckUtils]: 17: Hoare triple {2180#(= 1 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,806 INFO L280 TraceCheckUtils]: 18: Hoare triple {2180#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,807 INFO L280 TraceCheckUtils]: 19: Hoare triple {2180#(= 1 ~waterLevel~0)} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,809 INFO L280 TraceCheckUtils]: 20: Hoare triple {2180#(= 1 ~waterLevel~0)} assume 0 != isHighWaterLevel_~tmp~9;isHighWaterLevel_~tmp___0~2 := 0; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,811 INFO L280 TraceCheckUtils]: 21: Hoare triple {2180#(= 1 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,812 INFO L280 TraceCheckUtils]: 22: Hoare triple {2180#(= 1 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,813 INFO L280 TraceCheckUtils]: 23: Hoare triple {2180#(= 1 ~waterLevel~0)} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~6); {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,814 INFO L280 TraceCheckUtils]: 24: Hoare triple {2180#(= 1 ~waterLevel~0)} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,838 INFO L280 TraceCheckUtils]: 25: Hoare triple {2180#(= 1 ~waterLevel~0)} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {2180#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:17,839 INFO L280 TraceCheckUtils]: 26: Hoare triple {2180#(= 1 ~waterLevel~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {2181#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:02:17,840 INFO L280 TraceCheckUtils]: 27: Hoare triple {2181#(= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {2182#(= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} is VALID [2020-07-28 19:02:17,841 INFO L280 TraceCheckUtils]: 28: Hoare triple {2182#(= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {2179#false} is VALID [2020-07-28 19:02:17,841 INFO L280 TraceCheckUtils]: 29: Hoare triple {2179#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {2179#false} is VALID [2020-07-28 19:02:17,841 INFO L280 TraceCheckUtils]: 30: Hoare triple {2179#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {2179#false} is VALID [2020-07-28 19:02:17,841 INFO L280 TraceCheckUtils]: 31: Hoare triple {2179#false} assume !false; {2179#false} is VALID [2020-07-28 19:02:17,843 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:17,843 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1111610138] [2020-07-28 19:02:17,844 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:17,844 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:17,844 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [747046428] [2020-07-28 19:02:17,844 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2020-07-28 19:02:17,845 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:17,845 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:17,892 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:17,892 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:17,892 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:17,893 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:17,893 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:17,893 INFO L87 Difference]: Start difference. First operand 76 states and 107 transitions. Second operand 5 states. [2020-07-28 19:02:18,932 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:18,932 INFO L93 Difference]: Finished difference Result 381 states and 553 transitions. [2020-07-28 19:02:18,932 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:18,932 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 32 [2020-07-28 19:02:18,936 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:18,936 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:18,942 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 389 transitions. [2020-07-28 19:02:18,942 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:18,946 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 389 transitions. [2020-07-28 19:02:18,947 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 389 transitions. [2020-07-28 19:02:19,343 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 389 edges. 389 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:19,352 INFO L225 Difference]: With dead ends: 381 [2020-07-28 19:02:19,353 INFO L226 Difference]: Without dead ends: 311 [2020-07-28 19:02:19,353 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:19,354 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 311 states. [2020-07-28 19:02:19,554 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 311 to 123. [2020-07-28 19:02:19,554 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:19,555 INFO L82 GeneralOperation]: Start isEquivalent. First operand 311 states. Second operand 123 states. [2020-07-28 19:02:19,555 INFO L74 IsIncluded]: Start isIncluded. First operand 311 states. Second operand 123 states. [2020-07-28 19:02:19,555 INFO L87 Difference]: Start difference. First operand 311 states. Second operand 123 states. [2020-07-28 19:02:19,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:19,568 INFO L93 Difference]: Finished difference Result 311 states and 438 transitions. [2020-07-28 19:02:19,568 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 438 transitions. [2020-07-28 19:02:19,569 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:19,569 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:19,569 INFO L74 IsIncluded]: Start isIncluded. First operand 123 states. Second operand 311 states. [2020-07-28 19:02:19,570 INFO L87 Difference]: Start difference. First operand 123 states. Second operand 311 states. [2020-07-28 19:02:19,581 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:19,582 INFO L93 Difference]: Finished difference Result 311 states and 438 transitions. [2020-07-28 19:02:19,582 INFO L276 IsEmpty]: Start isEmpty. Operand 311 states and 438 transitions. [2020-07-28 19:02:19,583 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:19,583 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:19,583 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:19,583 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:19,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 123 states. [2020-07-28 19:02:19,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 123 states to 123 states and 170 transitions. [2020-07-28 19:02:19,588 INFO L78 Accepts]: Start accepts. Automaton has 123 states and 170 transitions. Word has length 32 [2020-07-28 19:02:19,588 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:19,588 INFO L479 AbstractCegarLoop]: Abstraction has 123 states and 170 transitions. [2020-07-28 19:02:19,589 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:19,589 INFO L276 IsEmpty]: Start isEmpty. Operand 123 states and 170 transitions. [2020-07-28 19:02:19,590 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:19,590 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:19,590 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:19,590 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:02:19,591 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:19,591 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:19,591 INFO L82 PathProgramCache]: Analyzing trace with hash 1319823756, now seen corresponding path program 1 times [2020-07-28 19:02:19,591 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:19,592 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [549749835] [2020-07-28 19:02:19,592 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:19,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:19,672 INFO L280 TraceCheckUtils]: 0: Hoare triple {3521#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {3523#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,683 INFO L280 TraceCheckUtils]: 1: Hoare triple {3523#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {3523#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,684 INFO L280 TraceCheckUtils]: 2: Hoare triple {3523#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {3523#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,685 INFO L280 TraceCheckUtils]: 3: Hoare triple {3523#(= 1 ~waterLevel~0)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {3523#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,685 INFO L280 TraceCheckUtils]: 4: Hoare triple {3523#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~0; {3523#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,686 INFO L280 TraceCheckUtils]: 5: Hoare triple {3523#(= 1 ~waterLevel~0)} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3523#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,687 INFO L280 TraceCheckUtils]: 6: Hoare triple {3523#(= 1 ~waterLevel~0)} assume !false; {3523#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,687 INFO L280 TraceCheckUtils]: 7: Hoare triple {3523#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {3523#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,688 INFO L280 TraceCheckUtils]: 8: Hoare triple {3523#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {3523#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,689 INFO L280 TraceCheckUtils]: 9: Hoare triple {3523#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~5; {3523#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,690 INFO L280 TraceCheckUtils]: 10: Hoare triple {3523#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {3524#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,691 INFO L280 TraceCheckUtils]: 11: Hoare triple {3524#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {3524#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,692 INFO L280 TraceCheckUtils]: 12: Hoare triple {3524#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~1); {3524#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,693 INFO L280 TraceCheckUtils]: 13: Hoare triple {3524#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {3524#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,694 INFO L280 TraceCheckUtils]: 14: Hoare triple {3524#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {3524#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,695 INFO L280 TraceCheckUtils]: 15: Hoare triple {3524#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {3524#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,695 INFO L280 TraceCheckUtils]: 16: Hoare triple {3524#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {3524#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,696 INFO L280 TraceCheckUtils]: 17: Hoare triple {3524#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {3524#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,697 INFO L280 TraceCheckUtils]: 18: Hoare triple {3524#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {3524#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:02:19,698 INFO L280 TraceCheckUtils]: 19: Hoare triple {3524#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {3522#false} is VALID [2020-07-28 19:02:19,698 INFO L280 TraceCheckUtils]: 20: Hoare triple {3522#false} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {3522#false} is VALID [2020-07-28 19:02:19,698 INFO L280 TraceCheckUtils]: 21: Hoare triple {3522#false} assume 0 != isHighWaterLevel_~tmp~9;isHighWaterLevel_~tmp___0~2 := 0; {3522#false} is VALID [2020-07-28 19:02:19,699 INFO L280 TraceCheckUtils]: 22: Hoare triple {3522#false} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {3522#false} is VALID [2020-07-28 19:02:19,699 INFO L280 TraceCheckUtils]: 23: Hoare triple {3522#false} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {3522#false} is VALID [2020-07-28 19:02:19,699 INFO L280 TraceCheckUtils]: 24: Hoare triple {3522#false} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~6); {3522#false} is VALID [2020-07-28 19:02:19,700 INFO L280 TraceCheckUtils]: 25: Hoare triple {3522#false} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {3522#false} is VALID [2020-07-28 19:02:19,700 INFO L280 TraceCheckUtils]: 26: Hoare triple {3522#false} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {3522#false} is VALID [2020-07-28 19:02:19,700 INFO L280 TraceCheckUtils]: 27: Hoare triple {3522#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {3522#false} is VALID [2020-07-28 19:02:19,700 INFO L280 TraceCheckUtils]: 28: Hoare triple {3522#false} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {3522#false} is VALID [2020-07-28 19:02:19,700 INFO L280 TraceCheckUtils]: 29: Hoare triple {3522#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {3522#false} is VALID [2020-07-28 19:02:19,701 INFO L280 TraceCheckUtils]: 30: Hoare triple {3522#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {3522#false} is VALID [2020-07-28 19:02:19,701 INFO L280 TraceCheckUtils]: 31: Hoare triple {3522#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {3522#false} is VALID [2020-07-28 19:02:19,701 INFO L280 TraceCheckUtils]: 32: Hoare triple {3522#false} assume !false; {3522#false} is VALID [2020-07-28 19:02:19,703 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:19,703 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [549749835] [2020-07-28 19:02:19,704 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:19,704 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:02:19,704 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [638894203] [2020-07-28 19:02:19,705 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:19,705 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:19,705 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:19,749 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:19,749 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:19,750 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:19,750 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:19,750 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:19,751 INFO L87 Difference]: Start difference. First operand 123 states and 170 transitions. Second operand 4 states. [2020-07-28 19:02:20,500 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:20,500 INFO L93 Difference]: Finished difference Result 254 states and 358 transitions. [2020-07-28 19:02:20,500 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:02:20,500 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:20,501 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:20,501 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:20,504 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 247 transitions. [2020-07-28 19:02:20,504 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:20,507 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 247 transitions. [2020-07-28 19:02:20,507 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 247 transitions. [2020-07-28 19:02:20,789 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 247 edges. 247 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:20,794 INFO L225 Difference]: With dead ends: 254 [2020-07-28 19:02:20,794 INFO L226 Difference]: Without dead ends: 184 [2020-07-28 19:02:20,795 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:20,796 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 184 states. [2020-07-28 19:02:21,079 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 184 to 181. [2020-07-28 19:02:21,079 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:21,079 INFO L82 GeneralOperation]: Start isEquivalent. First operand 184 states. Second operand 181 states. [2020-07-28 19:02:21,079 INFO L74 IsIncluded]: Start isIncluded. First operand 184 states. Second operand 181 states. [2020-07-28 19:02:21,080 INFO L87 Difference]: Start difference. First operand 184 states. Second operand 181 states. [2020-07-28 19:02:21,086 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:21,086 INFO L93 Difference]: Finished difference Result 184 states and 253 transitions. [2020-07-28 19:02:21,086 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 253 transitions. [2020-07-28 19:02:21,087 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:21,087 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:21,087 INFO L74 IsIncluded]: Start isIncluded. First operand 181 states. Second operand 184 states. [2020-07-28 19:02:21,087 INFO L87 Difference]: Start difference. First operand 181 states. Second operand 184 states. [2020-07-28 19:02:21,094 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:21,094 INFO L93 Difference]: Finished difference Result 184 states and 253 transitions. [2020-07-28 19:02:21,094 INFO L276 IsEmpty]: Start isEmpty. Operand 184 states and 253 transitions. [2020-07-28 19:02:21,095 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:21,095 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:21,095 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:21,096 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:21,096 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 181 states. [2020-07-28 19:02:21,100 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 181 states to 181 states and 251 transitions. [2020-07-28 19:02:21,100 INFO L78 Accepts]: Start accepts. Automaton has 181 states and 251 transitions. Word has length 33 [2020-07-28 19:02:21,101 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:21,101 INFO L479 AbstractCegarLoop]: Abstraction has 181 states and 251 transitions. [2020-07-28 19:02:21,101 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:21,101 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 251 transitions. [2020-07-28 19:02:21,102 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:21,102 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:21,102 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:21,103 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:02:21,103 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:21,103 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:21,104 INFO L82 PathProgramCache]: Analyzing trace with hash 308706506, now seen corresponding path program 1 times [2020-07-28 19:02:21,104 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:21,104 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1648885568] [2020-07-28 19:02:21,104 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:21,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:21,171 INFO L280 TraceCheckUtils]: 0: Hoare triple {4508#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {4508#true} is VALID [2020-07-28 19:02:21,172 INFO L280 TraceCheckUtils]: 1: Hoare triple {4508#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {4508#true} is VALID [2020-07-28 19:02:21,172 INFO L280 TraceCheckUtils]: 2: Hoare triple {4508#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {4508#true} is VALID [2020-07-28 19:02:21,172 INFO L280 TraceCheckUtils]: 3: Hoare triple {4508#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {4508#true} is VALID [2020-07-28 19:02:21,172 INFO L280 TraceCheckUtils]: 4: Hoare triple {4508#true} assume 0 != main_~tmp~0; {4508#true} is VALID [2020-07-28 19:02:21,173 INFO L280 TraceCheckUtils]: 5: Hoare triple {4508#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {4508#true} is VALID [2020-07-28 19:02:21,173 INFO L280 TraceCheckUtils]: 6: Hoare triple {4508#true} assume !false; {4508#true} is VALID [2020-07-28 19:02:21,173 INFO L280 TraceCheckUtils]: 7: Hoare triple {4508#true} assume test_~splverifierCounter~0 < 4; {4508#true} is VALID [2020-07-28 19:02:21,174 INFO L280 TraceCheckUtils]: 8: Hoare triple {4508#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {4508#true} is VALID [2020-07-28 19:02:21,174 INFO L280 TraceCheckUtils]: 9: Hoare triple {4508#true} assume 0 != test_~tmp~5; {4508#true} is VALID [2020-07-28 19:02:21,174 INFO L280 TraceCheckUtils]: 10: Hoare triple {4508#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {4508#true} is VALID [2020-07-28 19:02:21,174 INFO L280 TraceCheckUtils]: 11: Hoare triple {4508#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {4508#true} is VALID [2020-07-28 19:02:21,175 INFO L280 TraceCheckUtils]: 12: Hoare triple {4508#true} assume !(0 != test_~tmp___0~1); {4508#true} is VALID [2020-07-28 19:02:21,175 INFO L280 TraceCheckUtils]: 13: Hoare triple {4508#true} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {4508#true} is VALID [2020-07-28 19:02:21,175 INFO L280 TraceCheckUtils]: 14: Hoare triple {4508#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {4508#true} is VALID [2020-07-28 19:02:21,175 INFO L280 TraceCheckUtils]: 15: Hoare triple {4508#true} assume !(0 != ~pumpRunning~0); {4508#true} is VALID [2020-07-28 19:02:21,176 INFO L280 TraceCheckUtils]: 16: Hoare triple {4508#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {4508#true} is VALID [2020-07-28 19:02:21,176 INFO L280 TraceCheckUtils]: 17: Hoare triple {4508#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {4508#true} is VALID [2020-07-28 19:02:21,176 INFO L280 TraceCheckUtils]: 18: Hoare triple {4508#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {4508#true} is VALID [2020-07-28 19:02:21,177 INFO L280 TraceCheckUtils]: 19: Hoare triple {4508#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {4510#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:02:21,178 INFO L280 TraceCheckUtils]: 20: Hoare triple {4510#(= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {4511#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)} is VALID [2020-07-28 19:02:21,179 INFO L280 TraceCheckUtils]: 21: Hoare triple {4511#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)} assume 0 != isHighWaterLevel_~tmp~9;isHighWaterLevel_~tmp___0~2 := 0; {4509#false} is VALID [2020-07-28 19:02:21,179 INFO L280 TraceCheckUtils]: 22: Hoare triple {4509#false} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {4509#false} is VALID [2020-07-28 19:02:21,179 INFO L280 TraceCheckUtils]: 23: Hoare triple {4509#false} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {4509#false} is VALID [2020-07-28 19:02:21,180 INFO L280 TraceCheckUtils]: 24: Hoare triple {4509#false} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~6); {4509#false} is VALID [2020-07-28 19:02:21,180 INFO L280 TraceCheckUtils]: 25: Hoare triple {4509#false} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {4509#false} is VALID [2020-07-28 19:02:21,180 INFO L280 TraceCheckUtils]: 26: Hoare triple {4509#false} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {4509#false} is VALID [2020-07-28 19:02:21,180 INFO L280 TraceCheckUtils]: 27: Hoare triple {4509#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {4509#false} is VALID [2020-07-28 19:02:21,180 INFO L280 TraceCheckUtils]: 28: Hoare triple {4509#false} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {4509#false} is VALID [2020-07-28 19:02:21,181 INFO L280 TraceCheckUtils]: 29: Hoare triple {4509#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {4509#false} is VALID [2020-07-28 19:02:21,181 INFO L280 TraceCheckUtils]: 30: Hoare triple {4509#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {4509#false} is VALID [2020-07-28 19:02:21,181 INFO L280 TraceCheckUtils]: 31: Hoare triple {4509#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {4509#false} is VALID [2020-07-28 19:02:21,181 INFO L280 TraceCheckUtils]: 32: Hoare triple {4509#false} assume !false; {4509#false} is VALID [2020-07-28 19:02:21,183 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:21,183 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1648885568] [2020-07-28 19:02:21,183 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:21,183 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:21,184 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [135960461] [2020-07-28 19:02:21,184 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:21,184 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:21,184 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:21,221 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:21,221 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:21,221 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:21,222 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:21,222 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:21,222 INFO L87 Difference]: Start difference. First operand 181 states and 251 transitions. Second operand 4 states. [2020-07-28 19:02:22,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:22,307 INFO L93 Difference]: Finished difference Result 505 states and 712 transitions. [2020-07-28 19:02:22,307 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:22,307 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 33 [2020-07-28 19:02:22,308 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:22,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:22,310 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 276 transitions. [2020-07-28 19:02:22,310 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:22,314 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 276 transitions. [2020-07-28 19:02:22,314 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 276 transitions. [2020-07-28 19:02:22,597 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 276 edges. 276 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:22,609 INFO L225 Difference]: With dead ends: 505 [2020-07-28 19:02:22,609 INFO L226 Difference]: Without dead ends: 376 [2020-07-28 19:02:22,610 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:22,611 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 376 states. [2020-07-28 19:02:22,931 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 376 to 181. [2020-07-28 19:02:22,932 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:22,932 INFO L82 GeneralOperation]: Start isEquivalent. First operand 376 states. Second operand 181 states. [2020-07-28 19:02:22,932 INFO L74 IsIncluded]: Start isIncluded. First operand 376 states. Second operand 181 states. [2020-07-28 19:02:22,932 INFO L87 Difference]: Start difference. First operand 376 states. Second operand 181 states. [2020-07-28 19:02:22,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:22,944 INFO L93 Difference]: Finished difference Result 376 states and 527 transitions. [2020-07-28 19:02:22,944 INFO L276 IsEmpty]: Start isEmpty. Operand 376 states and 527 transitions. [2020-07-28 19:02:22,945 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:22,945 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:22,945 INFO L74 IsIncluded]: Start isIncluded. First operand 181 states. Second operand 376 states. [2020-07-28 19:02:22,945 INFO L87 Difference]: Start difference. First operand 181 states. Second operand 376 states. [2020-07-28 19:02:22,956 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:22,956 INFO L93 Difference]: Finished difference Result 376 states and 527 transitions. [2020-07-28 19:02:22,957 INFO L276 IsEmpty]: Start isEmpty. Operand 376 states and 527 transitions. [2020-07-28 19:02:22,957 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:22,958 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:22,958 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:22,958 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:22,958 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 181 states. [2020-07-28 19:02:22,963 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 181 states to 181 states and 249 transitions. [2020-07-28 19:02:22,964 INFO L78 Accepts]: Start accepts. Automaton has 181 states and 249 transitions. Word has length 33 [2020-07-28 19:02:22,964 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:22,964 INFO L479 AbstractCegarLoop]: Abstraction has 181 states and 249 transitions. [2020-07-28 19:02:22,964 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:22,964 INFO L276 IsEmpty]: Start isEmpty. Operand 181 states and 249 transitions. [2020-07-28 19:02:22,965 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 34 [2020-07-28 19:02:22,965 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:22,965 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:22,966 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:02:22,966 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:22,966 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:22,967 INFO L82 PathProgramCache]: Analyzing trace with hash 566871944, now seen corresponding path program 1 times [2020-07-28 19:02:22,967 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:22,968 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [201938508] [2020-07-28 19:02:22,968 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:23,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:23,122 INFO L280 TraceCheckUtils]: 0: Hoare triple {6236#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {6236#true} is VALID [2020-07-28 19:02:23,122 INFO L280 TraceCheckUtils]: 1: Hoare triple {6236#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {6236#true} is VALID [2020-07-28 19:02:23,123 INFO L280 TraceCheckUtils]: 2: Hoare triple {6236#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {6238#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:02:23,124 INFO L280 TraceCheckUtils]: 3: Hoare triple {6238#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {6239#(= 1 ULTIMATE.start_main_~tmp~0)} is VALID [2020-07-28 19:02:23,125 INFO L280 TraceCheckUtils]: 4: Hoare triple {6239#(= 1 ULTIMATE.start_main_~tmp~0)} assume 0 != main_~tmp~0; {6236#true} is VALID [2020-07-28 19:02:23,125 INFO L280 TraceCheckUtils]: 5: Hoare triple {6236#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6236#true} is VALID [2020-07-28 19:02:23,125 INFO L280 TraceCheckUtils]: 6: Hoare triple {6236#true} assume !false; {6236#true} is VALID [2020-07-28 19:02:23,126 INFO L280 TraceCheckUtils]: 7: Hoare triple {6236#true} assume test_~splverifierCounter~0 < 4; {6236#true} is VALID [2020-07-28 19:02:23,127 INFO L280 TraceCheckUtils]: 8: Hoare triple {6236#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {6236#true} is VALID [2020-07-28 19:02:23,127 INFO L280 TraceCheckUtils]: 9: Hoare triple {6236#true} assume 0 != test_~tmp~5; {6236#true} is VALID [2020-07-28 19:02:23,127 INFO L280 TraceCheckUtils]: 10: Hoare triple {6236#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6236#true} is VALID [2020-07-28 19:02:23,127 INFO L280 TraceCheckUtils]: 11: Hoare triple {6236#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {6236#true} is VALID [2020-07-28 19:02:23,127 INFO L280 TraceCheckUtils]: 12: Hoare triple {6236#true} assume !(0 != test_~tmp___0~1); {6236#true} is VALID [2020-07-28 19:02:23,128 INFO L280 TraceCheckUtils]: 13: Hoare triple {6236#true} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {6236#true} is VALID [2020-07-28 19:02:23,128 INFO L280 TraceCheckUtils]: 14: Hoare triple {6236#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {6236#true} is VALID [2020-07-28 19:02:23,128 INFO L280 TraceCheckUtils]: 15: Hoare triple {6236#true} assume !(0 != ~pumpRunning~0); {6236#true} is VALID [2020-07-28 19:02:23,129 INFO L280 TraceCheckUtils]: 16: Hoare triple {6236#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {6236#true} is VALID [2020-07-28 19:02:23,129 INFO L280 TraceCheckUtils]: 17: Hoare triple {6236#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {6236#true} is VALID [2020-07-28 19:02:23,129 INFO L280 TraceCheckUtils]: 18: Hoare triple {6236#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {6236#true} is VALID [2020-07-28 19:02:23,129 INFO L280 TraceCheckUtils]: 19: Hoare triple {6236#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {6236#true} is VALID [2020-07-28 19:02:23,130 INFO L280 TraceCheckUtils]: 20: Hoare triple {6236#true} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {6236#true} is VALID [2020-07-28 19:02:23,131 INFO L280 TraceCheckUtils]: 21: Hoare triple {6236#true} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {6240#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))} is VALID [2020-07-28 19:02:23,132 INFO L280 TraceCheckUtils]: 22: Hoare triple {6240#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {6241#(not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))} is VALID [2020-07-28 19:02:23,133 INFO L280 TraceCheckUtils]: 23: Hoare triple {6241#(not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {6242#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6))} is VALID [2020-07-28 19:02:23,134 INFO L280 TraceCheckUtils]: 24: Hoare triple {6242#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6))} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~6); {6237#false} is VALID [2020-07-28 19:02:23,134 INFO L280 TraceCheckUtils]: 25: Hoare triple {6237#false} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {6237#false} is VALID [2020-07-28 19:02:23,135 INFO L280 TraceCheckUtils]: 26: Hoare triple {6237#false} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {6237#false} is VALID [2020-07-28 19:02:23,135 INFO L280 TraceCheckUtils]: 27: Hoare triple {6237#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {6237#false} is VALID [2020-07-28 19:02:23,135 INFO L280 TraceCheckUtils]: 28: Hoare triple {6237#false} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {6237#false} is VALID [2020-07-28 19:02:23,135 INFO L280 TraceCheckUtils]: 29: Hoare triple {6237#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {6237#false} is VALID [2020-07-28 19:02:23,136 INFO L280 TraceCheckUtils]: 30: Hoare triple {6237#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {6237#false} is VALID [2020-07-28 19:02:23,136 INFO L280 TraceCheckUtils]: 31: Hoare triple {6237#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {6237#false} is VALID [2020-07-28 19:02:23,136 INFO L280 TraceCheckUtils]: 32: Hoare triple {6237#false} assume !false; {6237#false} is VALID [2020-07-28 19:02:23,137 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:23,138 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [201938508] [2020-07-28 19:02:23,138 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:23,140 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2020-07-28 19:02:23,140 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1632711900] [2020-07-28 19:02:23,140 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 33 [2020-07-28 19:02:23,141 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:23,141 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:23,181 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 33 edges. 33 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:23,181 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:23,181 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:23,181 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:23,182 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:23,182 INFO L87 Difference]: Start difference. First operand 181 states and 249 transitions. Second operand 7 states. [2020-07-28 19:02:25,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:25,231 INFO L93 Difference]: Finished difference Result 634 states and 889 transitions. [2020-07-28 19:02:25,231 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 19:02:25,231 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 33 [2020-07-28 19:02:25,231 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:25,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:25,234 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 293 transitions. [2020-07-28 19:02:25,234 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:25,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 293 transitions. [2020-07-28 19:02:25,236 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 293 transitions. [2020-07-28 19:02:25,588 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 293 edges. 293 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:25,606 INFO L225 Difference]: With dead ends: 634 [2020-07-28 19:02:25,606 INFO L226 Difference]: Without dead ends: 459 [2020-07-28 19:02:25,607 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2020-07-28 19:02:25,608 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 459 states. [2020-07-28 19:02:26,010 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 459 to 190. [2020-07-28 19:02:26,010 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:26,010 INFO L82 GeneralOperation]: Start isEquivalent. First operand 459 states. Second operand 190 states. [2020-07-28 19:02:26,010 INFO L74 IsIncluded]: Start isIncluded. First operand 459 states. Second operand 190 states. [2020-07-28 19:02:26,011 INFO L87 Difference]: Start difference. First operand 459 states. Second operand 190 states. [2020-07-28 19:02:26,026 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:26,026 INFO L93 Difference]: Finished difference Result 459 states and 641 transitions. [2020-07-28 19:02:26,026 INFO L276 IsEmpty]: Start isEmpty. Operand 459 states and 641 transitions. [2020-07-28 19:02:26,027 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:26,027 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:26,028 INFO L74 IsIncluded]: Start isIncluded. First operand 190 states. Second operand 459 states. [2020-07-28 19:02:26,028 INFO L87 Difference]: Start difference. First operand 190 states. Second operand 459 states. [2020-07-28 19:02:26,043 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:26,043 INFO L93 Difference]: Finished difference Result 459 states and 641 transitions. [2020-07-28 19:02:26,043 INFO L276 IsEmpty]: Start isEmpty. Operand 459 states and 641 transitions. [2020-07-28 19:02:26,044 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:26,044 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:26,045 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:26,045 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:26,045 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 190 states. [2020-07-28 19:02:26,049 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 190 states to 190 states and 256 transitions. [2020-07-28 19:02:26,050 INFO L78 Accepts]: Start accepts. Automaton has 190 states and 256 transitions. Word has length 33 [2020-07-28 19:02:26,050 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:26,050 INFO L479 AbstractCegarLoop]: Abstraction has 190 states and 256 transitions. [2020-07-28 19:02:26,050 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:26,050 INFO L276 IsEmpty]: Start isEmpty. Operand 190 states and 256 transitions. [2020-07-28 19:02:26,051 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:02:26,051 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:26,051 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:26,051 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:02:26,052 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:26,052 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:26,052 INFO L82 PathProgramCache]: Analyzing trace with hash -1083058712, now seen corresponding path program 1 times [2020-07-28 19:02:26,052 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:26,053 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [681366704] [2020-07-28 19:02:26,053 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:26,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:26,166 INFO L280 TraceCheckUtils]: 0: Hoare triple {8339#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,167 INFO L280 TraceCheckUtils]: 1: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,168 INFO L280 TraceCheckUtils]: 2: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,168 INFO L280 TraceCheckUtils]: 3: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,169 INFO L280 TraceCheckUtils]: 4: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~0; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,169 INFO L280 TraceCheckUtils]: 5: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,170 INFO L280 TraceCheckUtils]: 6: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume !false; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,171 INFO L280 TraceCheckUtils]: 7: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,171 INFO L280 TraceCheckUtils]: 8: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,172 INFO L280 TraceCheckUtils]: 9: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp~5; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,172 INFO L280 TraceCheckUtils]: 10: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,173 INFO L280 TraceCheckUtils]: 11: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,173 INFO L280 TraceCheckUtils]: 12: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~1); {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,174 INFO L280 TraceCheckUtils]: 13: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,174 INFO L280 TraceCheckUtils]: 14: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,175 INFO L280 TraceCheckUtils]: 15: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,175 INFO L280 TraceCheckUtils]: 16: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,176 INFO L280 TraceCheckUtils]: 17: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,177 INFO L280 TraceCheckUtils]: 18: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,177 INFO L280 TraceCheckUtils]: 19: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,178 INFO L280 TraceCheckUtils]: 20: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,178 INFO L280 TraceCheckUtils]: 21: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,179 INFO L280 TraceCheckUtils]: 22: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,179 INFO L280 TraceCheckUtils]: 23: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {8341#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:26,180 INFO L280 TraceCheckUtils]: 24: Hoare triple {8341#(= 0 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc activatePump_#t~ret56, activatePump_~tmp~8;havoc activatePump_~tmp~8;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {8342#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:26,181 INFO L280 TraceCheckUtils]: 25: Hoare triple {8342#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {8343#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} is VALID [2020-07-28 19:02:26,182 INFO L280 TraceCheckUtils]: 26: Hoare triple {8343#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} activatePump_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret56 && activatePump_#t~ret56 <= 2147483647;activatePump_~tmp~8 := activatePump_#t~ret56;havoc activatePump_#t~ret56; {8344#(= 0 ULTIMATE.start_activatePump_~tmp~8)} is VALID [2020-07-28 19:02:26,184 INFO L280 TraceCheckUtils]: 27: Hoare triple {8344#(= 0 ULTIMATE.start_activatePump_~tmp~8)} assume 0 != activatePump_~tmp~8; {8340#false} is VALID [2020-07-28 19:02:26,184 INFO L280 TraceCheckUtils]: 28: Hoare triple {8340#false} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {8340#false} is VALID [2020-07-28 19:02:26,184 INFO L280 TraceCheckUtils]: 29: Hoare triple {8340#false} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {8340#false} is VALID [2020-07-28 19:02:26,184 INFO L280 TraceCheckUtils]: 30: Hoare triple {8340#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {8340#false} is VALID [2020-07-28 19:02:26,185 INFO L280 TraceCheckUtils]: 31: Hoare triple {8340#false} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {8340#false} is VALID [2020-07-28 19:02:26,185 INFO L280 TraceCheckUtils]: 32: Hoare triple {8340#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {8340#false} is VALID [2020-07-28 19:02:26,185 INFO L280 TraceCheckUtils]: 33: Hoare triple {8340#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {8340#false} is VALID [2020-07-28 19:02:26,186 INFO L280 TraceCheckUtils]: 34: Hoare triple {8340#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {8340#false} is VALID [2020-07-28 19:02:26,187 INFO L280 TraceCheckUtils]: 35: Hoare triple {8340#false} assume !false; {8340#false} is VALID [2020-07-28 19:02:26,191 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:26,191 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [681366704] [2020-07-28 19:02:26,191 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:26,191 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:26,192 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1054596511] [2020-07-28 19:02:26,192 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 36 [2020-07-28 19:02:26,193 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:26,193 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:02:26,240 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:26,240 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:02:26,240 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:26,241 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:02:26,241 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:02:26,241 INFO L87 Difference]: Start difference. First operand 190 states and 256 transitions. Second operand 6 states. [2020-07-28 19:02:30,546 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:30,546 INFO L93 Difference]: Finished difference Result 1391 states and 1856 transitions. [2020-07-28 19:02:30,546 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2020-07-28 19:02:30,547 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 36 [2020-07-28 19:02:30,548 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:30,548 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:30,552 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 640 transitions. [2020-07-28 19:02:30,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:02:30,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14 states to 14 states and 640 transitions. [2020-07-28 19:02:30,556 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 14 states and 640 transitions. [2020-07-28 19:02:31,276 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 640 edges. 640 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:31,342 INFO L225 Difference]: With dead ends: 1391 [2020-07-28 19:02:31,342 INFO L226 Difference]: Without dead ends: 1207 [2020-07-28 19:02:31,343 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=67, Invalid=143, Unknown=0, NotChecked=0, Total=210 [2020-07-28 19:02:31,345 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1207 states. [2020-07-28 19:02:32,247 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1207 to 360. [2020-07-28 19:02:32,248 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:32,248 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1207 states. Second operand 360 states. [2020-07-28 19:02:32,248 INFO L74 IsIncluded]: Start isIncluded. First operand 1207 states. Second operand 360 states. [2020-07-28 19:02:32,248 INFO L87 Difference]: Start difference. First operand 1207 states. Second operand 360 states. [2020-07-28 19:02:32,307 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:32,307 INFO L93 Difference]: Finished difference Result 1207 states and 1585 transitions. [2020-07-28 19:02:32,307 INFO L276 IsEmpty]: Start isEmpty. Operand 1207 states and 1585 transitions. [2020-07-28 19:02:32,310 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:32,310 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:32,310 INFO L74 IsIncluded]: Start isIncluded. First operand 360 states. Second operand 1207 states. [2020-07-28 19:02:32,310 INFO L87 Difference]: Start difference. First operand 360 states. Second operand 1207 states. [2020-07-28 19:02:32,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:32,358 INFO L93 Difference]: Finished difference Result 1207 states and 1585 transitions. [2020-07-28 19:02:32,359 INFO L276 IsEmpty]: Start isEmpty. Operand 1207 states and 1585 transitions. [2020-07-28 19:02:32,361 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:32,361 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:32,361 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:32,361 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:32,361 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 360 states. [2020-07-28 19:02:32,369 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 360 states to 360 states and 478 transitions. [2020-07-28 19:02:32,369 INFO L78 Accepts]: Start accepts. Automaton has 360 states and 478 transitions. Word has length 36 [2020-07-28 19:02:32,369 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:32,369 INFO L479 AbstractCegarLoop]: Abstraction has 360 states and 478 transitions. [2020-07-28 19:02:32,369 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:02:32,369 INFO L276 IsEmpty]: Start isEmpty. Operand 360 states and 478 transitions. [2020-07-28 19:02:32,370 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 37 [2020-07-28 19:02:32,370 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:32,370 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:32,370 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:02:32,371 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:32,371 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:32,371 INFO L82 PathProgramCache]: Analyzing trace with hash -403000342, now seen corresponding path program 1 times [2020-07-28 19:02:32,371 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:32,372 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [509113020] [2020-07-28 19:02:32,372 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:32,392 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:32,446 INFO L280 TraceCheckUtils]: 0: Hoare triple {13228#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {13228#true} is VALID [2020-07-28 19:02:32,446 INFO L280 TraceCheckUtils]: 1: Hoare triple {13228#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {13228#true} is VALID [2020-07-28 19:02:32,446 INFO L280 TraceCheckUtils]: 2: Hoare triple {13228#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {13228#true} is VALID [2020-07-28 19:02:32,447 INFO L280 TraceCheckUtils]: 3: Hoare triple {13228#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {13228#true} is VALID [2020-07-28 19:02:32,447 INFO L280 TraceCheckUtils]: 4: Hoare triple {13228#true} assume 0 != main_~tmp~0; {13228#true} is VALID [2020-07-28 19:02:32,447 INFO L280 TraceCheckUtils]: 5: Hoare triple {13228#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {13228#true} is VALID [2020-07-28 19:02:32,447 INFO L280 TraceCheckUtils]: 6: Hoare triple {13228#true} assume !false; {13228#true} is VALID [2020-07-28 19:02:32,447 INFO L280 TraceCheckUtils]: 7: Hoare triple {13228#true} assume test_~splverifierCounter~0 < 4; {13228#true} is VALID [2020-07-28 19:02:32,448 INFO L280 TraceCheckUtils]: 8: Hoare triple {13228#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {13228#true} is VALID [2020-07-28 19:02:32,448 INFO L280 TraceCheckUtils]: 9: Hoare triple {13228#true} assume 0 != test_~tmp~5; {13228#true} is VALID [2020-07-28 19:02:32,451 INFO L280 TraceCheckUtils]: 10: Hoare triple {13228#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13228#true} is VALID [2020-07-28 19:02:32,452 INFO L280 TraceCheckUtils]: 11: Hoare triple {13228#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {13228#true} is VALID [2020-07-28 19:02:32,452 INFO L280 TraceCheckUtils]: 12: Hoare triple {13228#true} assume !(0 != test_~tmp___0~1); {13228#true} is VALID [2020-07-28 19:02:32,452 INFO L280 TraceCheckUtils]: 13: Hoare triple {13228#true} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {13228#true} is VALID [2020-07-28 19:02:32,452 INFO L280 TraceCheckUtils]: 14: Hoare triple {13228#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {13228#true} is VALID [2020-07-28 19:02:32,453 INFO L280 TraceCheckUtils]: 15: Hoare triple {13228#true} assume !(0 != ~pumpRunning~0); {13228#true} is VALID [2020-07-28 19:02:32,453 INFO L280 TraceCheckUtils]: 16: Hoare triple {13228#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {13228#true} is VALID [2020-07-28 19:02:32,453 INFO L280 TraceCheckUtils]: 17: Hoare triple {13228#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {13228#true} is VALID [2020-07-28 19:02:32,453 INFO L280 TraceCheckUtils]: 18: Hoare triple {13228#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {13228#true} is VALID [2020-07-28 19:02:32,453 INFO L280 TraceCheckUtils]: 19: Hoare triple {13228#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {13228#true} is VALID [2020-07-28 19:02:32,454 INFO L280 TraceCheckUtils]: 20: Hoare triple {13228#true} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {13228#true} is VALID [2020-07-28 19:02:32,454 INFO L280 TraceCheckUtils]: 21: Hoare triple {13228#true} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {13228#true} is VALID [2020-07-28 19:02:32,454 INFO L280 TraceCheckUtils]: 22: Hoare triple {13228#true} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {13228#true} is VALID [2020-07-28 19:02:32,454 INFO L280 TraceCheckUtils]: 23: Hoare triple {13228#true} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {13228#true} is VALID [2020-07-28 19:02:32,454 INFO L280 TraceCheckUtils]: 24: Hoare triple {13228#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc activatePump_#t~ret56, activatePump_~tmp~8;havoc activatePump_~tmp~8;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {13228#true} is VALID [2020-07-28 19:02:32,455 INFO L280 TraceCheckUtils]: 25: Hoare triple {13228#true} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {13228#true} is VALID [2020-07-28 19:02:32,455 INFO L280 TraceCheckUtils]: 26: Hoare triple {13228#true} activatePump_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret56 && activatePump_#t~ret56 <= 2147483647;activatePump_~tmp~8 := activatePump_#t~ret56;havoc activatePump_#t~ret56; {13228#true} is VALID [2020-07-28 19:02:32,469 INFO L280 TraceCheckUtils]: 27: Hoare triple {13228#true} assume !(0 != activatePump_~tmp~8);~pumpRunning~0 := 1; {13230#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:32,470 INFO L280 TraceCheckUtils]: 28: Hoare triple {13230#(= 1 ~pumpRunning~0)} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {13230#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:32,470 INFO L280 TraceCheckUtils]: 29: Hoare triple {13230#(= 1 ~pumpRunning~0)} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {13230#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:32,471 INFO L280 TraceCheckUtils]: 30: Hoare triple {13230#(= 1 ~pumpRunning~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {13230#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:32,471 INFO L280 TraceCheckUtils]: 31: Hoare triple {13230#(= 1 ~pumpRunning~0)} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {13230#(= 1 ~pumpRunning~0)} is VALID [2020-07-28 19:02:32,472 INFO L280 TraceCheckUtils]: 32: Hoare triple {13230#(= 1 ~pumpRunning~0)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {13231#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:02:32,473 INFO L280 TraceCheckUtils]: 33: Hoare triple {13231#(= 1 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {13232#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~0)} is VALID [2020-07-28 19:02:32,473 INFO L280 TraceCheckUtils]: 34: Hoare triple {13232#(= 1 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~0)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {13229#false} is VALID [2020-07-28 19:02:32,474 INFO L280 TraceCheckUtils]: 35: Hoare triple {13229#false} assume !false; {13229#false} is VALID [2020-07-28 19:02:32,475 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:32,475 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [509113020] [2020-07-28 19:02:32,476 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:32,476 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:32,476 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [779819767] [2020-07-28 19:02:32,476 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 36 [2020-07-28 19:02:32,477 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:32,477 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:32,539 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 36 edges. 36 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:32,539 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:32,539 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:32,539 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:32,540 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:32,540 INFO L87 Difference]: Start difference. First operand 360 states and 478 transitions. Second operand 5 states. [2020-07-28 19:02:35,074 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:35,075 INFO L93 Difference]: Finished difference Result 946 states and 1283 transitions. [2020-07-28 19:02:35,075 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:35,075 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 36 [2020-07-28 19:02:35,075 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:35,075 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:35,077 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 281 transitions. [2020-07-28 19:02:35,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:35,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 281 transitions. [2020-07-28 19:02:35,078 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 281 transitions. [2020-07-28 19:02:35,388 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 281 edges. 281 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:35,408 INFO L225 Difference]: With dead ends: 946 [2020-07-28 19:02:35,408 INFO L226 Difference]: Without dead ends: 592 [2020-07-28 19:02:35,409 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:35,410 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 592 states. [2020-07-28 19:02:36,260 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 592 to 306. [2020-07-28 19:02:36,260 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:36,260 INFO L82 GeneralOperation]: Start isEquivalent. First operand 592 states. Second operand 306 states. [2020-07-28 19:02:36,261 INFO L74 IsIncluded]: Start isIncluded. First operand 592 states. Second operand 306 states. [2020-07-28 19:02:36,261 INFO L87 Difference]: Start difference. First operand 592 states. Second operand 306 states. [2020-07-28 19:02:36,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:36,279 INFO L93 Difference]: Finished difference Result 592 states and 781 transitions. [2020-07-28 19:02:36,279 INFO L276 IsEmpty]: Start isEmpty. Operand 592 states and 781 transitions. [2020-07-28 19:02:36,280 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:36,281 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:36,281 INFO L74 IsIncluded]: Start isIncluded. First operand 306 states. Second operand 592 states. [2020-07-28 19:02:36,281 INFO L87 Difference]: Start difference. First operand 306 states. Second operand 592 states. [2020-07-28 19:02:36,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:36,300 INFO L93 Difference]: Finished difference Result 592 states and 781 transitions. [2020-07-28 19:02:36,300 INFO L276 IsEmpty]: Start isEmpty. Operand 592 states and 781 transitions. [2020-07-28 19:02:36,301 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:36,302 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:36,302 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:36,302 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:36,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 306 states. [2020-07-28 19:02:36,309 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 306 states to 306 states and 395 transitions. [2020-07-28 19:02:36,309 INFO L78 Accepts]: Start accepts. Automaton has 306 states and 395 transitions. Word has length 36 [2020-07-28 19:02:36,310 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:36,310 INFO L479 AbstractCegarLoop]: Abstraction has 306 states and 395 transitions. [2020-07-28 19:02:36,310 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:36,310 INFO L276 IsEmpty]: Start isEmpty. Operand 306 states and 395 transitions. [2020-07-28 19:02:36,310 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2020-07-28 19:02:36,311 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:36,311 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:36,311 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2020-07-28 19:02:36,311 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:36,311 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:36,312 INFO L82 PathProgramCache]: Analyzing trace with hash -1138138450, now seen corresponding path program 1 times [2020-07-28 19:02:36,312 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:36,312 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [474942648] [2020-07-28 19:02:36,312 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:36,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:36,408 INFO L280 TraceCheckUtils]: 0: Hoare triple {16184#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {16184#true} is VALID [2020-07-28 19:02:36,408 INFO L280 TraceCheckUtils]: 1: Hoare triple {16184#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {16184#true} is VALID [2020-07-28 19:02:36,409 INFO L280 TraceCheckUtils]: 2: Hoare triple {16184#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {16186#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:02:36,410 INFO L280 TraceCheckUtils]: 3: Hoare triple {16186#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {16187#(= 1 ULTIMATE.start_main_~tmp~0)} is VALID [2020-07-28 19:02:36,410 INFO L280 TraceCheckUtils]: 4: Hoare triple {16187#(= 1 ULTIMATE.start_main_~tmp~0)} assume 0 != main_~tmp~0; {16184#true} is VALID [2020-07-28 19:02:36,410 INFO L280 TraceCheckUtils]: 5: Hoare triple {16184#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {16184#true} is VALID [2020-07-28 19:02:36,410 INFO L280 TraceCheckUtils]: 6: Hoare triple {16184#true} assume !false; {16184#true} is VALID [2020-07-28 19:02:36,411 INFO L280 TraceCheckUtils]: 7: Hoare triple {16184#true} assume test_~splverifierCounter~0 < 4; {16184#true} is VALID [2020-07-28 19:02:36,411 INFO L280 TraceCheckUtils]: 8: Hoare triple {16184#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {16184#true} is VALID [2020-07-28 19:02:36,411 INFO L280 TraceCheckUtils]: 9: Hoare triple {16184#true} assume 0 != test_~tmp~5; {16184#true} is VALID [2020-07-28 19:02:36,411 INFO L280 TraceCheckUtils]: 10: Hoare triple {16184#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {16184#true} is VALID [2020-07-28 19:02:36,412 INFO L280 TraceCheckUtils]: 11: Hoare triple {16184#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {16184#true} is VALID [2020-07-28 19:02:36,412 INFO L280 TraceCheckUtils]: 12: Hoare triple {16184#true} assume 0 != test_~tmp___0~1; {16184#true} is VALID [2020-07-28 19:02:36,416 INFO L280 TraceCheckUtils]: 13: Hoare triple {16184#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,416 INFO L280 TraceCheckUtils]: 14: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,417 INFO L280 TraceCheckUtils]: 15: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,418 INFO L280 TraceCheckUtils]: 16: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0); {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,418 INFO L280 TraceCheckUtils]: 17: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,419 INFO L280 TraceCheckUtils]: 18: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,419 INFO L280 TraceCheckUtils]: 19: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,420 INFO L280 TraceCheckUtils]: 20: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,420 INFO L280 TraceCheckUtils]: 21: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,421 INFO L280 TraceCheckUtils]: 22: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,421 INFO L280 TraceCheckUtils]: 23: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,422 INFO L280 TraceCheckUtils]: 24: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,422 INFO L280 TraceCheckUtils]: 25: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc activatePump_#t~ret56, activatePump_~tmp~8;havoc activatePump_~tmp~8;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,423 INFO L280 TraceCheckUtils]: 26: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,423 INFO L280 TraceCheckUtils]: 27: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} activatePump_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret56 && activatePump_#t~ret56 <= 2147483647;activatePump_~tmp~8 := activatePump_#t~ret56;havoc activatePump_#t~ret56; {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,424 INFO L280 TraceCheckUtils]: 28: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} assume 0 != activatePump_~tmp~8; {16188#(not (= 0 ~methaneLevelCritical~0))} is VALID [2020-07-28 19:02:36,425 INFO L280 TraceCheckUtils]: 29: Hoare triple {16188#(not (= 0 ~methaneLevelCritical~0))} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {16189#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} is VALID [2020-07-28 19:02:36,426 INFO L280 TraceCheckUtils]: 30: Hoare triple {16189#(not (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {16190#(not (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4))} is VALID [2020-07-28 19:02:36,426 INFO L280 TraceCheckUtils]: 31: Hoare triple {16190#(not (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4))} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {16185#false} is VALID [2020-07-28 19:02:36,426 INFO L280 TraceCheckUtils]: 32: Hoare triple {16185#false} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {16185#false} is VALID [2020-07-28 19:02:36,427 INFO L280 TraceCheckUtils]: 33: Hoare triple {16185#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {16185#false} is VALID [2020-07-28 19:02:36,427 INFO L280 TraceCheckUtils]: 34: Hoare triple {16185#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {16185#false} is VALID [2020-07-28 19:02:36,427 INFO L280 TraceCheckUtils]: 35: Hoare triple {16185#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {16185#false} is VALID [2020-07-28 19:02:36,427 INFO L280 TraceCheckUtils]: 36: Hoare triple {16185#false} assume !false; {16185#false} is VALID [2020-07-28 19:02:36,429 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:36,430 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [474942648] [2020-07-28 19:02:36,430 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:36,430 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2020-07-28 19:02:36,430 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1303516221] [2020-07-28 19:02:36,431 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 37 [2020-07-28 19:02:36,431 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:36,431 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:36,476 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 37 edges. 37 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:36,476 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:36,476 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:36,476 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:36,476 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:36,477 INFO L87 Difference]: Start difference. First operand 306 states and 395 transitions. Second operand 7 states. [2020-07-28 19:02:39,429 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:39,429 INFO L93 Difference]: Finished difference Result 916 states and 1175 transitions. [2020-07-28 19:02:39,429 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2020-07-28 19:02:39,429 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 37 [2020-07-28 19:02:39,429 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:39,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:39,431 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 311 transitions. [2020-07-28 19:02:39,431 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:39,432 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 311 transitions. [2020-07-28 19:02:39,432 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 311 transitions. [2020-07-28 19:02:39,828 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 311 edges. 311 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:39,849 INFO L225 Difference]: With dead ends: 916 [2020-07-28 19:02:39,849 INFO L226 Difference]: Without dead ends: 616 [2020-07-28 19:02:39,850 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=65, Invalid=117, Unknown=0, NotChecked=0, Total=182 [2020-07-28 19:02:39,850 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 616 states. [2020-07-28 19:02:40,752 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 616 to 286. [2020-07-28 19:02:40,752 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:40,752 INFO L82 GeneralOperation]: Start isEquivalent. First operand 616 states. Second operand 286 states. [2020-07-28 19:02:40,753 INFO L74 IsIncluded]: Start isIncluded. First operand 616 states. Second operand 286 states. [2020-07-28 19:02:40,753 INFO L87 Difference]: Start difference. First operand 616 states. Second operand 286 states. [2020-07-28 19:02:40,769 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:40,769 INFO L93 Difference]: Finished difference Result 616 states and 775 transitions. [2020-07-28 19:02:40,770 INFO L276 IsEmpty]: Start isEmpty. Operand 616 states and 775 transitions. [2020-07-28 19:02:40,770 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:40,771 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:40,771 INFO L74 IsIncluded]: Start isIncluded. First operand 286 states. Second operand 616 states. [2020-07-28 19:02:40,771 INFO L87 Difference]: Start difference. First operand 286 states. Second operand 616 states. [2020-07-28 19:02:40,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:40,791 INFO L93 Difference]: Finished difference Result 616 states and 775 transitions. [2020-07-28 19:02:40,791 INFO L276 IsEmpty]: Start isEmpty. Operand 616 states and 775 transitions. [2020-07-28 19:02:40,792 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:40,793 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:40,793 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:40,793 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:40,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 286 states. [2020-07-28 19:02:40,799 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 286 states to 286 states and 358 transitions. [2020-07-28 19:02:40,800 INFO L78 Accepts]: Start accepts. Automaton has 286 states and 358 transitions. Word has length 37 [2020-07-28 19:02:40,800 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:40,800 INFO L479 AbstractCegarLoop]: Abstraction has 286 states and 358 transitions. [2020-07-28 19:02:40,800 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:40,800 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 358 transitions. [2020-07-28 19:02:40,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2020-07-28 19:02:40,801 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:40,801 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:40,801 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:02:40,802 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:40,802 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:40,802 INFO L82 PathProgramCache]: Analyzing trace with hash 113257525, now seen corresponding path program 1 times [2020-07-28 19:02:40,802 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:40,803 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1457942694] [2020-07-28 19:02:40,803 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:40,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:40,893 INFO L280 TraceCheckUtils]: 0: Hoare triple {19131#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {19131#true} is VALID [2020-07-28 19:02:40,894 INFO L280 TraceCheckUtils]: 1: Hoare triple {19131#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {19131#true} is VALID [2020-07-28 19:02:40,894 INFO L280 TraceCheckUtils]: 2: Hoare triple {19131#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {19131#true} is VALID [2020-07-28 19:02:40,894 INFO L280 TraceCheckUtils]: 3: Hoare triple {19131#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {19131#true} is VALID [2020-07-28 19:02:40,894 INFO L280 TraceCheckUtils]: 4: Hoare triple {19131#true} assume 0 != main_~tmp~0; {19131#true} is VALID [2020-07-28 19:02:40,895 INFO L280 TraceCheckUtils]: 5: Hoare triple {19131#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {19131#true} is VALID [2020-07-28 19:02:40,895 INFO L280 TraceCheckUtils]: 6: Hoare triple {19131#true} assume !false; {19131#true} is VALID [2020-07-28 19:02:40,895 INFO L280 TraceCheckUtils]: 7: Hoare triple {19131#true} assume test_~splverifierCounter~0 < 4; {19131#true} is VALID [2020-07-28 19:02:40,895 INFO L280 TraceCheckUtils]: 8: Hoare triple {19131#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {19131#true} is VALID [2020-07-28 19:02:40,896 INFO L280 TraceCheckUtils]: 9: Hoare triple {19131#true} assume !(0 != test_~tmp~5); {19131#true} is VALID [2020-07-28 19:02:40,896 INFO L280 TraceCheckUtils]: 10: Hoare triple {19131#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {19131#true} is VALID [2020-07-28 19:02:40,896 INFO L280 TraceCheckUtils]: 11: Hoare triple {19131#true} assume !(0 != test_~tmp___0~1); {19131#true} is VALID [2020-07-28 19:02:40,898 INFO L280 TraceCheckUtils]: 12: Hoare triple {19131#true} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {19131#true} is VALID [2020-07-28 19:02:40,898 INFO L280 TraceCheckUtils]: 13: Hoare triple {19131#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {19131#true} is VALID [2020-07-28 19:02:40,898 INFO L280 TraceCheckUtils]: 14: Hoare triple {19131#true} assume !(0 != ~pumpRunning~0); {19131#true} is VALID [2020-07-28 19:02:40,899 INFO L280 TraceCheckUtils]: 15: Hoare triple {19131#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {19131#true} is VALID [2020-07-28 19:02:40,899 INFO L280 TraceCheckUtils]: 16: Hoare triple {19131#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {19131#true} is VALID [2020-07-28 19:02:40,900 INFO L280 TraceCheckUtils]: 17: Hoare triple {19131#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {19131#true} is VALID [2020-07-28 19:02:40,900 INFO L280 TraceCheckUtils]: 18: Hoare triple {19131#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {19131#true} is VALID [2020-07-28 19:02:40,900 INFO L280 TraceCheckUtils]: 19: Hoare triple {19131#true} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {19131#true} is VALID [2020-07-28 19:02:40,904 INFO L280 TraceCheckUtils]: 20: Hoare triple {19131#true} assume 0 != isHighWaterLevel_~tmp~9;isHighWaterLevel_~tmp___0~2 := 0; {19133#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2)} is VALID [2020-07-28 19:02:40,905 INFO L280 TraceCheckUtils]: 21: Hoare triple {19133#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {19134#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:02:40,905 INFO L280 TraceCheckUtils]: 22: Hoare triple {19134#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {19135#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6)} is VALID [2020-07-28 19:02:40,906 INFO L280 TraceCheckUtils]: 23: Hoare triple {19135#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc activatePump_#t~ret56, activatePump_~tmp~8;havoc activatePump_~tmp~8;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {19132#false} is VALID [2020-07-28 19:02:40,907 INFO L280 TraceCheckUtils]: 24: Hoare triple {19132#false} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {19132#false} is VALID [2020-07-28 19:02:40,907 INFO L280 TraceCheckUtils]: 25: Hoare triple {19132#false} activatePump_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret56 && activatePump_#t~ret56 <= 2147483647;activatePump_~tmp~8 := activatePump_#t~ret56;havoc activatePump_#t~ret56; {19132#false} is VALID [2020-07-28 19:02:40,907 INFO L280 TraceCheckUtils]: 26: Hoare triple {19132#false} assume !(0 != activatePump_~tmp~8);~pumpRunning~0 := 1; {19132#false} is VALID [2020-07-28 19:02:40,907 INFO L280 TraceCheckUtils]: 27: Hoare triple {19132#false} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {19132#false} is VALID [2020-07-28 19:02:40,908 INFO L280 TraceCheckUtils]: 28: Hoare triple {19132#false} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {19132#false} is VALID [2020-07-28 19:02:40,908 INFO L280 TraceCheckUtils]: 29: Hoare triple {19132#false} assume 0 != __utac_acc__Specification3_spec__1_~tmp~4; {19132#false} is VALID [2020-07-28 19:02:40,908 INFO L280 TraceCheckUtils]: 30: Hoare triple {19132#false} assume !false; {19132#false} is VALID [2020-07-28 19:02:40,909 INFO L280 TraceCheckUtils]: 31: Hoare triple {19132#false} assume test_~splverifierCounter~0 < 4; {19132#false} is VALID [2020-07-28 19:02:40,909 INFO L280 TraceCheckUtils]: 32: Hoare triple {19132#false} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {19132#false} is VALID [2020-07-28 19:02:40,909 INFO L280 TraceCheckUtils]: 33: Hoare triple {19132#false} assume !(0 != test_~tmp~5); {19132#false} is VALID [2020-07-28 19:02:40,909 INFO L280 TraceCheckUtils]: 34: Hoare triple {19132#false} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {19132#false} is VALID [2020-07-28 19:02:40,910 INFO L280 TraceCheckUtils]: 35: Hoare triple {19132#false} assume !(0 != test_~tmp___0~1); {19132#false} is VALID [2020-07-28 19:02:40,910 INFO L280 TraceCheckUtils]: 36: Hoare triple {19132#false} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {19132#false} is VALID [2020-07-28 19:02:40,910 INFO L280 TraceCheckUtils]: 37: Hoare triple {19132#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {19132#false} is VALID [2020-07-28 19:02:40,911 INFO L280 TraceCheckUtils]: 38: Hoare triple {19132#false} assume 0 != ~pumpRunning~0; {19132#false} is VALID [2020-07-28 19:02:40,911 INFO L280 TraceCheckUtils]: 39: Hoare triple {19132#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19132#false} is VALID [2020-07-28 19:02:40,911 INFO L280 TraceCheckUtils]: 40: Hoare triple {19132#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {19132#false} is VALID [2020-07-28 19:02:40,912 INFO L280 TraceCheckUtils]: 41: Hoare triple {19132#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret75, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~10, isLowWaterLevel_~tmp___0~3;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~10;havoc isLowWaterLevel_~tmp___0~3;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {19132#false} is VALID [2020-07-28 19:02:40,912 INFO L280 TraceCheckUtils]: 42: Hoare triple {19132#false} isLowWaterLevel_#t~ret75 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret75 && isLowWaterLevel_#t~ret75 <= 2147483647;isLowWaterLevel_~tmp~10 := isLowWaterLevel_#t~ret75;havoc isLowWaterLevel_#t~ret75; {19132#false} is VALID [2020-07-28 19:02:40,912 INFO L280 TraceCheckUtils]: 43: Hoare triple {19132#false} assume 0 != isLowWaterLevel_~tmp~10;isLowWaterLevel_~tmp___0~3 := 0; {19132#false} is VALID [2020-07-28 19:02:40,913 INFO L280 TraceCheckUtils]: 44: Hoare triple {19132#false} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~3;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {19132#false} is VALID [2020-07-28 19:02:40,913 INFO L280 TraceCheckUtils]: 45: Hoare triple {19132#false} processEnvironment_#t~ret55 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret55 && processEnvironment_#t~ret55 <= 2147483647;processEnvironment_~tmp~7 := processEnvironment_#t~ret55;havoc processEnvironment_#t~ret55; {19132#false} is VALID [2020-07-28 19:02:40,914 INFO L280 TraceCheckUtils]: 46: Hoare triple {19132#false} assume 0 != processEnvironment_~tmp~7;~pumpRunning~0 := 0; {19132#false} is VALID [2020-07-28 19:02:40,914 INFO L280 TraceCheckUtils]: 47: Hoare triple {19132#false} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {19132#false} is VALID [2020-07-28 19:02:40,916 INFO L280 TraceCheckUtils]: 48: Hoare triple {19132#false} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {19132#false} is VALID [2020-07-28 19:02:40,917 INFO L280 TraceCheckUtils]: 49: Hoare triple {19132#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {19132#false} is VALID [2020-07-28 19:02:40,918 INFO L280 TraceCheckUtils]: 50: Hoare triple {19132#false} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {19132#false} is VALID [2020-07-28 19:02:40,919 INFO L280 TraceCheckUtils]: 51: Hoare triple {19132#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {19132#false} is VALID [2020-07-28 19:02:40,920 INFO L280 TraceCheckUtils]: 52: Hoare triple {19132#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {19132#false} is VALID [2020-07-28 19:02:40,920 INFO L280 TraceCheckUtils]: 53: Hoare triple {19132#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {19132#false} is VALID [2020-07-28 19:02:40,921 INFO L280 TraceCheckUtils]: 54: Hoare triple {19132#false} assume !false; {19132#false} is VALID [2020-07-28 19:02:40,926 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:02:40,926 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1457942694] [2020-07-28 19:02:40,927 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:40,927 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:40,927 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1640779953] [2020-07-28 19:02:40,928 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 55 [2020-07-28 19:02:40,929 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:40,929 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:40,996 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:40,996 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:40,996 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:40,997 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:40,997 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:40,997 INFO L87 Difference]: Start difference. First operand 286 states and 358 transitions. Second operand 5 states. [2020-07-28 19:02:42,597 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:42,598 INFO L93 Difference]: Finished difference Result 661 states and 831 transitions. [2020-07-28 19:02:42,598 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:02:42,598 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 55 [2020-07-28 19:02:42,598 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:42,599 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:42,599 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 155 transitions. [2020-07-28 19:02:42,599 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:42,600 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 155 transitions. [2020-07-28 19:02:42,600 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 155 transitions. [2020-07-28 19:02:42,779 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 155 edges. 155 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:42,789 INFO L225 Difference]: With dead ends: 661 [2020-07-28 19:02:42,789 INFO L226 Difference]: Without dead ends: 381 [2020-07-28 19:02:42,790 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:42,790 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 381 states. [2020-07-28 19:02:43,744 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 381 to 286. [2020-07-28 19:02:43,744 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:43,745 INFO L82 GeneralOperation]: Start isEquivalent. First operand 381 states. Second operand 286 states. [2020-07-28 19:02:43,745 INFO L74 IsIncluded]: Start isIncluded. First operand 381 states. Second operand 286 states. [2020-07-28 19:02:43,745 INFO L87 Difference]: Start difference. First operand 381 states. Second operand 286 states. [2020-07-28 19:02:43,754 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:43,755 INFO L93 Difference]: Finished difference Result 381 states and 475 transitions. [2020-07-28 19:02:43,755 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states and 475 transitions. [2020-07-28 19:02:43,756 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:43,756 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:43,756 INFO L74 IsIncluded]: Start isIncluded. First operand 286 states. Second operand 381 states. [2020-07-28 19:02:43,756 INFO L87 Difference]: Start difference. First operand 286 states. Second operand 381 states. [2020-07-28 19:02:43,765 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:43,765 INFO L93 Difference]: Finished difference Result 381 states and 475 transitions. [2020-07-28 19:02:43,765 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states and 475 transitions. [2020-07-28 19:02:43,766 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:43,766 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:43,766 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:43,767 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:43,767 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 286 states. [2020-07-28 19:02:43,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 286 states to 286 states and 354 transitions. [2020-07-28 19:02:43,774 INFO L78 Accepts]: Start accepts. Automaton has 286 states and 354 transitions. Word has length 55 [2020-07-28 19:02:43,774 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:43,774 INFO L479 AbstractCegarLoop]: Abstraction has 286 states and 354 transitions. [2020-07-28 19:02:43,774 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:43,774 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 354 transitions. [2020-07-28 19:02:43,775 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2020-07-28 19:02:43,775 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:43,775 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:43,776 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-28 19:02:43,776 INFO L427 AbstractCegarLoop]: === Iteration 13 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:43,776 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:43,776 INFO L82 PathProgramCache]: Analyzing trace with hash -730747977, now seen corresponding path program 1 times [2020-07-28 19:02:43,777 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:43,777 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [96387035] [2020-07-28 19:02:43,777 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:43,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:43,855 INFO L280 TraceCheckUtils]: 0: Hoare triple {21228#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {21228#true} is VALID [2020-07-28 19:02:43,856 INFO L280 TraceCheckUtils]: 1: Hoare triple {21228#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {21228#true} is VALID [2020-07-28 19:02:43,856 INFO L280 TraceCheckUtils]: 2: Hoare triple {21228#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {21228#true} is VALID [2020-07-28 19:02:43,858 INFO L280 TraceCheckUtils]: 3: Hoare triple {21228#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {21228#true} is VALID [2020-07-28 19:02:43,859 INFO L280 TraceCheckUtils]: 4: Hoare triple {21228#true} assume 0 != main_~tmp~0; {21228#true} is VALID [2020-07-28 19:02:43,859 INFO L280 TraceCheckUtils]: 5: Hoare triple {21228#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {21228#true} is VALID [2020-07-28 19:02:43,859 INFO L280 TraceCheckUtils]: 6: Hoare triple {21228#true} assume !false; {21228#true} is VALID [2020-07-28 19:02:43,859 INFO L280 TraceCheckUtils]: 7: Hoare triple {21228#true} assume test_~splverifierCounter~0 < 4; {21228#true} is VALID [2020-07-28 19:02:43,859 INFO L280 TraceCheckUtils]: 8: Hoare triple {21228#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {21228#true} is VALID [2020-07-28 19:02:43,860 INFO L280 TraceCheckUtils]: 9: Hoare triple {21228#true} assume !(0 != test_~tmp~5); {21228#true} is VALID [2020-07-28 19:02:43,860 INFO L280 TraceCheckUtils]: 10: Hoare triple {21228#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {21228#true} is VALID [2020-07-28 19:02:43,860 INFO L280 TraceCheckUtils]: 11: Hoare triple {21228#true} assume !(0 != test_~tmp___0~1); {21228#true} is VALID [2020-07-28 19:02:43,861 INFO L280 TraceCheckUtils]: 12: Hoare triple {21228#true} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {21228#true} is VALID [2020-07-28 19:02:43,862 INFO L280 TraceCheckUtils]: 13: Hoare triple {21228#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {21228#true} is VALID [2020-07-28 19:02:43,862 INFO L280 TraceCheckUtils]: 14: Hoare triple {21228#true} assume !(0 != ~pumpRunning~0); {21228#true} is VALID [2020-07-28 19:02:43,862 INFO L280 TraceCheckUtils]: 15: Hoare triple {21228#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {21228#true} is VALID [2020-07-28 19:02:43,862 INFO L280 TraceCheckUtils]: 16: Hoare triple {21228#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {21228#true} is VALID [2020-07-28 19:02:43,862 INFO L280 TraceCheckUtils]: 17: Hoare triple {21228#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {21228#true} is VALID [2020-07-28 19:02:43,870 INFO L280 TraceCheckUtils]: 18: Hoare triple {21228#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {21230#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:02:43,871 INFO L280 TraceCheckUtils]: 19: Hoare triple {21230#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {21231#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~9)} is VALID [2020-07-28 19:02:43,872 INFO L280 TraceCheckUtils]: 20: Hoare triple {21231#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~9)} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {21229#false} is VALID [2020-07-28 19:02:43,872 INFO L280 TraceCheckUtils]: 21: Hoare triple {21229#false} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {21229#false} is VALID [2020-07-28 19:02:43,872 INFO L280 TraceCheckUtils]: 22: Hoare triple {21229#false} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {21229#false} is VALID [2020-07-28 19:02:43,872 INFO L280 TraceCheckUtils]: 23: Hoare triple {21229#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc activatePump_#t~ret56, activatePump_~tmp~8;havoc activatePump_~tmp~8;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {21229#false} is VALID [2020-07-28 19:02:43,872 INFO L280 TraceCheckUtils]: 24: Hoare triple {21229#false} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {21229#false} is VALID [2020-07-28 19:02:43,873 INFO L280 TraceCheckUtils]: 25: Hoare triple {21229#false} activatePump_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret56 && activatePump_#t~ret56 <= 2147483647;activatePump_~tmp~8 := activatePump_#t~ret56;havoc activatePump_#t~ret56; {21229#false} is VALID [2020-07-28 19:02:43,873 INFO L280 TraceCheckUtils]: 26: Hoare triple {21229#false} assume !(0 != activatePump_~tmp~8);~pumpRunning~0 := 1; {21229#false} is VALID [2020-07-28 19:02:43,873 INFO L280 TraceCheckUtils]: 27: Hoare triple {21229#false} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {21229#false} is VALID [2020-07-28 19:02:43,873 INFO L280 TraceCheckUtils]: 28: Hoare triple {21229#false} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {21229#false} is VALID [2020-07-28 19:02:43,873 INFO L280 TraceCheckUtils]: 29: Hoare triple {21229#false} assume 0 != __utac_acc__Specification3_spec__1_~tmp~4; {21229#false} is VALID [2020-07-28 19:02:43,874 INFO L280 TraceCheckUtils]: 30: Hoare triple {21229#false} assume !false; {21229#false} is VALID [2020-07-28 19:02:43,874 INFO L280 TraceCheckUtils]: 31: Hoare triple {21229#false} assume test_~splverifierCounter~0 < 4; {21229#false} is VALID [2020-07-28 19:02:43,874 INFO L280 TraceCheckUtils]: 32: Hoare triple {21229#false} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {21229#false} is VALID [2020-07-28 19:02:43,874 INFO L280 TraceCheckUtils]: 33: Hoare triple {21229#false} assume !(0 != test_~tmp~5); {21229#false} is VALID [2020-07-28 19:02:43,874 INFO L280 TraceCheckUtils]: 34: Hoare triple {21229#false} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {21229#false} is VALID [2020-07-28 19:02:43,875 INFO L280 TraceCheckUtils]: 35: Hoare triple {21229#false} assume !(0 != test_~tmp___0~1); {21229#false} is VALID [2020-07-28 19:02:43,875 INFO L280 TraceCheckUtils]: 36: Hoare triple {21229#false} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {21229#false} is VALID [2020-07-28 19:02:43,875 INFO L280 TraceCheckUtils]: 37: Hoare triple {21229#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {21229#false} is VALID [2020-07-28 19:02:43,875 INFO L280 TraceCheckUtils]: 38: Hoare triple {21229#false} assume 0 != ~pumpRunning~0; {21229#false} is VALID [2020-07-28 19:02:43,875 INFO L280 TraceCheckUtils]: 39: Hoare triple {21229#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {21229#false} is VALID [2020-07-28 19:02:43,876 INFO L280 TraceCheckUtils]: 40: Hoare triple {21229#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {21229#false} is VALID [2020-07-28 19:02:43,876 INFO L280 TraceCheckUtils]: 41: Hoare triple {21229#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret75, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~10, isLowWaterLevel_~tmp___0~3;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~10;havoc isLowWaterLevel_~tmp___0~3;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {21229#false} is VALID [2020-07-28 19:02:43,876 INFO L280 TraceCheckUtils]: 42: Hoare triple {21229#false} isLowWaterLevel_#t~ret75 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret75 && isLowWaterLevel_#t~ret75 <= 2147483647;isLowWaterLevel_~tmp~10 := isLowWaterLevel_#t~ret75;havoc isLowWaterLevel_#t~ret75; {21229#false} is VALID [2020-07-28 19:02:43,876 INFO L280 TraceCheckUtils]: 43: Hoare triple {21229#false} assume 0 != isLowWaterLevel_~tmp~10;isLowWaterLevel_~tmp___0~3 := 0; {21229#false} is VALID [2020-07-28 19:02:43,876 INFO L280 TraceCheckUtils]: 44: Hoare triple {21229#false} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~3;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {21229#false} is VALID [2020-07-28 19:02:43,876 INFO L280 TraceCheckUtils]: 45: Hoare triple {21229#false} processEnvironment_#t~ret55 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret55 && processEnvironment_#t~ret55 <= 2147483647;processEnvironment_~tmp~7 := processEnvironment_#t~ret55;havoc processEnvironment_#t~ret55; {21229#false} is VALID [2020-07-28 19:02:43,877 INFO L280 TraceCheckUtils]: 46: Hoare triple {21229#false} assume 0 != processEnvironment_~tmp~7;~pumpRunning~0 := 0; {21229#false} is VALID [2020-07-28 19:02:43,877 INFO L280 TraceCheckUtils]: 47: Hoare triple {21229#false} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {21229#false} is VALID [2020-07-28 19:02:43,877 INFO L280 TraceCheckUtils]: 48: Hoare triple {21229#false} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {21229#false} is VALID [2020-07-28 19:02:43,877 INFO L280 TraceCheckUtils]: 49: Hoare triple {21229#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {21229#false} is VALID [2020-07-28 19:02:43,877 INFO L280 TraceCheckUtils]: 50: Hoare triple {21229#false} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {21229#false} is VALID [2020-07-28 19:02:43,878 INFO L280 TraceCheckUtils]: 51: Hoare triple {21229#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {21229#false} is VALID [2020-07-28 19:02:43,878 INFO L280 TraceCheckUtils]: 52: Hoare triple {21229#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {21229#false} is VALID [2020-07-28 19:02:43,878 INFO L280 TraceCheckUtils]: 53: Hoare triple {21229#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {21229#false} is VALID [2020-07-28 19:02:43,878 INFO L280 TraceCheckUtils]: 54: Hoare triple {21229#false} assume !false; {21229#false} is VALID [2020-07-28 19:02:43,881 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:02:43,881 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [96387035] [2020-07-28 19:02:43,881 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:43,881 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:43,882 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [56320712] [2020-07-28 19:02:43,883 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2020-07-28 19:02:43,883 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:43,883 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:02:43,940 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:43,940 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:02:43,941 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:43,941 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:02:43,941 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:02:43,942 INFO L87 Difference]: Start difference. First operand 286 states and 354 transitions. Second operand 4 states. [2020-07-28 19:02:45,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:45,348 INFO L93 Difference]: Finished difference Result 608 states and 763 transitions. [2020-07-28 19:02:45,348 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:02:45,348 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 55 [2020-07-28 19:02:45,349 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:45,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:45,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 156 transitions. [2020-07-28 19:02:45,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:02:45,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 156 transitions. [2020-07-28 19:02:45,350 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 156 transitions. [2020-07-28 19:02:45,533 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 156 edges. 156 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:45,540 INFO L225 Difference]: With dead ends: 608 [2020-07-28 19:02:45,540 INFO L226 Difference]: Without dead ends: 328 [2020-07-28 19:02:45,541 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:45,542 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 328 states. [2020-07-28 19:02:46,305 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 328 to 244. [2020-07-28 19:02:46,305 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:46,306 INFO L82 GeneralOperation]: Start isEquivalent. First operand 328 states. Second operand 244 states. [2020-07-28 19:02:46,306 INFO L74 IsIncluded]: Start isIncluded. First operand 328 states. Second operand 244 states. [2020-07-28 19:02:46,306 INFO L87 Difference]: Start difference. First operand 328 states. Second operand 244 states. [2020-07-28 19:02:46,312 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:46,313 INFO L93 Difference]: Finished difference Result 328 states and 411 transitions. [2020-07-28 19:02:46,313 INFO L276 IsEmpty]: Start isEmpty. Operand 328 states and 411 transitions. [2020-07-28 19:02:46,313 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:46,313 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:46,313 INFO L74 IsIncluded]: Start isIncluded. First operand 244 states. Second operand 328 states. [2020-07-28 19:02:46,313 INFO L87 Difference]: Start difference. First operand 244 states. Second operand 328 states. [2020-07-28 19:02:46,320 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:46,320 INFO L93 Difference]: Finished difference Result 328 states and 411 transitions. [2020-07-28 19:02:46,320 INFO L276 IsEmpty]: Start isEmpty. Operand 328 states and 411 transitions. [2020-07-28 19:02:46,321 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:46,321 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:46,321 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:46,321 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:46,321 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 244 states. [2020-07-28 19:02:46,326 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244 states to 244 states and 303 transitions. [2020-07-28 19:02:46,327 INFO L78 Accepts]: Start accepts. Automaton has 244 states and 303 transitions. Word has length 55 [2020-07-28 19:02:46,327 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:46,327 INFO L479 AbstractCegarLoop]: Abstraction has 244 states and 303 transitions. [2020-07-28 19:02:46,327 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:02:46,327 INFO L276 IsEmpty]: Start isEmpty. Operand 244 states and 303 transitions. [2020-07-28 19:02:46,328 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2020-07-28 19:02:46,328 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:46,328 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:46,328 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2020-07-28 19:02:46,328 INFO L427 AbstractCegarLoop]: === Iteration 14 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:46,329 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:46,329 INFO L82 PathProgramCache]: Analyzing trace with hash 1478001787, now seen corresponding path program 1 times [2020-07-28 19:02:46,329 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:46,331 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [71676694] [2020-07-28 19:02:46,331 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:46,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:46,427 INFO L280 TraceCheckUtils]: 0: Hoare triple {23078#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,428 INFO L280 TraceCheckUtils]: 1: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,428 INFO L280 TraceCheckUtils]: 2: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,429 INFO L280 TraceCheckUtils]: 3: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,430 INFO L280 TraceCheckUtils]: 4: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~0; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,430 INFO L280 TraceCheckUtils]: 5: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,431 INFO L280 TraceCheckUtils]: 6: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume !false; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,431 INFO L280 TraceCheckUtils]: 7: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,431 INFO L280 TraceCheckUtils]: 8: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,432 INFO L280 TraceCheckUtils]: 9: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp~5; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,432 INFO L280 TraceCheckUtils]: 10: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,433 INFO L280 TraceCheckUtils]: 11: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,433 INFO L280 TraceCheckUtils]: 12: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~1); {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,433 INFO L280 TraceCheckUtils]: 13: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,434 INFO L280 TraceCheckUtils]: 14: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,434 INFO L280 TraceCheckUtils]: 15: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,435 INFO L280 TraceCheckUtils]: 16: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,435 INFO L280 TraceCheckUtils]: 17: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,435 INFO L280 TraceCheckUtils]: 18: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,436 INFO L280 TraceCheckUtils]: 19: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,436 INFO L280 TraceCheckUtils]: 20: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,437 INFO L280 TraceCheckUtils]: 21: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,443 INFO L280 TraceCheckUtils]: 22: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,444 INFO L280 TraceCheckUtils]: 23: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,445 INFO L280 TraceCheckUtils]: 24: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc activatePump_#t~ret56, activatePump_~tmp~8;havoc activatePump_~tmp~8;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,446 INFO L280 TraceCheckUtils]: 25: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,446 INFO L280 TraceCheckUtils]: 26: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} activatePump_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret56 && activatePump_#t~ret56 <= 2147483647;activatePump_~tmp~8 := activatePump_#t~ret56;havoc activatePump_#t~ret56; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,447 INFO L280 TraceCheckUtils]: 27: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} assume !(0 != activatePump_~tmp~8);~pumpRunning~0 := 1; {23080#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:02:46,448 INFO L280 TraceCheckUtils]: 28: Hoare triple {23080#(= 0 ~methaneLevelCritical~0)} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {23081#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:02:46,449 INFO L280 TraceCheckUtils]: 29: Hoare triple {23081#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {23082#(= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4)} is VALID [2020-07-28 19:02:46,449 INFO L280 TraceCheckUtils]: 30: Hoare triple {23082#(= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4)} assume 0 != __utac_acc__Specification3_spec__1_~tmp~4; {23079#false} is VALID [2020-07-28 19:02:46,450 INFO L280 TraceCheckUtils]: 31: Hoare triple {23079#false} assume !false; {23079#false} is VALID [2020-07-28 19:02:46,450 INFO L280 TraceCheckUtils]: 32: Hoare triple {23079#false} assume test_~splverifierCounter~0 < 4; {23079#false} is VALID [2020-07-28 19:02:46,450 INFO L280 TraceCheckUtils]: 33: Hoare triple {23079#false} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {23079#false} is VALID [2020-07-28 19:02:46,450 INFO L280 TraceCheckUtils]: 34: Hoare triple {23079#false} assume !(0 != test_~tmp~5); {23079#false} is VALID [2020-07-28 19:02:46,451 INFO L280 TraceCheckUtils]: 35: Hoare triple {23079#false} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {23079#false} is VALID [2020-07-28 19:02:46,451 INFO L280 TraceCheckUtils]: 36: Hoare triple {23079#false} assume !(0 != test_~tmp___0~1); {23079#false} is VALID [2020-07-28 19:02:46,451 INFO L280 TraceCheckUtils]: 37: Hoare triple {23079#false} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {23079#false} is VALID [2020-07-28 19:02:46,451 INFO L280 TraceCheckUtils]: 38: Hoare triple {23079#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {23079#false} is VALID [2020-07-28 19:02:46,451 INFO L280 TraceCheckUtils]: 39: Hoare triple {23079#false} assume 0 != ~pumpRunning~0; {23079#false} is VALID [2020-07-28 19:02:46,452 INFO L280 TraceCheckUtils]: 40: Hoare triple {23079#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {23079#false} is VALID [2020-07-28 19:02:46,452 INFO L280 TraceCheckUtils]: 41: Hoare triple {23079#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {23079#false} is VALID [2020-07-28 19:02:46,452 INFO L280 TraceCheckUtils]: 42: Hoare triple {23079#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret75, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~10, isLowWaterLevel_~tmp___0~3;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~10;havoc isLowWaterLevel_~tmp___0~3;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {23079#false} is VALID [2020-07-28 19:02:46,452 INFO L280 TraceCheckUtils]: 43: Hoare triple {23079#false} isLowWaterLevel_#t~ret75 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret75 && isLowWaterLevel_#t~ret75 <= 2147483647;isLowWaterLevel_~tmp~10 := isLowWaterLevel_#t~ret75;havoc isLowWaterLevel_#t~ret75; {23079#false} is VALID [2020-07-28 19:02:46,452 INFO L280 TraceCheckUtils]: 44: Hoare triple {23079#false} assume 0 != isLowWaterLevel_~tmp~10;isLowWaterLevel_~tmp___0~3 := 0; {23079#false} is VALID [2020-07-28 19:02:46,452 INFO L280 TraceCheckUtils]: 45: Hoare triple {23079#false} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~3;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {23079#false} is VALID [2020-07-28 19:02:46,453 INFO L280 TraceCheckUtils]: 46: Hoare triple {23079#false} processEnvironment_#t~ret55 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret55 && processEnvironment_#t~ret55 <= 2147483647;processEnvironment_~tmp~7 := processEnvironment_#t~ret55;havoc processEnvironment_#t~ret55; {23079#false} is VALID [2020-07-28 19:02:46,453 INFO L280 TraceCheckUtils]: 47: Hoare triple {23079#false} assume 0 != processEnvironment_~tmp~7;~pumpRunning~0 := 0; {23079#false} is VALID [2020-07-28 19:02:46,453 INFO L280 TraceCheckUtils]: 48: Hoare triple {23079#false} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {23079#false} is VALID [2020-07-28 19:02:46,453 INFO L280 TraceCheckUtils]: 49: Hoare triple {23079#false} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {23079#false} is VALID [2020-07-28 19:02:46,454 INFO L280 TraceCheckUtils]: 50: Hoare triple {23079#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {23079#false} is VALID [2020-07-28 19:02:46,454 INFO L280 TraceCheckUtils]: 51: Hoare triple {23079#false} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {23079#false} is VALID [2020-07-28 19:02:46,454 INFO L280 TraceCheckUtils]: 52: Hoare triple {23079#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {23079#false} is VALID [2020-07-28 19:02:46,455 INFO L280 TraceCheckUtils]: 53: Hoare triple {23079#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {23079#false} is VALID [2020-07-28 19:02:46,455 INFO L280 TraceCheckUtils]: 54: Hoare triple {23079#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {23079#false} is VALID [2020-07-28 19:02:46,455 INFO L280 TraceCheckUtils]: 55: Hoare triple {23079#false} assume !false; {23079#false} is VALID [2020-07-28 19:02:46,458 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:02:46,459 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [71676694] [2020-07-28 19:02:46,459 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:46,459 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:02:46,459 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2034765869] [2020-07-28 19:02:46,460 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 56 [2020-07-28 19:02:46,460 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:46,460 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:46,520 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 56 edges. 56 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:46,521 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:46,521 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:46,521 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:46,521 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:46,521 INFO L87 Difference]: Start difference. First operand 244 states and 303 transitions. Second operand 5 states. [2020-07-28 19:02:48,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:48,416 INFO L93 Difference]: Finished difference Result 622 states and 772 transitions. [2020-07-28 19:02:48,416 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:02:48,416 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 56 [2020-07-28 19:02:48,417 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:48,417 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:48,418 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 247 transitions. [2020-07-28 19:02:48,418 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:48,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 247 transitions. [2020-07-28 19:02:48,419 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 247 transitions. [2020-07-28 19:02:48,742 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 247 edges. 247 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:48,756 INFO L225 Difference]: With dead ends: 622 [2020-07-28 19:02:48,756 INFO L226 Difference]: Without dead ends: 384 [2020-07-28 19:02:48,758 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:02:48,762 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 384 states. [2020-07-28 19:02:49,601 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 384 to 244. [2020-07-28 19:02:49,601 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:49,602 INFO L82 GeneralOperation]: Start isEquivalent. First operand 384 states. Second operand 244 states. [2020-07-28 19:02:49,602 INFO L74 IsIncluded]: Start isIncluded. First operand 384 states. Second operand 244 states. [2020-07-28 19:02:49,602 INFO L87 Difference]: Start difference. First operand 384 states. Second operand 244 states. [2020-07-28 19:02:49,610 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:49,610 INFO L93 Difference]: Finished difference Result 384 states and 471 transitions. [2020-07-28 19:02:49,610 INFO L276 IsEmpty]: Start isEmpty. Operand 384 states and 471 transitions. [2020-07-28 19:02:49,610 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:49,610 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:49,611 INFO L74 IsIncluded]: Start isIncluded. First operand 244 states. Second operand 384 states. [2020-07-28 19:02:49,611 INFO L87 Difference]: Start difference. First operand 244 states. Second operand 384 states. [2020-07-28 19:02:49,621 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:49,622 INFO L93 Difference]: Finished difference Result 384 states and 471 transitions. [2020-07-28 19:02:49,622 INFO L276 IsEmpty]: Start isEmpty. Operand 384 states and 471 transitions. [2020-07-28 19:02:49,622 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:49,623 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:49,623 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:49,623 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:49,624 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 244 states. [2020-07-28 19:02:49,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 244 states to 244 states and 299 transitions. [2020-07-28 19:02:49,628 INFO L78 Accepts]: Start accepts. Automaton has 244 states and 299 transitions. Word has length 56 [2020-07-28 19:02:49,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:49,628 INFO L479 AbstractCegarLoop]: Abstraction has 244 states and 299 transitions. [2020-07-28 19:02:49,628 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:49,629 INFO L276 IsEmpty]: Start isEmpty. Operand 244 states and 299 transitions. [2020-07-28 19:02:49,629 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2020-07-28 19:02:49,629 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:49,629 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:49,629 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2020-07-28 19:02:49,630 INFO L427 AbstractCegarLoop]: === Iteration 15 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:49,630 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:49,630 INFO L82 PathProgramCache]: Analyzing trace with hash 458072168, now seen corresponding path program 1 times [2020-07-28 19:02:49,630 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:49,630 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [317609633] [2020-07-28 19:02:49,630 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:49,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:49,702 INFO L280 TraceCheckUtils]: 0: Hoare triple {25067#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {25067#true} is VALID [2020-07-28 19:02:49,703 INFO L280 TraceCheckUtils]: 1: Hoare triple {25067#true} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {25067#true} is VALID [2020-07-28 19:02:49,703 INFO L280 TraceCheckUtils]: 2: Hoare triple {25067#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {25067#true} is VALID [2020-07-28 19:02:49,703 INFO L280 TraceCheckUtils]: 3: Hoare triple {25067#true} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {25067#true} is VALID [2020-07-28 19:02:49,703 INFO L280 TraceCheckUtils]: 4: Hoare triple {25067#true} assume 0 != main_~tmp~0; {25067#true} is VALID [2020-07-28 19:02:49,704 INFO L280 TraceCheckUtils]: 5: Hoare triple {25067#true} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {25067#true} is VALID [2020-07-28 19:02:49,704 INFO L280 TraceCheckUtils]: 6: Hoare triple {25067#true} assume !false; {25067#true} is VALID [2020-07-28 19:02:49,704 INFO L280 TraceCheckUtils]: 7: Hoare triple {25067#true} assume test_~splverifierCounter~0 < 4; {25067#true} is VALID [2020-07-28 19:02:49,704 INFO L280 TraceCheckUtils]: 8: Hoare triple {25067#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {25067#true} is VALID [2020-07-28 19:02:49,704 INFO L280 TraceCheckUtils]: 9: Hoare triple {25067#true} assume 0 != test_~tmp~5; {25067#true} is VALID [2020-07-28 19:02:49,704 INFO L280 TraceCheckUtils]: 10: Hoare triple {25067#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {25067#true} is VALID [2020-07-28 19:02:49,704 INFO L280 TraceCheckUtils]: 11: Hoare triple {25067#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {25067#true} is VALID [2020-07-28 19:02:49,705 INFO L280 TraceCheckUtils]: 12: Hoare triple {25067#true} assume !(0 != test_~tmp___0~1); {25067#true} is VALID [2020-07-28 19:02:49,705 INFO L280 TraceCheckUtils]: 13: Hoare triple {25067#true} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {25067#true} is VALID [2020-07-28 19:02:49,705 INFO L280 TraceCheckUtils]: 14: Hoare triple {25067#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25067#true} is VALID [2020-07-28 19:02:49,706 INFO L280 TraceCheckUtils]: 15: Hoare triple {25067#true} assume !(0 != ~pumpRunning~0); {25067#true} is VALID [2020-07-28 19:02:49,706 INFO L280 TraceCheckUtils]: 16: Hoare triple {25067#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {25067#true} is VALID [2020-07-28 19:02:49,706 INFO L280 TraceCheckUtils]: 17: Hoare triple {25067#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {25067#true} is VALID [2020-07-28 19:02:49,706 INFO L280 TraceCheckUtils]: 18: Hoare triple {25067#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {25067#true} is VALID [2020-07-28 19:02:49,707 INFO L280 TraceCheckUtils]: 19: Hoare triple {25067#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {25067#true} is VALID [2020-07-28 19:02:49,707 INFO L280 TraceCheckUtils]: 20: Hoare triple {25067#true} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {25067#true} is VALID [2020-07-28 19:02:49,707 INFO L280 TraceCheckUtils]: 21: Hoare triple {25067#true} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {25067#true} is VALID [2020-07-28 19:02:49,707 INFO L280 TraceCheckUtils]: 22: Hoare triple {25067#true} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {25067#true} is VALID [2020-07-28 19:02:49,707 INFO L280 TraceCheckUtils]: 23: Hoare triple {25067#true} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {25067#true} is VALID [2020-07-28 19:02:49,707 INFO L280 TraceCheckUtils]: 24: Hoare triple {25067#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc activatePump_#t~ret56, activatePump_~tmp~8;havoc activatePump_~tmp~8;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {25067#true} is VALID [2020-07-28 19:02:49,708 INFO L280 TraceCheckUtils]: 25: Hoare triple {25067#true} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {25067#true} is VALID [2020-07-28 19:02:49,708 INFO L280 TraceCheckUtils]: 26: Hoare triple {25067#true} activatePump_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret56 && activatePump_#t~ret56 <= 2147483647;activatePump_~tmp~8 := activatePump_#t~ret56;havoc activatePump_#t~ret56; {25067#true} is VALID [2020-07-28 19:02:49,708 INFO L280 TraceCheckUtils]: 27: Hoare triple {25067#true} assume !(0 != activatePump_~tmp~8);~pumpRunning~0 := 1; {25067#true} is VALID [2020-07-28 19:02:49,716 INFO L280 TraceCheckUtils]: 28: Hoare triple {25067#true} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {25067#true} is VALID [2020-07-28 19:02:49,717 INFO L280 TraceCheckUtils]: 29: Hoare triple {25067#true} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {25067#true} is VALID [2020-07-28 19:02:49,717 INFO L280 TraceCheckUtils]: 30: Hoare triple {25067#true} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {25067#true} is VALID [2020-07-28 19:02:49,718 INFO L280 TraceCheckUtils]: 31: Hoare triple {25067#true} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {25067#true} is VALID [2020-07-28 19:02:49,718 INFO L280 TraceCheckUtils]: 32: Hoare triple {25067#true} assume !(2 == __utac_acc__Specification3_spec__1_~tmp___0~0); {25067#true} is VALID [2020-07-28 19:02:49,718 INFO L280 TraceCheckUtils]: 33: Hoare triple {25067#true} assume !false; {25067#true} is VALID [2020-07-28 19:02:49,721 INFO L280 TraceCheckUtils]: 34: Hoare triple {25067#true} assume test_~splverifierCounter~0 < 4; {25067#true} is VALID [2020-07-28 19:02:49,722 INFO L280 TraceCheckUtils]: 35: Hoare triple {25067#true} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {25067#true} is VALID [2020-07-28 19:02:49,722 INFO L280 TraceCheckUtils]: 36: Hoare triple {25067#true} assume !(0 != test_~tmp~5); {25067#true} is VALID [2020-07-28 19:02:49,722 INFO L280 TraceCheckUtils]: 37: Hoare triple {25067#true} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {25067#true} is VALID [2020-07-28 19:02:49,723 INFO L280 TraceCheckUtils]: 38: Hoare triple {25067#true} assume !(0 != test_~tmp___0~1); {25067#true} is VALID [2020-07-28 19:02:49,723 INFO L280 TraceCheckUtils]: 39: Hoare triple {25067#true} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {25067#true} is VALID [2020-07-28 19:02:49,723 INFO L280 TraceCheckUtils]: 40: Hoare triple {25067#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25067#true} is VALID [2020-07-28 19:02:49,724 INFO L280 TraceCheckUtils]: 41: Hoare triple {25067#true} assume 0 != ~pumpRunning~0; {25067#true} is VALID [2020-07-28 19:02:49,724 INFO L280 TraceCheckUtils]: 42: Hoare triple {25067#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25067#true} is VALID [2020-07-28 19:02:49,724 INFO L280 TraceCheckUtils]: 43: Hoare triple {25067#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {25067#true} is VALID [2020-07-28 19:02:49,726 INFO L280 TraceCheckUtils]: 44: Hoare triple {25067#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret75, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~10, isLowWaterLevel_~tmp___0~3;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~10;havoc isLowWaterLevel_~tmp___0~3;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {25067#true} is VALID [2020-07-28 19:02:49,727 INFO L280 TraceCheckUtils]: 45: Hoare triple {25067#true} isLowWaterLevel_#t~ret75 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret75 && isLowWaterLevel_#t~ret75 <= 2147483647;isLowWaterLevel_~tmp~10 := isLowWaterLevel_#t~ret75;havoc isLowWaterLevel_#t~ret75; {25067#true} is VALID [2020-07-28 19:02:49,737 INFO L280 TraceCheckUtils]: 46: Hoare triple {25067#true} assume 0 != isLowWaterLevel_~tmp~10;isLowWaterLevel_~tmp___0~3 := 0; {25069#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~3)} is VALID [2020-07-28 19:02:49,741 INFO L280 TraceCheckUtils]: 47: Hoare triple {25069#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~3)} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~3;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {25070#(= 0 |ULTIMATE.start_isLowWaterLevel_#res|)} is VALID [2020-07-28 19:02:49,742 INFO L280 TraceCheckUtils]: 48: Hoare triple {25070#(= 0 |ULTIMATE.start_isLowWaterLevel_#res|)} processEnvironment_#t~ret55 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret55 && processEnvironment_#t~ret55 <= 2147483647;processEnvironment_~tmp~7 := processEnvironment_#t~ret55;havoc processEnvironment_#t~ret55; {25071#(= 0 ULTIMATE.start_processEnvironment_~tmp~7)} is VALID [2020-07-28 19:02:49,743 INFO L280 TraceCheckUtils]: 49: Hoare triple {25071#(= 0 ULTIMATE.start_processEnvironment_~tmp~7)} assume 0 != processEnvironment_~tmp~7;~pumpRunning~0 := 0; {25068#false} is VALID [2020-07-28 19:02:49,743 INFO L280 TraceCheckUtils]: 50: Hoare triple {25068#false} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {25068#false} is VALID [2020-07-28 19:02:49,743 INFO L280 TraceCheckUtils]: 51: Hoare triple {25068#false} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {25068#false} is VALID [2020-07-28 19:02:49,743 INFO L280 TraceCheckUtils]: 52: Hoare triple {25068#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {25068#false} is VALID [2020-07-28 19:02:49,744 INFO L280 TraceCheckUtils]: 53: Hoare triple {25068#false} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {25068#false} is VALID [2020-07-28 19:02:49,744 INFO L280 TraceCheckUtils]: 54: Hoare triple {25068#false} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {25068#false} is VALID [2020-07-28 19:02:49,744 INFO L280 TraceCheckUtils]: 55: Hoare triple {25068#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {25068#false} is VALID [2020-07-28 19:02:49,744 INFO L280 TraceCheckUtils]: 56: Hoare triple {25068#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {25068#false} is VALID [2020-07-28 19:02:49,744 INFO L280 TraceCheckUtils]: 57: Hoare triple {25068#false} assume !false; {25068#false} is VALID [2020-07-28 19:02:49,746 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 19:02:49,747 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [317609633] [2020-07-28 19:02:49,747 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:02:49,747 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:02:49,747 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [238986987] [2020-07-28 19:02:49,748 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 58 [2020-07-28 19:02:49,748 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:49,748 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:02:49,805 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:49,805 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:02:49,805 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:49,806 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:02:49,806 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:02:49,806 INFO L87 Difference]: Start difference. First operand 244 states and 299 transitions. Second operand 5 states. [2020-07-28 19:02:51,272 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:51,272 INFO L93 Difference]: Finished difference Result 514 states and 643 transitions. [2020-07-28 19:02:51,272 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:02:51,272 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 58 [2020-07-28 19:02:51,272 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:51,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:51,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 185 transitions. [2020-07-28 19:02:51,273 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:02:51,274 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 185 transitions. [2020-07-28 19:02:51,275 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 185 transitions. [2020-07-28 19:02:51,487 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 185 edges. 185 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:51,494 INFO L225 Difference]: With dead ends: 514 [2020-07-28 19:02:51,495 INFO L226 Difference]: Without dead ends: 326 [2020-07-28 19:02:51,495 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:51,496 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 326 states. [2020-07-28 19:02:52,401 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 326 to 250. [2020-07-28 19:02:52,401 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:52,401 INFO L82 GeneralOperation]: Start isEquivalent. First operand 326 states. Second operand 250 states. [2020-07-28 19:02:52,401 INFO L74 IsIncluded]: Start isIncluded. First operand 326 states. Second operand 250 states. [2020-07-28 19:02:52,401 INFO L87 Difference]: Start difference. First operand 326 states. Second operand 250 states. [2020-07-28 19:02:52,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:52,407 INFO L93 Difference]: Finished difference Result 326 states and 406 transitions. [2020-07-28 19:02:52,407 INFO L276 IsEmpty]: Start isEmpty. Operand 326 states and 406 transitions. [2020-07-28 19:02:52,407 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:52,407 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:52,407 INFO L74 IsIncluded]: Start isIncluded. First operand 250 states. Second operand 326 states. [2020-07-28 19:02:52,408 INFO L87 Difference]: Start difference. First operand 250 states. Second operand 326 states. [2020-07-28 19:02:52,414 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:52,414 INFO L93 Difference]: Finished difference Result 326 states and 406 transitions. [2020-07-28 19:02:52,414 INFO L276 IsEmpty]: Start isEmpty. Operand 326 states and 406 transitions. [2020-07-28 19:02:52,414 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:52,414 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:52,415 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:52,415 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:52,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 250 states. [2020-07-28 19:02:52,418 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 250 states to 250 states and 305 transitions. [2020-07-28 19:02:52,419 INFO L78 Accepts]: Start accepts. Automaton has 250 states and 305 transitions. Word has length 58 [2020-07-28 19:02:52,419 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:52,419 INFO L479 AbstractCegarLoop]: Abstraction has 250 states and 305 transitions. [2020-07-28 19:02:52,419 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:02:52,419 INFO L276 IsEmpty]: Start isEmpty. Operand 250 states and 305 transitions. [2020-07-28 19:02:52,420 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 59 [2020-07-28 19:02:52,420 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:02:52,420 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:02:52,420 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2020-07-28 19:02:52,420 INFO L427 AbstractCegarLoop]: === Iteration 16 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:02:52,420 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:02:52,421 INFO L82 PathProgramCache]: Analyzing trace with hash 716237606, now seen corresponding path program 1 times [2020-07-28 19:02:52,421 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:02:52,421 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [517851759] [2020-07-28 19:02:52,421 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:02:52,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:52,511 INFO L280 TraceCheckUtils]: 0: Hoare triple {26793#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {26795#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:52,512 INFO L280 TraceCheckUtils]: 1: Hoare triple {26795#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {26795#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:52,513 INFO L280 TraceCheckUtils]: 2: Hoare triple {26795#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {26795#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:52,513 INFO L280 TraceCheckUtils]: 3: Hoare triple {26795#(= 1 ~waterLevel~0)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {26795#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:52,514 INFO L280 TraceCheckUtils]: 4: Hoare triple {26795#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~0; {26795#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:52,514 INFO L280 TraceCheckUtils]: 5: Hoare triple {26795#(= 1 ~waterLevel~0)} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {26795#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:52,515 INFO L280 TraceCheckUtils]: 6: Hoare triple {26795#(= 1 ~waterLevel~0)} assume !false; {26795#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:52,515 INFO L280 TraceCheckUtils]: 7: Hoare triple {26795#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {26795#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:52,516 INFO L280 TraceCheckUtils]: 8: Hoare triple {26795#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {26795#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:52,516 INFO L280 TraceCheckUtils]: 9: Hoare triple {26795#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~5; {26795#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:02:52,517 INFO L280 TraceCheckUtils]: 10: Hoare triple {26795#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,517 INFO L280 TraceCheckUtils]: 11: Hoare triple {26796#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,518 INFO L280 TraceCheckUtils]: 12: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1); {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,518 INFO L280 TraceCheckUtils]: 13: Hoare triple {26796#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,519 INFO L280 TraceCheckUtils]: 14: Hoare triple {26796#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,519 INFO L280 TraceCheckUtils]: 15: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,520 INFO L280 TraceCheckUtils]: 16: Hoare triple {26796#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,520 INFO L280 TraceCheckUtils]: 17: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,521 INFO L280 TraceCheckUtils]: 18: Hoare triple {26796#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,522 INFO L280 TraceCheckUtils]: 19: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,522 INFO L280 TraceCheckUtils]: 20: Hoare triple {26796#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,523 INFO L280 TraceCheckUtils]: 21: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,523 INFO L280 TraceCheckUtils]: 22: Hoare triple {26796#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,524 INFO L280 TraceCheckUtils]: 23: Hoare triple {26796#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,524 INFO L280 TraceCheckUtils]: 24: Hoare triple {26796#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc activatePump_#t~ret56, activatePump_~tmp~8;havoc activatePump_~tmp~8;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,525 INFO L280 TraceCheckUtils]: 25: Hoare triple {26796#(<= ~waterLevel~0 2)} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,525 INFO L280 TraceCheckUtils]: 26: Hoare triple {26796#(<= ~waterLevel~0 2)} activatePump_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret56 && activatePump_#t~ret56 <= 2147483647;activatePump_~tmp~8 := activatePump_#t~ret56;havoc activatePump_#t~ret56; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,526 INFO L280 TraceCheckUtils]: 27: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != activatePump_~tmp~8);~pumpRunning~0 := 1; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,526 INFO L280 TraceCheckUtils]: 28: Hoare triple {26796#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,527 INFO L280 TraceCheckUtils]: 29: Hoare triple {26796#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,534 INFO L280 TraceCheckUtils]: 30: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,534 INFO L280 TraceCheckUtils]: 31: Hoare triple {26796#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,535 INFO L280 TraceCheckUtils]: 32: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(2 == __utac_acc__Specification3_spec__1_~tmp___0~0); {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,535 INFO L280 TraceCheckUtils]: 33: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !false; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,536 INFO L280 TraceCheckUtils]: 34: Hoare triple {26796#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,536 INFO L280 TraceCheckUtils]: 35: Hoare triple {26796#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,537 INFO L280 TraceCheckUtils]: 36: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~5); {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,537 INFO L280 TraceCheckUtils]: 37: Hoare triple {26796#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,538 INFO L280 TraceCheckUtils]: 38: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1); {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,541 INFO L280 TraceCheckUtils]: 39: Hoare triple {26796#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,541 INFO L280 TraceCheckUtils]: 40: Hoare triple {26796#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,542 INFO L280 TraceCheckUtils]: 41: Hoare triple {26796#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:52,543 INFO L280 TraceCheckUtils]: 42: Hoare triple {26796#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,543 INFO L280 TraceCheckUtils]: 43: Hoare triple {26797#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,543 INFO L280 TraceCheckUtils]: 44: Hoare triple {26797#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret75, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~10, isLowWaterLevel_~tmp___0~3;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~10;havoc isLowWaterLevel_~tmp___0~3;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,544 INFO L280 TraceCheckUtils]: 45: Hoare triple {26797#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret75 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret75 && isLowWaterLevel_#t~ret75 <= 2147483647;isLowWaterLevel_~tmp~10 := isLowWaterLevel_#t~ret75;havoc isLowWaterLevel_#t~ret75; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,544 INFO L280 TraceCheckUtils]: 46: Hoare triple {26797#(<= ~waterLevel~0 1)} assume !(0 != isLowWaterLevel_~tmp~10);isLowWaterLevel_~tmp___0~3 := 1; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,545 INFO L280 TraceCheckUtils]: 47: Hoare triple {26797#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~3;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,545 INFO L280 TraceCheckUtils]: 48: Hoare triple {26797#(<= ~waterLevel~0 1)} processEnvironment_#t~ret55 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret55 && processEnvironment_#t~ret55 <= 2147483647;processEnvironment_~tmp~7 := processEnvironment_#t~ret55;havoc processEnvironment_#t~ret55; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,546 INFO L280 TraceCheckUtils]: 49: Hoare triple {26797#(<= ~waterLevel~0 1)} assume 0 != processEnvironment_~tmp~7;~pumpRunning~0 := 0; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,546 INFO L280 TraceCheckUtils]: 50: Hoare triple {26797#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,546 INFO L280 TraceCheckUtils]: 51: Hoare triple {26797#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,547 INFO L280 TraceCheckUtils]: 52: Hoare triple {26797#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {26798#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:02:52,547 INFO L280 TraceCheckUtils]: 53: Hoare triple {26798#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {26799#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} is VALID [2020-07-28 19:02:52,548 INFO L280 TraceCheckUtils]: 54: Hoare triple {26799#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {26794#false} is VALID [2020-07-28 19:02:52,548 INFO L280 TraceCheckUtils]: 55: Hoare triple {26794#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {26794#false} is VALID [2020-07-28 19:02:52,548 INFO L280 TraceCheckUtils]: 56: Hoare triple {26794#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {26794#false} is VALID [2020-07-28 19:02:52,548 INFO L280 TraceCheckUtils]: 57: Hoare triple {26794#false} assume !false; {26794#false} is VALID [2020-07-28 19:02:52,550 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2020-07-28 19:02:52,551 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [517851759] [2020-07-28 19:02:52,551 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1179512619] [2020-07-28 19:02:52,551 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:02:52,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:52,689 INFO L263 TraceCheckSpWp]: Trace formula consists of 441 conjuncts, 7 conjunts are in the unsatisfiable core [2020-07-28 19:02:52,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:02:52,724 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:02:52,997 INFO L280 TraceCheckUtils]: 0: Hoare triple {26793#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(30);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(9);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(21);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(30);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(9);call #t~string25.base, #t~string25.offset := #Ultimate.allocOnStack(21);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(30);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(9);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(25);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(30);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(9);call #t~string34.base, #t~string34.offset := #Ultimate.allocOnStack(25);call #t~string38.base, #t~string38.offset := #Ultimate.allocOnStack(13);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string40.base, #t~string40.offset, 1);call write~init~int(77, #t~string40.base, 1 + #t~string40.offset, 1);call write~init~int(101, #t~string40.base, 2 + #t~string40.offset, 1);call write~init~int(116, #t~string40.base, 3 + #t~string40.offset, 1);call write~init~int(104, #t~string40.base, 4 + #t~string40.offset, 1);call write~init~int(58, #t~string40.base, 5 + #t~string40.offset, 1);call write~init~int(0, #t~string40.base, 6 + #t~string40.offset, 1);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string42.base, #t~string42.offset, 1);call write~init~int(82, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(73, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(84, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 4 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string44.base, #t~string44.offset, 1);call write~init~int(75, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 2 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string46.base, #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 1 + #t~string46.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(13);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(80, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(117, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(109, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(112, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string67.base, #t~string67.offset, 1);call write~init~int(110, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 2 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(102, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 3 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(32, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 2 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string73.base, #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 1 + #t~string73.offset, 1);~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,997 INFO L280 TraceCheckUtils]: 1: Hoare triple {26797#(<= ~waterLevel~0 1)} havoc main_#res;havoc main_#t~ret0, main_~retValue_acc~0, main_~tmp~0;havoc main_~retValue_acc~0;havoc main_~tmp~0; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,998 INFO L280 TraceCheckUtils]: 2: Hoare triple {26797#(<= ~waterLevel~0 1)} havoc valid_product_#res;havoc valid_product_~retValue_acc~2;havoc valid_product_~retValue_acc~2;valid_product_~retValue_acc~2 := 1;valid_product_#res := valid_product_~retValue_acc~2; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,999 INFO L280 TraceCheckUtils]: 3: Hoare triple {26797#(<= ~waterLevel~0 1)} main_#t~ret0 := valid_product_#res;assume -2147483648 <= main_#t~ret0 && main_#t~ret0 <= 2147483647;main_~tmp~0 := main_#t~ret0;havoc main_#t~ret0; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:52,999 INFO L280 TraceCheckUtils]: 4: Hoare triple {26797#(<= ~waterLevel~0 1)} assume 0 != main_~tmp~0; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,000 INFO L280 TraceCheckUtils]: 5: Hoare triple {26797#(<= ~waterLevel~0 1)} havoc test_#t~nondet50, test_#t~nondet51, test_#t~nondet52, test_#t~nondet53, test_~splverifierCounter~0, test_~tmp~5, test_~tmp___0~1, test_~tmp___1~1, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~5;havoc test_~tmp___0~1;havoc test_~tmp___1~1;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,000 INFO L280 TraceCheckUtils]: 6: Hoare triple {26797#(<= ~waterLevel~0 1)} assume !false; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,001 INFO L280 TraceCheckUtils]: 7: Hoare triple {26797#(<= ~waterLevel~0 1)} assume test_~splverifierCounter~0 < 4; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,001 INFO L280 TraceCheckUtils]: 8: Hoare triple {26797#(<= ~waterLevel~0 1)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,002 INFO L280 TraceCheckUtils]: 9: Hoare triple {26797#(<= ~waterLevel~0 1)} assume 0 != test_~tmp~5; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,003 INFO L280 TraceCheckUtils]: 10: Hoare triple {26797#(<= ~waterLevel~0 1)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,003 INFO L280 TraceCheckUtils]: 11: Hoare triple {26796#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,004 INFO L280 TraceCheckUtils]: 12: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1); {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,004 INFO L280 TraceCheckUtils]: 13: Hoare triple {26796#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,005 INFO L280 TraceCheckUtils]: 14: Hoare triple {26796#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,005 INFO L280 TraceCheckUtils]: 15: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0); {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,006 INFO L280 TraceCheckUtils]: 16: Hoare triple {26796#(<= ~waterLevel~0 2)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,007 INFO L280 TraceCheckUtils]: 17: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret54, processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc processEnvironment__wrappee__highWaterSensor_~tmp~6; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,007 INFO L280 TraceCheckUtils]: 18: Hoare triple {26796#(<= ~waterLevel~0 2)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret74, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~9, isHighWaterLevel_~tmp___0~2;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~9;havoc isHighWaterLevel_~tmp___0~2;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,008 INFO L280 TraceCheckUtils]: 19: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,008 INFO L280 TraceCheckUtils]: 20: Hoare triple {26796#(<= ~waterLevel~0 2)} isHighWaterLevel_#t~ret74 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret74 && isHighWaterLevel_#t~ret74 <= 2147483647;isHighWaterLevel_~tmp~9 := isHighWaterLevel_#t~ret74;havoc isHighWaterLevel_#t~ret74; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,009 INFO L280 TraceCheckUtils]: 21: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != isHighWaterLevel_~tmp~9);isHighWaterLevel_~tmp___0~2 := 1; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,009 INFO L280 TraceCheckUtils]: 22: Hoare triple {26796#(<= ~waterLevel~0 2)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~2;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,010 INFO L280 TraceCheckUtils]: 23: Hoare triple {26796#(<= ~waterLevel~0 2)} processEnvironment__wrappee__highWaterSensor_#t~ret54 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret54 && processEnvironment__wrappee__highWaterSensor_#t~ret54 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~6 := processEnvironment__wrappee__highWaterSensor_#t~ret54;havoc processEnvironment__wrappee__highWaterSensor_#t~ret54; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,010 INFO L280 TraceCheckUtils]: 24: Hoare triple {26796#(<= ~waterLevel~0 2)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~6;havoc activatePump_#t~ret56, activatePump_~tmp~8;havoc activatePump_~tmp~8;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret57, isMethaneAlarm_~retValue_acc~10;havoc isMethaneAlarm_~retValue_acc~10;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,011 INFO L280 TraceCheckUtils]: 25: Hoare triple {26796#(<= ~waterLevel~0 2)} isMethaneAlarm_#t~ret57 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret57 && isMethaneAlarm_#t~ret57 <= 2147483647;isMethaneAlarm_~retValue_acc~10 := isMethaneAlarm_#t~ret57;havoc isMethaneAlarm_#t~ret57;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~10; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,011 INFO L280 TraceCheckUtils]: 26: Hoare triple {26796#(<= ~waterLevel~0 2)} activatePump_#t~ret56 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret56 && activatePump_#t~ret56 <= 2147483647;activatePump_~tmp~8 := activatePump_#t~ret56;havoc activatePump_#t~ret56; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,012 INFO L280 TraceCheckUtils]: 27: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != activatePump_~tmp~8);~pumpRunning~0 := 1; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,012 INFO L280 TraceCheckUtils]: 28: Hoare triple {26796#(<= ~waterLevel~0 2)} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,013 INFO L280 TraceCheckUtils]: 29: Hoare triple {26796#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,013 INFO L280 TraceCheckUtils]: 30: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,014 INFO L280 TraceCheckUtils]: 31: Hoare triple {26796#(<= ~waterLevel~0 2)} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,014 INFO L280 TraceCheckUtils]: 32: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(2 == __utac_acc__Specification3_spec__1_~tmp___0~0); {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,015 INFO L280 TraceCheckUtils]: 33: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !false; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,015 INFO L280 TraceCheckUtils]: 34: Hoare triple {26796#(<= ~waterLevel~0 2)} assume test_~splverifierCounter~0 < 4; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,016 INFO L280 TraceCheckUtils]: 35: Hoare triple {26796#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet50 && test_#t~nondet50 <= 2147483647;test_~tmp~5 := test_#t~nondet50;havoc test_#t~nondet50; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,016 INFO L280 TraceCheckUtils]: 36: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp~5); {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,017 INFO L280 TraceCheckUtils]: 37: Hoare triple {26796#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet51 && test_#t~nondet51 <= 2147483647;test_~tmp___0~1 := test_#t~nondet51;havoc test_#t~nondet51; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,017 INFO L280 TraceCheckUtils]: 38: Hoare triple {26796#(<= ~waterLevel~0 2)} assume !(0 != test_~tmp___0~1); {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,018 INFO L280 TraceCheckUtils]: 39: Hoare triple {26796#(<= ~waterLevel~0 2)} assume -2147483648 <= test_#t~nondet52 && test_#t~nondet52 <= 2147483647;test_~tmp___2~0 := test_#t~nondet52;havoc test_#t~nondet52; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,018 INFO L280 TraceCheckUtils]: 40: Hoare triple {26796#(<= ~waterLevel~0 2)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,019 INFO L280 TraceCheckUtils]: 41: Hoare triple {26796#(<= ~waterLevel~0 2)} assume 0 != ~pumpRunning~0; {26796#(<= ~waterLevel~0 2)} is VALID [2020-07-28 19:02:53,020 INFO L280 TraceCheckUtils]: 42: Hoare triple {26796#(<= ~waterLevel~0 2)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,020 INFO L280 TraceCheckUtils]: 43: Hoare triple {26797#(<= ~waterLevel~0 1)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret55, processEnvironment_~tmp~7;havoc processEnvironment_~tmp~7; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,036 INFO L280 TraceCheckUtils]: 44: Hoare triple {26797#(<= ~waterLevel~0 1)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret75, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~10, isLowWaterLevel_~tmp___0~3;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~10;havoc isLowWaterLevel_~tmp___0~3;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,037 INFO L280 TraceCheckUtils]: 45: Hoare triple {26797#(<= ~waterLevel~0 1)} isLowWaterLevel_#t~ret75 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret75 && isLowWaterLevel_#t~ret75 <= 2147483647;isLowWaterLevel_~tmp~10 := isLowWaterLevel_#t~ret75;havoc isLowWaterLevel_#t~ret75; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,037 INFO L280 TraceCheckUtils]: 46: Hoare triple {26797#(<= ~waterLevel~0 1)} assume !(0 != isLowWaterLevel_~tmp~10);isLowWaterLevel_~tmp___0~3 := 1; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,038 INFO L280 TraceCheckUtils]: 47: Hoare triple {26797#(<= ~waterLevel~0 1)} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~3;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,038 INFO L280 TraceCheckUtils]: 48: Hoare triple {26797#(<= ~waterLevel~0 1)} processEnvironment_#t~ret55 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret55 && processEnvironment_#t~ret55 <= 2147483647;processEnvironment_~tmp~7 := processEnvironment_#t~ret55;havoc processEnvironment_#t~ret55; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,039 INFO L280 TraceCheckUtils]: 49: Hoare triple {26797#(<= ~waterLevel~0 1)} assume 0 != processEnvironment_~tmp~7;~pumpRunning~0 := 0; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,039 INFO L280 TraceCheckUtils]: 50: Hoare triple {26797#(<= ~waterLevel~0 1)} havoc __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_~tmp~4, __utac_acc__Specification3_spec__1_~tmp___0~0, __utac_acc__Specification3_spec__1_~tmp___1~0;havoc __utac_acc__Specification3_spec__1_~tmp~4;havoc __utac_acc__Specification3_spec__1_~tmp___0~0;havoc __utac_acc__Specification3_spec__1_~tmp___1~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~6;havoc isMethaneLevelCritical_~retValue_acc~6;isMethaneLevelCritical_~retValue_acc~6 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~6; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,040 INFO L280 TraceCheckUtils]: 51: Hoare triple {26797#(<= ~waterLevel~0 1)} __utac_acc__Specification3_spec__1_#t~ret47 := isMethaneLevelCritical_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret47 && __utac_acc__Specification3_spec__1_#t~ret47 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp~4 := __utac_acc__Specification3_spec__1_#t~ret47;havoc __utac_acc__Specification3_spec__1_#t~ret47; {26797#(<= ~waterLevel~0 1)} is VALID [2020-07-28 19:02:53,040 INFO L280 TraceCheckUtils]: 52: Hoare triple {26797#(<= ~waterLevel~0 1)} assume !(0 != __utac_acc__Specification3_spec__1_~tmp~4);havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {26798#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} is VALID [2020-07-28 19:02:53,041 INFO L280 TraceCheckUtils]: 53: Hoare triple {26798#(<= |ULTIMATE.start_getWaterLevel_#res| 1)} __utac_acc__Specification3_spec__1_#t~ret48 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret48 && __utac_acc__Specification3_spec__1_#t~ret48 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___0~0 := __utac_acc__Specification3_spec__1_#t~ret48;havoc __utac_acc__Specification3_spec__1_#t~ret48; {26799#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} is VALID [2020-07-28 19:02:53,042 INFO L280 TraceCheckUtils]: 54: Hoare triple {26799#(<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)} assume 2 == __utac_acc__Specification3_spec__1_~tmp___0~0;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {26794#false} is VALID [2020-07-28 19:02:53,042 INFO L280 TraceCheckUtils]: 55: Hoare triple {26794#false} __utac_acc__Specification3_spec__1_#t~ret49 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification3_spec__1_#t~ret49 && __utac_acc__Specification3_spec__1_#t~ret49 <= 2147483647;__utac_acc__Specification3_spec__1_~tmp___1~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; {26794#false} is VALID [2020-07-28 19:02:53,042 INFO L280 TraceCheckUtils]: 56: Hoare triple {26794#false} assume !(0 != __utac_acc__Specification3_spec__1_~tmp___1~0); {26794#false} is VALID [2020-07-28 19:02:53,042 INFO L280 TraceCheckUtils]: 57: Hoare triple {26794#false} assume !false; {26794#false} is VALID [2020-07-28 19:02:53,049 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 5 proven. 6 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2020-07-28 19:02:53,049 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:02:53,050 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 5] total 6 [2020-07-28 19:02:53,050 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1333883924] [2020-07-28 19:02:53,050 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 58 [2020-07-28 19:02:53,051 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:02:53,051 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:02:53,125 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:53,125 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:02:53,126 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:02:53,126 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:02:53,126 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=28, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:02:53,126 INFO L87 Difference]: Start difference. First operand 250 states and 305 transitions. Second operand 7 states. [2020-07-28 19:02:57,093 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:57,093 INFO L93 Difference]: Finished difference Result 863 states and 1076 transitions. [2020-07-28 19:02:57,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2020-07-28 19:02:57,094 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 58 [2020-07-28 19:02:57,094 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:02:57,094 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:57,097 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 387 transitions. [2020-07-28 19:02:57,098 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:02:57,101 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 387 transitions. [2020-07-28 19:02:57,101 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 387 transitions. [2020-07-28 19:02:57,570 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 387 edges. 387 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:02:57,571 INFO L225 Difference]: With dead ends: 863 [2020-07-28 19:02:57,571 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:02:57,572 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 58 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=59, Invalid=97, Unknown=0, NotChecked=0, Total=156 [2020-07-28 19:02:57,573 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:02:57,573 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:02:57,573 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:02:57,573 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:57,573 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:57,573 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:57,573 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:57,573 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:57,574 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:57,574 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:57,574 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:57,574 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:57,574 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:02:57,574 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:02:57,574 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:02:57,574 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:57,574 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:57,575 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:02:57,575 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:02:57,575 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:02:57,575 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:02:57,575 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:02:57,575 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 58 [2020-07-28 19:02:57,575 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:02:57,575 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:02:57,575 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:02:57,576 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:02:57,576 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:02:57,777 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2020-07-28 19:02:57,781 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:02:58,106 WARN L193 SmtUtils]: Spent 315.00 ms on a formula simplification. DAG size of input: 165 DAG size of output: 139 [2020-07-28 19:02:58,947 WARN L193 SmtUtils]: Spent 834.00 ms on a formula simplification. DAG size of input: 261 DAG size of output: 204 [2020-07-28 19:03:00,004 WARN L193 SmtUtils]: Spent 937.00 ms on a formula simplification. DAG size of input: 286 DAG size of output: 241 [2020-07-28 19:03:00,939 WARN L193 SmtUtils]: Spent 881.00 ms on a formula simplification. DAG size of input: 360 DAG size of output: 310 [2020-07-28 19:03:01,116 WARN L193 SmtUtils]: Spent 171.00 ms on a formula simplification. DAG size of input: 175 DAG size of output: 142 [2020-07-28 19:03:01,249 WARN L193 SmtUtils]: Spent 124.00 ms on a formula simplification. DAG size of input: 161 DAG size of output: 115 [2020-07-28 19:03:01,776 WARN L193 SmtUtils]: Spent 521.00 ms on a formula simplification. DAG size of input: 360 DAG size of output: 310 [2020-07-28 19:03:02,048 WARN L193 SmtUtils]: Spent 216.00 ms on a formula simplification. DAG size of input: 272 DAG size of output: 238 [2020-07-28 19:03:02,215 WARN L193 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 194 DAG size of output: 157 [2020-07-28 19:03:03,056 WARN L193 SmtUtils]: Spent 780.00 ms on a formula simplification. DAG size of input: 134 DAG size of output: 63 [2020-07-28 19:03:04,641 WARN L193 SmtUtils]: Spent 1.58 s on a formula simplification. DAG size of input: 194 DAG size of output: 57 [2020-07-28 19:03:04,872 WARN L193 SmtUtils]: Spent 210.00 ms on a formula simplification. DAG size of input: 65 DAG size of output: 20 [2020-07-28 19:03:06,782 WARN L193 SmtUtils]: Spent 1.90 s on a formula simplification. DAG size of input: 238 DAG size of output: 27 [2020-07-28 19:03:06,990 WARN L193 SmtUtils]: Spent 195.00 ms on a formula simplification. DAG size of input: 51 DAG size of output: 40 [2020-07-28 19:03:09,919 WARN L193 SmtUtils]: Spent 2.90 s on a formula simplification. DAG size of input: 307 DAG size of output: 45 [2020-07-28 19:03:10,680 WARN L193 SmtUtils]: Spent 754.00 ms on a formula simplification. DAG size of input: 140 DAG size of output: 37 [2020-07-28 19:03:11,316 WARN L193 SmtUtils]: Spent 575.00 ms on a formula simplification. DAG size of input: 108 DAG size of output: 28 [2020-07-28 19:03:14,246 WARN L193 SmtUtils]: Spent 2.91 s on a formula simplification. DAG size of input: 307 DAG size of output: 45 [2020-07-28 19:03:14,508 WARN L193 SmtUtils]: Spent 245.00 ms on a formula simplification. DAG size of input: 72 DAG size of output: 20 [2020-07-28 19:03:16,089 WARN L193 SmtUtils]: Spent 1.56 s on a formula simplification. DAG size of input: 235 DAG size of output: 83 [2020-07-28 19:03:16,302 WARN L193 SmtUtils]: Spent 202.00 ms on a formula simplification. DAG size of input: 56 DAG size of output: 43 [2020-07-28 19:03:17,311 WARN L193 SmtUtils]: Spent 991.00 ms on a formula simplification. DAG size of input: 151 DAG size of output: 73 [2020-07-28 19:03:17,628 WARN L193 SmtUtils]: Spent 308.00 ms on a formula simplification. DAG size of input: 86 DAG size of output: 56 [2020-07-28 19:03:17,652 INFO L268 CegarLoopResult]: For program point L729(lines 729 735) no Hoare annotation was computed. [2020-07-28 19:03:17,652 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 549) no Hoare annotation was computed. [2020-07-28 19:03:17,653 INFO L264 CegarLoopResult]: At program point L729-1(lines 729 735) the Hoare annotation is: (let ((.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (<= ~waterLevel~0 2)) (.cse5 (= 0 ULTIMATE.start_activatePump_~tmp~8)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (not (= 0 ~systemActive~0))) (.cse6 (= 1 ~pumpRunning~0)) (.cse4 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and .cse0 .cse1 .cse2 .cse3 (= 0 ~pumpRunning~0) .cse4) (and .cse5 .cse0 .cse2 .cse1 (= 0 ULTIMATE.start_processEnvironment_~tmp~7) (<= ~waterLevel~0 1) .cse4 .cse6) (and .cse1 .cse3 (or (and .cse5 (<= 2 ~waterLevel~0) .cse0 .cse2 .cse6) (and .cse5 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6)) .cse0 .cse2 (= 1 ~waterLevel~0) .cse6)) .cse4))) [2020-07-28 19:03:17,653 INFO L264 CegarLoopResult]: At program point L895(lines 888 898) the Hoare annotation is: false [2020-07-28 19:03:17,653 INFO L264 CegarLoopResult]: At program point L895-1(lines 888 898) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6))) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not (= 0 ~systemActive~0))) (.cse6 (= 0 ~methaneLevelCritical~0)) (.cse4 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~0)) (.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse8 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse13 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse11 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse12 (= 0 ~pumpRunning~0))) (or (and .cse0 .cse1 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 (not .cse6) .cse4 .cse5 .cse7 .cse8 (not .cse13) .cse9 .cse10 .cse11 .cse12))) [2020-07-28 19:03:17,653 INFO L264 CegarLoopResult]: At program point L895-2(lines 888 898) the Hoare annotation is: false [2020-07-28 19:03:17,654 INFO L264 CegarLoopResult]: At program point L895-3(lines 888 898) the Hoare annotation is: false [2020-07-28 19:03:17,654 INFO L264 CegarLoopResult]: At program point L895-4(lines 888 898) the Hoare annotation is: false [2020-07-28 19:03:17,654 INFO L264 CegarLoopResult]: At program point L895-5(lines 888 898) the Hoare annotation is: false [2020-07-28 19:03:17,654 INFO L264 CegarLoopResult]: At program point L103(lines 99 105) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ULTIMATE.start_main_~tmp~0)) [2020-07-28 19:03:17,654 INFO L268 CegarLoopResult]: For program point L566(lines 566 570) no Hoare annotation was computed. [2020-07-28 19:03:17,654 INFO L268 CegarLoopResult]: For program point L566-3(lines 566 570) no Hoare annotation was computed. [2020-07-28 19:03:17,655 INFO L268 CegarLoopResult]: For program point L566-6(lines 566 570) no Hoare annotation was computed. [2020-07-28 19:03:17,655 INFO L271 CegarLoopResult]: At program point L139(lines 120 142) the Hoare annotation is: true [2020-07-28 19:03:17,655 INFO L268 CegarLoopResult]: For program point L833(lines 833 850) no Hoare annotation was computed. [2020-07-28 19:03:17,655 INFO L268 CegarLoopResult]: For program point L833-1(lines 833 850) no Hoare annotation was computed. [2020-07-28 19:03:17,655 INFO L268 CegarLoopResult]: For program point L833-2(lines 833 850) no Hoare annotation was computed. [2020-07-28 19:03:17,655 INFO L264 CegarLoopResult]: At program point L635(lines 630 638) the Hoare annotation is: (let ((.cse5 (<= ~waterLevel~0 1)) (.cse8 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse2 (not (= 0 ~systemActive~0))) (.cse7 (= 1 ULTIMATE.start_main_~tmp~0)) (.cse9 (= 0 ULTIMATE.start_activatePump_~tmp~8)) (.cse0 (= 0 ~methaneLevelCritical~0)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4)) (.cse6 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse10 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 (= 0 ~pumpRunning~0) .cse5 .cse6 .cse7 .cse8) (and .cse9 .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 (= 0 ULTIMATE.start_processEnvironment_~tmp~7) .cse7 .cse6 .cse10 .cse8) (and (<= 2 ~waterLevel~0) (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6)) (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse3 .cse2 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) .cse7 .cse9 .cse0 .cse1 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9) (<= ~waterLevel~0 2) .cse4 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2)) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse6 .cse10))) [2020-07-28 19:03:17,655 INFO L264 CegarLoopResult]: At program point L635-1(lines 630 638) the Hoare annotation is: false [2020-07-28 19:03:17,655 INFO L264 CegarLoopResult]: At program point L635-2(lines 630 638) the Hoare annotation is: false [2020-07-28 19:03:17,656 INFO L264 CegarLoopResult]: At program point L603(lines 598 606) the Hoare annotation is: false [2020-07-28 19:03:17,656 INFO L264 CegarLoopResult]: At program point L603-1(lines 598 606) the Hoare annotation is: (let ((.cse0 (<= 2 ~waterLevel~0)) (.cse1 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6))) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not (= 0 ~systemActive~0))) (.cse6 (= 0 ~methaneLevelCritical~0)) (.cse4 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse5 (= 1 ULTIMATE.start_main_~tmp~0)) (.cse7 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse8 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse13 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse9 (<= ~waterLevel~0 2)) (.cse10 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse11 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse12 (= 0 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10 .cse11 .cse12 .cse13) (and .cse0 .cse1 .cse2 .cse3 (not .cse6) .cse4 .cse5 .cse7 .cse8 (not .cse13) .cse9 .cse10 .cse11 .cse12))) [2020-07-28 19:03:17,656 INFO L264 CegarLoopResult]: At program point L603-2(lines 598 606) the Hoare annotation is: (let ((.cse8 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse1 (= 0 ~methaneLevelCritical~0))) (let ((.cse5 (= 0 ULTIMATE.start_processEnvironment_~tmp~7)) (.cse6 (<= ~waterLevel~0 1)) (.cse12 (= 0 ~pumpRunning~0)) (.cse13 (<= 2 ~waterLevel~0)) (.cse14 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6))) (.cse3 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse4 (not (= 0 ~systemActive~0))) (.cse15 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse11 (not .cse1)) (.cse7 (= 1 ULTIMATE.start_main_~tmp~0)) (.cse0 (= 0 ULTIMATE.start_activatePump_~tmp~8)) (.cse2 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse16 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse10 (not .cse8)) (.cse17 (<= ~waterLevel~0 2)) (.cse18 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse19 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse9 (= 1 ~pumpRunning~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9) (and .cse2 .cse3 .cse4 .cse10 .cse11 .cse12 .cse6 .cse7) (and .cse1 .cse2 .cse3 .cse4 .cse12 .cse6 .cse8 .cse7) (and .cse13 .cse14 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse3 .cse4 .cse15 .cse7 .cse0 .cse1 .cse2 .cse16 .cse17 .cse18 .cse19 .cse8 .cse9) (and .cse0 .cse2 .cse3 .cse4 .cse10 .cse11 .cse5 .cse6 .cse7 .cse9) (and .cse14 .cse3 .cse4 .cse11 .cse15 .cse7 .cse2 .cse16 .cse10 .cse17 .cse18 .cse19 .cse12) (and .cse13 .cse14 .cse3 .cse4 .cse15 .cse11 .cse7 .cse0 .cse2 .cse16 .cse10 .cse17 .cse18 .cse19 .cse9)))) [2020-07-28 19:03:17,656 INFO L264 CegarLoopResult]: At program point L603-3(lines 598 606) the Hoare annotation is: false [2020-07-28 19:03:17,656 INFO L264 CegarLoopResult]: At program point L603-4(lines 598 606) the Hoare annotation is: false [2020-07-28 19:03:17,656 INFO L264 CegarLoopResult]: At program point L603-5(lines 598 606) the Hoare annotation is: false [2020-07-28 19:03:17,656 INFO L264 CegarLoopResult]: At program point L603-6(lines 598 606) the Hoare annotation is: false [2020-07-28 19:03:17,657 INFO L264 CegarLoopResult]: At program point L603-7(lines 598 606) the Hoare annotation is: false [2020-07-28 19:03:17,657 INFO L264 CegarLoopResult]: At program point L603-8(lines 598 606) the Hoare annotation is: false [2020-07-28 19:03:17,657 INFO L264 CegarLoopResult]: At program point L174(lines 169 177) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0)) [2020-07-28 19:03:17,657 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 549) no Hoare annotation was computed. [2020-07-28 19:03:17,657 INFO L268 CegarLoopResult]: For program point L870(lines 870 876) no Hoare annotation was computed. [2020-07-28 19:03:17,657 INFO L268 CegarLoopResult]: For program point L837(lines 837 845) no Hoare annotation was computed. [2020-07-28 19:03:17,657 INFO L268 CegarLoopResult]: For program point L870-2(lines 870 876) no Hoare annotation was computed. [2020-07-28 19:03:17,657 INFO L268 CegarLoopResult]: For program point L837-1(lines 837 845) no Hoare annotation was computed. [2020-07-28 19:03:17,658 INFO L268 CegarLoopResult]: For program point L837-2(lines 837 845) no Hoare annotation was computed. [2020-07-28 19:03:17,658 INFO L268 CegarLoopResult]: For program point L870-4(lines 870 876) no Hoare annotation was computed. [2020-07-28 19:03:17,658 INFO L268 CegarLoopResult]: For program point L870-6(lines 870 876) no Hoare annotation was computed. [2020-07-28 19:03:17,658 INFO L268 CegarLoopResult]: For program point L870-8(lines 870 876) no Hoare annotation was computed. [2020-07-28 19:03:17,658 INFO L268 CegarLoopResult]: For program point L870-10(lines 870 876) no Hoare annotation was computed. [2020-07-28 19:03:17,658 INFO L264 CegarLoopResult]: At program point L904(lines 899 907) the Hoare annotation is: (and (<= 2 ~waterLevel~0) (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6)) (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (= 1 ULTIMATE.start_main_~tmp~0) (= 0 ULTIMATE.start_activatePump_~tmp~8) (= 0 ~methaneLevelCritical~0) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9) (<= ~waterLevel~0 2) (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4) (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2)) (= 1 |ULTIMATE.start_isPumpRunning_#res|) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|) (= 1 ~pumpRunning~0)) [2020-07-28 19:03:17,658 INFO L264 CegarLoopResult]: At program point L904-1(lines 899 907) the Hoare annotation is: false [2020-07-28 19:03:17,658 INFO L264 CegarLoopResult]: At program point L904-2(lines 899 907) the Hoare annotation is: false [2020-07-28 19:03:17,658 INFO L268 CegarLoopResult]: For program point L739(lines 739 752) no Hoare annotation was computed. [2020-07-28 19:03:17,659 INFO L268 CegarLoopResult]: For program point L673(lines 673 693) no Hoare annotation was computed. [2020-07-28 19:03:17,659 INFO L268 CegarLoopResult]: For program point L673-2(lines 673 693) no Hoare annotation was computed. [2020-07-28 19:03:17,659 INFO L268 CegarLoopResult]: For program point L673-4(lines 673 693) no Hoare annotation was computed. [2020-07-28 19:03:17,659 INFO L268 CegarLoopResult]: For program point L972(lines 972 976) no Hoare annotation was computed. [2020-07-28 19:03:17,659 INFO L268 CegarLoopResult]: For program point L972-2(lines 972 976) no Hoare annotation was computed. [2020-07-28 19:03:17,659 INFO L268 CegarLoopResult]: For program point L972-3(lines 972 976) no Hoare annotation was computed. [2020-07-28 19:03:17,659 INFO L268 CegarLoopResult]: For program point L807(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:03:17,659 INFO L268 CegarLoopResult]: For program point L972-5(lines 972 976) no Hoare annotation was computed. [2020-07-28 19:03:17,659 INFO L268 CegarLoopResult]: For program point L807-1(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:03:17,659 INFO L268 CegarLoopResult]: For program point L972-6(lines 972 976) no Hoare annotation was computed. [2020-07-28 19:03:17,660 INFO L268 CegarLoopResult]: For program point L807-2(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:03:17,660 INFO L268 CegarLoopResult]: For program point L807-3(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:03:17,660 INFO L268 CegarLoopResult]: For program point L972-8(lines 972 976) no Hoare annotation was computed. [2020-07-28 19:03:17,660 INFO L268 CegarLoopResult]: For program point L807-4(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:03:17,660 INFO L268 CegarLoopResult]: For program point L807-5(lines 807 824) no Hoare annotation was computed. [2020-07-28 19:03:17,662 INFO L264 CegarLoopResult]: At program point L775(lines 774 793) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (not (= 0 ~systemActive~0))) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) (= 0 ~pumpRunning~0) .cse3) (and (= 0 ULTIMATE.start_activatePump_~tmp~8) .cse0 .cse2 .cse1 (<= ~waterLevel~0 1) .cse3 (= 1 ~pumpRunning~0)))) [2020-07-28 19:03:17,662 INFO L268 CegarLoopResult]: For program point L775-1(lines 775 781) no Hoare annotation was computed. [2020-07-28 19:03:17,662 INFO L264 CegarLoopResult]: At program point L775-2(lines 774 793) the Hoare annotation is: false [2020-07-28 19:03:17,662 INFO L264 CegarLoopResult]: At program point L775-3(lines 774 793) the Hoare annotation is: false [2020-07-28 19:03:17,663 INFO L268 CegarLoopResult]: For program point L643(lines 643 649) no Hoare annotation was computed. [2020-07-28 19:03:17,663 INFO L268 CegarLoopResult]: For program point L643-1(lines 643 649) no Hoare annotation was computed. [2020-07-28 19:03:17,663 INFO L268 CegarLoopResult]: For program point L643-2(lines 643 649) no Hoare annotation was computed. [2020-07-28 19:03:17,663 INFO L268 CegarLoopResult]: For program point L643-3(lines 643 649) no Hoare annotation was computed. [2020-07-28 19:03:17,664 INFO L268 CegarLoopResult]: For program point L643-4(lines 643 649) no Hoare annotation was computed. [2020-07-28 19:03:17,664 INFO L268 CegarLoopResult]: For program point L643-5(lines 643 649) no Hoare annotation was computed. [2020-07-28 19:03:17,664 INFO L268 CegarLoopResult]: For program point L710(lines 709 756) no Hoare annotation was computed. [2020-07-28 19:03:17,664 INFO L268 CegarLoopResult]: For program point L578(lines 578 582) no Hoare annotation was computed. [2020-07-28 19:03:17,664 INFO L268 CegarLoopResult]: For program point L711(lines 711 715) no Hoare annotation was computed. [2020-07-28 19:03:17,664 INFO L268 CegarLoopResult]: For program point L811(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:03:17,664 INFO L268 CegarLoopResult]: For program point L811-1(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:03:17,664 INFO L268 CegarLoopResult]: For program point L811-2(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:03:17,665 INFO L268 CegarLoopResult]: For program point L811-3(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:03:17,665 INFO L268 CegarLoopResult]: For program point L679(lines 679 692) no Hoare annotation was computed. [2020-07-28 19:03:17,665 INFO L268 CegarLoopResult]: For program point L811-4(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:03:17,665 INFO L264 CegarLoopResult]: At program point L679-1(lines 1 989) the Hoare annotation is: (let ((.cse21 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse20 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4)) (.cse19 (= 0 ~methaneLevelCritical~0))) (let ((.cse5 (not .cse19)) (.cse8 (not .cse20)) (.cse4 (not .cse21)) (.cse11 (<= 2 ~waterLevel~0)) (.cse12 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6))) (.cse13 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse14 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse15 (<= ~waterLevel~0 2)) (.cse16 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse17 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse6 (= 0 ULTIMATE.start_processEnvironment_~tmp~7)) (.cse0 (= 0 ULTIMATE.start_activatePump_~tmp~8)) (.cse10 (= 1 ~pumpRunning~0)) (.cse22 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)) (.cse7 (<= ~waterLevel~0 1)) (.cse23 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not (= 0 ~systemActive~0))) (.cse18 (= 0 ~pumpRunning~0)) (.cse9 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and .cse0 .cse1 .cse2 .cse3 .cse4 .cse5 .cse6 .cse7 .cse8 .cse9 .cse10) (and .cse11 .cse12 .cse2 .cse3 .cse13 .cse5 .cse8 .cse9 .cse0 .cse1 .cse14 .cse4 .cse15 .cse16 .cse17 .cse10) (and .cse1 .cse2 .cse3 .cse4 .cse5 .cse18 .cse7 .cse8 .cse9) (and .cse12 .cse2 .cse3 .cse5 .cse13 .cse8 .cse9 .cse1 .cse14 .cse4 .cse15 .cse16 .cse17 .cse18) (and .cse11 .cse12 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse2 .cse3 .cse13 .cse9 .cse0 .cse19 .cse1 .cse14 .cse15 .cse20 .cse16 .cse17 .cse21 .cse10) (and .cse2 .cse3 .cse22 .cse6 .cse7 .cse9 .cse23 .cse0 .cse19 .cse1 .cse20 .cse21 .cse10) (and .cse19 .cse1 .cse2 .cse3 .cse20 .cse22 .cse18 .cse7 .cse9 .cse21 .cse23) (and .cse19 .cse1 .cse2 .cse3 .cse18 (= 1 ~waterLevel~0) .cse9)))) [2020-07-28 19:03:17,665 INFO L268 CegarLoopResult]: For program point L811-5(lines 811 819) no Hoare annotation was computed. [2020-07-28 19:03:17,665 INFO L268 CegarLoopResult]: For program point L679-2(lines 679 692) no Hoare annotation was computed. [2020-07-28 19:03:17,666 INFO L264 CegarLoopResult]: At program point L679-3(lines 1 989) the Hoare annotation is: false [2020-07-28 19:03:17,666 INFO L268 CegarLoopResult]: For program point L679-4(lines 679 692) no Hoare annotation was computed. [2020-07-28 19:03:17,666 INFO L264 CegarLoopResult]: At program point L679-5(lines 1 989) the Hoare annotation is: false [2020-07-28 19:03:17,666 INFO L264 CegarLoopResult]: At program point L52-2(lines 52 66) the Hoare annotation is: false [2020-07-28 19:03:17,666 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:03:17,666 INFO L268 CegarLoopResult]: For program point L53(line 53) no Hoare annotation was computed. [2020-07-28 19:03:17,666 INFO L264 CegarLoopResult]: At program point L978(lines 963 981) the Hoare annotation is: (and (= 0 ULTIMATE.start_activatePump_~tmp~8) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (not (= 0 ~systemActive~0)) (= 1 |ULTIMATE.start_valid_product_#res|) (<= ~waterLevel~0 1) (= 1 ULTIMATE.start_main_~tmp~0) (= 1 ~pumpRunning~0)) [2020-07-28 19:03:17,666 INFO L264 CegarLoopResult]: At program point L978-1(lines 963 981) the Hoare annotation is: false [2020-07-28 19:03:17,666 INFO L264 CegarLoopResult]: At program point L978-2(lines 963 981) the Hoare annotation is: false [2020-07-28 19:03:17,667 INFO L268 CegarLoopResult]: For program point L747(lines 747 751) no Hoare annotation was computed. [2020-07-28 19:03:17,667 INFO L264 CegarLoopResult]: At program point L747-2(lines 775 781) the Hoare annotation is: (let ((.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (<= ~waterLevel~0 2)) (.cse5 (= 0 ULTIMATE.start_activatePump_~tmp~8)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (not (= 0 ~systemActive~0))) (.cse6 (= 1 ~pumpRunning~0)) (.cse4 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and .cse0 .cse1 .cse2 .cse3 (= 0 ~pumpRunning~0) .cse4) (and .cse5 .cse0 .cse2 .cse1 (= 0 ULTIMATE.start_processEnvironment_~tmp~7) (<= ~waterLevel~0 1) .cse4 .cse6) (and .cse1 .cse3 (or (and .cse5 (<= 2 ~waterLevel~0) .cse0 .cse2 .cse6) (and .cse5 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6)) .cse0 .cse2 (= 1 ~waterLevel~0) .cse6)) .cse4))) [2020-07-28 19:03:17,667 INFO L264 CegarLoopResult]: At program point L648(lines 639 652) the Hoare annotation is: false [2020-07-28 19:03:17,667 INFO L264 CegarLoopResult]: At program point L648-1(lines 639 652) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse2 (not (= 0 ~systemActive~0))) (.cse3 (= 0 ~pumpRunning~0)) (.cse4 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 (<= ~waterLevel~0 2) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse3 .cse4) (and (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse0 .cse1 .cse2 .cse3 (<= ~waterLevel~0 1) .cse4))) [2020-07-28 19:03:17,667 INFO L264 CegarLoopResult]: At program point L648-2(lines 639 652) the Hoare annotation is: false [2020-07-28 19:03:17,667 INFO L268 CegarLoopResult]: For program point L549(line 549) no Hoare annotation was computed. [2020-07-28 19:03:17,667 INFO L264 CegarLoopResult]: At program point L648-3(lines 639 652) the Hoare annotation is: false [2020-07-28 19:03:17,668 INFO L268 CegarLoopResult]: For program point L549-1(line 549) no Hoare annotation was computed. [2020-07-28 19:03:17,668 INFO L264 CegarLoopResult]: At program point L648-4(lines 639 652) the Hoare annotation is: false [2020-07-28 19:03:17,668 INFO L264 CegarLoopResult]: At program point L648-5(lines 639 652) the Hoare annotation is: false [2020-07-28 19:03:17,668 INFO L268 CegarLoopResult]: For program point L549-2(line 549) no Hoare annotation was computed. [2020-07-28 19:03:17,668 INFO L264 CegarLoopResult]: At program point L782(lines 782 788) the Hoare annotation is: (let ((.cse17 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)) (.cse16 (= 0 ~methaneLevelCritical~0))) (let ((.cse7 (<= 2 ~waterLevel~0)) (.cse0 (= 0 ULTIMATE.start_activatePump_~tmp~8)) (.cse6 (= 1 ~pumpRunning~0)) (.cse8 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6))) (.cse9 (not .cse16)) (.cse10 (not (= 0 |ULTIMATE.start_isHighWaterLevel_#res|))) (.cse11 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9)) (.cse12 (not .cse17)) (.cse13 (<= ~waterLevel~0 2)) (.cse14 (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2))) (.cse15 (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse3 (not (= 0 ~systemActive~0))) (.cse18 (= 0 ~pumpRunning~0)) (.cse4 (<= ~waterLevel~0 1)) (.cse5 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and .cse0 .cse1 .cse2 .cse3 (= 0 ULTIMATE.start_processEnvironment_~tmp~7) .cse4 .cse5 .cse6) (and .cse7 .cse8 .cse2 .cse3 .cse9 .cse10 .cse5 .cse0 .cse1 .cse11 .cse12 .cse13 .cse14 .cse15 .cse6) (and .cse7 .cse8 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse2 .cse3 .cse10 .cse5 .cse0 .cse16 .cse1 .cse11 .cse13 .cse14 .cse15 .cse17 .cse6) (and .cse8 .cse2 .cse3 .cse9 .cse10 .cse5 .cse1 .cse11 .cse12 .cse13 .cse14 .cse15 .cse18) (and .cse1 .cse2 .cse3 .cse18 .cse4 .cse5)))) [2020-07-28 19:03:17,668 INFO L264 CegarLoopResult]: At program point L782-1(lines 782 788) the Hoare annotation is: false [2020-07-28 19:03:17,668 INFO L264 CegarLoopResult]: At program point L782-2(lines 782 788) the Hoare annotation is: false [2020-07-28 19:03:17,669 INFO L268 CegarLoopResult]: For program point L683(lines 683 689) no Hoare annotation was computed. [2020-07-28 19:03:17,669 INFO L268 CegarLoopResult]: For program point L683-2(lines 683 689) no Hoare annotation was computed. [2020-07-28 19:03:17,669 INFO L268 CegarLoopResult]: For program point L683-4(lines 683 689) no Hoare annotation was computed. [2020-07-28 19:03:17,669 INFO L268 CegarLoopResult]: For program point L56(lines 56 60) no Hoare annotation was computed. [2020-07-28 19:03:17,670 INFO L268 CegarLoopResult]: For program point L56-1(lines 775 781) no Hoare annotation was computed. [2020-07-28 19:03:17,670 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:03:17,670 INFO L268 CegarLoopResult]: For program point L719(lines 719 725) no Hoare annotation was computed. [2020-07-28 19:03:17,670 INFO L264 CegarLoopResult]: At program point L719-1(lines 719 725) the Hoare annotation is: (let ((.cse2 (= 0 ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~4)) (.cse4 (= 0 ~methaneLevelCritical~0)) (.cse12 (= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|))) (let ((.cse15 (<= ~waterLevel~0 1)) (.cse5 (<= 2 ~waterLevel~0)) (.cse9 (not (= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~6))) (.cse17 (not .cse12)) (.cse18 (not .cse4)) (.cse20 (not .cse2)) (.cse14 (<= ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~0 1)) (.cse19 (= 0 ULTIMATE.start_processEnvironment_~tmp~7)) (.cse16 (<= |ULTIMATE.start_getWaterLevel_#res| 1)) (.cse3 (= 0 ULTIMATE.start_activatePump_~tmp~8)) (.cse1 (<= ~waterLevel~0 2)) (.cse8 (= 1 ~pumpRunning~0)) (.cse6 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse0 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse7 (not (= 0 ~systemActive~0))) (.cse13 (= 0 ~pumpRunning~0)) (.cse10 (= 1 ~waterLevel~0)) (.cse11 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and .cse0 .cse1 .cse2 (or (and .cse3 .cse4 .cse5 .cse6 .cse7 .cse8) (and .cse3 .cse4 .cse9 .cse6 (= 0 |ULTIMATE.start_isMethaneAlarm_#res|) .cse7 .cse10 .cse8)) .cse11 .cse12) (and .cse4 .cse5 .cse6 .cse0 .cse7 .cse1 .cse13 .cse11) (and .cse4 .cse6 .cse0 .cse7 .cse2 .cse14 .cse13 .cse15 .cse12 .cse11 .cse16) (and .cse3 .cse6 .cse7 .cse0 .cse17 .cse18 .cse15 .cse19 .cse11 .cse20 .cse8) (and .cse0 .cse17 .cse18 .cse1 (or (and .cse3 .cse5 .cse6 .cse7 .cse8) (and .cse3 .cse9 .cse6 .cse7 .cse10 .cse8)) .cse20 .cse11) (and .cse6 .cse0 .cse7 .cse17 .cse1 .cse18 .cse13 .cse20 .cse11) (and .cse7 .cse0 .cse14 .cse19 .cse11 .cse16 .cse3 .cse4 .cse6 .cse1 .cse2 .cse12 .cse8) (and .cse4 .cse6 .cse0 .cse7 .cse13 .cse10 .cse11)))) [2020-07-28 19:03:17,670 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:03:17,670 INFO L268 CegarLoopResult]: For program point L953(lines 953 957) no Hoare annotation was computed. [2020-07-28 19:03:17,670 INFO L268 CegarLoopResult]: For program point L953-2(lines 953 957) no Hoare annotation was computed. [2020-07-28 19:03:17,671 INFO L268 CegarLoopResult]: For program point L953-3(lines 953 957) no Hoare annotation was computed. [2020-07-28 19:03:17,671 INFO L268 CegarLoopResult]: For program point L953-5(lines 953 957) no Hoare annotation was computed. [2020-07-28 19:03:17,671 INFO L268 CegarLoopResult]: For program point L953-6(lines 953 957) no Hoare annotation was computed. [2020-07-28 19:03:17,671 INFO L268 CegarLoopResult]: For program point L953-8(lines 953 957) no Hoare annotation was computed. [2020-07-28 19:03:17,671 INFO L268 CegarLoopResult]: For program point L953-9(lines 953 957) no Hoare annotation was computed. [2020-07-28 19:03:17,671 INFO L268 CegarLoopResult]: For program point L590(lines 590 594) no Hoare annotation was computed. [2020-07-28 19:03:17,671 INFO L268 CegarLoopResult]: For program point L953-11(lines 953 957) no Hoare annotation was computed. [2020-07-28 19:03:17,671 INFO L268 CegarLoopResult]: For program point L953-12(lines 953 957) no Hoare annotation was computed. [2020-07-28 19:03:17,671 INFO L268 CegarLoopResult]: For program point L953-14(lines 953 957) no Hoare annotation was computed. [2020-07-28 19:03:17,671 INFO L268 CegarLoopResult]: For program point L953-15(lines 953 957) no Hoare annotation was computed. [2020-07-28 19:03:17,672 INFO L268 CegarLoopResult]: For program point L953-17(lines 953 957) no Hoare annotation was computed. [2020-07-28 19:03:17,672 INFO L264 CegarLoopResult]: At program point L757(lines 708 758) the Hoare annotation is: false [2020-07-28 19:03:17,672 INFO L264 CegarLoopResult]: At program point L658(lines 653 661) the Hoare annotation is: (and (= 0 ULTIMATE.start_activatePump_~tmp~8) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (not (= 0 ~systemActive~0)) (= 1 |ULTIMATE.start_valid_product_#res|) (<= ~waterLevel~0 1) (= 1 ULTIMATE.start_main_~tmp~0) (= 1 ~pumpRunning~0)) [2020-07-28 19:03:17,672 INFO L264 CegarLoopResult]: At program point L658-1(lines 653 661) the Hoare annotation is: false [2020-07-28 19:03:17,672 INFO L264 CegarLoopResult]: At program point L658-2(lines 653 661) the Hoare annotation is: false [2020-07-28 19:03:17,673 INFO L268 CegarLoopResult]: For program point L130(lines 130 137) no Hoare annotation was computed. [2020-07-28 19:03:17,673 INFO L271 CegarLoopResult]: At program point L130-1(lines 130 137) the Hoare annotation is: true [2020-07-28 19:03:17,673 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:03:17,673 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 549) no Hoare annotation was computed. [2020-07-28 19:03:17,674 INFO L264 CegarLoopResult]: At program point L166(lines 1 989) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (not (= 0 ~systemActive~0)) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0)) [2020-07-28 19:03:17,674 INFO L264 CegarLoopResult]: At program point L959(lines 944 962) the Hoare annotation is: false [2020-07-28 19:03:17,674 INFO L264 CegarLoopResult]: At program point L959-1(lines 944 962) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse2 (not (= 0 ~systemActive~0))) (.cse3 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|)) (.cse6 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~2)) (.cse4 (= 0 ~pumpRunning~0)) (.cse5 (= 1 ULTIMATE.start_main_~tmp~0))) (or (and (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse0 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp~9) .cse1 .cse2 .cse3 .cse4 (<= ~waterLevel~0 1) .cse5 .cse6) (and (<= 2 ~waterLevel~0) .cse0 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~9) .cse1 .cse2 (not .cse3) (<= ~waterLevel~0 2) (not .cse6) (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse4 .cse5))) [2020-07-28 19:03:17,674 INFO L264 CegarLoopResult]: At program point L959-2(lines 944 962) the Hoare annotation is: false [2020-07-28 19:03:17,674 INFO L264 CegarLoopResult]: At program point L959-3(lines 944 962) the Hoare annotation is: false [2020-07-28 19:03:17,674 INFO L264 CegarLoopResult]: At program point L959-4(lines 944 962) the Hoare annotation is: false [2020-07-28 19:03:17,674 INFO L264 CegarLoopResult]: At program point L959-5(lines 944 962) the Hoare annotation is: false [2020-07-28 19:03:17,680 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:03:17,680 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:03:17,681 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-28 19:03:17,681 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-28 19:03:17,681 WARN L170 areAnnotationChecker]: L130 has no Hoare annotation [2020-07-28 19:03:17,684 WARN L170 areAnnotationChecker]: L710 has no Hoare annotation [2020-07-28 19:03:17,685 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:03:17,685 WARN L170 areAnnotationChecker]: L775-1 has no Hoare annotation [2020-07-28 19:03:17,685 WARN L170 areAnnotationChecker]: L710 has no Hoare annotation [2020-07-28 19:03:17,685 WARN L170 areAnnotationChecker]: L710 has no Hoare annotation [2020-07-28 19:03:17,685 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:03:17,685 WARN L170 areAnnotationChecker]: L775-1 has no Hoare annotation [2020-07-28 19:03:17,685 WARN L170 areAnnotationChecker]: L775-1 has no Hoare annotation [2020-07-28 19:03:17,685 WARN L170 areAnnotationChecker]: L711 has no Hoare annotation [2020-07-28 19:03:17,685 WARN L170 areAnnotationChecker]: L566-3 has no Hoare annotation [2020-07-28 19:03:17,686 WARN L170 areAnnotationChecker]: L566-3 has no Hoare annotation [2020-07-28 19:03:17,686 WARN L170 areAnnotationChecker]: L833-1 has no Hoare annotation [2020-07-28 19:03:17,686 WARN L170 areAnnotationChecker]: L719 has no Hoare annotation [2020-07-28 19:03:17,686 WARN L170 areAnnotationChecker]: L719 has no Hoare annotation [2020-07-28 19:03:17,686 WARN L170 areAnnotationChecker]: L833-1 has no Hoare annotation [2020-07-28 19:03:17,686 WARN L170 areAnnotationChecker]: L833-1 has no Hoare annotation [2020-07-28 19:03:17,686 WARN L170 areAnnotationChecker]: L578 has no Hoare annotation [2020-07-28 19:03:17,686 WARN L170 areAnnotationChecker]: L578 has no Hoare annotation [2020-07-28 19:03:17,686 WARN L170 areAnnotationChecker]: L729 has no Hoare annotation [2020-07-28 19:03:17,687 WARN L170 areAnnotationChecker]: L972-3 has no Hoare annotation [2020-07-28 19:03:17,687 WARN L170 areAnnotationChecker]: L807-3 has no Hoare annotation [2020-07-28 19:03:17,687 WARN L170 areAnnotationChecker]: L807-3 has no Hoare annotation [2020-07-28 19:03:17,687 WARN L170 areAnnotationChecker]: L673-2 has no Hoare annotation [2020-07-28 19:03:17,687 WARN L170 areAnnotationChecker]: L729 has no Hoare annotation [2020-07-28 19:03:17,687 WARN L170 areAnnotationChecker]: L729 has no Hoare annotation [2020-07-28 19:03:17,687 WARN L170 areAnnotationChecker]: L972-3 has no Hoare annotation [2020-07-28 19:03:17,687 WARN L170 areAnnotationChecker]: L972-3 has no Hoare annotation [2020-07-28 19:03:17,687 WARN L170 areAnnotationChecker]: L643-3 has no Hoare annotation [2020-07-28 19:03:17,687 WARN L170 areAnnotationChecker]: L643-3 has no Hoare annotation [2020-07-28 19:03:17,688 WARN L170 areAnnotationChecker]: L673-2 has no Hoare annotation [2020-07-28 19:03:17,688 WARN L170 areAnnotationChecker]: L673-2 has no Hoare annotation [2020-07-28 19:03:17,688 WARN L170 areAnnotationChecker]: L590 has no Hoare annotation [2020-07-28 19:03:17,688 WARN L170 areAnnotationChecker]: L590 has no Hoare annotation [2020-07-28 19:03:17,688 WARN L170 areAnnotationChecker]: L739 has no Hoare annotation [2020-07-28 19:03:17,688 WARN L170 areAnnotationChecker]: L972-5 has no Hoare annotation [2020-07-28 19:03:17,688 WARN L170 areAnnotationChecker]: L953-9 has no Hoare annotation [2020-07-28 19:03:17,688 WARN L170 areAnnotationChecker]: L679-2 has no Hoare annotation [2020-07-28 19:03:17,688 WARN L170 areAnnotationChecker]: L739 has no Hoare annotation [2020-07-28 19:03:17,688 WARN L170 areAnnotationChecker]: L739 has no Hoare annotation [2020-07-28 19:03:17,689 WARN L170 areAnnotationChecker]: L837-1 has no Hoare annotation [2020-07-28 19:03:17,689 WARN L170 areAnnotationChecker]: L953-9 has no Hoare annotation [2020-07-28 19:03:17,689 WARN L170 areAnnotationChecker]: L953-9 has no Hoare annotation [2020-07-28 19:03:17,689 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:03:17,689 WARN L170 areAnnotationChecker]: L679-2 has no Hoare annotation [2020-07-28 19:03:17,689 WARN L170 areAnnotationChecker]: L679-2 has no Hoare annotation [2020-07-28 19:03:17,689 WARN L170 areAnnotationChecker]: L566 has no Hoare annotation [2020-07-28 19:03:17,691 WARN L170 areAnnotationChecker]: L747 has no Hoare annotation [2020-07-28 19:03:17,691 WARN L170 areAnnotationChecker]: L747 has no Hoare annotation [2020-07-28 19:03:17,691 WARN L170 areAnnotationChecker]: L837-1 has no Hoare annotation [2020-07-28 19:03:17,692 WARN L170 areAnnotationChecker]: L837-1 has no Hoare annotation [2020-07-28 19:03:17,692 WARN L170 areAnnotationChecker]: L953-11 has no Hoare annotation [2020-07-28 19:03:17,692 WARN L170 areAnnotationChecker]: L53 has no Hoare annotation [2020-07-28 19:03:17,692 WARN L170 areAnnotationChecker]: L683-2 has no Hoare annotation [2020-07-28 19:03:17,692 WARN L170 areAnnotationChecker]: L566 has no Hoare annotation [2020-07-28 19:03:17,692 WARN L170 areAnnotationChecker]: L566 has no Hoare annotation [2020-07-28 19:03:17,692 WARN L170 areAnnotationChecker]: L833 has no Hoare annotation [2020-07-28 19:03:17,693 WARN L170 areAnnotationChecker]: L807-2 has no Hoare annotation [2020-07-28 19:03:17,693 WARN L170 areAnnotationChecker]: L807-2 has no Hoare annotation [2020-07-28 19:03:17,694 WARN L170 areAnnotationChecker]: L811-3 has no Hoare annotation [2020-07-28 19:03:17,694 WARN L170 areAnnotationChecker]: L56 has no Hoare annotation [2020-07-28 19:03:17,694 WARN L170 areAnnotationChecker]: L56 has no Hoare annotation [2020-07-28 19:03:17,694 WARN L170 areAnnotationChecker]: L683-2 has no Hoare annotation [2020-07-28 19:03:17,694 WARN L170 areAnnotationChecker]: L683-2 has no Hoare annotation [2020-07-28 19:03:17,694 WARN L170 areAnnotationChecker]: L833 has no Hoare annotation [2020-07-28 19:03:17,694 WARN L170 areAnnotationChecker]: L833 has no Hoare annotation [2020-07-28 19:03:17,696 WARN L170 areAnnotationChecker]: L643-2 has no Hoare annotation [2020-07-28 19:03:17,696 WARN L170 areAnnotationChecker]: L643-2 has no Hoare annotation [2020-07-28 19:03:17,696 WARN L170 areAnnotationChecker]: L811-3 has no Hoare annotation [2020-07-28 19:03:17,697 WARN L170 areAnnotationChecker]: L811-3 has no Hoare annotation [2020-07-28 19:03:17,697 WARN L170 areAnnotationChecker]: L56-1 has no Hoare annotation [2020-07-28 19:03:17,697 WARN L170 areAnnotationChecker]: L56-1 has no Hoare annotation [2020-07-28 19:03:17,697 WARN L170 areAnnotationChecker]: L549-1 has no Hoare annotation [2020-07-28 19:03:17,697 WARN L170 areAnnotationChecker]: L549-1 has no Hoare annotation [2020-07-28 19:03:17,697 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2020-07-28 19:03:17,697 WARN L170 areAnnotationChecker]: L807-1 has no Hoare annotation [2020-07-28 19:03:17,697 WARN L170 areAnnotationChecker]: L807-1 has no Hoare annotation [2020-07-28 19:03:17,697 WARN L170 areAnnotationChecker]: L673 has no Hoare annotation [2020-07-28 19:03:17,698 WARN L170 areAnnotationChecker]: L953-6 has no Hoare annotation [2020-07-28 19:03:17,698 WARN L170 areAnnotationChecker]: L566-6 has no Hoare annotation [2020-07-28 19:03:17,698 WARN L170 areAnnotationChecker]: L566-6 has no Hoare annotation [2020-07-28 19:03:17,698 WARN L170 areAnnotationChecker]: L833-2 has no Hoare annotation [2020-07-28 19:03:17,698 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2020-07-28 19:03:17,698 WARN L170 areAnnotationChecker]: L972 has no Hoare annotation [2020-07-28 19:03:17,698 WARN L170 areAnnotationChecker]: L643-1 has no Hoare annotation [2020-07-28 19:03:17,698 WARN L170 areAnnotationChecker]: L643-1 has no Hoare annotation [2020-07-28 19:03:17,698 WARN L170 areAnnotationChecker]: L673 has no Hoare annotation [2020-07-28 19:03:17,699 WARN L170 areAnnotationChecker]: L673 has no Hoare annotation [2020-07-28 19:03:17,699 WARN L170 areAnnotationChecker]: L953-6 has no Hoare annotation [2020-07-28 19:03:17,699 WARN L170 areAnnotationChecker]: L953-6 has no Hoare annotation [2020-07-28 19:03:17,699 WARN L170 areAnnotationChecker]: L870-6 has no Hoare annotation [2020-07-28 19:03:17,699 WARN L170 areAnnotationChecker]: L833-2 has no Hoare annotation [2020-07-28 19:03:17,699 WARN L170 areAnnotationChecker]: L833-2 has no Hoare annotation [2020-07-28 19:03:17,699 WARN L170 areAnnotationChecker]: L972-2 has no Hoare annotation [2020-07-28 19:03:17,699 WARN L170 areAnnotationChecker]: L953-3 has no Hoare annotation [2020-07-28 19:03:17,699 WARN L170 areAnnotationChecker]: L679 has no Hoare annotation [2020-07-28 19:03:17,699 WARN L170 areAnnotationChecker]: L953-8 has no Hoare annotation [2020-07-28 19:03:17,700 WARN L170 areAnnotationChecker]: L870-6 has no Hoare annotation [2020-07-28 19:03:17,700 WARN L170 areAnnotationChecker]: L870-6 has no Hoare annotation [2020-07-28 19:03:17,700 WARN L170 areAnnotationChecker]: L972-6 has no Hoare annotation [2020-07-28 19:03:17,700 WARN L170 areAnnotationChecker]: L807-5 has no Hoare annotation [2020-07-28 19:03:17,700 WARN L170 areAnnotationChecker]: L807-5 has no Hoare annotation [2020-07-28 19:03:17,700 WARN L170 areAnnotationChecker]: L673-4 has no Hoare annotation [2020-07-28 19:03:17,700 WARN L170 areAnnotationChecker]: L837 has no Hoare annotation [2020-07-28 19:03:17,700 WARN L170 areAnnotationChecker]: L953-3 has no Hoare annotation [2020-07-28 19:03:17,700 WARN L170 areAnnotationChecker]: L953-3 has no Hoare annotation [2020-07-28 19:03:17,700 WARN L170 areAnnotationChecker]: L679 has no Hoare annotation [2020-07-28 19:03:17,701 WARN L170 areAnnotationChecker]: L679 has no Hoare annotation [2020-07-28 19:03:17,701 WARN L170 areAnnotationChecker]: L811-2 has no Hoare annotation [2020-07-28 19:03:17,701 WARN L170 areAnnotationChecker]: L972-6 has no Hoare annotation [2020-07-28 19:03:17,701 WARN L170 areAnnotationChecker]: L972-6 has no Hoare annotation [2020-07-28 19:03:17,701 WARN L170 areAnnotationChecker]: L643-5 has no Hoare annotation [2020-07-28 19:03:17,701 WARN L170 areAnnotationChecker]: L643-5 has no Hoare annotation [2020-07-28 19:03:17,701 WARN L170 areAnnotationChecker]: L673-4 has no Hoare annotation [2020-07-28 19:03:17,701 WARN L170 areAnnotationChecker]: L673-4 has no Hoare annotation [2020-07-28 19:03:17,701 WARN L170 areAnnotationChecker]: L837 has no Hoare annotation [2020-07-28 19:03:17,701 WARN L170 areAnnotationChecker]: L837 has no Hoare annotation [2020-07-28 19:03:17,702 WARN L170 areAnnotationChecker]: L953-5 has no Hoare annotation [2020-07-28 19:03:17,702 WARN L170 areAnnotationChecker]: L683 has no Hoare annotation [2020-07-28 19:03:17,702 WARN L170 areAnnotationChecker]: L811-2 has no Hoare annotation [2020-07-28 19:03:17,702 WARN L170 areAnnotationChecker]: L811-2 has no Hoare annotation [2020-07-28 19:03:17,702 WARN L170 areAnnotationChecker]: L972-8 has no Hoare annotation [2020-07-28 19:03:17,702 WARN L170 areAnnotationChecker]: L953-15 has no Hoare annotation [2020-07-28 19:03:17,702 WARN L170 areAnnotationChecker]: L679-4 has no Hoare annotation [2020-07-28 19:03:17,702 WARN L170 areAnnotationChecker]: L807 has no Hoare annotation [2020-07-28 19:03:17,702 WARN L170 areAnnotationChecker]: L807 has no Hoare annotation [2020-07-28 19:03:17,703 WARN L170 areAnnotationChecker]: L811-1 has no Hoare annotation [2020-07-28 19:03:17,703 WARN L170 areAnnotationChecker]: L683 has no Hoare annotation [2020-07-28 19:03:17,703 WARN L170 areAnnotationChecker]: L683 has no Hoare annotation [2020-07-28 19:03:17,703 WARN L170 areAnnotationChecker]: L837-2 has no Hoare annotation [2020-07-28 19:03:17,703 WARN L170 areAnnotationChecker]: L953-15 has no Hoare annotation [2020-07-28 19:03:17,703 WARN L170 areAnnotationChecker]: L953-15 has no Hoare annotation [2020-07-28 19:03:17,703 WARN L170 areAnnotationChecker]: L679-4 has no Hoare annotation [2020-07-28 19:03:17,703 WARN L170 areAnnotationChecker]: L679-4 has no Hoare annotation [2020-07-28 19:03:17,703 WARN L170 areAnnotationChecker]: L643 has no Hoare annotation [2020-07-28 19:03:17,703 WARN L170 areAnnotationChecker]: L643 has no Hoare annotation [2020-07-28 19:03:17,704 WARN L170 areAnnotationChecker]: L811-1 has no Hoare annotation [2020-07-28 19:03:17,704 WARN L170 areAnnotationChecker]: L811-1 has no Hoare annotation [2020-07-28 19:03:17,704 WARN L170 areAnnotationChecker]: L549 has no Hoare annotation [2020-07-28 19:03:17,704 WARN L170 areAnnotationChecker]: L549 has no Hoare annotation [2020-07-28 19:03:17,704 WARN L170 areAnnotationChecker]: L870-4 has no Hoare annotation [2020-07-28 19:03:17,704 WARN L170 areAnnotationChecker]: L837-2 has no Hoare annotation [2020-07-28 19:03:17,704 WARN L170 areAnnotationChecker]: L837-2 has no Hoare annotation [2020-07-28 19:03:17,704 WARN L170 areAnnotationChecker]: L953-17 has no Hoare annotation [2020-07-28 19:03:17,704 WARN L170 areAnnotationChecker]: L683-4 has no Hoare annotation [2020-07-28 19:03:17,704 WARN L170 areAnnotationChecker]: L953 has no Hoare annotation [2020-07-28 19:03:17,706 WARN L170 areAnnotationChecker]: L870-4 has no Hoare annotation [2020-07-28 19:03:17,706 WARN L170 areAnnotationChecker]: L870-4 has no Hoare annotation [2020-07-28 19:03:17,706 WARN L170 areAnnotationChecker]: L807-4 has no Hoare annotation [2020-07-28 19:03:17,706 WARN L170 areAnnotationChecker]: L807-4 has no Hoare annotation [2020-07-28 19:03:17,707 WARN L170 areAnnotationChecker]: L811-5 has no Hoare annotation [2020-07-28 19:03:17,707 WARN L170 areAnnotationChecker]: L683-4 has no Hoare annotation [2020-07-28 19:03:17,707 WARN L170 areAnnotationChecker]: L683-4 has no Hoare annotation [2020-07-28 19:03:17,707 WARN L170 areAnnotationChecker]: L953 has no Hoare annotation [2020-07-28 19:03:17,707 WARN L170 areAnnotationChecker]: L953 has no Hoare annotation [2020-07-28 19:03:17,707 WARN L170 areAnnotationChecker]: L870-2 has no Hoare annotation [2020-07-28 19:03:17,707 WARN L170 areAnnotationChecker]: L643-4 has no Hoare annotation [2020-07-28 19:03:17,707 WARN L170 areAnnotationChecker]: L643-4 has no Hoare annotation [2020-07-28 19:03:17,707 WARN L170 areAnnotationChecker]: L811-5 has no Hoare annotation [2020-07-28 19:03:17,707 WARN L170 areAnnotationChecker]: L811-5 has no Hoare annotation [2020-07-28 19:03:17,708 WARN L170 areAnnotationChecker]: L549-2 has no Hoare annotation [2020-07-28 19:03:17,708 WARN L170 areAnnotationChecker]: L549-2 has no Hoare annotation [2020-07-28 19:03:17,708 WARN L170 areAnnotationChecker]: L953-2 has no Hoare annotation [2020-07-28 19:03:17,708 WARN L170 areAnnotationChecker]: L870-2 has no Hoare annotation [2020-07-28 19:03:17,708 WARN L170 areAnnotationChecker]: L870-2 has no Hoare annotation [2020-07-28 19:03:17,708 WARN L170 areAnnotationChecker]: L953-12 has no Hoare annotation [2020-07-28 19:03:17,708 WARN L170 areAnnotationChecker]: L811 has no Hoare annotation [2020-07-28 19:03:17,708 WARN L170 areAnnotationChecker]: L953-12 has no Hoare annotation [2020-07-28 19:03:17,708 WARN L170 areAnnotationChecker]: L953-12 has no Hoare annotation [2020-07-28 19:03:17,708 WARN L170 areAnnotationChecker]: L870-10 has no Hoare annotation [2020-07-28 19:03:17,709 WARN L170 areAnnotationChecker]: L811 has no Hoare annotation [2020-07-28 19:03:17,709 WARN L170 areAnnotationChecker]: L811 has no Hoare annotation [2020-07-28 19:03:17,709 WARN L170 areAnnotationChecker]: L953-14 has no Hoare annotation [2020-07-28 19:03:17,709 WARN L170 areAnnotationChecker]: L870-10 has no Hoare annotation [2020-07-28 19:03:17,709 WARN L170 areAnnotationChecker]: L870-10 has no Hoare annotation [2020-07-28 19:03:17,709 WARN L170 areAnnotationChecker]: L811-4 has no Hoare annotation [2020-07-28 19:03:17,709 WARN L170 areAnnotationChecker]: L870 has no Hoare annotation [2020-07-28 19:03:17,709 WARN L170 areAnnotationChecker]: L811-4 has no Hoare annotation [2020-07-28 19:03:17,709 WARN L170 areAnnotationChecker]: L811-4 has no Hoare annotation [2020-07-28 19:03:17,709 WARN L170 areAnnotationChecker]: L870 has no Hoare annotation [2020-07-28 19:03:17,710 WARN L170 areAnnotationChecker]: L870 has no Hoare annotation [2020-07-28 19:03:17,710 WARN L170 areAnnotationChecker]: L870-8 has no Hoare annotation [2020-07-28 19:03:17,710 WARN L170 areAnnotationChecker]: L870-8 has no Hoare annotation [2020-07-28 19:03:17,710 WARN L170 areAnnotationChecker]: L870-8 has no Hoare annotation [2020-07-28 19:03:17,710 INFO L163 areAnnotationChecker]: CFG has 22 edges. 22 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:03:17,799 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:03:17 BoogieIcfgContainer [2020-07-28 19:03:17,799 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:03:17,799 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:03:17,799 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:03:17,800 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:03:17,800 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:02:13" (3/4) ... [2020-07-28 19:03:17,805 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:03:17,843 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:03:17,845 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:03:17,846 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:03:17,848 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:03:17,850 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:03:17,852 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:03:17,853 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:03:17,904 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == methaneLevelCritical && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel [2020-07-28 19:03:17,905 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == methaneLevelCritical && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp [2020-07-28 19:03:17,905 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == tmp) && waterLevel <= 1) && !(0 == tmp)) && 1 == tmp) && 1 == pumpRunning) || (((((((((((((((2 <= waterLevel && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && !(0 == tmp)) && 1 == tmp) && 0 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 1 == pumpRunning)) || ((((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == tmp)) && 1 == tmp)) || (((((((((((((!(0 == tmp) && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp)) && 1 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning)) || ((((((((((((((((2 <= waterLevel && !(0 == tmp)) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 1 == tmp) && 0 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == tmp) && !(0 == tmp___0)) && 0 == \result) && 0 == \result) && 1 == pumpRunning)) || ((((((((((((1 == \result && !(0 == systemActive)) && tmp___0 <= 1) && 0 == tmp) && waterLevel <= 1) && 1 == tmp) && \result <= 1) && 0 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && tmp___0 <= 1) && 0 == pumpRunning) && waterLevel <= 1) && 1 == tmp) && 0 == \result) && \result <= 1)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) [2020-07-28 19:03:17,906 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == \result && waterLevel <= 2) && 0 == tmp) && ((((((0 == tmp && 0 == methaneLevelCritical) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == pumpRunning) || (((((((0 == tmp && 0 == methaneLevelCritical) && !(0 == tmp)) && 0 == splverifierCounter) && 0 == \result) && !(0 == systemActive)) && 1 == waterLevel) && 1 == pumpRunning))) && 1 == tmp) && 0 == \result) || (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 0 == pumpRunning) && 1 == tmp)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && tmp___0 <= 1) && 0 == pumpRunning) && waterLevel <= 1) && 0 == \result) && 1 == tmp) && \result <= 1)) || ((((((((((0 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && !(0 == \result)) && !(0 == methaneLevelCritical)) && waterLevel <= 1) && 0 == tmp) && 1 == tmp) && !(0 == tmp)) && 1 == pumpRunning)) || ((((((1 == \result && !(0 == \result)) && !(0 == methaneLevelCritical)) && waterLevel <= 2) && (((((0 == tmp && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == pumpRunning) || (((((0 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == waterLevel) && 1 == pumpRunning))) && !(0 == tmp)) && 1 == tmp)) || ((((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && waterLevel <= 2) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && !(0 == tmp)) && 1 == tmp)) || ((((((((((((!(0 == systemActive) && 1 == \result) && tmp___0 <= 1) && 0 == tmp) && 1 == tmp) && \result <= 1) && 0 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) [2020-07-28 19:03:17,907 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 0 == pumpRunning) && 1 == tmp) || (((((((0 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == tmp) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning)) || (((1 == \result && waterLevel <= 2) && (((((0 == tmp && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == pumpRunning) || (((((0 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == waterLevel) && 1 == pumpRunning))) && 1 == tmp) [2020-07-28 19:03:17,909 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 0 == pumpRunning) && 1 == tmp) || (((((((0 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == tmp) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning)) || (((1 == \result && waterLevel <= 2) && (((((0 == tmp && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == pumpRunning) || (((((0 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == waterLevel) && 1 == pumpRunning))) && 1 == tmp) [2020-07-28 19:03:17,910 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 0 == pumpRunning) && 1 == tmp) || ((((((0 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning) [2020-07-28 19:03:17,910 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning) || ((((((((((((((2 <= waterLevel && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && 1 == tmp) && 0 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 1 == pumpRunning)) || (((((((((((((((2 <= waterLevel && !(0 == tmp)) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 1 == tmp) && 0 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == \result) && 1 == pumpRunning)) || ((((((((((((!(0 == tmp) && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && 1 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning)) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && waterLevel <= 1) && 1 == tmp) [2020-07-28 19:03:17,913 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((0 == tmp && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && waterLevel <= 1) && 1 == tmp) && 0 == \result) && 1 == pumpRunning) || (((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && waterLevel <= 1) && 1 == tmp)) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && waterLevel <= 1) && 0 == \result) && 1 == tmp)) || (((((((((((((((2 <= waterLevel && !(0 == tmp)) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 1 == tmp) && 0 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == \result) && 1 == pumpRunning)) || (((((((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == tmp) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning)) || ((((((((((((!(0 == tmp) && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && 1 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning)) || ((((((((((((((2 <= waterLevel && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 1 == tmp) && 0 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 1 == pumpRunning) [2020-07-28 19:03:17,914 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning [2020-07-28 19:03:17,919 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == tmp) || ((((((1 == \result && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && waterLevel <= 1) && 1 == tmp) [2020-07-28 19:03:17,922 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && 0 == \result) && 1 == tmp) && \result <= 1) || (((((((((((0 == tmp && 0 == methaneLevelCritical) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == tmp) && waterLevel <= 1) && 0 == tmp) && 1 == tmp) && 0 == \result) && 1 == pumpRunning) && \result <= 1)) || ((((((((((((((((2 <= waterLevel && !(0 == tmp)) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 1 == tmp) && 0 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == tmp) && !(0 == tmp___0)) && 0 == \result) && 0 == \result) && 1 == pumpRunning) [2020-07-28 19:03:17,923 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning [2020-07-28 19:03:17,923 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == \result && 0 == splverifierCounter) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && 1 == tmp) && 0 == tmp___0) || ((((((((((2 <= waterLevel && 0 == splverifierCounter) && 0 == tmp) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning) && 1 == tmp) [2020-07-28 19:03:17,927 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((((2 <= waterLevel && !(0 == tmp)) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 1 == tmp) && 0 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == tmp) && !(0 == tmp___0)) && 1 == \result) && 0 == \result) && 0 == \result) && 1 == pumpRunning [2020-07-28 19:03:17,928 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((((2 <= waterLevel && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 1 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning) && 0 == \result) || (((((((((((((2 <= waterLevel && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && 1 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning) [2020-07-28 19:03:17,928 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((((((2 <= waterLevel && !(0 == tmp)) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 1 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning) && 0 == \result) || (((((((((((((2 <= waterLevel && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && 1 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning) [2020-07-28 19:03:18,045 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:03:18,046 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:03:18,048 INFO L168 Benchmark]: Toolchain (without parser) took 67345.76 ms. Allocated memory was 1.0 GB in the beginning and 1.9 GB in the end (delta: 880.3 MB). Free memory was 960.2 MB in the beginning and 1.7 GB in the end (delta: -709.0 MB). Peak memory consumption was 171.3 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:18,048 INFO L168 Benchmark]: CDTParser took 0.22 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:03:18,049 INFO L168 Benchmark]: CACSL2BoogieTranslator took 807.85 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 138.4 MB). Free memory was 954.9 MB in the beginning and 1.1 GB in the end (delta: -158.7 MB). Peak memory consumption was 20.3 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:18,049 INFO L168 Benchmark]: Boogie Procedure Inliner took 104.96 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:18,050 INFO L168 Benchmark]: Boogie Preprocessor took 68.28 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:18,050 INFO L168 Benchmark]: RCFGBuilder took 1873.79 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 902.4 MB in the end (delta: 198.0 MB). Peak memory consumption was 198.0 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:18,050 INFO L168 Benchmark]: TraceAbstraction took 64235.81 ms. Allocated memory was 1.2 GB in the beginning and 1.9 GB in the end (delta: 741.9 MB). Free memory was 902.4 MB in the beginning and 1.7 GB in the end (delta: -787.8 MB). There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:03:18,051 INFO L168 Benchmark]: Witness Printer took 246.29 ms. Allocated memory is still 1.9 GB. Free memory was 1.7 GB in the beginning and 1.7 GB in the end (delta: 20.9 MB). Peak memory consumption was 20.9 MB. Max. memory is 11.5 GB. [2020-07-28 19:03:18,055 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 807.85 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 138.4 MB). Free memory was 954.9 MB in the beginning and 1.1 GB in the end (delta: -158.7 MB). Peak memory consumption was 20.3 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 104.96 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 68.28 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * RCFGBuilder took 1873.79 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 902.4 MB in the end (delta: 198.0 MB). Peak memory consumption was 198.0 MB. Max. memory is 11.5 GB. * TraceAbstraction took 64235.81 ms. Allocated memory was 1.2 GB in the beginning and 1.9 GB in the end (delta: 741.9 MB). Free memory was 902.4 MB in the beginning and 1.7 GB in the end (delta: -787.8 MB). There was no memory consumed. Max. memory is 11.5 GB. * Witness Printer took 246.29 ms. Allocated memory is still 1.9 GB. Free memory was 1.7 GB in the beginning and 1.7 GB in the end (delta: 20.9 MB). Peak memory consumption was 20.9 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 549]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 549]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 549]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: ((((((((((((((0 == tmp && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && waterLevel <= 1) && 1 == tmp) && 0 == \result) && 1 == pumpRunning) || (((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && waterLevel <= 1) && 1 == tmp)) || (((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && waterLevel <= 1) && 0 == \result) && 1 == tmp)) || (((((((((((((((2 <= waterLevel && !(0 == tmp)) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 1 == tmp) && 0 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == \result) && 1 == pumpRunning)) || (((((((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == tmp) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning)) || ((((((((((((!(0 == tmp) && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && 1 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning)) || ((((((((((((((2 <= waterLevel && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 1 == tmp) && 0 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 1 == pumpRunning) - InvariantResult [Line: 782]: Loop Invariant Derived loop invariant: ((((((((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning) || ((((((((((((((2 <= waterLevel && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && 1 == tmp) && 0 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 1 == pumpRunning)) || (((((((((((((((2 <= waterLevel && !(0 == tmp)) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 1 == tmp) && 0 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == \result) && 1 == pumpRunning)) || ((((((((((((!(0 == tmp) && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && 1 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning)) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && waterLevel <= 1) && 1 == tmp) - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 782]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 782]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 653]: Loop Invariant Derived loop invariant: (((((0 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 0 == pumpRunning) && 1 == tmp) || ((((((0 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning) - InvariantResult [Line: 653]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 653]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 774]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: (((((((((((((2 <= waterLevel && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 1 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning) && 0 == \result) || (((((((((((((2 <= waterLevel && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && 1 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning) - InvariantResult [Line: 639]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 639]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 99]: Loop Invariant Derived loop invariant: ((((0 == methaneLevelCritical && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp - InvariantResult [Line: 52]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 708]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 775]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 0 == pumpRunning) && 1 == tmp) || (((((((0 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == tmp) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning)) || (((1 == \result && waterLevel <= 2) && (((((0 == tmp && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == pumpRunning) || (((((0 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == waterLevel) && 1 == pumpRunning))) && 1 == tmp) - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: (((((((((1 == \result && 0 == splverifierCounter) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && 0 == pumpRunning) && waterLevel <= 1) && 1 == tmp) && 0 == tmp___0) || ((((((((((2 <= waterLevel && 0 == splverifierCounter) && 0 == tmp) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning) && 1 == tmp) - InvariantResult [Line: 120]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 899]: Loop Invariant Derived loop invariant: ((((((((((((((((2 <= waterLevel && !(0 == tmp)) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 1 == tmp) && 0 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == tmp) && !(0 == tmp___0)) && 1 == \result) && 0 == \result) && 0 == \result) && 1 == pumpRunning - InvariantResult [Line: 639]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 899]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 639]: Loop Invariant Derived loop invariant: (((((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 0 == \result) && 0 == pumpRunning) && 1 == tmp) || ((((((1 == \result && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && waterLevel <= 1) && 1 == tmp) - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 639]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 899]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 639]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 729]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 0 == pumpRunning) && 1 == tmp) || (((((((0 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == tmp) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning)) || (((1 == \result && waterLevel <= 2) && (((((0 == tmp && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == pumpRunning) || (((((0 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == waterLevel) && 1 == pumpRunning))) && 1 == tmp) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 963]: Loop Invariant Derived loop invariant: (((((0 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && waterLevel <= 1) && 1 == tmp) && 1 == pumpRunning - InvariantResult [Line: 963]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 963]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 630]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 719]: Loop Invariant Derived loop invariant: (((((((((((1 == \result && waterLevel <= 2) && 0 == tmp) && ((((((0 == tmp && 0 == methaneLevelCritical) && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == pumpRunning) || (((((((0 == tmp && 0 == methaneLevelCritical) && !(0 == tmp)) && 0 == splverifierCounter) && 0 == \result) && !(0 == systemActive)) && 1 == waterLevel) && 1 == pumpRunning))) && 1 == tmp) && 0 == \result) || (((((((0 == methaneLevelCritical && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && waterLevel <= 2) && 0 == pumpRunning) && 1 == tmp)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && tmp___0 <= 1) && 0 == pumpRunning) && waterLevel <= 1) && 0 == \result) && 1 == tmp) && \result <= 1)) || ((((((((((0 == tmp && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && !(0 == \result)) && !(0 == methaneLevelCritical)) && waterLevel <= 1) && 0 == tmp) && 1 == tmp) && !(0 == tmp)) && 1 == pumpRunning)) || ((((((1 == \result && !(0 == \result)) && !(0 == methaneLevelCritical)) && waterLevel <= 2) && (((((0 == tmp && 2 <= waterLevel) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == pumpRunning) || (((((0 == tmp && !(0 == tmp)) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == waterLevel) && 1 == pumpRunning))) && !(0 == tmp)) && 1 == tmp)) || ((((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && waterLevel <= 2) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && !(0 == tmp)) && 1 == tmp)) || ((((((((((((!(0 == systemActive) && 1 == \result) && tmp___0 <= 1) && 0 == tmp) && 1 == tmp) && \result <= 1) && 0 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && waterLevel <= 2) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: ((((((((((((((2 <= waterLevel && !(0 == tmp)) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 1 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning) && 0 == \result) || (((((((((((((2 <= waterLevel && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && 1 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning) - InvariantResult [Line: 598]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 130]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((((((((((((0 == tmp && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == tmp) && waterLevel <= 1) && !(0 == tmp)) && 1 == tmp) && 1 == pumpRunning) || (((((((((((((((2 <= waterLevel && !(0 == tmp)) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && !(0 == tmp)) && 1 == tmp) && 0 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 1 == pumpRunning)) || ((((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && !(0 == methaneLevelCritical)) && 0 == pumpRunning) && waterLevel <= 1) && !(0 == tmp)) && 1 == tmp)) || (((((((((((((!(0 == tmp) && 1 == \result) && !(0 == systemActive)) && !(0 == methaneLevelCritical)) && !(0 == \result)) && !(0 == tmp)) && 1 == tmp) && 0 == splverifierCounter) && 0 == tmp) && !(0 == \result)) && waterLevel <= 2) && !(0 == tmp___0)) && 0 == \result) && 0 == pumpRunning)) || ((((((((((((((((2 <= waterLevel && !(0 == tmp)) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 1 == tmp) && 0 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == tmp) && !(0 == tmp___0)) && 0 == \result) && 0 == \result) && 1 == pumpRunning)) || ((((((((((((1 == \result && !(0 == systemActive)) && tmp___0 <= 1) && 0 == tmp) && waterLevel <= 1) && 1 == tmp) && \result <= 1) && 0 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && 0 == \result) && 1 == pumpRunning)) || ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && tmp___0 <= 1) && 0 == pumpRunning) && waterLevel <= 1) && 1 == tmp) && 0 == \result) && \result <= 1)) || ((((((0 == methaneLevelCritical && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel) && 1 == tmp) - InvariantResult [Line: 630]: Loop Invariant Derived loop invariant: ((((((((((0 == methaneLevelCritical && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == tmp) && 0 == pumpRunning) && waterLevel <= 1) && 0 == \result) && 1 == tmp) && \result <= 1) || (((((((((((0 == tmp && 0 == methaneLevelCritical) && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 0 == tmp) && waterLevel <= 1) && 0 == tmp) && 1 == tmp) && 0 == \result) && 1 == pumpRunning) && \result <= 1)) || ((((((((((((((((2 <= waterLevel && !(0 == tmp)) && 0 == \result) && 1 == \result) && !(0 == systemActive)) && !(0 == \result)) && 1 == tmp) && 0 == tmp) && 0 == methaneLevelCritical) && 0 == splverifierCounter) && 0 == tmp) && waterLevel <= 2) && 0 == tmp) && !(0 == tmp___0)) && 0 == \result) && 0 == \result) && 1 == pumpRunning) - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 169]: Loop Invariant Derived loop invariant: (((0 == methaneLevelCritical && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel - InvariantResult [Line: 630]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 888]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 141 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 44.1s, OverallIterations: 16, TraceHistogramMax: 2, AutomataDifference: 32.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 19.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1885 SDtfs, 3127 SDslu, 3393 SDs, 0 SdLazy, 484 SolverSat, 80 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.6s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 191 GetRequests, 102 SyntacticMatches, 0 SemanticMatches, 89 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 65 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=360occurred in iteration=9, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 8.0s AutomataMinimizationTime, 16 MinimizatonAttempts, 2515 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 58 LocationsWithAnnotation, 58 PreInvPairs, 324 NumberOfFragments, 1999 HoareAnnotationTreeSize, 58 FomulaSimplifications, 21424426 FormulaSimplificationTreeSizeReduction, 4.4s HoareSimplificationTime, 58 FomulaSimplificationsInter, 3582074 FormulaSimplificationTreeSizeReductionInter, 15.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.9s InterpolantComputationTime, 667 NumberOfCodeBlocks, 667 NumberOfCodeBlocksAsserted, 17 NumberOfCheckSat, 650 ConstructedInterpolants, 0 QuantifiedInterpolants, 53760 SizeOfPredicates, 4 NumberOfNonLiveVariables, 441 ConjunctsInSsa, 7 ConjunctsInUnsatCore, 17 InterpolantComputations, 15 PerfectInterpolantSequences, 78/90 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...