./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 96fab9ebc0a7c1449817f0fde656dfd4d62824fd ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:03:48,338 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:03:48,340 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:03:48,352 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:03:48,352 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:03:48,353 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:03:48,355 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:03:48,357 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:03:48,359 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:03:48,360 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:03:48,361 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:03:48,362 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:03:48,363 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:03:48,364 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:03:48,365 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:03:48,366 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:03:48,367 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:03:48,368 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:03:48,370 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:03:48,373 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:03:48,374 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:03:48,376 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:03:48,377 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:03:48,378 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:03:48,381 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:03:48,381 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:03:48,382 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:03:48,383 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:03:48,383 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:03:48,385 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:03:48,385 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:03:48,386 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:03:48,387 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:03:48,388 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:03:48,389 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:03:48,389 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:03:48,390 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:03:48,391 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:03:48,391 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:03:48,392 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:03:48,393 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:03:48,394 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:03:48,409 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:03:48,409 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:03:48,411 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:03:48,411 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:03:48,411 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:03:48,412 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:03:48,412 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:03:48,412 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:03:48,413 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:03:48,413 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:03:48,413 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:03:48,413 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:03:48,414 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:03:48,414 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:03:48,414 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:03:48,415 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:03:48,415 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:03:48,415 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:03:48,416 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:03:48,416 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:03:48,416 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:03:48,416 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:03:48,417 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:03:48,417 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:03:48,417 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:03:48,418 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:03:48,418 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:03:48,418 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:03:48,418 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:03:48,419 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 96fab9ebc0a7c1449817f0fde656dfd4d62824fd [2020-07-28 19:03:48,749 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:03:48,764 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:03:48,768 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:03:48,770 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:03:48,770 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:03:48,771 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c [2020-07-28 19:03:48,850 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6a638beff/8a8d163730ad4d3fad01d2b7824db1c2/FLAGca6a77a05 [2020-07-28 19:03:49,390 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:03:49,391 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product50.cil.c [2020-07-28 19:03:49,414 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6a638beff/8a8d163730ad4d3fad01d2b7824db1c2/FLAGca6a77a05 [2020-07-28 19:03:49,697 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6a638beff/8a8d163730ad4d3fad01d2b7824db1c2 [2020-07-28 19:03:49,700 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:03:49,703 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:03:49,704 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:03:49,704 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:03:49,708 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:03:49,709 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:03:49" (1/1) ... [2020-07-28 19:03:49,712 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3c371942 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:49, skipping insertion in model container [2020-07-28 19:03:49,713 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:03:49" (1/1) ... [2020-07-28 19:03:49,721 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:03:49,780 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:03:50,198 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:03:50,278 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:03:50,400 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:03:50,436 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:03:50,437 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:50 WrapperNode [2020-07-28 19:03:50,437 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:03:50,438 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:03:50,438 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:03:50,438 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:03:50,448 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:50" (1/1) ... [2020-07-28 19:03:50,469 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:50" (1/1) ... [2020-07-28 19:03:50,557 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:03:50,558 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:03:50,558 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:03:50,558 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:03:50,572 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:50" (1/1) ... [2020-07-28 19:03:50,572 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:50" (1/1) ... [2020-07-28 19:03:50,577 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:50" (1/1) ... [2020-07-28 19:03:50,578 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:50" (1/1) ... [2020-07-28 19:03:50,594 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:50" (1/1) ... [2020-07-28 19:03:50,606 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:50" (1/1) ... [2020-07-28 19:03:50,610 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:50" (1/1) ... [2020-07-28 19:03:50,615 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:03:50,616 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:03:50,616 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:03:50,616 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:03:50,617 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:50" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:03:50,705 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:03:50,706 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:03:50,706 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:03:50,707 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:03:52,349 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:03:52,350 INFO L295 CfgBuilder]: Removed 158 assume(true) statements. [2020-07-28 19:03:52,357 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:03:52 BoogieIcfgContainer [2020-07-28 19:03:52,358 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:03:52,359 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:03:52,361 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:03:52,364 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:03:52,365 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:03:49" (1/3) ... [2020-07-28 19:03:52,366 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@26474e63 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:03:52, skipping insertion in model container [2020-07-28 19:03:52,367 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:50" (2/3) ... [2020-07-28 19:03:52,368 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@26474e63 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:03:52, skipping insertion in model container [2020-07-28 19:03:52,368 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:03:52" (3/3) ... [2020-07-28 19:03:52,371 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product50.cil.c [2020-07-28 19:03:52,383 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:03:52,396 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:03:52,413 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:03:52,449 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:03:52,450 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:03:52,450 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:03:52,451 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:03:52,451 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:03:52,452 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:03:52,452 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:03:52,452 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:03:52,483 INFO L276 IsEmpty]: Start isEmpty. Operand 117 states. [2020-07-28 19:03:52,492 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2020-07-28 19:03:52,493 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:03:52,494 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:03:52,495 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:03:52,505 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:03:52,506 INFO L82 PathProgramCache]: Analyzing trace with hash -1800894747, now seen corresponding path program 1 times [2020-07-28 19:03:52,521 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:03:52,522 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1315582083] [2020-07-28 19:03:52,522 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:03:52,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:03:52,905 INFO L280 TraceCheckUtils]: 0: Hoare triple {120#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string42.base, #t~string42.offset, 1);call write~init~int(77, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(101, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(116, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(104, #t~string42.base, 4 + #t~string42.offset, 1);call write~init~int(58, #t~string42.base, 5 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 6 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string44.base, #t~string44.offset, 1);call write~init~int(82, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(73, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(84, #t~string44.base, 3 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 4 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(75, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string48.base, #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 1 + #t~string48.offset, 1);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(13);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string55.base, #t~string55.offset, 1);call write~init~int(110, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 2 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string59.base, #t~string59.offset, 1);call write~init~int(80, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(117, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(109, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(112, #t~string59.base, 4 + #t~string59.offset, 1);call write~init~int(58, #t~string59.base, 5 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 6 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string65.base, #t~string65.offset, 1);call write~init~int(32, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string67.base, #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 1 + #t~string67.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {120#true} is VALID [2020-07-28 19:03:52,906 INFO L280 TraceCheckUtils]: 1: Hoare triple {120#true} havoc main_#res;havoc main_#t~ret37, main_~retValue_acc~3, main_~tmp~4;havoc main_~retValue_acc~3;havoc main_~tmp~4; {120#true} is VALID [2020-07-28 19:03:52,906 INFO L280 TraceCheckUtils]: 2: Hoare triple {120#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {120#true} is VALID [2020-07-28 19:03:52,907 INFO L280 TraceCheckUtils]: 3: Hoare triple {120#true} main_#t~ret37 := valid_product_#res;assume -2147483648 <= main_#t~ret37 && main_#t~ret37 <= 2147483647;main_~tmp~4 := main_#t~ret37;havoc main_#t~ret37; {120#true} is VALID [2020-07-28 19:03:52,908 INFO L280 TraceCheckUtils]: 4: Hoare triple {120#true} assume 0 != main_~tmp~4; {120#true} is VALID [2020-07-28 19:03:52,909 INFO L280 TraceCheckUtils]: 5: Hoare triple {120#true} havoc test_#t~nondet70, test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {120#true} is VALID [2020-07-28 19:03:52,910 INFO L280 TraceCheckUtils]: 6: Hoare triple {120#true} assume false; {121#false} is VALID [2020-07-28 19:03:52,910 INFO L280 TraceCheckUtils]: 7: Hoare triple {121#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {121#false} is VALID [2020-07-28 19:03:52,910 INFO L280 TraceCheckUtils]: 8: Hoare triple {121#false} assume !(0 != ~pumpRunning~0); {121#false} is VALID [2020-07-28 19:03:52,911 INFO L280 TraceCheckUtils]: 9: Hoare triple {121#false} assume !(0 != ~systemActive~0); {121#false} is VALID [2020-07-28 19:03:52,911 INFO L280 TraceCheckUtils]: 10: Hoare triple {121#false} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {121#false} is VALID [2020-07-28 19:03:52,911 INFO L280 TraceCheckUtils]: 11: Hoare triple {121#false} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {121#false} is VALID [2020-07-28 19:03:52,912 INFO L280 TraceCheckUtils]: 12: Hoare triple {121#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {121#false} is VALID [2020-07-28 19:03:52,912 INFO L280 TraceCheckUtils]: 13: Hoare triple {121#false} __utac_acc__Specification4_spec__1_#t~ret36 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret36 && __utac_acc__Specification4_spec__1_#t~ret36 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret36;havoc __utac_acc__Specification4_spec__1_#t~ret36; {121#false} is VALID [2020-07-28 19:03:52,914 INFO L280 TraceCheckUtils]: 14: Hoare triple {121#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {121#false} is VALID [2020-07-28 19:03:52,915 INFO L280 TraceCheckUtils]: 15: Hoare triple {121#false} assume !false; {121#false} is VALID [2020-07-28 19:03:52,918 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:03:52,919 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1315582083] [2020-07-28 19:03:52,923 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:03:52,923 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:03:52,924 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [619286268] [2020-07-28 19:03:52,932 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 16 [2020-07-28 19:03:52,938 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:03:52,943 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:03:52,994 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 16 edges. 16 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:03:52,994 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:03:52,994 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:03:53,004 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:03:53,005 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:03:53,008 INFO L87 Difference]: Start difference. First operand 117 states. Second operand 2 states. [2020-07-28 19:03:53,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:53,299 INFO L93 Difference]: Finished difference Result 228 states and 347 transitions. [2020-07-28 19:03:53,299 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:03:53,300 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 16 [2020-07-28 19:03:53,300 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:03:53,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:03:53,318 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 347 transitions. [2020-07-28 19:03:53,319 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:03:53,331 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 347 transitions. [2020-07-28 19:03:53,331 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 347 transitions. [2020-07-28 19:03:53,783 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 347 edges. 347 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:03:53,807 INFO L225 Difference]: With dead ends: 228 [2020-07-28 19:03:53,807 INFO L226 Difference]: Without dead ends: 113 [2020-07-28 19:03:53,815 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:03:53,859 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 113 states. [2020-07-28 19:03:53,908 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 113 to 113. [2020-07-28 19:03:53,909 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:03:53,909 INFO L82 GeneralOperation]: Start isEquivalent. First operand 113 states. Second operand 113 states. [2020-07-28 19:03:53,910 INFO L74 IsIncluded]: Start isIncluded. First operand 113 states. Second operand 113 states. [2020-07-28 19:03:53,910 INFO L87 Difference]: Start difference. First operand 113 states. Second operand 113 states. [2020-07-28 19:03:53,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:53,925 INFO L93 Difference]: Finished difference Result 113 states and 165 transitions. [2020-07-28 19:03:53,925 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 165 transitions. [2020-07-28 19:03:53,927 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:03:53,928 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:03:53,928 INFO L74 IsIncluded]: Start isIncluded. First operand 113 states. Second operand 113 states. [2020-07-28 19:03:53,928 INFO L87 Difference]: Start difference. First operand 113 states. Second operand 113 states. [2020-07-28 19:03:53,942 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:53,943 INFO L93 Difference]: Finished difference Result 113 states and 165 transitions. [2020-07-28 19:03:53,943 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 165 transitions. [2020-07-28 19:03:53,950 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:03:53,950 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:03:53,951 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:03:53,951 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:03:53,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 113 states. [2020-07-28 19:03:53,959 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 113 states to 113 states and 165 transitions. [2020-07-28 19:03:53,961 INFO L78 Accepts]: Start accepts. Automaton has 113 states and 165 transitions. Word has length 16 [2020-07-28 19:03:53,961 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:03:53,961 INFO L479 AbstractCegarLoop]: Abstraction has 113 states and 165 transitions. [2020-07-28 19:03:53,962 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:03:53,962 INFO L276 IsEmpty]: Start isEmpty. Operand 113 states and 165 transitions. [2020-07-28 19:03:53,963 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2020-07-28 19:03:53,964 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:03:53,964 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:03:53,965 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:03:53,965 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:03:53,966 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:03:53,966 INFO L82 PathProgramCache]: Analyzing trace with hash 1447315652, now seen corresponding path program 1 times [2020-07-28 19:03:53,967 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:03:53,968 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1994195157] [2020-07-28 19:03:53,968 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:03:54,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:03:54,141 INFO L280 TraceCheckUtils]: 0: Hoare triple {815#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string42.base, #t~string42.offset, 1);call write~init~int(77, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(101, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(116, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(104, #t~string42.base, 4 + #t~string42.offset, 1);call write~init~int(58, #t~string42.base, 5 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 6 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string44.base, #t~string44.offset, 1);call write~init~int(82, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(73, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(84, #t~string44.base, 3 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 4 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(75, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string48.base, #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 1 + #t~string48.offset, 1);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(13);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string55.base, #t~string55.offset, 1);call write~init~int(110, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 2 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string59.base, #t~string59.offset, 1);call write~init~int(80, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(117, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(109, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(112, #t~string59.base, 4 + #t~string59.offset, 1);call write~init~int(58, #t~string59.base, 5 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 6 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string65.base, #t~string65.offset, 1);call write~init~int(32, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string67.base, #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 1 + #t~string67.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {815#true} is VALID [2020-07-28 19:03:54,142 INFO L280 TraceCheckUtils]: 1: Hoare triple {815#true} havoc main_#res;havoc main_#t~ret37, main_~retValue_acc~3, main_~tmp~4;havoc main_~retValue_acc~3;havoc main_~tmp~4; {815#true} is VALID [2020-07-28 19:03:54,142 INFO L280 TraceCheckUtils]: 2: Hoare triple {815#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {815#true} is VALID [2020-07-28 19:03:54,143 INFO L280 TraceCheckUtils]: 3: Hoare triple {815#true} main_#t~ret37 := valid_product_#res;assume -2147483648 <= main_#t~ret37 && main_#t~ret37 <= 2147483647;main_~tmp~4 := main_#t~ret37;havoc main_#t~ret37; {815#true} is VALID [2020-07-28 19:03:54,143 INFO L280 TraceCheckUtils]: 4: Hoare triple {815#true} assume 0 != main_~tmp~4; {815#true} is VALID [2020-07-28 19:03:54,144 INFO L280 TraceCheckUtils]: 5: Hoare triple {815#true} havoc test_#t~nondet70, test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {817#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:03:54,145 INFO L280 TraceCheckUtils]: 6: Hoare triple {817#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {817#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:03:54,146 INFO L280 TraceCheckUtils]: 7: Hoare triple {817#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {816#false} is VALID [2020-07-28 19:03:54,146 INFO L280 TraceCheckUtils]: 8: Hoare triple {816#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {816#false} is VALID [2020-07-28 19:03:54,146 INFO L280 TraceCheckUtils]: 9: Hoare triple {816#false} assume !(0 != ~pumpRunning~0); {816#false} is VALID [2020-07-28 19:03:54,147 INFO L280 TraceCheckUtils]: 10: Hoare triple {816#false} assume !(0 != ~systemActive~0); {816#false} is VALID [2020-07-28 19:03:54,147 INFO L280 TraceCheckUtils]: 11: Hoare triple {816#false} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {816#false} is VALID [2020-07-28 19:03:54,148 INFO L280 TraceCheckUtils]: 12: Hoare triple {816#false} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {816#false} is VALID [2020-07-28 19:03:54,148 INFO L280 TraceCheckUtils]: 13: Hoare triple {816#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {816#false} is VALID [2020-07-28 19:03:54,148 INFO L280 TraceCheckUtils]: 14: Hoare triple {816#false} __utac_acc__Specification4_spec__1_#t~ret36 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret36 && __utac_acc__Specification4_spec__1_#t~ret36 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret36;havoc __utac_acc__Specification4_spec__1_#t~ret36; {816#false} is VALID [2020-07-28 19:03:54,148 INFO L280 TraceCheckUtils]: 15: Hoare triple {816#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {816#false} is VALID [2020-07-28 19:03:54,149 INFO L280 TraceCheckUtils]: 16: Hoare triple {816#false} assume !false; {816#false} is VALID [2020-07-28 19:03:54,150 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:03:54,151 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1994195157] [2020-07-28 19:03:54,151 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:03:54,151 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:03:54,151 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [460545623] [2020-07-28 19:03:54,153 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 17 [2020-07-28 19:03:54,154 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:03:54,154 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:03:54,189 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 17 edges. 17 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:03:54,189 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:03:54,189 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:03:54,189 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:03:54,190 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:03:54,190 INFO L87 Difference]: Start difference. First operand 113 states and 165 transitions. Second operand 3 states. [2020-07-28 19:03:54,428 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:54,428 INFO L93 Difference]: Finished difference Result 113 states and 165 transitions. [2020-07-28 19:03:54,428 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:03:54,428 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 17 [2020-07-28 19:03:54,429 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:03:54,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:03:54,432 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 165 transitions. [2020-07-28 19:03:54,432 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:03:54,434 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 165 transitions. [2020-07-28 19:03:54,435 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 165 transitions. [2020-07-28 19:03:54,616 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 165 edges. 165 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:03:54,618 INFO L225 Difference]: With dead ends: 113 [2020-07-28 19:03:54,618 INFO L226 Difference]: Without dead ends: 47 [2020-07-28 19:03:54,619 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:03:54,620 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47 states. [2020-07-28 19:03:54,636 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47 to 47. [2020-07-28 19:03:54,636 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:03:54,636 INFO L82 GeneralOperation]: Start isEquivalent. First operand 47 states. Second operand 47 states. [2020-07-28 19:03:54,637 INFO L74 IsIncluded]: Start isIncluded. First operand 47 states. Second operand 47 states. [2020-07-28 19:03:54,637 INFO L87 Difference]: Start difference. First operand 47 states. Second operand 47 states. [2020-07-28 19:03:54,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:54,640 INFO L93 Difference]: Finished difference Result 47 states and 68 transitions. [2020-07-28 19:03:54,640 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 68 transitions. [2020-07-28 19:03:54,640 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:03:54,641 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:03:54,641 INFO L74 IsIncluded]: Start isIncluded. First operand 47 states. Second operand 47 states. [2020-07-28 19:03:54,641 INFO L87 Difference]: Start difference. First operand 47 states. Second operand 47 states. [2020-07-28 19:03:54,643 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:54,644 INFO L93 Difference]: Finished difference Result 47 states and 68 transitions. [2020-07-28 19:03:54,644 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 68 transitions. [2020-07-28 19:03:54,644 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:03:54,645 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:03:54,645 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:03:54,645 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:03:54,645 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 47 states. [2020-07-28 19:03:54,647 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 68 transitions. [2020-07-28 19:03:54,648 INFO L78 Accepts]: Start accepts. Automaton has 47 states and 68 transitions. Word has length 17 [2020-07-28 19:03:54,648 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:03:54,648 INFO L479 AbstractCegarLoop]: Abstraction has 47 states and 68 transitions. [2020-07-28 19:03:54,649 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:03:54,649 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 68 transitions. [2020-07-28 19:03:54,649 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2020-07-28 19:03:54,650 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:03:54,650 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:03:54,650 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:03:54,651 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:03:54,651 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:03:54,651 INFO L82 PathProgramCache]: Analyzing trace with hash -230586389, now seen corresponding path program 1 times [2020-07-28 19:03:54,651 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:03:54,652 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1777812186] [2020-07-28 19:03:54,652 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:03:54,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:03:54,785 INFO L280 TraceCheckUtils]: 0: Hoare triple {1132#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string42.base, #t~string42.offset, 1);call write~init~int(77, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(101, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(116, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(104, #t~string42.base, 4 + #t~string42.offset, 1);call write~init~int(58, #t~string42.base, 5 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 6 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string44.base, #t~string44.offset, 1);call write~init~int(82, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(73, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(84, #t~string44.base, 3 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 4 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(75, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string48.base, #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 1 + #t~string48.offset, 1);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(13);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string55.base, #t~string55.offset, 1);call write~init~int(110, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 2 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string59.base, #t~string59.offset, 1);call write~init~int(80, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(117, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(109, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(112, #t~string59.base, 4 + #t~string59.offset, 1);call write~init~int(58, #t~string59.base, 5 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 6 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string65.base, #t~string65.offset, 1);call write~init~int(32, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string67.base, #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 1 + #t~string67.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1132#true} is VALID [2020-07-28 19:03:54,785 INFO L280 TraceCheckUtils]: 1: Hoare triple {1132#true} havoc main_#res;havoc main_#t~ret37, main_~retValue_acc~3, main_~tmp~4;havoc main_~retValue_acc~3;havoc main_~tmp~4; {1132#true} is VALID [2020-07-28 19:03:54,786 INFO L280 TraceCheckUtils]: 2: Hoare triple {1132#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {1134#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:03:54,787 INFO L280 TraceCheckUtils]: 3: Hoare triple {1134#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret37 := valid_product_#res;assume -2147483648 <= main_#t~ret37 && main_#t~ret37 <= 2147483647;main_~tmp~4 := main_#t~ret37;havoc main_#t~ret37; {1135#(= 1 ULTIMATE.start_main_~tmp~4)} is VALID [2020-07-28 19:03:54,787 INFO L280 TraceCheckUtils]: 4: Hoare triple {1135#(= 1 ULTIMATE.start_main_~tmp~4)} assume 0 != main_~tmp~4; {1132#true} is VALID [2020-07-28 19:03:54,788 INFO L280 TraceCheckUtils]: 5: Hoare triple {1132#true} havoc test_#t~nondet70, test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1132#true} is VALID [2020-07-28 19:03:54,788 INFO L280 TraceCheckUtils]: 6: Hoare triple {1132#true} assume !false; {1132#true} is VALID [2020-07-28 19:03:54,788 INFO L280 TraceCheckUtils]: 7: Hoare triple {1132#true} assume test_~splverifierCounter~0 < 4; {1132#true} is VALID [2020-07-28 19:03:54,788 INFO L280 TraceCheckUtils]: 8: Hoare triple {1132#true} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {1132#true} is VALID [2020-07-28 19:03:54,789 INFO L280 TraceCheckUtils]: 9: Hoare triple {1132#true} assume !(0 != test_~tmp~9); {1132#true} is VALID [2020-07-28 19:03:54,789 INFO L280 TraceCheckUtils]: 10: Hoare triple {1132#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {1132#true} is VALID [2020-07-28 19:03:54,789 INFO L280 TraceCheckUtils]: 11: Hoare triple {1132#true} assume !(0 != test_~tmp___0~3); {1132#true} is VALID [2020-07-28 19:03:54,789 INFO L280 TraceCheckUtils]: 12: Hoare triple {1132#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {1132#true} is VALID [2020-07-28 19:03:54,790 INFO L280 TraceCheckUtils]: 13: Hoare triple {1132#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1136#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:03:54,791 INFO L280 TraceCheckUtils]: 14: Hoare triple {1136#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {1136#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:03:54,791 INFO L280 TraceCheckUtils]: 15: Hoare triple {1136#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {1133#false} is VALID [2020-07-28 19:03:54,792 INFO L280 TraceCheckUtils]: 16: Hoare triple {1133#false} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {1133#false} is VALID [2020-07-28 19:03:54,792 INFO L280 TraceCheckUtils]: 17: Hoare triple {1133#false} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {1133#false} is VALID [2020-07-28 19:03:54,792 INFO L280 TraceCheckUtils]: 18: Hoare triple {1133#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {1133#false} is VALID [2020-07-28 19:03:54,793 INFO L280 TraceCheckUtils]: 19: Hoare triple {1133#false} __utac_acc__Specification4_spec__1_#t~ret36 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret36 && __utac_acc__Specification4_spec__1_#t~ret36 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret36;havoc __utac_acc__Specification4_spec__1_#t~ret36; {1133#false} is VALID [2020-07-28 19:03:54,793 INFO L280 TraceCheckUtils]: 20: Hoare triple {1133#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {1133#false} is VALID [2020-07-28 19:03:54,793 INFO L280 TraceCheckUtils]: 21: Hoare triple {1133#false} assume !false; {1133#false} is VALID [2020-07-28 19:03:54,796 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:03:54,796 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1777812186] [2020-07-28 19:03:54,797 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:03:54,797 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:03:54,797 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [166934657] [2020-07-28 19:03:54,798 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 22 [2020-07-28 19:03:54,798 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:03:54,798 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:03:54,835 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 22 edges. 22 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:03:54,835 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:03:54,835 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:03:54,836 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:03:54,836 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:03:54,836 INFO L87 Difference]: Start difference. First operand 47 states and 68 transitions. Second operand 5 states. [2020-07-28 19:03:55,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:55,264 INFO L93 Difference]: Finished difference Result 88 states and 130 transitions. [2020-07-28 19:03:55,264 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:03:55,264 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 22 [2020-07-28 19:03:55,265 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:03:55,265 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:03:55,268 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 130 transitions. [2020-07-28 19:03:55,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:03:55,270 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 130 transitions. [2020-07-28 19:03:55,271 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 130 transitions. [2020-07-28 19:03:55,425 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 130 edges. 130 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:03:55,427 INFO L225 Difference]: With dead ends: 88 [2020-07-28 19:03:55,427 INFO L226 Difference]: Without dead ends: 47 [2020-07-28 19:03:55,428 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:03:55,428 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 47 states. [2020-07-28 19:03:55,465 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 47 to 47. [2020-07-28 19:03:55,465 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:03:55,466 INFO L82 GeneralOperation]: Start isEquivalent. First operand 47 states. Second operand 47 states. [2020-07-28 19:03:55,466 INFO L74 IsIncluded]: Start isIncluded. First operand 47 states. Second operand 47 states. [2020-07-28 19:03:55,466 INFO L87 Difference]: Start difference. First operand 47 states. Second operand 47 states. [2020-07-28 19:03:55,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:55,469 INFO L93 Difference]: Finished difference Result 47 states and 67 transitions. [2020-07-28 19:03:55,469 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 67 transitions. [2020-07-28 19:03:55,469 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:03:55,469 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:03:55,470 INFO L74 IsIncluded]: Start isIncluded. First operand 47 states. Second operand 47 states. [2020-07-28 19:03:55,470 INFO L87 Difference]: Start difference. First operand 47 states. Second operand 47 states. [2020-07-28 19:03:55,472 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:55,472 INFO L93 Difference]: Finished difference Result 47 states and 67 transitions. [2020-07-28 19:03:55,473 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 67 transitions. [2020-07-28 19:03:55,473 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:03:55,473 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:03:55,474 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:03:55,474 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:03:55,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 47 states. [2020-07-28 19:03:55,476 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47 states to 47 states and 67 transitions. [2020-07-28 19:03:55,476 INFO L78 Accepts]: Start accepts. Automaton has 47 states and 67 transitions. Word has length 22 [2020-07-28 19:03:55,477 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:03:55,477 INFO L479 AbstractCegarLoop]: Abstraction has 47 states and 67 transitions. [2020-07-28 19:03:55,477 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:03:55,477 INFO L276 IsEmpty]: Start isEmpty. Operand 47 states and 67 transitions. [2020-07-28 19:03:55,478 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 25 [2020-07-28 19:03:55,478 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:03:55,478 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:03:55,478 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:03:55,479 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:03:55,479 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:03:55,479 INFO L82 PathProgramCache]: Analyzing trace with hash -108421843, now seen corresponding path program 1 times [2020-07-28 19:03:55,480 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:03:55,480 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1735919818] [2020-07-28 19:03:55,480 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:03:55,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:03:55,573 INFO L280 TraceCheckUtils]: 0: Hoare triple {1421#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string42.base, #t~string42.offset, 1);call write~init~int(77, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(101, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(116, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(104, #t~string42.base, 4 + #t~string42.offset, 1);call write~init~int(58, #t~string42.base, 5 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 6 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string44.base, #t~string44.offset, 1);call write~init~int(82, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(73, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(84, #t~string44.base, 3 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 4 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(75, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string48.base, #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 1 + #t~string48.offset, 1);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(13);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string55.base, #t~string55.offset, 1);call write~init~int(110, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 2 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string59.base, #t~string59.offset, 1);call write~init~int(80, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(117, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(109, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(112, #t~string59.base, 4 + #t~string59.offset, 1);call write~init~int(58, #t~string59.base, 5 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 6 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string65.base, #t~string65.offset, 1);call write~init~int(32, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string67.base, #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 1 + #t~string67.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,574 INFO L280 TraceCheckUtils]: 1: Hoare triple {1423#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret37, main_~retValue_acc~3, main_~tmp~4;havoc main_~retValue_acc~3;havoc main_~tmp~4; {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,575 INFO L280 TraceCheckUtils]: 2: Hoare triple {1423#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,581 INFO L280 TraceCheckUtils]: 3: Hoare triple {1423#(= 0 ~pumpRunning~0)} main_#t~ret37 := valid_product_#res;assume -2147483648 <= main_#t~ret37 && main_#t~ret37 <= 2147483647;main_~tmp~4 := main_#t~ret37;havoc main_#t~ret37; {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,581 INFO L280 TraceCheckUtils]: 4: Hoare triple {1423#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~4; {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,582 INFO L280 TraceCheckUtils]: 5: Hoare triple {1423#(= 0 ~pumpRunning~0)} havoc test_#t~nondet70, test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,584 INFO L280 TraceCheckUtils]: 6: Hoare triple {1423#(= 0 ~pumpRunning~0)} assume !false; {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,585 INFO L280 TraceCheckUtils]: 7: Hoare triple {1423#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,586 INFO L280 TraceCheckUtils]: 8: Hoare triple {1423#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,587 INFO L280 TraceCheckUtils]: 9: Hoare triple {1423#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~9); {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,588 INFO L280 TraceCheckUtils]: 10: Hoare triple {1423#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,588 INFO L280 TraceCheckUtils]: 11: Hoare triple {1423#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~3); {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,589 INFO L280 TraceCheckUtils]: 12: Hoare triple {1423#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,589 INFO L280 TraceCheckUtils]: 13: Hoare triple {1423#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,590 INFO L280 TraceCheckUtils]: 14: Hoare triple {1423#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,591 INFO L280 TraceCheckUtils]: 15: Hoare triple {1423#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,591 INFO L280 TraceCheckUtils]: 16: Hoare triple {1423#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {1423#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:03:55,592 INFO L280 TraceCheckUtils]: 17: Hoare triple {1423#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {1422#false} is VALID [2020-07-28 19:03:55,592 INFO L280 TraceCheckUtils]: 18: Hoare triple {1422#false} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {1422#false} is VALID [2020-07-28 19:03:55,593 INFO L280 TraceCheckUtils]: 19: Hoare triple {1422#false} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {1422#false} is VALID [2020-07-28 19:03:55,593 INFO L280 TraceCheckUtils]: 20: Hoare triple {1422#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {1422#false} is VALID [2020-07-28 19:03:55,593 INFO L280 TraceCheckUtils]: 21: Hoare triple {1422#false} __utac_acc__Specification4_spec__1_#t~ret36 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret36 && __utac_acc__Specification4_spec__1_#t~ret36 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret36;havoc __utac_acc__Specification4_spec__1_#t~ret36; {1422#false} is VALID [2020-07-28 19:03:55,593 INFO L280 TraceCheckUtils]: 22: Hoare triple {1422#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {1422#false} is VALID [2020-07-28 19:03:55,593 INFO L280 TraceCheckUtils]: 23: Hoare triple {1422#false} assume !false; {1422#false} is VALID [2020-07-28 19:03:55,595 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:03:55,596 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1735919818] [2020-07-28 19:03:55,596 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:03:55,596 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:03:55,596 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [243066638] [2020-07-28 19:03:55,597 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 19:03:55,597 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:03:55,598 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:03:55,629 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 24 edges. 24 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:03:55,629 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:03:55,629 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:03:55,630 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:03:55,630 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:03:55,630 INFO L87 Difference]: Start difference. First operand 47 states and 67 transitions. Second operand 3 states. [2020-07-28 19:03:55,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:55,846 INFO L93 Difference]: Finished difference Result 109 states and 158 transitions. [2020-07-28 19:03:55,846 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:03:55,846 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 24 [2020-07-28 19:03:55,846 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:03:55,847 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:03:55,850 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 158 transitions. [2020-07-28 19:03:55,851 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:03:55,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 158 transitions. [2020-07-28 19:03:55,854 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 158 transitions. [2020-07-28 19:03:56,029 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 158 edges. 158 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:03:56,031 INFO L225 Difference]: With dead ends: 109 [2020-07-28 19:03:56,031 INFO L226 Difference]: Without dead ends: 68 [2020-07-28 19:03:56,032 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:03:56,033 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68 states. [2020-07-28 19:03:56,107 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68 to 66. [2020-07-28 19:03:56,107 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:03:56,108 INFO L82 GeneralOperation]: Start isEquivalent. First operand 68 states. Second operand 66 states. [2020-07-28 19:03:56,108 INFO L74 IsIncluded]: Start isIncluded. First operand 68 states. Second operand 66 states. [2020-07-28 19:03:56,108 INFO L87 Difference]: Start difference. First operand 68 states. Second operand 66 states. [2020-07-28 19:03:56,111 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:56,111 INFO L93 Difference]: Finished difference Result 68 states and 94 transitions. [2020-07-28 19:03:56,111 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 94 transitions. [2020-07-28 19:03:56,112 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:03:56,112 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:03:56,112 INFO L74 IsIncluded]: Start isIncluded. First operand 66 states. Second operand 68 states. [2020-07-28 19:03:56,112 INFO L87 Difference]: Start difference. First operand 66 states. Second operand 68 states. [2020-07-28 19:03:56,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:56,115 INFO L93 Difference]: Finished difference Result 68 states and 94 transitions. [2020-07-28 19:03:56,116 INFO L276 IsEmpty]: Start isEmpty. Operand 68 states and 94 transitions. [2020-07-28 19:03:56,116 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:03:56,116 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:03:56,116 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:03:56,117 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:03:56,117 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 66 states. [2020-07-28 19:03:56,119 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66 states to 66 states and 93 transitions. [2020-07-28 19:03:56,120 INFO L78 Accepts]: Start accepts. Automaton has 66 states and 93 transitions. Word has length 24 [2020-07-28 19:03:56,120 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:03:56,120 INFO L479 AbstractCegarLoop]: Abstraction has 66 states and 93 transitions. [2020-07-28 19:03:56,120 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:03:56,121 INFO L276 IsEmpty]: Start isEmpty. Operand 66 states and 93 transitions. [2020-07-28 19:03:56,121 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2020-07-28 19:03:56,121 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:03:56,122 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:03:56,122 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:03:56,122 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:03:56,123 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:03:56,123 INFO L82 PathProgramCache]: Analyzing trace with hash -1619186466, now seen corresponding path program 1 times [2020-07-28 19:03:56,123 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:03:56,124 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [300097143] [2020-07-28 19:03:56,124 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:03:56,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:03:56,209 INFO L280 TraceCheckUtils]: 0: Hoare triple {1801#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string42.base, #t~string42.offset, 1);call write~init~int(77, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(101, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(116, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(104, #t~string42.base, 4 + #t~string42.offset, 1);call write~init~int(58, #t~string42.base, 5 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 6 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string44.base, #t~string44.offset, 1);call write~init~int(82, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(73, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(84, #t~string44.base, 3 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 4 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(75, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string48.base, #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 1 + #t~string48.offset, 1);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(13);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string55.base, #t~string55.offset, 1);call write~init~int(110, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 2 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string59.base, #t~string59.offset, 1);call write~init~int(80, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(117, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(109, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(112, #t~string59.base, 4 + #t~string59.offset, 1);call write~init~int(58, #t~string59.base, 5 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 6 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string65.base, #t~string65.offset, 1);call write~init~int(32, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string67.base, #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 1 + #t~string67.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {1801#true} is VALID [2020-07-28 19:03:56,210 INFO L280 TraceCheckUtils]: 1: Hoare triple {1801#true} havoc main_#res;havoc main_#t~ret37, main_~retValue_acc~3, main_~tmp~4;havoc main_~retValue_acc~3;havoc main_~tmp~4; {1801#true} is VALID [2020-07-28 19:03:56,210 INFO L280 TraceCheckUtils]: 2: Hoare triple {1801#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {1801#true} is VALID [2020-07-28 19:03:56,210 INFO L280 TraceCheckUtils]: 3: Hoare triple {1801#true} main_#t~ret37 := valid_product_#res;assume -2147483648 <= main_#t~ret37 && main_#t~ret37 <= 2147483647;main_~tmp~4 := main_#t~ret37;havoc main_#t~ret37; {1801#true} is VALID [2020-07-28 19:03:56,211 INFO L280 TraceCheckUtils]: 4: Hoare triple {1801#true} assume 0 != main_~tmp~4; {1801#true} is VALID [2020-07-28 19:03:56,211 INFO L280 TraceCheckUtils]: 5: Hoare triple {1801#true} havoc test_#t~nondet70, test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1801#true} is VALID [2020-07-28 19:03:56,211 INFO L280 TraceCheckUtils]: 6: Hoare triple {1801#true} assume !false; {1801#true} is VALID [2020-07-28 19:03:56,212 INFO L280 TraceCheckUtils]: 7: Hoare triple {1801#true} assume test_~splverifierCounter~0 < 4; {1801#true} is VALID [2020-07-28 19:03:56,212 INFO L280 TraceCheckUtils]: 8: Hoare triple {1801#true} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {1801#true} is VALID [2020-07-28 19:03:56,212 INFO L280 TraceCheckUtils]: 9: Hoare triple {1801#true} assume !(0 != test_~tmp~9); {1801#true} is VALID [2020-07-28 19:03:56,212 INFO L280 TraceCheckUtils]: 10: Hoare triple {1801#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {1801#true} is VALID [2020-07-28 19:03:56,213 INFO L280 TraceCheckUtils]: 11: Hoare triple {1801#true} assume !(0 != test_~tmp___0~3); {1801#true} is VALID [2020-07-28 19:03:56,213 INFO L280 TraceCheckUtils]: 12: Hoare triple {1801#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {1801#true} is VALID [2020-07-28 19:03:56,213 INFO L280 TraceCheckUtils]: 13: Hoare triple {1801#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {1801#true} is VALID [2020-07-28 19:03:56,213 INFO L280 TraceCheckUtils]: 14: Hoare triple {1801#true} assume !(0 != ~pumpRunning~0); {1801#true} is VALID [2020-07-28 19:03:56,214 INFO L280 TraceCheckUtils]: 15: Hoare triple {1801#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {1801#true} is VALID [2020-07-28 19:03:56,214 INFO L280 TraceCheckUtils]: 16: Hoare triple {1801#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {1801#true} is VALID [2020-07-28 19:03:56,215 INFO L280 TraceCheckUtils]: 17: Hoare triple {1801#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret68, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {1801#true} is VALID [2020-07-28 19:03:56,215 INFO L280 TraceCheckUtils]: 18: Hoare triple {1801#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {1801#true} is VALID [2020-07-28 19:03:56,216 INFO L280 TraceCheckUtils]: 19: Hoare triple {1801#true} isHighWaterLevel_#t~ret68 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret68 && isHighWaterLevel_#t~ret68 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret68;havoc isHighWaterLevel_#t~ret68; {1801#true} is VALID [2020-07-28 19:03:56,217 INFO L280 TraceCheckUtils]: 20: Hoare triple {1801#true} assume 0 != isHighWaterLevel_~tmp~7;isHighWaterLevel_~tmp___0~1 := 0; {1803#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} is VALID [2020-07-28 19:03:56,217 INFO L280 TraceCheckUtils]: 21: Hoare triple {1803#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {1804#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:03:56,218 INFO L280 TraceCheckUtils]: 22: Hoare triple {1804#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {1805#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~5)} is VALID [2020-07-28 19:03:56,219 INFO L280 TraceCheckUtils]: 23: Hoare triple {1805#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~5)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;~pumpRunning~0 := 1; {1802#false} is VALID [2020-07-28 19:03:56,219 INFO L280 TraceCheckUtils]: 24: Hoare triple {1802#false} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {1802#false} is VALID [2020-07-28 19:03:56,220 INFO L280 TraceCheckUtils]: 25: Hoare triple {1802#false} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {1802#false} is VALID [2020-07-28 19:03:56,220 INFO L280 TraceCheckUtils]: 26: Hoare triple {1802#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {1802#false} is VALID [2020-07-28 19:03:56,220 INFO L280 TraceCheckUtils]: 27: Hoare triple {1802#false} __utac_acc__Specification4_spec__1_#t~ret36 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret36 && __utac_acc__Specification4_spec__1_#t~ret36 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret36;havoc __utac_acc__Specification4_spec__1_#t~ret36; {1802#false} is VALID [2020-07-28 19:03:56,220 INFO L280 TraceCheckUtils]: 28: Hoare triple {1802#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {1802#false} is VALID [2020-07-28 19:03:56,221 INFO L280 TraceCheckUtils]: 29: Hoare triple {1802#false} assume !false; {1802#false} is VALID [2020-07-28 19:03:56,222 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:03:56,222 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [300097143] [2020-07-28 19:03:56,223 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:03:56,223 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:03:56,223 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1666112539] [2020-07-28 19:03:56,223 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 30 [2020-07-28 19:03:56,224 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:03:56,224 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:03:56,262 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 30 edges. 30 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:03:56,263 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:03:56,263 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:03:56,263 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:03:56,263 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:03:56,264 INFO L87 Difference]: Start difference. First operand 66 states and 93 transitions. Second operand 5 states. [2020-07-28 19:03:56,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:56,994 INFO L93 Difference]: Finished difference Result 175 states and 245 transitions. [2020-07-28 19:03:56,994 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:03:56,994 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 30 [2020-07-28 19:03:56,995 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:03:56,995 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:03:56,998 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 191 transitions. [2020-07-28 19:03:56,999 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:03:57,002 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 191 transitions. [2020-07-28 19:03:57,002 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 191 transitions. [2020-07-28 19:03:57,250 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 191 edges. 191 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:03:57,254 INFO L225 Difference]: With dead ends: 175 [2020-07-28 19:03:57,254 INFO L226 Difference]: Without dead ends: 115 [2020-07-28 19:03:57,255 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:03:57,257 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 115 states. [2020-07-28 19:03:57,371 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 115 to 72. [2020-07-28 19:03:57,371 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:03:57,372 INFO L82 GeneralOperation]: Start isEquivalent. First operand 115 states. Second operand 72 states. [2020-07-28 19:03:57,372 INFO L74 IsIncluded]: Start isIncluded. First operand 115 states. Second operand 72 states. [2020-07-28 19:03:57,372 INFO L87 Difference]: Start difference. First operand 115 states. Second operand 72 states. [2020-07-28 19:03:57,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:57,376 INFO L93 Difference]: Finished difference Result 115 states and 156 transitions. [2020-07-28 19:03:57,376 INFO L276 IsEmpty]: Start isEmpty. Operand 115 states and 156 transitions. [2020-07-28 19:03:57,376 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:03:57,377 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:03:57,377 INFO L74 IsIncluded]: Start isIncluded. First operand 72 states. Second operand 115 states. [2020-07-28 19:03:57,377 INFO L87 Difference]: Start difference. First operand 72 states. Second operand 115 states. [2020-07-28 19:03:57,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:57,381 INFO L93 Difference]: Finished difference Result 115 states and 156 transitions. [2020-07-28 19:03:57,381 INFO L276 IsEmpty]: Start isEmpty. Operand 115 states and 156 transitions. [2020-07-28 19:03:57,382 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:03:57,382 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:03:57,382 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:03:57,382 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:03:57,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 72 states. [2020-07-28 19:03:57,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 72 states to 72 states and 99 transitions. [2020-07-28 19:03:57,385 INFO L78 Accepts]: Start accepts. Automaton has 72 states and 99 transitions. Word has length 30 [2020-07-28 19:03:57,386 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:03:57,386 INFO L479 AbstractCegarLoop]: Abstraction has 72 states and 99 transitions. [2020-07-28 19:03:57,386 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:03:57,386 INFO L276 IsEmpty]: Start isEmpty. Operand 72 states and 99 transitions. [2020-07-28 19:03:57,387 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2020-07-28 19:03:57,387 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:03:57,387 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:03:57,388 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:03:57,388 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:03:57,388 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:03:57,388 INFO L82 PathProgramCache]: Analyzing trace with hash 1043324577, now seen corresponding path program 1 times [2020-07-28 19:03:57,389 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:03:57,389 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [305858708] [2020-07-28 19:03:57,389 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:03:57,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:03:57,503 INFO L280 TraceCheckUtils]: 0: Hoare triple {2383#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string42.base, #t~string42.offset, 1);call write~init~int(77, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(101, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(116, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(104, #t~string42.base, 4 + #t~string42.offset, 1);call write~init~int(58, #t~string42.base, 5 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 6 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string44.base, #t~string44.offset, 1);call write~init~int(82, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(73, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(84, #t~string44.base, 3 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 4 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(75, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string48.base, #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 1 + #t~string48.offset, 1);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(13);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string55.base, #t~string55.offset, 1);call write~init~int(110, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 2 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string59.base, #t~string59.offset, 1);call write~init~int(80, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(117, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(109, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(112, #t~string59.base, 4 + #t~string59.offset, 1);call write~init~int(58, #t~string59.base, 5 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 6 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string65.base, #t~string65.offset, 1);call write~init~int(32, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string67.base, #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 1 + #t~string67.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {2385#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:03:57,504 INFO L280 TraceCheckUtils]: 1: Hoare triple {2385#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret37, main_~retValue_acc~3, main_~tmp~4;havoc main_~retValue_acc~3;havoc main_~tmp~4; {2385#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:03:57,505 INFO L280 TraceCheckUtils]: 2: Hoare triple {2385#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {2386#(= |ULTIMATE.start_valid_product_#res| ~waterLevel~0)} is VALID [2020-07-28 19:03:57,506 INFO L280 TraceCheckUtils]: 3: Hoare triple {2386#(= |ULTIMATE.start_valid_product_#res| ~waterLevel~0)} main_#t~ret37 := valid_product_#res;assume -2147483648 <= main_#t~ret37 && main_#t~ret37 <= 2147483647;main_~tmp~4 := main_#t~ret37;havoc main_#t~ret37; {2387#(= ULTIMATE.start_main_~tmp~4 ~waterLevel~0)} is VALID [2020-07-28 19:03:57,507 INFO L280 TraceCheckUtils]: 4: Hoare triple {2387#(= ULTIMATE.start_main_~tmp~4 ~waterLevel~0)} assume 0 != main_~tmp~4; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,507 INFO L280 TraceCheckUtils]: 5: Hoare triple {2388#(not (= 0 ~waterLevel~0))} havoc test_#t~nondet70, test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,508 INFO L280 TraceCheckUtils]: 6: Hoare triple {2388#(not (= 0 ~waterLevel~0))} assume !false; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,509 INFO L280 TraceCheckUtils]: 7: Hoare triple {2388#(not (= 0 ~waterLevel~0))} assume test_~splverifierCounter~0 < 4; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,509 INFO L280 TraceCheckUtils]: 8: Hoare triple {2388#(not (= 0 ~waterLevel~0))} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,510 INFO L280 TraceCheckUtils]: 9: Hoare triple {2388#(not (= 0 ~waterLevel~0))} assume !(0 != test_~tmp~9); {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,511 INFO L280 TraceCheckUtils]: 10: Hoare triple {2388#(not (= 0 ~waterLevel~0))} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,511 INFO L280 TraceCheckUtils]: 11: Hoare triple {2388#(not (= 0 ~waterLevel~0))} assume !(0 != test_~tmp___0~3); {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,512 INFO L280 TraceCheckUtils]: 12: Hoare triple {2388#(not (= 0 ~waterLevel~0))} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,513 INFO L280 TraceCheckUtils]: 13: Hoare triple {2388#(not (= 0 ~waterLevel~0))} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,513 INFO L280 TraceCheckUtils]: 14: Hoare triple {2388#(not (= 0 ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,514 INFO L280 TraceCheckUtils]: 15: Hoare triple {2388#(not (= 0 ~waterLevel~0))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,515 INFO L280 TraceCheckUtils]: 16: Hoare triple {2388#(not (= 0 ~waterLevel~0))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,515 INFO L280 TraceCheckUtils]: 17: Hoare triple {2388#(not (= 0 ~waterLevel~0))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret68, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,516 INFO L280 TraceCheckUtils]: 18: Hoare triple {2388#(not (= 0 ~waterLevel~0))} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,516 INFO L280 TraceCheckUtils]: 19: Hoare triple {2388#(not (= 0 ~waterLevel~0))} isHighWaterLevel_#t~ret68 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret68 && isHighWaterLevel_#t~ret68 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret68;havoc isHighWaterLevel_#t~ret68; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,517 INFO L280 TraceCheckUtils]: 20: Hoare triple {2388#(not (= 0 ~waterLevel~0))} assume 0 != isHighWaterLevel_~tmp~7;isHighWaterLevel_~tmp___0~1 := 0; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,518 INFO L280 TraceCheckUtils]: 21: Hoare triple {2388#(not (= 0 ~waterLevel~0))} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,518 INFO L280 TraceCheckUtils]: 22: Hoare triple {2388#(not (= 0 ~waterLevel~0))} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,519 INFO L280 TraceCheckUtils]: 23: Hoare triple {2388#(not (= 0 ~waterLevel~0))} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~5); {2388#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:03:57,520 INFO L280 TraceCheckUtils]: 24: Hoare triple {2388#(not (= 0 ~waterLevel~0))} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {2389#(not (= 0 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:03:57,521 INFO L280 TraceCheckUtils]: 25: Hoare triple {2389#(not (= 0 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {2390#(not (= 0 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~3))} is VALID [2020-07-28 19:03:57,522 INFO L280 TraceCheckUtils]: 26: Hoare triple {2390#(not (= 0 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~3))} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {2384#false} is VALID [2020-07-28 19:03:57,522 INFO L280 TraceCheckUtils]: 27: Hoare triple {2384#false} __utac_acc__Specification4_spec__1_#t~ret36 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret36 && __utac_acc__Specification4_spec__1_#t~ret36 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret36;havoc __utac_acc__Specification4_spec__1_#t~ret36; {2384#false} is VALID [2020-07-28 19:03:57,522 INFO L280 TraceCheckUtils]: 28: Hoare triple {2384#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {2384#false} is VALID [2020-07-28 19:03:57,522 INFO L280 TraceCheckUtils]: 29: Hoare triple {2384#false} assume !false; {2384#false} is VALID [2020-07-28 19:03:57,524 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:03:57,525 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [305858708] [2020-07-28 19:03:57,525 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:03:57,525 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2020-07-28 19:03:57,525 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1339877438] [2020-07-28 19:03:57,526 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 30 [2020-07-28 19:03:57,526 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:03:57,526 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2020-07-28 19:03:57,565 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 30 edges. 30 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:03:57,566 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2020-07-28 19:03:57,566 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:03:57,566 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2020-07-28 19:03:57,566 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:03:57,567 INFO L87 Difference]: Start difference. First operand 72 states and 99 transitions. Second operand 8 states. [2020-07-28 19:03:59,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:59,393 INFO L93 Difference]: Finished difference Result 461 states and 653 transitions. [2020-07-28 19:03:59,393 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2020-07-28 19:03:59,393 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 30 [2020-07-28 19:03:59,394 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:03:59,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:03:59,403 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 441 transitions. [2020-07-28 19:03:59,404 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:03:59,412 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 441 transitions. [2020-07-28 19:03:59,413 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 13 states and 441 transitions. [2020-07-28 19:03:59,958 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 441 edges. 441 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:03:59,974 INFO L225 Difference]: With dead ends: 461 [2020-07-28 19:03:59,975 INFO L226 Difference]: Without dead ends: 395 [2020-07-28 19:03:59,976 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=71, Invalid=169, Unknown=0, NotChecked=0, Total=240 [2020-07-28 19:03:59,977 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 395 states. [2020-07-28 19:04:00,331 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 395 to 173. [2020-07-28 19:04:00,331 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:00,331 INFO L82 GeneralOperation]: Start isEquivalent. First operand 395 states. Second operand 173 states. [2020-07-28 19:04:00,331 INFO L74 IsIncluded]: Start isIncluded. First operand 395 states. Second operand 173 states. [2020-07-28 19:04:00,331 INFO L87 Difference]: Start difference. First operand 395 states. Second operand 173 states. [2020-07-28 19:04:00,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:00,346 INFO L93 Difference]: Finished difference Result 395 states and 550 transitions. [2020-07-28 19:04:00,346 INFO L276 IsEmpty]: Start isEmpty. Operand 395 states and 550 transitions. [2020-07-28 19:04:00,347 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:00,347 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:00,348 INFO L74 IsIncluded]: Start isIncluded. First operand 173 states. Second operand 395 states. [2020-07-28 19:04:00,348 INFO L87 Difference]: Start difference. First operand 173 states. Second operand 395 states. [2020-07-28 19:04:00,364 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:00,364 INFO L93 Difference]: Finished difference Result 395 states and 550 transitions. [2020-07-28 19:04:00,364 INFO L276 IsEmpty]: Start isEmpty. Operand 395 states and 550 transitions. [2020-07-28 19:04:00,365 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:00,366 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:00,366 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:00,366 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:00,366 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 173 states. [2020-07-28 19:04:00,372 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 173 states to 173 states and 235 transitions. [2020-07-28 19:04:00,372 INFO L78 Accepts]: Start accepts. Automaton has 173 states and 235 transitions. Word has length 30 [2020-07-28 19:04:00,373 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:00,373 INFO L479 AbstractCegarLoop]: Abstraction has 173 states and 235 transitions. [2020-07-28 19:04:00,373 INFO L480 AbstractCegarLoop]: Interpolant automaton has 8 states. [2020-07-28 19:04:00,373 INFO L276 IsEmpty]: Start isEmpty. Operand 173 states and 235 transitions. [2020-07-28 19:04:00,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2020-07-28 19:04:00,375 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:00,375 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:00,375 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:04:00,376 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:00,376 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:00,376 INFO L82 PathProgramCache]: Analyzing trace with hash -1625643979, now seen corresponding path program 1 times [2020-07-28 19:04:00,376 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:00,377 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1757361567] [2020-07-28 19:04:00,377 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:00,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:00,449 INFO L280 TraceCheckUtils]: 0: Hoare triple {4071#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string42.base, #t~string42.offset, 1);call write~init~int(77, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(101, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(116, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(104, #t~string42.base, 4 + #t~string42.offset, 1);call write~init~int(58, #t~string42.base, 5 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 6 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string44.base, #t~string44.offset, 1);call write~init~int(82, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(73, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(84, #t~string44.base, 3 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 4 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(75, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string48.base, #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 1 + #t~string48.offset, 1);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(13);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string55.base, #t~string55.offset, 1);call write~init~int(110, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 2 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string59.base, #t~string59.offset, 1);call write~init~int(80, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(117, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(109, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(112, #t~string59.base, 4 + #t~string59.offset, 1);call write~init~int(58, #t~string59.base, 5 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 6 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string65.base, #t~string65.offset, 1);call write~init~int(32, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string67.base, #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 1 + #t~string67.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {4071#true} is VALID [2020-07-28 19:04:00,450 INFO L280 TraceCheckUtils]: 1: Hoare triple {4071#true} havoc main_#res;havoc main_#t~ret37, main_~retValue_acc~3, main_~tmp~4;havoc main_~retValue_acc~3;havoc main_~tmp~4; {4071#true} is VALID [2020-07-28 19:04:00,450 INFO L280 TraceCheckUtils]: 2: Hoare triple {4071#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {4071#true} is VALID [2020-07-28 19:04:00,450 INFO L280 TraceCheckUtils]: 3: Hoare triple {4071#true} main_#t~ret37 := valid_product_#res;assume -2147483648 <= main_#t~ret37 && main_#t~ret37 <= 2147483647;main_~tmp~4 := main_#t~ret37;havoc main_#t~ret37; {4071#true} is VALID [2020-07-28 19:04:00,450 INFO L280 TraceCheckUtils]: 4: Hoare triple {4071#true} assume 0 != main_~tmp~4; {4071#true} is VALID [2020-07-28 19:04:00,450 INFO L280 TraceCheckUtils]: 5: Hoare triple {4071#true} havoc test_#t~nondet70, test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {4071#true} is VALID [2020-07-28 19:04:00,451 INFO L280 TraceCheckUtils]: 6: Hoare triple {4071#true} assume !false; {4071#true} is VALID [2020-07-28 19:04:00,451 INFO L280 TraceCheckUtils]: 7: Hoare triple {4071#true} assume test_~splverifierCounter~0 < 4; {4071#true} is VALID [2020-07-28 19:04:00,451 INFO L280 TraceCheckUtils]: 8: Hoare triple {4071#true} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {4071#true} is VALID [2020-07-28 19:04:00,451 INFO L280 TraceCheckUtils]: 9: Hoare triple {4071#true} assume !(0 != test_~tmp~9); {4071#true} is VALID [2020-07-28 19:04:00,451 INFO L280 TraceCheckUtils]: 10: Hoare triple {4071#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {4071#true} is VALID [2020-07-28 19:04:00,452 INFO L280 TraceCheckUtils]: 11: Hoare triple {4071#true} assume !(0 != test_~tmp___0~3); {4071#true} is VALID [2020-07-28 19:04:00,452 INFO L280 TraceCheckUtils]: 12: Hoare triple {4071#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {4071#true} is VALID [2020-07-28 19:04:00,452 INFO L280 TraceCheckUtils]: 13: Hoare triple {4071#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {4071#true} is VALID [2020-07-28 19:04:00,453 INFO L280 TraceCheckUtils]: 14: Hoare triple {4071#true} assume !(0 != ~pumpRunning~0); {4071#true} is VALID [2020-07-28 19:04:00,453 INFO L280 TraceCheckUtils]: 15: Hoare triple {4071#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {4071#true} is VALID [2020-07-28 19:04:00,453 INFO L280 TraceCheckUtils]: 16: Hoare triple {4071#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {4071#true} is VALID [2020-07-28 19:04:00,454 INFO L280 TraceCheckUtils]: 17: Hoare triple {4071#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret68, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {4071#true} is VALID [2020-07-28 19:04:00,455 INFO L280 TraceCheckUtils]: 18: Hoare triple {4071#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~8 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {4073#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:04:00,458 INFO L280 TraceCheckUtils]: 19: Hoare triple {4073#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret68 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret68 && isHighWaterLevel_#t~ret68 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret68;havoc isHighWaterLevel_#t~ret68; {4074#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~7)} is VALID [2020-07-28 19:04:00,459 INFO L280 TraceCheckUtils]: 20: Hoare triple {4074#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~7)} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {4072#false} is VALID [2020-07-28 19:04:00,459 INFO L280 TraceCheckUtils]: 21: Hoare triple {4072#false} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {4072#false} is VALID [2020-07-28 19:04:00,460 INFO L280 TraceCheckUtils]: 22: Hoare triple {4072#false} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {4072#false} is VALID [2020-07-28 19:04:00,460 INFO L280 TraceCheckUtils]: 23: Hoare triple {4072#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;~pumpRunning~0 := 1; {4072#false} is VALID [2020-07-28 19:04:00,460 INFO L280 TraceCheckUtils]: 24: Hoare triple {4072#false} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {4072#false} is VALID [2020-07-28 19:04:00,460 INFO L280 TraceCheckUtils]: 25: Hoare triple {4072#false} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {4072#false} is VALID [2020-07-28 19:04:00,461 INFO L280 TraceCheckUtils]: 26: Hoare triple {4072#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3); {4072#false} is VALID [2020-07-28 19:04:00,461 INFO L280 TraceCheckUtils]: 27: Hoare triple {4072#false} assume !false; {4072#false} is VALID [2020-07-28 19:04:00,461 INFO L280 TraceCheckUtils]: 28: Hoare triple {4072#false} assume test_~splverifierCounter~0 < 4; {4072#false} is VALID [2020-07-28 19:04:00,461 INFO L280 TraceCheckUtils]: 29: Hoare triple {4072#false} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {4072#false} is VALID [2020-07-28 19:04:00,461 INFO L280 TraceCheckUtils]: 30: Hoare triple {4072#false} assume !(0 != test_~tmp~9); {4072#false} is VALID [2020-07-28 19:04:00,462 INFO L280 TraceCheckUtils]: 31: Hoare triple {4072#false} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {4072#false} is VALID [2020-07-28 19:04:00,462 INFO L280 TraceCheckUtils]: 32: Hoare triple {4072#false} assume !(0 != test_~tmp___0~3); {4072#false} is VALID [2020-07-28 19:04:00,462 INFO L280 TraceCheckUtils]: 33: Hoare triple {4072#false} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {4072#false} is VALID [2020-07-28 19:04:00,462 INFO L280 TraceCheckUtils]: 34: Hoare triple {4072#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {4072#false} is VALID [2020-07-28 19:04:00,462 INFO L280 TraceCheckUtils]: 35: Hoare triple {4072#false} assume 0 != ~pumpRunning~0; {4072#false} is VALID [2020-07-28 19:04:00,463 INFO L280 TraceCheckUtils]: 36: Hoare triple {4072#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {4072#false} is VALID [2020-07-28 19:04:00,463 INFO L280 TraceCheckUtils]: 37: Hoare triple {4072#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {4072#false} is VALID [2020-07-28 19:04:00,464 INFO L280 TraceCheckUtils]: 38: Hoare triple {4072#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret69, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {4072#false} is VALID [2020-07-28 19:04:00,464 INFO L280 TraceCheckUtils]: 39: Hoare triple {4072#false} isLowWaterLevel_#t~ret69 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret69 && isLowWaterLevel_#t~ret69 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret69;havoc isLowWaterLevel_#t~ret69; {4072#false} is VALID [2020-07-28 19:04:00,464 INFO L280 TraceCheckUtils]: 40: Hoare triple {4072#false} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {4072#false} is VALID [2020-07-28 19:04:00,465 INFO L280 TraceCheckUtils]: 41: Hoare triple {4072#false} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {4072#false} is VALID [2020-07-28 19:04:00,465 INFO L280 TraceCheckUtils]: 42: Hoare triple {4072#false} processEnvironment_#t~ret50 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret50 && processEnvironment_#t~ret50 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret50;havoc processEnvironment_#t~ret50; {4072#false} is VALID [2020-07-28 19:04:00,465 INFO L280 TraceCheckUtils]: 43: Hoare triple {4072#false} assume 0 != processEnvironment_~tmp~6;~pumpRunning~0 := 0; {4072#false} is VALID [2020-07-28 19:04:00,466 INFO L280 TraceCheckUtils]: 44: Hoare triple {4072#false} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {4072#false} is VALID [2020-07-28 19:04:00,466 INFO L280 TraceCheckUtils]: 45: Hoare triple {4072#false} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {4072#false} is VALID [2020-07-28 19:04:00,466 INFO L280 TraceCheckUtils]: 46: Hoare triple {4072#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {4072#false} is VALID [2020-07-28 19:04:00,467 INFO L280 TraceCheckUtils]: 47: Hoare triple {4072#false} __utac_acc__Specification4_spec__1_#t~ret36 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret36 && __utac_acc__Specification4_spec__1_#t~ret36 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret36;havoc __utac_acc__Specification4_spec__1_#t~ret36; {4072#false} is VALID [2020-07-28 19:04:00,467 INFO L280 TraceCheckUtils]: 48: Hoare triple {4072#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {4072#false} is VALID [2020-07-28 19:04:00,467 INFO L280 TraceCheckUtils]: 49: Hoare triple {4072#false} assume !false; {4072#false} is VALID [2020-07-28 19:04:00,470 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:04:00,471 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1757361567] [2020-07-28 19:04:00,471 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:00,471 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:04:00,471 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1139288052] [2020-07-28 19:04:00,472 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 50 [2020-07-28 19:04:00,472 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:00,472 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:04:00,525 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 48 edges. 48 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:00,526 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:04:00,526 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:00,526 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:04:00,527 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:04:00,527 INFO L87 Difference]: Start difference. First operand 173 states and 235 transitions. Second operand 4 states. [2020-07-28 19:04:01,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:01,345 INFO L93 Difference]: Finished difference Result 379 states and 513 transitions. [2020-07-28 19:04:01,345 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:04:01,346 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 50 [2020-07-28 19:04:01,346 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:01,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:04:01,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 167 transitions. [2020-07-28 19:04:01,349 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:04:01,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 167 transitions. [2020-07-28 19:04:01,351 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 167 transitions. [2020-07-28 19:04:01,548 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 167 edges. 167 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:01,555 INFO L225 Difference]: With dead ends: 379 [2020-07-28 19:04:01,555 INFO L226 Difference]: Without dead ends: 212 [2020-07-28 19:04:01,556 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:04:01,557 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 212 states. [2020-07-28 19:04:01,840 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 212 to 152. [2020-07-28 19:04:01,840 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:01,840 INFO L82 GeneralOperation]: Start isEquivalent. First operand 212 states. Second operand 152 states. [2020-07-28 19:04:01,841 INFO L74 IsIncluded]: Start isIncluded. First operand 212 states. Second operand 152 states. [2020-07-28 19:04:01,841 INFO L87 Difference]: Start difference. First operand 212 states. Second operand 152 states. [2020-07-28 19:04:01,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:01,846 INFO L93 Difference]: Finished difference Result 212 states and 279 transitions. [2020-07-28 19:04:01,846 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 279 transitions. [2020-07-28 19:04:01,846 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:01,847 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:01,847 INFO L74 IsIncluded]: Start isIncluded. First operand 152 states. Second operand 212 states. [2020-07-28 19:04:01,847 INFO L87 Difference]: Start difference. First operand 152 states. Second operand 212 states. [2020-07-28 19:04:01,852 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:01,852 INFO L93 Difference]: Finished difference Result 212 states and 279 transitions. [2020-07-28 19:04:01,852 INFO L276 IsEmpty]: Start isEmpty. Operand 212 states and 279 transitions. [2020-07-28 19:04:01,853 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:01,853 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:01,853 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:01,853 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:01,853 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 152 states. [2020-07-28 19:04:01,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 152 states to 152 states and 202 transitions. [2020-07-28 19:04:01,856 INFO L78 Accepts]: Start accepts. Automaton has 152 states and 202 transitions. Word has length 50 [2020-07-28 19:04:01,857 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:01,857 INFO L479 AbstractCegarLoop]: Abstraction has 152 states and 202 transitions. [2020-07-28 19:04:01,857 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:04:01,857 INFO L276 IsEmpty]: Start isEmpty. Operand 152 states and 202 transitions. [2020-07-28 19:04:01,858 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2020-07-28 19:04:01,859 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:01,859 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:01,859 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:04:01,859 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:01,860 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:01,860 INFO L82 PathProgramCache]: Analyzing trace with hash -1653055247, now seen corresponding path program 1 times [2020-07-28 19:04:01,860 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:01,861 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2132905493] [2020-07-28 19:04:01,861 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:01,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:01,957 INFO L280 TraceCheckUtils]: 0: Hoare triple {5235#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string42.base, #t~string42.offset, 1);call write~init~int(77, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(101, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(116, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(104, #t~string42.base, 4 + #t~string42.offset, 1);call write~init~int(58, #t~string42.base, 5 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 6 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string44.base, #t~string44.offset, 1);call write~init~int(82, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(73, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(84, #t~string44.base, 3 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 4 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(75, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string48.base, #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 1 + #t~string48.offset, 1);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(13);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string55.base, #t~string55.offset, 1);call write~init~int(110, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 2 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string59.base, #t~string59.offset, 1);call write~init~int(80, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(117, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(109, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(112, #t~string59.base, 4 + #t~string59.offset, 1);call write~init~int(58, #t~string59.base, 5 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 6 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string65.base, #t~string65.offset, 1);call write~init~int(32, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string67.base, #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 1 + #t~string67.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {5235#true} is VALID [2020-07-28 19:04:01,957 INFO L280 TraceCheckUtils]: 1: Hoare triple {5235#true} havoc main_#res;havoc main_#t~ret37, main_~retValue_acc~3, main_~tmp~4;havoc main_~retValue_acc~3;havoc main_~tmp~4; {5235#true} is VALID [2020-07-28 19:04:01,957 INFO L280 TraceCheckUtils]: 2: Hoare triple {5235#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {5235#true} is VALID [2020-07-28 19:04:01,958 INFO L280 TraceCheckUtils]: 3: Hoare triple {5235#true} main_#t~ret37 := valid_product_#res;assume -2147483648 <= main_#t~ret37 && main_#t~ret37 <= 2147483647;main_~tmp~4 := main_#t~ret37;havoc main_#t~ret37; {5235#true} is VALID [2020-07-28 19:04:01,958 INFO L280 TraceCheckUtils]: 4: Hoare triple {5235#true} assume 0 != main_~tmp~4; {5235#true} is VALID [2020-07-28 19:04:01,958 INFO L280 TraceCheckUtils]: 5: Hoare triple {5235#true} havoc test_#t~nondet70, test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {5235#true} is VALID [2020-07-28 19:04:01,958 INFO L280 TraceCheckUtils]: 6: Hoare triple {5235#true} assume !false; {5235#true} is VALID [2020-07-28 19:04:01,958 INFO L280 TraceCheckUtils]: 7: Hoare triple {5235#true} assume test_~splverifierCounter~0 < 4; {5235#true} is VALID [2020-07-28 19:04:01,959 INFO L280 TraceCheckUtils]: 8: Hoare triple {5235#true} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {5235#true} is VALID [2020-07-28 19:04:01,959 INFO L280 TraceCheckUtils]: 9: Hoare triple {5235#true} assume 0 != test_~tmp~9; {5235#true} is VALID [2020-07-28 19:04:01,959 INFO L280 TraceCheckUtils]: 10: Hoare triple {5235#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {5235#true} is VALID [2020-07-28 19:04:01,960 INFO L280 TraceCheckUtils]: 11: Hoare triple {5235#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {5235#true} is VALID [2020-07-28 19:04:01,960 INFO L280 TraceCheckUtils]: 12: Hoare triple {5235#true} assume !(0 != test_~tmp___0~3); {5235#true} is VALID [2020-07-28 19:04:01,960 INFO L280 TraceCheckUtils]: 13: Hoare triple {5235#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {5235#true} is VALID [2020-07-28 19:04:01,960 INFO L280 TraceCheckUtils]: 14: Hoare triple {5235#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {5235#true} is VALID [2020-07-28 19:04:01,961 INFO L280 TraceCheckUtils]: 15: Hoare triple {5235#true} assume !(0 != ~pumpRunning~0); {5235#true} is VALID [2020-07-28 19:04:01,961 INFO L280 TraceCheckUtils]: 16: Hoare triple {5235#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {5235#true} is VALID [2020-07-28 19:04:01,962 INFO L280 TraceCheckUtils]: 17: Hoare triple {5235#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {5235#true} is VALID [2020-07-28 19:04:01,962 INFO L280 TraceCheckUtils]: 18: Hoare triple {5235#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret68, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {5235#true} is VALID [2020-07-28 19:04:01,962 INFO L280 TraceCheckUtils]: 19: Hoare triple {5235#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {5235#true} is VALID [2020-07-28 19:04:01,962 INFO L280 TraceCheckUtils]: 20: Hoare triple {5235#true} isHighWaterLevel_#t~ret68 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret68 && isHighWaterLevel_#t~ret68 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret68;havoc isHighWaterLevel_#t~ret68; {5235#true} is VALID [2020-07-28 19:04:01,962 INFO L280 TraceCheckUtils]: 21: Hoare triple {5235#true} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {5235#true} is VALID [2020-07-28 19:04:01,963 INFO L280 TraceCheckUtils]: 22: Hoare triple {5235#true} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {5235#true} is VALID [2020-07-28 19:04:01,963 INFO L280 TraceCheckUtils]: 23: Hoare triple {5235#true} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {5235#true} is VALID [2020-07-28 19:04:01,963 INFO L280 TraceCheckUtils]: 24: Hoare triple {5235#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;~pumpRunning~0 := 1; {5235#true} is VALID [2020-07-28 19:04:01,963 INFO L280 TraceCheckUtils]: 25: Hoare triple {5235#true} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {5235#true} is VALID [2020-07-28 19:04:01,963 INFO L280 TraceCheckUtils]: 26: Hoare triple {5235#true} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {5235#true} is VALID [2020-07-28 19:04:01,964 INFO L280 TraceCheckUtils]: 27: Hoare triple {5235#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3); {5235#true} is VALID [2020-07-28 19:04:01,964 INFO L280 TraceCheckUtils]: 28: Hoare triple {5235#true} assume !false; {5235#true} is VALID [2020-07-28 19:04:01,964 INFO L280 TraceCheckUtils]: 29: Hoare triple {5235#true} assume test_~splverifierCounter~0 < 4; {5235#true} is VALID [2020-07-28 19:04:01,965 INFO L280 TraceCheckUtils]: 30: Hoare triple {5235#true} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {5235#true} is VALID [2020-07-28 19:04:01,965 INFO L280 TraceCheckUtils]: 31: Hoare triple {5235#true} assume !(0 != test_~tmp~9); {5235#true} is VALID [2020-07-28 19:04:01,965 INFO L280 TraceCheckUtils]: 32: Hoare triple {5235#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {5235#true} is VALID [2020-07-28 19:04:01,966 INFO L280 TraceCheckUtils]: 33: Hoare triple {5235#true} assume !(0 != test_~tmp___0~3); {5235#true} is VALID [2020-07-28 19:04:01,966 INFO L280 TraceCheckUtils]: 34: Hoare triple {5235#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {5235#true} is VALID [2020-07-28 19:04:01,966 INFO L280 TraceCheckUtils]: 35: Hoare triple {5235#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {5235#true} is VALID [2020-07-28 19:04:01,967 INFO L280 TraceCheckUtils]: 36: Hoare triple {5235#true} assume 0 != ~pumpRunning~0; {5235#true} is VALID [2020-07-28 19:04:01,967 INFO L280 TraceCheckUtils]: 37: Hoare triple {5235#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {5235#true} is VALID [2020-07-28 19:04:01,967 INFO L280 TraceCheckUtils]: 38: Hoare triple {5235#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {5235#true} is VALID [2020-07-28 19:04:01,968 INFO L280 TraceCheckUtils]: 39: Hoare triple {5235#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret69, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {5235#true} is VALID [2020-07-28 19:04:01,968 INFO L280 TraceCheckUtils]: 40: Hoare triple {5235#true} isLowWaterLevel_#t~ret69 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret69 && isLowWaterLevel_#t~ret69 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret69;havoc isLowWaterLevel_#t~ret69; {5235#true} is VALID [2020-07-28 19:04:01,969 INFO L280 TraceCheckUtils]: 41: Hoare triple {5235#true} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {5237#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2)} is VALID [2020-07-28 19:04:01,972 INFO L280 TraceCheckUtils]: 42: Hoare triple {5237#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2)} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {5238#(= 0 |ULTIMATE.start_isLowWaterLevel_#res|)} is VALID [2020-07-28 19:04:01,973 INFO L280 TraceCheckUtils]: 43: Hoare triple {5238#(= 0 |ULTIMATE.start_isLowWaterLevel_#res|)} processEnvironment_#t~ret50 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret50 && processEnvironment_#t~ret50 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret50;havoc processEnvironment_#t~ret50; {5239#(= 0 ULTIMATE.start_processEnvironment_~tmp~6)} is VALID [2020-07-28 19:04:01,973 INFO L280 TraceCheckUtils]: 44: Hoare triple {5239#(= 0 ULTIMATE.start_processEnvironment_~tmp~6)} assume 0 != processEnvironment_~tmp~6;~pumpRunning~0 := 0; {5236#false} is VALID [2020-07-28 19:04:01,974 INFO L280 TraceCheckUtils]: 45: Hoare triple {5236#false} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {5236#false} is VALID [2020-07-28 19:04:01,974 INFO L280 TraceCheckUtils]: 46: Hoare triple {5236#false} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {5236#false} is VALID [2020-07-28 19:04:01,974 INFO L280 TraceCheckUtils]: 47: Hoare triple {5236#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {5236#false} is VALID [2020-07-28 19:04:01,974 INFO L280 TraceCheckUtils]: 48: Hoare triple {5236#false} __utac_acc__Specification4_spec__1_#t~ret36 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret36 && __utac_acc__Specification4_spec__1_#t~ret36 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret36;havoc __utac_acc__Specification4_spec__1_#t~ret36; {5236#false} is VALID [2020-07-28 19:04:01,975 INFO L280 TraceCheckUtils]: 49: Hoare triple {5236#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {5236#false} is VALID [2020-07-28 19:04:01,975 INFO L280 TraceCheckUtils]: 50: Hoare triple {5236#false} assume !false; {5236#false} is VALID [2020-07-28 19:04:01,977 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 19:04:01,978 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2132905493] [2020-07-28 19:04:01,978 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:01,978 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:04:01,979 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1927333549] [2020-07-28 19:04:01,979 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 51 [2020-07-28 19:04:01,979 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:01,979 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:04:02,029 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 43 edges. 43 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:02,029 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:04:02,029 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:02,030 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:04:02,030 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:04:02,030 INFO L87 Difference]: Start difference. First operand 152 states and 202 transitions. Second operand 5 states. [2020-07-28 19:04:03,549 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:03,550 INFO L93 Difference]: Finished difference Result 514 states and 704 transitions. [2020-07-28 19:04:03,550 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:04:03,550 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 51 [2020-07-28 19:04:03,551 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:03,551 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:03,553 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 243 transitions. [2020-07-28 19:04:03,553 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:03,555 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 243 transitions. [2020-07-28 19:04:03,555 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 243 transitions. [2020-07-28 19:04:03,852 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 243 edges. 243 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:03,868 INFO L225 Difference]: With dead ends: 514 [2020-07-28 19:04:03,868 INFO L226 Difference]: Without dead ends: 392 [2020-07-28 19:04:03,869 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:04:03,870 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 392 states. [2020-07-28 19:04:04,197 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 392 to 158. [2020-07-28 19:04:04,197 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:04,197 INFO L82 GeneralOperation]: Start isEquivalent. First operand 392 states. Second operand 158 states. [2020-07-28 19:04:04,198 INFO L74 IsIncluded]: Start isIncluded. First operand 392 states. Second operand 158 states. [2020-07-28 19:04:04,198 INFO L87 Difference]: Start difference. First operand 392 states. Second operand 158 states. [2020-07-28 19:04:04,211 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:04,212 INFO L93 Difference]: Finished difference Result 392 states and 535 transitions. [2020-07-28 19:04:04,212 INFO L276 IsEmpty]: Start isEmpty. Operand 392 states and 535 transitions. [2020-07-28 19:04:04,213 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:04,213 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:04,214 INFO L74 IsIncluded]: Start isIncluded. First operand 158 states. Second operand 392 states. [2020-07-28 19:04:04,214 INFO L87 Difference]: Start difference. First operand 158 states. Second operand 392 states. [2020-07-28 19:04:04,226 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:04,227 INFO L93 Difference]: Finished difference Result 392 states and 535 transitions. [2020-07-28 19:04:04,227 INFO L276 IsEmpty]: Start isEmpty. Operand 392 states and 535 transitions. [2020-07-28 19:04:04,228 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:04,228 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:04,228 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:04,228 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:04,229 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 158 states. [2020-07-28 19:04:04,232 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 158 states to 158 states and 208 transitions. [2020-07-28 19:04:04,232 INFO L78 Accepts]: Start accepts. Automaton has 158 states and 208 transitions. Word has length 51 [2020-07-28 19:04:04,232 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:04,233 INFO L479 AbstractCegarLoop]: Abstraction has 158 states and 208 transitions. [2020-07-28 19:04:04,233 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:04:04,233 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 208 transitions. [2020-07-28 19:04:04,234 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2020-07-28 19:04:04,234 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:04,234 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:04,234 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:04:04,235 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:04,235 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:04,235 INFO L82 PathProgramCache]: Analyzing trace with hash -2046082257, now seen corresponding path program 1 times [2020-07-28 19:04:04,236 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:04,236 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [255030698] [2020-07-28 19:04:04,236 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:04,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:04,330 INFO L280 TraceCheckUtils]: 0: Hoare triple {6964#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string42.base, #t~string42.offset, 1);call write~init~int(77, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(101, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(116, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(104, #t~string42.base, 4 + #t~string42.offset, 1);call write~init~int(58, #t~string42.base, 5 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 6 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string44.base, #t~string44.offset, 1);call write~init~int(82, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(73, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(84, #t~string44.base, 3 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 4 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(75, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string48.base, #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 1 + #t~string48.offset, 1);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(13);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string55.base, #t~string55.offset, 1);call write~init~int(110, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 2 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string59.base, #t~string59.offset, 1);call write~init~int(80, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(117, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(109, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(112, #t~string59.base, 4 + #t~string59.offset, 1);call write~init~int(58, #t~string59.base, 5 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 6 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string65.base, #t~string65.offset, 1);call write~init~int(32, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string67.base, #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 1 + #t~string67.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {6964#true} is VALID [2020-07-28 19:04:04,330 INFO L280 TraceCheckUtils]: 1: Hoare triple {6964#true} havoc main_#res;havoc main_#t~ret37, main_~retValue_acc~3, main_~tmp~4;havoc main_~retValue_acc~3;havoc main_~tmp~4; {6964#true} is VALID [2020-07-28 19:04:04,331 INFO L280 TraceCheckUtils]: 2: Hoare triple {6964#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {6964#true} is VALID [2020-07-28 19:04:04,331 INFO L280 TraceCheckUtils]: 3: Hoare triple {6964#true} main_#t~ret37 := valid_product_#res;assume -2147483648 <= main_#t~ret37 && main_#t~ret37 <= 2147483647;main_~tmp~4 := main_#t~ret37;havoc main_#t~ret37; {6964#true} is VALID [2020-07-28 19:04:04,331 INFO L280 TraceCheckUtils]: 4: Hoare triple {6964#true} assume 0 != main_~tmp~4; {6964#true} is VALID [2020-07-28 19:04:04,331 INFO L280 TraceCheckUtils]: 5: Hoare triple {6964#true} havoc test_#t~nondet70, test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6964#true} is VALID [2020-07-28 19:04:04,331 INFO L280 TraceCheckUtils]: 6: Hoare triple {6964#true} assume !false; {6964#true} is VALID [2020-07-28 19:04:04,332 INFO L280 TraceCheckUtils]: 7: Hoare triple {6964#true} assume test_~splverifierCounter~0 < 4; {6964#true} is VALID [2020-07-28 19:04:04,332 INFO L280 TraceCheckUtils]: 8: Hoare triple {6964#true} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {6964#true} is VALID [2020-07-28 19:04:04,332 INFO L280 TraceCheckUtils]: 9: Hoare triple {6964#true} assume 0 != test_~tmp~9; {6964#true} is VALID [2020-07-28 19:04:04,333 INFO L280 TraceCheckUtils]: 10: Hoare triple {6964#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6964#true} is VALID [2020-07-28 19:04:04,334 INFO L280 TraceCheckUtils]: 11: Hoare triple {6964#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {6964#true} is VALID [2020-07-28 19:04:04,334 INFO L280 TraceCheckUtils]: 12: Hoare triple {6964#true} assume !(0 != test_~tmp___0~3); {6964#true} is VALID [2020-07-28 19:04:04,334 INFO L280 TraceCheckUtils]: 13: Hoare triple {6964#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {6964#true} is VALID [2020-07-28 19:04:04,334 INFO L280 TraceCheckUtils]: 14: Hoare triple {6964#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {6964#true} is VALID [2020-07-28 19:04:04,334 INFO L280 TraceCheckUtils]: 15: Hoare triple {6964#true} assume !(0 != ~pumpRunning~0); {6964#true} is VALID [2020-07-28 19:04:04,335 INFO L280 TraceCheckUtils]: 16: Hoare triple {6964#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {6964#true} is VALID [2020-07-28 19:04:04,335 INFO L280 TraceCheckUtils]: 17: Hoare triple {6964#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {6964#true} is VALID [2020-07-28 19:04:04,335 INFO L280 TraceCheckUtils]: 18: Hoare triple {6964#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret68, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {6964#true} is VALID [2020-07-28 19:04:04,337 INFO L280 TraceCheckUtils]: 19: Hoare triple {6964#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {6964#true} is VALID [2020-07-28 19:04:04,337 INFO L280 TraceCheckUtils]: 20: Hoare triple {6964#true} isHighWaterLevel_#t~ret68 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret68 && isHighWaterLevel_#t~ret68 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret68;havoc isHighWaterLevel_#t~ret68; {6964#true} is VALID [2020-07-28 19:04:04,337 INFO L280 TraceCheckUtils]: 21: Hoare triple {6964#true} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {6964#true} is VALID [2020-07-28 19:04:04,338 INFO L280 TraceCheckUtils]: 22: Hoare triple {6964#true} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {6964#true} is VALID [2020-07-28 19:04:04,338 INFO L280 TraceCheckUtils]: 23: Hoare triple {6964#true} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {6964#true} is VALID [2020-07-28 19:04:04,338 INFO L280 TraceCheckUtils]: 24: Hoare triple {6964#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;~pumpRunning~0 := 1; {6964#true} is VALID [2020-07-28 19:04:04,338 INFO L280 TraceCheckUtils]: 25: Hoare triple {6964#true} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {6964#true} is VALID [2020-07-28 19:04:04,338 INFO L280 TraceCheckUtils]: 26: Hoare triple {6964#true} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {6964#true} is VALID [2020-07-28 19:04:04,339 INFO L280 TraceCheckUtils]: 27: Hoare triple {6964#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3); {6964#true} is VALID [2020-07-28 19:04:04,339 INFO L280 TraceCheckUtils]: 28: Hoare triple {6964#true} assume !false; {6964#true} is VALID [2020-07-28 19:04:04,339 INFO L280 TraceCheckUtils]: 29: Hoare triple {6964#true} assume test_~splverifierCounter~0 < 4; {6964#true} is VALID [2020-07-28 19:04:04,340 INFO L280 TraceCheckUtils]: 30: Hoare triple {6964#true} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {6964#true} is VALID [2020-07-28 19:04:04,340 INFO L280 TraceCheckUtils]: 31: Hoare triple {6964#true} assume !(0 != test_~tmp~9); {6964#true} is VALID [2020-07-28 19:04:04,340 INFO L280 TraceCheckUtils]: 32: Hoare triple {6964#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {6964#true} is VALID [2020-07-28 19:04:04,340 INFO L280 TraceCheckUtils]: 33: Hoare triple {6964#true} assume !(0 != test_~tmp___0~3); {6964#true} is VALID [2020-07-28 19:04:04,341 INFO L280 TraceCheckUtils]: 34: Hoare triple {6964#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {6964#true} is VALID [2020-07-28 19:04:04,341 INFO L280 TraceCheckUtils]: 35: Hoare triple {6964#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {6964#true} is VALID [2020-07-28 19:04:04,341 INFO L280 TraceCheckUtils]: 36: Hoare triple {6964#true} assume 0 != ~pumpRunning~0; {6964#true} is VALID [2020-07-28 19:04:04,341 INFO L280 TraceCheckUtils]: 37: Hoare triple {6964#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {6964#true} is VALID [2020-07-28 19:04:04,342 INFO L280 TraceCheckUtils]: 38: Hoare triple {6964#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {6964#true} is VALID [2020-07-28 19:04:04,342 INFO L280 TraceCheckUtils]: 39: Hoare triple {6964#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret69, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {6964#true} is VALID [2020-07-28 19:04:04,342 INFO L280 TraceCheckUtils]: 40: Hoare triple {6964#true} isLowWaterLevel_#t~ret69 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret69 && isLowWaterLevel_#t~ret69 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret69;havoc isLowWaterLevel_#t~ret69; {6964#true} is VALID [2020-07-28 19:04:04,345 INFO L280 TraceCheckUtils]: 41: Hoare triple {6964#true} assume !(0 != isLowWaterLevel_~tmp~8);isLowWaterLevel_~tmp___0~2 := 1; {6964#true} is VALID [2020-07-28 19:04:04,346 INFO L280 TraceCheckUtils]: 42: Hoare triple {6964#true} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {6964#true} is VALID [2020-07-28 19:04:04,346 INFO L280 TraceCheckUtils]: 43: Hoare triple {6964#true} processEnvironment_#t~ret50 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret50 && processEnvironment_#t~ret50 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret50;havoc processEnvironment_#t~ret50; {6964#true} is VALID [2020-07-28 19:04:04,347 INFO L280 TraceCheckUtils]: 44: Hoare triple {6964#true} assume 0 != processEnvironment_~tmp~6;~pumpRunning~0 := 0; {6966#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:04,348 INFO L280 TraceCheckUtils]: 45: Hoare triple {6966#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {6966#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:04,348 INFO L280 TraceCheckUtils]: 46: Hoare triple {6966#(= 0 ~pumpRunning~0)} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {6966#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:04,349 INFO L280 TraceCheckUtils]: 47: Hoare triple {6966#(= 0 ~pumpRunning~0)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {6967#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:04:04,350 INFO L280 TraceCheckUtils]: 48: Hoare triple {6967#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification4_spec__1_#t~ret36 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret36 && __utac_acc__Specification4_spec__1_#t~ret36 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret36;havoc __utac_acc__Specification4_spec__1_#t~ret36; {6968#(= 0 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp___0~0)} is VALID [2020-07-28 19:04:04,351 INFO L280 TraceCheckUtils]: 49: Hoare triple {6968#(= 0 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp___0~0)} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {6965#false} is VALID [2020-07-28 19:04:04,351 INFO L280 TraceCheckUtils]: 50: Hoare triple {6965#false} assume !false; {6965#false} is VALID [2020-07-28 19:04:04,354 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 19:04:04,354 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [255030698] [2020-07-28 19:04:04,354 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:04,354 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:04:04,354 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1194651295] [2020-07-28 19:04:04,355 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 51 [2020-07-28 19:04:04,355 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:04,356 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:04:04,412 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 43 edges. 43 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:04,412 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:04:04,413 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:04,413 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:04:04,413 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:04:04,413 INFO L87 Difference]: Start difference. First operand 158 states and 208 transitions. Second operand 5 states. [2020-07-28 19:04:06,126 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:06,126 INFO L93 Difference]: Finished difference Result 414 states and 551 transitions. [2020-07-28 19:04:06,127 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 19:04:06,127 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 51 [2020-07-28 19:04:06,127 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:06,127 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:06,130 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 262 transitions. [2020-07-28 19:04:06,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:06,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 262 transitions. [2020-07-28 19:04:06,135 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 262 transitions. [2020-07-28 19:04:06,469 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 262 edges. 262 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:06,486 INFO L225 Difference]: With dead ends: 414 [2020-07-28 19:04:06,487 INFO L226 Difference]: Without dead ends: 412 [2020-07-28 19:04:06,487 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:04:06,488 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 412 states. [2020-07-28 19:04:06,861 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 412 to 158. [2020-07-28 19:04:06,861 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:06,861 INFO L82 GeneralOperation]: Start isEquivalent. First operand 412 states. Second operand 158 states. [2020-07-28 19:04:06,861 INFO L74 IsIncluded]: Start isIncluded. First operand 412 states. Second operand 158 states. [2020-07-28 19:04:06,861 INFO L87 Difference]: Start difference. First operand 412 states. Second operand 158 states. [2020-07-28 19:04:06,874 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:06,875 INFO L93 Difference]: Finished difference Result 412 states and 549 transitions. [2020-07-28 19:04:06,875 INFO L276 IsEmpty]: Start isEmpty. Operand 412 states and 549 transitions. [2020-07-28 19:04:06,876 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:06,876 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:06,876 INFO L74 IsIncluded]: Start isIncluded. First operand 158 states. Second operand 412 states. [2020-07-28 19:04:06,877 INFO L87 Difference]: Start difference. First operand 158 states. Second operand 412 states. [2020-07-28 19:04:06,888 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:06,889 INFO L93 Difference]: Finished difference Result 412 states and 549 transitions. [2020-07-28 19:04:06,889 INFO L276 IsEmpty]: Start isEmpty. Operand 412 states and 549 transitions. [2020-07-28 19:04:06,890 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:06,890 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:06,891 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:06,891 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:06,891 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 158 states. [2020-07-28 19:04:06,894 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 158 states to 158 states and 207 transitions. [2020-07-28 19:04:06,895 INFO L78 Accepts]: Start accepts. Automaton has 158 states and 207 transitions. Word has length 51 [2020-07-28 19:04:06,895 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:06,895 INFO L479 AbstractCegarLoop]: Abstraction has 158 states and 207 transitions. [2020-07-28 19:04:06,895 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:04:06,896 INFO L276 IsEmpty]: Start isEmpty. Operand 158 states and 207 transitions. [2020-07-28 19:04:06,896 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2020-07-28 19:04:06,896 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:06,897 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:06,897 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:04:06,897 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:06,898 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:06,898 INFO L82 PathProgramCache]: Analyzing trace with hash 772811102, now seen corresponding path program 1 times [2020-07-28 19:04:06,898 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:06,898 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1313623970] [2020-07-28 19:04:06,899 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:06,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:07,013 INFO L280 TraceCheckUtils]: 0: Hoare triple {8595#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string42.base, #t~string42.offset, 1);call write~init~int(77, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(101, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(116, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(104, #t~string42.base, 4 + #t~string42.offset, 1);call write~init~int(58, #t~string42.base, 5 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 6 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string44.base, #t~string44.offset, 1);call write~init~int(82, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(73, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(84, #t~string44.base, 3 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 4 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(75, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string48.base, #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 1 + #t~string48.offset, 1);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(13);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string55.base, #t~string55.offset, 1);call write~init~int(110, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 2 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string59.base, #t~string59.offset, 1);call write~init~int(80, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(117, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(109, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(112, #t~string59.base, 4 + #t~string59.offset, 1);call write~init~int(58, #t~string59.base, 5 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 6 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string65.base, #t~string65.offset, 1);call write~init~int(32, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string67.base, #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 1 + #t~string67.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {8597#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,014 INFO L280 TraceCheckUtils]: 1: Hoare triple {8597#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret37, main_~retValue_acc~3, main_~tmp~4;havoc main_~retValue_acc~3;havoc main_~tmp~4; {8597#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,015 INFO L280 TraceCheckUtils]: 2: Hoare triple {8597#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {8597#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,015 INFO L280 TraceCheckUtils]: 3: Hoare triple {8597#(= 1 ~waterLevel~0)} main_#t~ret37 := valid_product_#res;assume -2147483648 <= main_#t~ret37 && main_#t~ret37 <= 2147483647;main_~tmp~4 := main_#t~ret37;havoc main_#t~ret37; {8597#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,016 INFO L280 TraceCheckUtils]: 4: Hoare triple {8597#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~4; {8597#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,017 INFO L280 TraceCheckUtils]: 5: Hoare triple {8597#(= 1 ~waterLevel~0)} havoc test_#t~nondet70, test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {8597#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,018 INFO L280 TraceCheckUtils]: 6: Hoare triple {8597#(= 1 ~waterLevel~0)} assume !false; {8597#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,019 INFO L280 TraceCheckUtils]: 7: Hoare triple {8597#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {8597#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,020 INFO L280 TraceCheckUtils]: 8: Hoare triple {8597#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {8597#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,021 INFO L280 TraceCheckUtils]: 9: Hoare triple {8597#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~9; {8597#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,022 INFO L280 TraceCheckUtils]: 10: Hoare triple {8597#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,022 INFO L280 TraceCheckUtils]: 11: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,023 INFO L280 TraceCheckUtils]: 12: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3); {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,024 INFO L280 TraceCheckUtils]: 13: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,025 INFO L280 TraceCheckUtils]: 14: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,025 INFO L280 TraceCheckUtils]: 15: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,026 INFO L280 TraceCheckUtils]: 16: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,027 INFO L280 TraceCheckUtils]: 17: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,027 INFO L280 TraceCheckUtils]: 18: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret68, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,028 INFO L280 TraceCheckUtils]: 19: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,029 INFO L280 TraceCheckUtils]: 20: Hoare triple {8598#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret68 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret68 && isHighWaterLevel_#t~ret68 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret68;havoc isHighWaterLevel_#t~ret68; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,029 INFO L280 TraceCheckUtils]: 21: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,030 INFO L280 TraceCheckUtils]: 22: Hoare triple {8598#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,031 INFO L280 TraceCheckUtils]: 23: Hoare triple {8598#(<= 2 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,032 INFO L280 TraceCheckUtils]: 24: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;~pumpRunning~0 := 1; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,033 INFO L280 TraceCheckUtils]: 25: Hoare triple {8598#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,034 INFO L280 TraceCheckUtils]: 26: Hoare triple {8598#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,035 INFO L280 TraceCheckUtils]: 27: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3); {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,035 INFO L280 TraceCheckUtils]: 28: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume !false; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,036 INFO L280 TraceCheckUtils]: 29: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,037 INFO L280 TraceCheckUtils]: 30: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,038 INFO L280 TraceCheckUtils]: 31: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~9); {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,038 INFO L280 TraceCheckUtils]: 32: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,039 INFO L280 TraceCheckUtils]: 33: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3); {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,040 INFO L280 TraceCheckUtils]: 34: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,041 INFO L280 TraceCheckUtils]: 35: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,041 INFO L280 TraceCheckUtils]: 36: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,042 INFO L280 TraceCheckUtils]: 37: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,043 INFO L280 TraceCheckUtils]: 38: Hoare triple {8599#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,044 INFO L280 TraceCheckUtils]: 39: Hoare triple {8599#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret69, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,045 INFO L280 TraceCheckUtils]: 40: Hoare triple {8599#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret69 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret69 && isLowWaterLevel_#t~ret69 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret69;havoc isLowWaterLevel_#t~ret69; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,045 INFO L280 TraceCheckUtils]: 41: Hoare triple {8599#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,046 INFO L280 TraceCheckUtils]: 42: Hoare triple {8599#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,047 INFO L280 TraceCheckUtils]: 43: Hoare triple {8599#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret50 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret50 && processEnvironment_#t~ret50 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret50;havoc processEnvironment_#t~ret50; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,048 INFO L280 TraceCheckUtils]: 44: Hoare triple {8599#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,049 INFO L280 TraceCheckUtils]: 45: Hoare triple {8599#(<= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,050 INFO L280 TraceCheckUtils]: 46: Hoare triple {8599#(<= 1 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {8600#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:04:07,051 INFO L280 TraceCheckUtils]: 47: Hoare triple {8600#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {8601#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~3)} is VALID [2020-07-28 19:04:07,052 INFO L280 TraceCheckUtils]: 48: Hoare triple {8601#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~3)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {8596#false} is VALID [2020-07-28 19:04:07,052 INFO L280 TraceCheckUtils]: 49: Hoare triple {8596#false} __utac_acc__Specification4_spec__1_#t~ret36 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret36 && __utac_acc__Specification4_spec__1_#t~ret36 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret36;havoc __utac_acc__Specification4_spec__1_#t~ret36; {8596#false} is VALID [2020-07-28 19:04:07,052 INFO L280 TraceCheckUtils]: 50: Hoare triple {8596#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {8596#false} is VALID [2020-07-28 19:04:07,053 INFO L280 TraceCheckUtils]: 51: Hoare triple {8596#false} assume !false; {8596#false} is VALID [2020-07-28 19:04:07,057 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2020-07-28 19:04:07,058 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1313623970] [2020-07-28 19:04:07,058 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1601753532] [2020-07-28 19:04:07,058 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:04:07,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:07,183 INFO L263 TraceCheckSpWp]: Trace formula consists of 403 conjuncts, 6 conjunts are in the unsatisfiable core [2020-07-28 19:04:07,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:07,216 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:04:07,468 INFO L280 TraceCheckUtils]: 0: Hoare triple {8595#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string42.base, #t~string42.offset, 1);call write~init~int(77, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(101, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(116, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(104, #t~string42.base, 4 + #t~string42.offset, 1);call write~init~int(58, #t~string42.base, 5 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 6 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string44.base, #t~string44.offset, 1);call write~init~int(82, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(73, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(84, #t~string44.base, 3 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 4 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(75, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string48.base, #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 1 + #t~string48.offset, 1);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(13);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string55.base, #t~string55.offset, 1);call write~init~int(110, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 2 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string59.base, #t~string59.offset, 1);call write~init~int(80, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(117, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(109, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(112, #t~string59.base, 4 + #t~string59.offset, 1);call write~init~int(58, #t~string59.base, 5 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 6 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string65.base, #t~string65.offset, 1);call write~init~int(32, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string67.base, #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 1 + #t~string67.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {8595#true} is VALID [2020-07-28 19:04:07,468 INFO L280 TraceCheckUtils]: 1: Hoare triple {8595#true} havoc main_#res;havoc main_#t~ret37, main_~retValue_acc~3, main_~tmp~4;havoc main_~retValue_acc~3;havoc main_~tmp~4; {8595#true} is VALID [2020-07-28 19:04:07,472 INFO L280 TraceCheckUtils]: 2: Hoare triple {8595#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {8595#true} is VALID [2020-07-28 19:04:07,472 INFO L280 TraceCheckUtils]: 3: Hoare triple {8595#true} main_#t~ret37 := valid_product_#res;assume -2147483648 <= main_#t~ret37 && main_#t~ret37 <= 2147483647;main_~tmp~4 := main_#t~ret37;havoc main_#t~ret37; {8595#true} is VALID [2020-07-28 19:04:07,472 INFO L280 TraceCheckUtils]: 4: Hoare triple {8595#true} assume 0 != main_~tmp~4; {8595#true} is VALID [2020-07-28 19:04:07,473 INFO L280 TraceCheckUtils]: 5: Hoare triple {8595#true} havoc test_#t~nondet70, test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {8595#true} is VALID [2020-07-28 19:04:07,473 INFO L280 TraceCheckUtils]: 6: Hoare triple {8595#true} assume !false; {8595#true} is VALID [2020-07-28 19:04:07,473 INFO L280 TraceCheckUtils]: 7: Hoare triple {8595#true} assume test_~splverifierCounter~0 < 4; {8595#true} is VALID [2020-07-28 19:04:07,473 INFO L280 TraceCheckUtils]: 8: Hoare triple {8595#true} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {8595#true} is VALID [2020-07-28 19:04:07,474 INFO L280 TraceCheckUtils]: 9: Hoare triple {8595#true} assume 0 != test_~tmp~9; {8595#true} is VALID [2020-07-28 19:04:07,474 INFO L280 TraceCheckUtils]: 10: Hoare triple {8595#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8595#true} is VALID [2020-07-28 19:04:07,476 INFO L280 TraceCheckUtils]: 11: Hoare triple {8595#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {8595#true} is VALID [2020-07-28 19:04:07,477 INFO L280 TraceCheckUtils]: 12: Hoare triple {8595#true} assume !(0 != test_~tmp___0~3); {8595#true} is VALID [2020-07-28 19:04:07,477 INFO L280 TraceCheckUtils]: 13: Hoare triple {8595#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {8595#true} is VALID [2020-07-28 19:04:07,477 INFO L280 TraceCheckUtils]: 14: Hoare triple {8595#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {8595#true} is VALID [2020-07-28 19:04:07,477 INFO L280 TraceCheckUtils]: 15: Hoare triple {8595#true} assume !(0 != ~pumpRunning~0); {8595#true} is VALID [2020-07-28 19:04:07,477 INFO L280 TraceCheckUtils]: 16: Hoare triple {8595#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {8595#true} is VALID [2020-07-28 19:04:07,478 INFO L280 TraceCheckUtils]: 17: Hoare triple {8595#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {8595#true} is VALID [2020-07-28 19:04:07,478 INFO L280 TraceCheckUtils]: 18: Hoare triple {8595#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret68, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {8595#true} is VALID [2020-07-28 19:04:07,480 INFO L280 TraceCheckUtils]: 19: Hoare triple {8595#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,481 INFO L280 TraceCheckUtils]: 20: Hoare triple {8598#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret68 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret68 && isHighWaterLevel_#t~ret68 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret68;havoc isHighWaterLevel_#t~ret68; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,482 INFO L280 TraceCheckUtils]: 21: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,483 INFO L280 TraceCheckUtils]: 22: Hoare triple {8598#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,484 INFO L280 TraceCheckUtils]: 23: Hoare triple {8598#(<= 2 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,484 INFO L280 TraceCheckUtils]: 24: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;~pumpRunning~0 := 1; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,485 INFO L280 TraceCheckUtils]: 25: Hoare triple {8598#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,486 INFO L280 TraceCheckUtils]: 26: Hoare triple {8598#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,487 INFO L280 TraceCheckUtils]: 27: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3); {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,487 INFO L280 TraceCheckUtils]: 28: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume !false; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,488 INFO L280 TraceCheckUtils]: 29: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,489 INFO L280 TraceCheckUtils]: 30: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,489 INFO L280 TraceCheckUtils]: 31: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~9); {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,490 INFO L280 TraceCheckUtils]: 32: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,491 INFO L280 TraceCheckUtils]: 33: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~3); {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,491 INFO L280 TraceCheckUtils]: 34: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,492 INFO L280 TraceCheckUtils]: 35: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,495 INFO L280 TraceCheckUtils]: 36: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {8598#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,496 INFO L280 TraceCheckUtils]: 37: Hoare triple {8598#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,500 INFO L280 TraceCheckUtils]: 38: Hoare triple {8599#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,501 INFO L280 TraceCheckUtils]: 39: Hoare triple {8599#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret69, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,506 INFO L280 TraceCheckUtils]: 40: Hoare triple {8599#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret69 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret69 && isLowWaterLevel_#t~ret69 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret69;havoc isLowWaterLevel_#t~ret69; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,509 INFO L280 TraceCheckUtils]: 41: Hoare triple {8599#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,510 INFO L280 TraceCheckUtils]: 42: Hoare triple {8599#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,511 INFO L280 TraceCheckUtils]: 43: Hoare triple {8599#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret50 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret50 && processEnvironment_#t~ret50 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret50;havoc processEnvironment_#t~ret50; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,512 INFO L280 TraceCheckUtils]: 44: Hoare triple {8599#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,512 INFO L280 TraceCheckUtils]: 45: Hoare triple {8599#(<= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {8599#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:07,513 INFO L280 TraceCheckUtils]: 46: Hoare triple {8599#(<= 1 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {8600#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:04:07,514 INFO L280 TraceCheckUtils]: 47: Hoare triple {8600#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {8601#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~3)} is VALID [2020-07-28 19:04:07,515 INFO L280 TraceCheckUtils]: 48: Hoare triple {8601#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~3)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {8596#false} is VALID [2020-07-28 19:04:07,515 INFO L280 TraceCheckUtils]: 49: Hoare triple {8596#false} __utac_acc__Specification4_spec__1_#t~ret36 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret36 && __utac_acc__Specification4_spec__1_#t~ret36 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret36;havoc __utac_acc__Specification4_spec__1_#t~ret36; {8596#false} is VALID [2020-07-28 19:04:07,515 INFO L280 TraceCheckUtils]: 50: Hoare triple {8596#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {8596#false} is VALID [2020-07-28 19:04:07,515 INFO L280 TraceCheckUtils]: 51: Hoare triple {8596#false} assume !false; {8596#false} is VALID [2020-07-28 19:04:07,522 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:07,523 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:04:07,523 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6] total 7 [2020-07-28 19:04:07,523 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1807687010] [2020-07-28 19:04:07,523 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 52 [2020-07-28 19:04:07,524 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:07,524 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:04:07,627 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 68 edges. 68 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:07,628 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:04:07,628 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:07,628 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:04:07,628 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:04:07,628 INFO L87 Difference]: Start difference. First operand 158 states and 207 transitions. Second operand 7 states. [2020-07-28 19:04:09,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:09,624 INFO L93 Difference]: Finished difference Result 479 states and 642 transitions. [2020-07-28 19:04:09,624 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2020-07-28 19:04:09,625 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 52 [2020-07-28 19:04:09,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:09,625 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:04:09,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 356 transitions. [2020-07-28 19:04:09,629 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:04:09,631 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 356 transitions. [2020-07-28 19:04:09,631 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states and 356 transitions. [2020-07-28 19:04:10,063 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 356 edges. 356 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:10,074 INFO L225 Difference]: With dead ends: 479 [2020-07-28 19:04:10,075 INFO L226 Difference]: Without dead ends: 351 [2020-07-28 19:04:10,075 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 56 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=60, Invalid=122, Unknown=0, NotChecked=0, Total=182 [2020-07-28 19:04:10,076 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 351 states. [2020-07-28 19:04:10,547 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 351 to 196. [2020-07-28 19:04:10,547 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:10,548 INFO L82 GeneralOperation]: Start isEquivalent. First operand 351 states. Second operand 196 states. [2020-07-28 19:04:10,548 INFO L74 IsIncluded]: Start isIncluded. First operand 351 states. Second operand 196 states. [2020-07-28 19:04:10,548 INFO L87 Difference]: Start difference. First operand 351 states. Second operand 196 states. [2020-07-28 19:04:10,557 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:10,557 INFO L93 Difference]: Finished difference Result 351 states and 456 transitions. [2020-07-28 19:04:10,557 INFO L276 IsEmpty]: Start isEmpty. Operand 351 states and 456 transitions. [2020-07-28 19:04:10,558 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:10,559 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:10,559 INFO L74 IsIncluded]: Start isIncluded. First operand 196 states. Second operand 351 states. [2020-07-28 19:04:10,559 INFO L87 Difference]: Start difference. First operand 196 states. Second operand 351 states. [2020-07-28 19:04:10,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:10,568 INFO L93 Difference]: Finished difference Result 351 states and 456 transitions. [2020-07-28 19:04:10,568 INFO L276 IsEmpty]: Start isEmpty. Operand 351 states and 456 transitions. [2020-07-28 19:04:10,569 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:10,569 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:10,569 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:10,570 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:10,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 196 states. [2020-07-28 19:04:10,574 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 196 states to 196 states and 257 transitions. [2020-07-28 19:04:10,574 INFO L78 Accepts]: Start accepts. Automaton has 196 states and 257 transitions. Word has length 52 [2020-07-28 19:04:10,574 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:10,574 INFO L479 AbstractCegarLoop]: Abstraction has 196 states and 257 transitions. [2020-07-28 19:04:10,575 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:04:10,575 INFO L276 IsEmpty]: Start isEmpty. Operand 196 states and 257 transitions. [2020-07-28 19:04:10,576 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2020-07-28 19:04:10,576 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:10,576 INFO L422 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:10,790 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2020-07-28 19:04:10,791 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:10,792 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:10,792 INFO L82 PathProgramCache]: Analyzing trace with hash -1104899688, now seen corresponding path program 2 times [2020-07-28 19:04:10,793 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:10,793 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [870447660] [2020-07-28 19:04:10,793 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:10,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:11,044 INFO L280 TraceCheckUtils]: 0: Hoare triple {10406#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string42.base, #t~string42.offset, 1);call write~init~int(77, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(101, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(116, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(104, #t~string42.base, 4 + #t~string42.offset, 1);call write~init~int(58, #t~string42.base, 5 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 6 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string44.base, #t~string44.offset, 1);call write~init~int(82, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(73, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(84, #t~string44.base, 3 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 4 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(75, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string48.base, #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 1 + #t~string48.offset, 1);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(13);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string55.base, #t~string55.offset, 1);call write~init~int(110, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 2 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string59.base, #t~string59.offset, 1);call write~init~int(80, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(117, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(109, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(112, #t~string59.base, 4 + #t~string59.offset, 1);call write~init~int(58, #t~string59.base, 5 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 6 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string65.base, #t~string65.offset, 1);call write~init~int(32, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string67.base, #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 1 + #t~string67.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {10406#true} is VALID [2020-07-28 19:04:11,045 INFO L280 TraceCheckUtils]: 1: Hoare triple {10406#true} havoc main_#res;havoc main_#t~ret37, main_~retValue_acc~3, main_~tmp~4;havoc main_~retValue_acc~3;havoc main_~tmp~4; {10406#true} is VALID [2020-07-28 19:04:11,045 INFO L280 TraceCheckUtils]: 2: Hoare triple {10406#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {10406#true} is VALID [2020-07-28 19:04:11,045 INFO L280 TraceCheckUtils]: 3: Hoare triple {10406#true} main_#t~ret37 := valid_product_#res;assume -2147483648 <= main_#t~ret37 && main_#t~ret37 <= 2147483647;main_~tmp~4 := main_#t~ret37;havoc main_#t~ret37; {10406#true} is VALID [2020-07-28 19:04:11,046 INFO L280 TraceCheckUtils]: 4: Hoare triple {10406#true} assume 0 != main_~tmp~4; {10406#true} is VALID [2020-07-28 19:04:11,046 INFO L280 TraceCheckUtils]: 5: Hoare triple {10406#true} havoc test_#t~nondet70, test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {10406#true} is VALID [2020-07-28 19:04:11,046 INFO L280 TraceCheckUtils]: 6: Hoare triple {10406#true} assume !false; {10406#true} is VALID [2020-07-28 19:04:11,046 INFO L280 TraceCheckUtils]: 7: Hoare triple {10406#true} assume test_~splverifierCounter~0 < 4; {10406#true} is VALID [2020-07-28 19:04:11,046 INFO L280 TraceCheckUtils]: 8: Hoare triple {10406#true} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {10406#true} is VALID [2020-07-28 19:04:11,046 INFO L280 TraceCheckUtils]: 9: Hoare triple {10406#true} assume 0 != test_~tmp~9; {10406#true} is VALID [2020-07-28 19:04:11,047 INFO L280 TraceCheckUtils]: 10: Hoare triple {10406#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10406#true} is VALID [2020-07-28 19:04:11,047 INFO L280 TraceCheckUtils]: 11: Hoare triple {10406#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {10406#true} is VALID [2020-07-28 19:04:11,047 INFO L280 TraceCheckUtils]: 12: Hoare triple {10406#true} assume !(0 != test_~tmp___0~3); {10406#true} is VALID [2020-07-28 19:04:11,047 INFO L280 TraceCheckUtils]: 13: Hoare triple {10406#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {10406#true} is VALID [2020-07-28 19:04:11,048 INFO L280 TraceCheckUtils]: 14: Hoare triple {10406#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {10406#true} is VALID [2020-07-28 19:04:11,048 INFO L280 TraceCheckUtils]: 15: Hoare triple {10406#true} assume !(0 != ~pumpRunning~0); {10406#true} is VALID [2020-07-28 19:04:11,048 INFO L280 TraceCheckUtils]: 16: Hoare triple {10406#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {10406#true} is VALID [2020-07-28 19:04:11,048 INFO L280 TraceCheckUtils]: 17: Hoare triple {10406#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {10406#true} is VALID [2020-07-28 19:04:11,049 INFO L280 TraceCheckUtils]: 18: Hoare triple {10406#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret68, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {10406#true} is VALID [2020-07-28 19:04:11,049 INFO L280 TraceCheckUtils]: 19: Hoare triple {10406#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {10406#true} is VALID [2020-07-28 19:04:11,049 INFO L280 TraceCheckUtils]: 20: Hoare triple {10406#true} isHighWaterLevel_#t~ret68 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret68 && isHighWaterLevel_#t~ret68 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret68;havoc isHighWaterLevel_#t~ret68; {10406#true} is VALID [2020-07-28 19:04:11,049 INFO L280 TraceCheckUtils]: 21: Hoare triple {10406#true} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {10406#true} is VALID [2020-07-28 19:04:11,050 INFO L280 TraceCheckUtils]: 22: Hoare triple {10406#true} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {10406#true} is VALID [2020-07-28 19:04:11,050 INFO L280 TraceCheckUtils]: 23: Hoare triple {10406#true} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {10406#true} is VALID [2020-07-28 19:04:11,050 INFO L280 TraceCheckUtils]: 24: Hoare triple {10406#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;~pumpRunning~0 := 1; {10406#true} is VALID [2020-07-28 19:04:11,050 INFO L280 TraceCheckUtils]: 25: Hoare triple {10406#true} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {10406#true} is VALID [2020-07-28 19:04:11,050 INFO L280 TraceCheckUtils]: 26: Hoare triple {10406#true} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {10406#true} is VALID [2020-07-28 19:04:11,051 INFO L280 TraceCheckUtils]: 27: Hoare triple {10406#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3); {10406#true} is VALID [2020-07-28 19:04:11,051 INFO L280 TraceCheckUtils]: 28: Hoare triple {10406#true} assume !false; {10406#true} is VALID [2020-07-28 19:04:11,051 INFO L280 TraceCheckUtils]: 29: Hoare triple {10406#true} assume test_~splverifierCounter~0 < 4; {10406#true} is VALID [2020-07-28 19:04:11,051 INFO L280 TraceCheckUtils]: 30: Hoare triple {10406#true} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {10406#true} is VALID [2020-07-28 19:04:11,051 INFO L280 TraceCheckUtils]: 31: Hoare triple {10406#true} assume !(0 != test_~tmp~9); {10406#true} is VALID [2020-07-28 19:04:11,051 INFO L280 TraceCheckUtils]: 32: Hoare triple {10406#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {10406#true} is VALID [2020-07-28 19:04:11,052 INFO L280 TraceCheckUtils]: 33: Hoare triple {10406#true} assume !(0 != test_~tmp___0~3); {10406#true} is VALID [2020-07-28 19:04:11,052 INFO L280 TraceCheckUtils]: 34: Hoare triple {10406#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {10406#true} is VALID [2020-07-28 19:04:11,052 INFO L280 TraceCheckUtils]: 35: Hoare triple {10406#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {10406#true} is VALID [2020-07-28 19:04:11,053 INFO L280 TraceCheckUtils]: 36: Hoare triple {10406#true} assume 0 != ~pumpRunning~0; {10406#true} is VALID [2020-07-28 19:04:11,053 INFO L280 TraceCheckUtils]: 37: Hoare triple {10406#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {10406#true} is VALID [2020-07-28 19:04:11,053 INFO L280 TraceCheckUtils]: 38: Hoare triple {10406#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {10406#true} is VALID [2020-07-28 19:04:11,055 INFO L280 TraceCheckUtils]: 39: Hoare triple {10406#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret69, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {10408#(or (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (not (= 0 ~waterLevel~0))) (and (= 1 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 0 ~waterLevel~0)))} is VALID [2020-07-28 19:04:11,056 INFO L280 TraceCheckUtils]: 40: Hoare triple {10408#(or (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (not (= 0 ~waterLevel~0))) (and (= 1 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 0 ~waterLevel~0)))} isLowWaterLevel_#t~ret69 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret69 && isLowWaterLevel_#t~ret69 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret69;havoc isLowWaterLevel_#t~ret69; {10409#(or (and (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~8) (not (= 0 ~waterLevel~0))) (and (= 1 ULTIMATE.start_isLowWaterLevel_~tmp~8) (= 0 ~waterLevel~0)))} is VALID [2020-07-28 19:04:11,057 INFO L280 TraceCheckUtils]: 41: Hoare triple {10409#(or (and (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~8) (not (= 0 ~waterLevel~0))) (and (= 1 ULTIMATE.start_isLowWaterLevel_~tmp~8) (= 0 ~waterLevel~0)))} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,058 INFO L280 TraceCheckUtils]: 42: Hoare triple {10410#(<= ~waterLevel~0 0)} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,059 INFO L280 TraceCheckUtils]: 43: Hoare triple {10410#(<= ~waterLevel~0 0)} processEnvironment_#t~ret50 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret50 && processEnvironment_#t~ret50 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret50;havoc processEnvironment_#t~ret50; {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,060 INFO L280 TraceCheckUtils]: 44: Hoare triple {10410#(<= ~waterLevel~0 0)} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,061 INFO L280 TraceCheckUtils]: 45: Hoare triple {10410#(<= ~waterLevel~0 0)} assume !(0 == ~pumpRunning~0); {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,061 INFO L280 TraceCheckUtils]: 46: Hoare triple {10410#(<= ~waterLevel~0 0)} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,062 INFO L280 TraceCheckUtils]: 47: Hoare triple {10410#(<= ~waterLevel~0 0)} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,063 INFO L280 TraceCheckUtils]: 48: Hoare triple {10410#(<= ~waterLevel~0 0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3); {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,063 INFO L280 TraceCheckUtils]: 49: Hoare triple {10410#(<= ~waterLevel~0 0)} assume !false; {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,064 INFO L280 TraceCheckUtils]: 50: Hoare triple {10410#(<= ~waterLevel~0 0)} assume test_~splverifierCounter~0 < 4; {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,065 INFO L280 TraceCheckUtils]: 51: Hoare triple {10410#(<= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,065 INFO L280 TraceCheckUtils]: 52: Hoare triple {10410#(<= ~waterLevel~0 0)} assume !(0 != test_~tmp~9); {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,066 INFO L280 TraceCheckUtils]: 53: Hoare triple {10410#(<= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,067 INFO L280 TraceCheckUtils]: 54: Hoare triple {10410#(<= ~waterLevel~0 0)} assume !(0 != test_~tmp___0~3); {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,068 INFO L280 TraceCheckUtils]: 55: Hoare triple {10410#(<= ~waterLevel~0 0)} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,068 INFO L280 TraceCheckUtils]: 56: Hoare triple {10410#(<= ~waterLevel~0 0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,069 INFO L280 TraceCheckUtils]: 57: Hoare triple {10410#(<= ~waterLevel~0 0)} assume 0 != ~pumpRunning~0; {10410#(<= ~waterLevel~0 0)} is VALID [2020-07-28 19:04:11,070 INFO L280 TraceCheckUtils]: 58: Hoare triple {10410#(<= ~waterLevel~0 0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {10407#false} is VALID [2020-07-28 19:04:11,070 INFO L280 TraceCheckUtils]: 59: Hoare triple {10407#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {10407#false} is VALID [2020-07-28 19:04:11,070 INFO L280 TraceCheckUtils]: 60: Hoare triple {10407#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret69, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {10407#false} is VALID [2020-07-28 19:04:11,070 INFO L280 TraceCheckUtils]: 61: Hoare triple {10407#false} isLowWaterLevel_#t~ret69 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret69 && isLowWaterLevel_#t~ret69 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret69;havoc isLowWaterLevel_#t~ret69; {10407#false} is VALID [2020-07-28 19:04:11,070 INFO L280 TraceCheckUtils]: 62: Hoare triple {10407#false} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {10407#false} is VALID [2020-07-28 19:04:11,071 INFO L280 TraceCheckUtils]: 63: Hoare triple {10407#false} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {10407#false} is VALID [2020-07-28 19:04:11,071 INFO L280 TraceCheckUtils]: 64: Hoare triple {10407#false} processEnvironment_#t~ret50 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret50 && processEnvironment_#t~ret50 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret50;havoc processEnvironment_#t~ret50; {10407#false} is VALID [2020-07-28 19:04:11,071 INFO L280 TraceCheckUtils]: 65: Hoare triple {10407#false} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {10407#false} is VALID [2020-07-28 19:04:11,072 INFO L280 TraceCheckUtils]: 66: Hoare triple {10407#false} assume !(0 == ~pumpRunning~0); {10407#false} is VALID [2020-07-28 19:04:11,072 INFO L280 TraceCheckUtils]: 67: Hoare triple {10407#false} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {10407#false} is VALID [2020-07-28 19:04:11,072 INFO L280 TraceCheckUtils]: 68: Hoare triple {10407#false} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {10407#false} is VALID [2020-07-28 19:04:11,072 INFO L280 TraceCheckUtils]: 69: Hoare triple {10407#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {10407#false} is VALID [2020-07-28 19:04:11,072 INFO L280 TraceCheckUtils]: 70: Hoare triple {10407#false} __utac_acc__Specification4_spec__1_#t~ret36 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret36 && __utac_acc__Specification4_spec__1_#t~ret36 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret36;havoc __utac_acc__Specification4_spec__1_#t~ret36; {10407#false} is VALID [2020-07-28 19:04:11,072 INFO L280 TraceCheckUtils]: 71: Hoare triple {10407#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {10407#false} is VALID [2020-07-28 19:04:11,073 INFO L280 TraceCheckUtils]: 72: Hoare triple {10407#false} assume !false; {10407#false} is VALID [2020-07-28 19:04:11,079 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 19:04:11,079 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [870447660] [2020-07-28 19:04:11,080 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:11,080 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:04:11,080 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1428661774] [2020-07-28 19:04:11,081 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 73 [2020-07-28 19:04:11,081 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:11,081 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:04:11,160 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 65 edges. 65 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:11,161 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:04:11,161 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:11,161 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:04:11,161 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:04:11,161 INFO L87 Difference]: Start difference. First operand 196 states and 257 transitions. Second operand 5 states. [2020-07-28 19:04:13,529 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:13,530 INFO L93 Difference]: Finished difference Result 628 states and 829 transitions. [2020-07-28 19:04:13,530 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:04:13,530 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 73 [2020-07-28 19:04:13,531 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:13,531 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:13,533 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 256 transitions. [2020-07-28 19:04:13,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:13,535 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 256 transitions. [2020-07-28 19:04:13,535 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 256 transitions. [2020-07-28 19:04:13,962 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 256 edges. 256 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:13,975 INFO L225 Difference]: With dead ends: 628 [2020-07-28 19:04:13,975 INFO L226 Difference]: Without dead ends: 437 [2020-07-28 19:04:13,976 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:04:13,976 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 437 states. [2020-07-28 19:04:14,724 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 437 to 264. [2020-07-28 19:04:14,724 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:14,724 INFO L82 GeneralOperation]: Start isEquivalent. First operand 437 states. Second operand 264 states. [2020-07-28 19:04:14,724 INFO L74 IsIncluded]: Start isIncluded. First operand 437 states. Second operand 264 states. [2020-07-28 19:04:14,725 INFO L87 Difference]: Start difference. First operand 437 states. Second operand 264 states. [2020-07-28 19:04:14,736 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:14,737 INFO L93 Difference]: Finished difference Result 437 states and 566 transitions. [2020-07-28 19:04:14,737 INFO L276 IsEmpty]: Start isEmpty. Operand 437 states and 566 transitions. [2020-07-28 19:04:14,738 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:14,738 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:14,739 INFO L74 IsIncluded]: Start isIncluded. First operand 264 states. Second operand 437 states. [2020-07-28 19:04:14,739 INFO L87 Difference]: Start difference. First operand 264 states. Second operand 437 states. [2020-07-28 19:04:14,751 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:14,751 INFO L93 Difference]: Finished difference Result 437 states and 566 transitions. [2020-07-28 19:04:14,752 INFO L276 IsEmpty]: Start isEmpty. Operand 437 states and 566 transitions. [2020-07-28 19:04:14,753 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:14,753 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:14,753 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:14,753 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:14,754 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 264 states. [2020-07-28 19:04:14,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 264 states to 264 states and 345 transitions. [2020-07-28 19:04:14,760 INFO L78 Accepts]: Start accepts. Automaton has 264 states and 345 transitions. Word has length 73 [2020-07-28 19:04:14,760 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:14,760 INFO L479 AbstractCegarLoop]: Abstraction has 264 states and 345 transitions. [2020-07-28 19:04:14,761 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:04:14,761 INFO L276 IsEmpty]: Start isEmpty. Operand 264 states and 345 transitions. [2020-07-28 19:04:14,762 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 74 [2020-07-28 19:04:14,762 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:14,762 INFO L422 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:14,763 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:04:14,763 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:14,763 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:14,763 INFO L82 PathProgramCache]: Analyzing trace with hash -830140074, now seen corresponding path program 1 times [2020-07-28 19:04:14,764 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:14,764 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1205111049] [2020-07-28 19:04:14,764 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:14,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:14,869 INFO L280 TraceCheckUtils]: 0: Hoare triple {12517#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string40.base, #t~string40.offset := #Ultimate.allocOnStack(13);call #t~string42.base, #t~string42.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string42.base, #t~string42.offset, 1);call write~init~int(77, #t~string42.base, 1 + #t~string42.offset, 1);call write~init~int(101, #t~string42.base, 2 + #t~string42.offset, 1);call write~init~int(116, #t~string42.base, 3 + #t~string42.offset, 1);call write~init~int(104, #t~string42.base, 4 + #t~string42.offset, 1);call write~init~int(58, #t~string42.base, 5 + #t~string42.offset, 1);call write~init~int(0, #t~string42.base, 6 + #t~string42.offset, 1);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string44.base, #t~string44.offset, 1);call write~init~int(82, #t~string44.base, 1 + #t~string44.offset, 1);call write~init~int(73, #t~string44.base, 2 + #t~string44.offset, 1);call write~init~int(84, #t~string44.base, 3 + #t~string44.offset, 1);call write~init~int(0, #t~string44.base, 4 + #t~string44.offset, 1);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(75, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string48.base, #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 1 + #t~string48.offset, 1);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(13);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string55.base, #t~string55.offset, 1);call write~init~int(110, #t~string55.base, 1 + #t~string55.offset, 1);call write~init~int(0, #t~string55.base, 2 + #t~string55.offset, 1);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string57.base, #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 1 + #t~string57.offset, 1);call write~init~int(102, #t~string57.base, 2 + #t~string57.offset, 1);call write~init~int(0, #t~string57.base, 3 + #t~string57.offset, 1);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string59.base, #t~string59.offset, 1);call write~init~int(80, #t~string59.base, 1 + #t~string59.offset, 1);call write~init~int(117, #t~string59.base, 2 + #t~string59.offset, 1);call write~init~int(109, #t~string59.base, 3 + #t~string59.offset, 1);call write~init~int(112, #t~string59.base, 4 + #t~string59.offset, 1);call write~init~int(58, #t~string59.base, 5 + #t~string59.offset, 1);call write~init~int(0, #t~string59.base, 6 + #t~string59.offset, 1);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string61.base, #t~string61.offset, 1);call write~init~int(110, #t~string61.base, 1 + #t~string61.offset, 1);call write~init~int(0, #t~string61.base, 2 + #t~string61.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string63.base, #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 1 + #t~string63.offset, 1);call write~init~int(102, #t~string63.base, 2 + #t~string63.offset, 1);call write~init~int(0, #t~string63.base, 3 + #t~string63.offset, 1);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string65.base, #t~string65.offset, 1);call write~init~int(32, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 2 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string67.base, #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 1 + #t~string67.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~cleanupTimeShifts~0 := 4;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~pumpRunning~0 := 0;~systemActive~0 := 1; {12517#true} is VALID [2020-07-28 19:04:14,869 INFO L280 TraceCheckUtils]: 1: Hoare triple {12517#true} havoc main_#res;havoc main_#t~ret37, main_~retValue_acc~3, main_~tmp~4;havoc main_~retValue_acc~3;havoc main_~tmp~4; {12517#true} is VALID [2020-07-28 19:04:14,870 INFO L280 TraceCheckUtils]: 2: Hoare triple {12517#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {12519#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:04:14,871 INFO L280 TraceCheckUtils]: 3: Hoare triple {12519#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret37 := valid_product_#res;assume -2147483648 <= main_#t~ret37 && main_#t~ret37 <= 2147483647;main_~tmp~4 := main_#t~ret37;havoc main_#t~ret37; {12520#(= 1 ULTIMATE.start_main_~tmp~4)} is VALID [2020-07-28 19:04:14,871 INFO L280 TraceCheckUtils]: 4: Hoare triple {12520#(= 1 ULTIMATE.start_main_~tmp~4)} assume 0 != main_~tmp~4; {12517#true} is VALID [2020-07-28 19:04:14,871 INFO L280 TraceCheckUtils]: 5: Hoare triple {12517#true} havoc test_#t~nondet70, test_#t~nondet71, test_#t~nondet72, test_#t~nondet73, test_~splverifierCounter~0, test_~tmp~9, test_~tmp___0~3, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~9;havoc test_~tmp___0~3;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {12517#true} is VALID [2020-07-28 19:04:14,871 INFO L280 TraceCheckUtils]: 6: Hoare triple {12517#true} assume !false; {12517#true} is VALID [2020-07-28 19:04:14,872 INFO L280 TraceCheckUtils]: 7: Hoare triple {12517#true} assume test_~splverifierCounter~0 < 4; {12517#true} is VALID [2020-07-28 19:04:14,872 INFO L280 TraceCheckUtils]: 8: Hoare triple {12517#true} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {12517#true} is VALID [2020-07-28 19:04:14,872 INFO L280 TraceCheckUtils]: 9: Hoare triple {12517#true} assume 0 != test_~tmp~9; {12517#true} is VALID [2020-07-28 19:04:14,872 INFO L280 TraceCheckUtils]: 10: Hoare triple {12517#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {12517#true} is VALID [2020-07-28 19:04:14,873 INFO L280 TraceCheckUtils]: 11: Hoare triple {12517#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {12517#true} is VALID [2020-07-28 19:04:14,873 INFO L280 TraceCheckUtils]: 12: Hoare triple {12517#true} assume !(0 != test_~tmp___0~3); {12517#true} is VALID [2020-07-28 19:04:14,873 INFO L280 TraceCheckUtils]: 13: Hoare triple {12517#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {12517#true} is VALID [2020-07-28 19:04:14,874 INFO L280 TraceCheckUtils]: 14: Hoare triple {12517#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {12517#true} is VALID [2020-07-28 19:04:14,874 INFO L280 TraceCheckUtils]: 15: Hoare triple {12517#true} assume !(0 != ~pumpRunning~0); {12517#true} is VALID [2020-07-28 19:04:14,874 INFO L280 TraceCheckUtils]: 16: Hoare triple {12517#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {12517#true} is VALID [2020-07-28 19:04:14,874 INFO L280 TraceCheckUtils]: 17: Hoare triple {12517#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {12517#true} is VALID [2020-07-28 19:04:14,875 INFO L280 TraceCheckUtils]: 18: Hoare triple {12517#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret68, isHighWaterLevel_~retValue_acc~12, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~12;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~8;havoc isHighWaterSensorDry_~retValue_acc~8; {12517#true} is VALID [2020-07-28 19:04:14,875 INFO L280 TraceCheckUtils]: 19: Hoare triple {12517#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~8 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~8; {12517#true} is VALID [2020-07-28 19:04:14,875 INFO L280 TraceCheckUtils]: 20: Hoare triple {12517#true} isHighWaterLevel_#t~ret68 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret68 && isHighWaterLevel_#t~ret68 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret68;havoc isHighWaterLevel_#t~ret68; {12517#true} is VALID [2020-07-28 19:04:14,876 INFO L280 TraceCheckUtils]: 21: Hoare triple {12517#true} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {12517#true} is VALID [2020-07-28 19:04:14,876 INFO L280 TraceCheckUtils]: 22: Hoare triple {12517#true} isHighWaterLevel_~retValue_acc~12 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~12; {12517#true} is VALID [2020-07-28 19:04:14,876 INFO L280 TraceCheckUtils]: 23: Hoare triple {12517#true} processEnvironment__wrappee__highWaterSensor_#t~ret49 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret49 && processEnvironment__wrappee__highWaterSensor_#t~ret49 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~5 := processEnvironment__wrappee__highWaterSensor_#t~ret49;havoc processEnvironment__wrappee__highWaterSensor_#t~ret49; {12517#true} is VALID [2020-07-28 19:04:14,877 INFO L280 TraceCheckUtils]: 24: Hoare triple {12517#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~5;~pumpRunning~0 := 1; {12517#true} is VALID [2020-07-28 19:04:14,877 INFO L280 TraceCheckUtils]: 25: Hoare triple {12517#true} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {12517#true} is VALID [2020-07-28 19:04:14,878 INFO L280 TraceCheckUtils]: 26: Hoare triple {12517#true} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {12517#true} is VALID [2020-07-28 19:04:14,878 INFO L280 TraceCheckUtils]: 27: Hoare triple {12517#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3); {12517#true} is VALID [2020-07-28 19:04:14,878 INFO L280 TraceCheckUtils]: 28: Hoare triple {12517#true} assume !false; {12517#true} is VALID [2020-07-28 19:04:14,878 INFO L280 TraceCheckUtils]: 29: Hoare triple {12517#true} assume test_~splverifierCounter~0 < 4; {12517#true} is VALID [2020-07-28 19:04:14,879 INFO L280 TraceCheckUtils]: 30: Hoare triple {12517#true} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {12517#true} is VALID [2020-07-28 19:04:14,879 INFO L280 TraceCheckUtils]: 31: Hoare triple {12517#true} assume !(0 != test_~tmp~9); {12517#true} is VALID [2020-07-28 19:04:14,880 INFO L280 TraceCheckUtils]: 32: Hoare triple {12517#true} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {12517#true} is VALID [2020-07-28 19:04:14,880 INFO L280 TraceCheckUtils]: 33: Hoare triple {12517#true} assume !(0 != test_~tmp___0~3); {12517#true} is VALID [2020-07-28 19:04:14,880 INFO L280 TraceCheckUtils]: 34: Hoare triple {12517#true} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {12517#true} is VALID [2020-07-28 19:04:14,881 INFO L280 TraceCheckUtils]: 35: Hoare triple {12517#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {12517#true} is VALID [2020-07-28 19:04:14,881 INFO L280 TraceCheckUtils]: 36: Hoare triple {12517#true} assume 0 != ~pumpRunning~0; {12517#true} is VALID [2020-07-28 19:04:14,881 INFO L280 TraceCheckUtils]: 37: Hoare triple {12517#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {12517#true} is VALID [2020-07-28 19:04:14,882 INFO L280 TraceCheckUtils]: 38: Hoare triple {12517#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {12517#true} is VALID [2020-07-28 19:04:14,882 INFO L280 TraceCheckUtils]: 39: Hoare triple {12517#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret69, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {12517#true} is VALID [2020-07-28 19:04:14,882 INFO L280 TraceCheckUtils]: 40: Hoare triple {12517#true} isLowWaterLevel_#t~ret69 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret69 && isLowWaterLevel_#t~ret69 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret69;havoc isLowWaterLevel_#t~ret69; {12517#true} is VALID [2020-07-28 19:04:14,884 INFO L280 TraceCheckUtils]: 41: Hoare triple {12517#true} assume !(0 != isLowWaterLevel_~tmp~8);isLowWaterLevel_~tmp___0~2 := 1; {12521#(not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2))} is VALID [2020-07-28 19:04:14,885 INFO L280 TraceCheckUtils]: 42: Hoare triple {12521#(not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2))} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {12522#(not (= 0 |ULTIMATE.start_isLowWaterLevel_#res|))} is VALID [2020-07-28 19:04:14,886 INFO L280 TraceCheckUtils]: 43: Hoare triple {12522#(not (= 0 |ULTIMATE.start_isLowWaterLevel_#res|))} processEnvironment_#t~ret50 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret50 && processEnvironment_#t~ret50 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret50;havoc processEnvironment_#t~ret50; {12523#(not (= 0 ULTIMATE.start_processEnvironment_~tmp~6))} is VALID [2020-07-28 19:04:14,906 INFO L280 TraceCheckUtils]: 44: Hoare triple {12523#(not (= 0 ULTIMATE.start_processEnvironment_~tmp~6))} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {12518#false} is VALID [2020-07-28 19:04:14,907 INFO L280 TraceCheckUtils]: 45: Hoare triple {12518#false} assume !(0 == ~pumpRunning~0); {12518#false} is VALID [2020-07-28 19:04:14,907 INFO L280 TraceCheckUtils]: 46: Hoare triple {12518#false} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {12518#false} is VALID [2020-07-28 19:04:14,907 INFO L280 TraceCheckUtils]: 47: Hoare triple {12518#false} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {12518#false} is VALID [2020-07-28 19:04:14,908 INFO L280 TraceCheckUtils]: 48: Hoare triple {12518#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~3); {12518#false} is VALID [2020-07-28 19:04:14,908 INFO L280 TraceCheckUtils]: 49: Hoare triple {12518#false} assume !false; {12518#false} is VALID [2020-07-28 19:04:14,908 INFO L280 TraceCheckUtils]: 50: Hoare triple {12518#false} assume test_~splverifierCounter~0 < 4; {12518#false} is VALID [2020-07-28 19:04:14,908 INFO L280 TraceCheckUtils]: 51: Hoare triple {12518#false} assume -2147483648 <= test_#t~nondet70 && test_#t~nondet70 <= 2147483647;test_~tmp~9 := test_#t~nondet70;havoc test_#t~nondet70; {12518#false} is VALID [2020-07-28 19:04:14,909 INFO L280 TraceCheckUtils]: 52: Hoare triple {12518#false} assume !(0 != test_~tmp~9); {12518#false} is VALID [2020-07-28 19:04:14,909 INFO L280 TraceCheckUtils]: 53: Hoare triple {12518#false} assume -2147483648 <= test_#t~nondet71 && test_#t~nondet71 <= 2147483647;test_~tmp___0~3 := test_#t~nondet71;havoc test_#t~nondet71; {12518#false} is VALID [2020-07-28 19:04:14,909 INFO L280 TraceCheckUtils]: 54: Hoare triple {12518#false} assume !(0 != test_~tmp___0~3); {12518#false} is VALID [2020-07-28 19:04:14,910 INFO L280 TraceCheckUtils]: 55: Hoare triple {12518#false} assume -2147483648 <= test_#t~nondet72 && test_#t~nondet72 <= 2147483647;test_~tmp___2~0 := test_#t~nondet72;havoc test_#t~nondet72; {12518#false} is VALID [2020-07-28 19:04:14,910 INFO L280 TraceCheckUtils]: 56: Hoare triple {12518#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {12518#false} is VALID [2020-07-28 19:04:14,910 INFO L280 TraceCheckUtils]: 57: Hoare triple {12518#false} assume 0 != ~pumpRunning~0; {12518#false} is VALID [2020-07-28 19:04:14,911 INFO L280 TraceCheckUtils]: 58: Hoare triple {12518#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {12518#false} is VALID [2020-07-28 19:04:14,911 INFO L280 TraceCheckUtils]: 59: Hoare triple {12518#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret50, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {12518#false} is VALID [2020-07-28 19:04:14,911 INFO L280 TraceCheckUtils]: 60: Hoare triple {12518#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret69, isLowWaterLevel_~retValue_acc~13, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~13;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~9;havoc isLowWaterSensorDry_~retValue_acc~9;isLowWaterSensorDry_~retValue_acc~9 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~9; {12518#false} is VALID [2020-07-28 19:04:14,911 INFO L280 TraceCheckUtils]: 61: Hoare triple {12518#false} isLowWaterLevel_#t~ret69 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret69 && isLowWaterLevel_#t~ret69 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret69;havoc isLowWaterLevel_#t~ret69; {12518#false} is VALID [2020-07-28 19:04:14,912 INFO L280 TraceCheckUtils]: 62: Hoare triple {12518#false} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {12518#false} is VALID [2020-07-28 19:04:14,912 INFO L280 TraceCheckUtils]: 63: Hoare triple {12518#false} isLowWaterLevel_~retValue_acc~13 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~13; {12518#false} is VALID [2020-07-28 19:04:14,912 INFO L280 TraceCheckUtils]: 64: Hoare triple {12518#false} processEnvironment_#t~ret50 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment_#t~ret50 && processEnvironment_#t~ret50 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret50;havoc processEnvironment_#t~ret50; {12518#false} is VALID [2020-07-28 19:04:14,913 INFO L280 TraceCheckUtils]: 65: Hoare triple {12518#false} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__highWaterSensor_#t~ret49, processEnvironment__wrappee__highWaterSensor_~tmp~5;havoc processEnvironment__wrappee__highWaterSensor_~tmp~5; {12518#false} is VALID [2020-07-28 19:04:14,913 INFO L280 TraceCheckUtils]: 66: Hoare triple {12518#false} assume !(0 == ~pumpRunning~0); {12518#false} is VALID [2020-07-28 19:04:14,914 INFO L280 TraceCheckUtils]: 67: Hoare triple {12518#false} havoc __utac_acc__Specification4_spec__1_#t~ret35, __utac_acc__Specification4_spec__1_#t~ret36, __utac_acc__Specification4_spec__1_~tmp~3, __utac_acc__Specification4_spec__1_~tmp___0~0;havoc __utac_acc__Specification4_spec__1_~tmp~3;havoc __utac_acc__Specification4_spec__1_~tmp___0~0;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~7;havoc getWaterLevel_~retValue_acc~7;getWaterLevel_~retValue_acc~7 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~7; {12518#false} is VALID [2020-07-28 19:04:14,914 INFO L280 TraceCheckUtils]: 68: Hoare triple {12518#false} __utac_acc__Specification4_spec__1_#t~ret35 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret35 && __utac_acc__Specification4_spec__1_#t~ret35 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~3 := __utac_acc__Specification4_spec__1_#t~ret35;havoc __utac_acc__Specification4_spec__1_#t~ret35; {12518#false} is VALID [2020-07-28 19:04:14,914 INFO L280 TraceCheckUtils]: 69: Hoare triple {12518#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~3;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~11;havoc isPumpRunning_~retValue_acc~11;isPumpRunning_~retValue_acc~11 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~11; {12518#false} is VALID [2020-07-28 19:04:14,915 INFO L280 TraceCheckUtils]: 70: Hoare triple {12518#false} __utac_acc__Specification4_spec__1_#t~ret36 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret36 && __utac_acc__Specification4_spec__1_#t~ret36 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~0 := __utac_acc__Specification4_spec__1_#t~ret36;havoc __utac_acc__Specification4_spec__1_#t~ret36; {12518#false} is VALID [2020-07-28 19:04:14,915 INFO L280 TraceCheckUtils]: 71: Hoare triple {12518#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~0; {12518#false} is VALID [2020-07-28 19:04:14,915 INFO L280 TraceCheckUtils]: 72: Hoare triple {12518#false} assume !false; {12518#false} is VALID [2020-07-28 19:04:14,922 INFO L134 CoverageAnalysis]: Checked inductivity of 49 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2020-07-28 19:04:14,922 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1205111049] [2020-07-28 19:04:14,923 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:14,923 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2020-07-28 19:04:14,923 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [158655005] [2020-07-28 19:04:14,924 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 73 [2020-07-28 19:04:14,924 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:14,925 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:04:15,009 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 62 edges. 62 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:15,010 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:04:15,010 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:15,010 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:04:15,010 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:04:15,011 INFO L87 Difference]: Start difference. First operand 264 states and 345 transitions. Second operand 7 states. [2020-07-28 19:04:16,538 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:16,539 INFO L93 Difference]: Finished difference Result 454 states and 589 transitions. [2020-07-28 19:04:16,539 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:04:16,539 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 73 [2020-07-28 19:04:16,540 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:16,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:04:16,541 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 178 transitions. [2020-07-28 19:04:16,542 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:04:16,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 178 transitions. [2020-07-28 19:04:16,543 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 178 transitions. [2020-07-28 19:04:16,767 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 178 edges. 178 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:16,767 INFO L225 Difference]: With dead ends: 454 [2020-07-28 19:04:16,768 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:04:16,769 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=39, Invalid=71, Unknown=0, NotChecked=0, Total=110 [2020-07-28 19:04:16,769 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:04:16,769 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:04:16,770 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:16,770 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:04:16,770 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:04:16,770 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:04:16,770 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:16,770 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:04:16,771 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:04:16,771 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:16,771 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:16,771 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:04:16,771 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:04:16,771 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:16,771 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:04:16,771 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:04:16,771 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:16,772 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:16,772 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:16,772 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:16,772 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:04:16,772 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:04:16,772 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 73 [2020-07-28 19:04:16,772 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:16,772 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:04:16,772 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:04:16,773 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:04:16,773 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:16,773 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2020-07-28 19:04:16,776 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:04:17,334 WARN L193 SmtUtils]: Spent 334.00 ms on a formula simplification. DAG size of input: 153 DAG size of output: 123 [2020-07-28 19:04:17,709 WARN L193 SmtUtils]: Spent 331.00 ms on a formula simplification. DAG size of input: 153 DAG size of output: 123 [2020-07-28 19:04:17,918 WARN L193 SmtUtils]: Spent 203.00 ms on a formula simplification. DAG size of input: 157 DAG size of output: 117 [2020-07-28 19:04:18,072 WARN L193 SmtUtils]: Spent 115.00 ms on a formula simplification. DAG size of input: 124 DAG size of output: 92 [2020-07-28 19:04:18,236 WARN L193 SmtUtils]: Spent 155.00 ms on a formula simplification. DAG size of input: 135 DAG size of output: 104 [2020-07-28 19:04:18,487 WARN L193 SmtUtils]: Spent 246.00 ms on a formula simplification. DAG size of input: 153 DAG size of output: 123 [2020-07-28 19:04:18,674 WARN L193 SmtUtils]: Spent 179.00 ms on a formula simplification. DAG size of input: 141 DAG size of output: 112 [2020-07-28 19:04:18,809 WARN L193 SmtUtils]: Spent 126.00 ms on a formula simplification. DAG size of input: 45 DAG size of output: 25 [2020-07-28 19:04:19,060 WARN L193 SmtUtils]: Spent 239.00 ms on a formula simplification. DAG size of input: 75 DAG size of output: 25 [2020-07-28 19:04:19,293 WARN L193 SmtUtils]: Spent 224.00 ms on a formula simplification. DAG size of input: 79 DAG size of output: 24 [2020-07-28 19:04:19,811 WARN L193 SmtUtils]: Spent 506.00 ms on a formula simplification. DAG size of input: 123 DAG size of output: 23 [2020-07-28 19:04:19,932 WARN L193 SmtUtils]: Spent 114.00 ms on a formula simplification. DAG size of input: 42 DAG size of output: 25 [2020-07-28 19:04:20,512 WARN L193 SmtUtils]: Spent 557.00 ms on a formula simplification. DAG size of input: 123 DAG size of output: 23 [2020-07-28 19:04:20,986 WARN L193 SmtUtils]: Spent 461.00 ms on a formula simplification. DAG size of input: 112 DAG size of output: 22 [2020-07-28 19:04:21,177 WARN L193 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 48 DAG size of output: 31 [2020-07-28 19:04:21,497 WARN L193 SmtUtils]: Spent 310.00 ms on a formula simplification. DAG size of input: 86 DAG size of output: 29 [2020-07-28 19:04:21,907 WARN L193 SmtUtils]: Spent 359.00 ms on a formula simplification. DAG size of input: 101 DAG size of output: 26 [2020-07-28 19:04:22,468 WARN L193 SmtUtils]: Spent 556.00 ms on a formula simplification. DAG size of input: 123 DAG size of output: 23 [2020-07-28 19:04:23,016 WARN L193 SmtUtils]: Spent 531.00 ms on a formula simplification. DAG size of input: 112 DAG size of output: 15 [2020-07-28 19:04:23,050 INFO L268 CegarLoopResult]: For program point L861(lines 861 865) no Hoare annotation was computed. [2020-07-28 19:04:23,050 INFO L268 CegarLoopResult]: For program point L861-2(lines 861 865) no Hoare annotation was computed. [2020-07-28 19:04:23,050 INFO L268 CegarLoopResult]: For program point L861-3(lines 861 865) no Hoare annotation was computed. [2020-07-28 19:04:23,050 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 543) no Hoare annotation was computed. [2020-07-28 19:04:23,051 INFO L268 CegarLoopResult]: For program point L861-5(lines 861 865) no Hoare annotation was computed. [2020-07-28 19:04:23,052 INFO L264 CegarLoopResult]: At program point L663(lines 658 666) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse2 (not (= 0 ~systemActive~0))) (.cse3 (<= 1 |ULTIMATE.start_getWaterLevel_#res|)) (.cse4 (= 1 ULTIMATE.start_main_~tmp~4))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and .cse0 .cse1 .cse2 .cse3 .cse4 (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0)))) [2020-07-28 19:04:23,052 INFO L268 CegarLoopResult]: For program point L861-6(lines 861 865) no Hoare annotation was computed. [2020-07-28 19:04:23,052 INFO L264 CegarLoopResult]: At program point L663-1(lines 658 666) the Hoare annotation is: false [2020-07-28 19:04:23,052 INFO L268 CegarLoopResult]: For program point L861-8(lines 861 865) no Hoare annotation was computed. [2020-07-28 19:04:23,053 INFO L264 CegarLoopResult]: At program point L663-2(lines 658 666) the Hoare annotation is: false [2020-07-28 19:04:23,053 INFO L268 CegarLoopResult]: For program point L861-9(lines 861 865) no Hoare annotation was computed. [2020-07-28 19:04:23,053 INFO L264 CegarLoopResult]: At program point L498(lines 494 500) the Hoare annotation is: (and (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (= 0 ~pumpRunning~0) (= ULTIMATE.start_main_~tmp~4 ~waterLevel~0) (= 1 ~waterLevel~0)) [2020-07-28 19:04:23,053 INFO L268 CegarLoopResult]: For program point L861-11(lines 861 865) no Hoare annotation was computed. [2020-07-28 19:04:23,053 INFO L268 CegarLoopResult]: For program point L861-12(lines 861 865) no Hoare annotation was computed. [2020-07-28 19:04:23,054 INFO L268 CegarLoopResult]: For program point L861-14(lines 861 865) no Hoare annotation was computed. [2020-07-28 19:04:23,054 INFO L268 CegarLoopResult]: For program point L861-15(lines 861 865) no Hoare annotation was computed. [2020-07-28 19:04:23,054 INFO L268 CegarLoopResult]: For program point L861-17(lines 861 865) no Hoare annotation was computed. [2020-07-28 19:04:23,054 INFO L268 CegarLoopResult]: For program point L763(lines 763 771) no Hoare annotation was computed. [2020-07-28 19:04:23,054 INFO L268 CegarLoopResult]: For program point L763-1(lines 763 771) no Hoare annotation was computed. [2020-07-28 19:04:23,054 INFO L268 CegarLoopResult]: For program point L763-2(lines 763 771) no Hoare annotation was computed. [2020-07-28 19:04:23,054 INFO L268 CegarLoopResult]: For program point L929(lines 929 935) no Hoare annotation was computed. [2020-07-28 19:04:23,055 INFO L264 CegarLoopResult]: At program point L929-1(lines 929 935) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse1 (not (= 0 ~systemActive~0))) (.cse3 (= 1 ULTIMATE.start_main_~tmp~4))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse2 .cse1 .cse3 (= 0 ~pumpRunning~0) (= ULTIMATE.start_main_~tmp~4 ~waterLevel~0)))) [2020-07-28 19:04:23,055 INFO L271 CegarLoopResult]: At program point L534(lines 515 537) the Hoare annotation is: true [2020-07-28 19:04:23,055 INFO L268 CegarLoopResult]: For program point L733(lines 733 750) no Hoare annotation was computed. [2020-07-28 19:04:23,055 INFO L268 CegarLoopResult]: For program point L733-1(lines 733 750) no Hoare annotation was computed. [2020-07-28 19:04:23,055 INFO L268 CegarLoopResult]: For program point L733-2(lines 733 750) no Hoare annotation was computed. [2020-07-28 19:04:23,055 INFO L268 CegarLoopResult]: For program point L733-3(lines 733 750) no Hoare annotation was computed. [2020-07-28 19:04:23,055 INFO L268 CegarLoopResult]: For program point L733-4(lines 733 750) no Hoare annotation was computed. [2020-07-28 19:04:23,055 INFO L268 CegarLoopResult]: For program point L733-5(lines 733 750) no Hoare annotation was computed. [2020-07-28 19:04:23,056 INFO L264 CegarLoopResult]: At program point L701(lines 700 719) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (<= 1 ~waterLevel~0) (= 1 ULTIMATE.start_main_~tmp~4)) [2020-07-28 19:04:23,056 INFO L268 CegarLoopResult]: For program point L701-1(lines 701 707) no Hoare annotation was computed. [2020-07-28 19:04:23,056 INFO L264 CegarLoopResult]: At program point L701-2(lines 700 719) the Hoare annotation is: false [2020-07-28 19:04:23,056 INFO L264 CegarLoopResult]: At program point L701-3(lines 700 719) the Hoare annotation is: false [2020-07-28 19:04:23,056 INFO L264 CegarLoopResult]: At program point L867(lines 852 870) the Hoare annotation is: (and (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (= 1 ULTIMATE.start_isHighWaterLevel_~tmp~7) (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~8) (= 1 ULTIMATE.start_main_~tmp~4) (= 0 |ULTIMATE.start_isHighWaterLevel_#res|) (= 0 ULTIMATE.start_processEnvironment_~tmp~6) (= 1 ~waterLevel~0) (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 0 ~pumpRunning~0)) [2020-07-28 19:04:23,056 INFO L264 CegarLoopResult]: At program point L867-1(lines 852 870) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse2 (not (= 0 ~systemActive~0))) (.cse3 (= 0 ~pumpRunning~0))) (or (and (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1) .cse0 (= 1 ULTIMATE.start_isHighWaterLevel_~tmp~7) .cse1 .cse2 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|) (= ULTIMATE.start_main_~tmp~4 ~waterLevel~0) .cse3 (= 1 ~waterLevel~0)) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 (= 1 ULTIMATE.start_main_~tmp~4) .cse3))) [2020-07-28 19:04:23,057 INFO L264 CegarLoopResult]: At program point L867-2(lines 852 870) the Hoare annotation is: false [2020-07-28 19:04:23,057 INFO L264 CegarLoopResult]: At program point L867-3(lines 852 870) the Hoare annotation is: false [2020-07-28 19:04:23,057 INFO L264 CegarLoopResult]: At program point L867-4(lines 852 870) the Hoare annotation is: false [2020-07-28 19:04:23,057 INFO L264 CegarLoopResult]: At program point L867-5(lines 852 870) the Hoare annotation is: false [2020-07-28 19:04:23,057 INFO L264 CegarLoopResult]: At program point L570(lines 1 964) the Hoare annotation is: (and (not (= 0 ~systemActive~0)) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0)) [2020-07-28 19:04:23,058 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 543) no Hoare annotation was computed. [2020-07-28 19:04:23,058 INFO L268 CegarLoopResult]: For program point L737(lines 737 745) no Hoare annotation was computed. [2020-07-28 19:04:23,058 INFO L268 CegarLoopResult]: For program point L737-1(lines 737 745) no Hoare annotation was computed. [2020-07-28 19:04:23,058 INFO L268 CegarLoopResult]: For program point L671(lines 671 677) no Hoare annotation was computed. [2020-07-28 19:04:23,058 INFO L268 CegarLoopResult]: For program point L737-2(lines 737 745) no Hoare annotation was computed. [2020-07-28 19:04:23,058 INFO L268 CegarLoopResult]: For program point L671-1(lines 671 677) no Hoare annotation was computed. [2020-07-28 19:04:23,058 INFO L268 CegarLoopResult]: For program point L737-3(lines 737 745) no Hoare annotation was computed. [2020-07-28 19:04:23,059 INFO L268 CegarLoopResult]: For program point L671-2(lines 671 677) no Hoare annotation was computed. [2020-07-28 19:04:23,059 INFO L268 CegarLoopResult]: For program point L737-4(lines 737 745) no Hoare annotation was computed. [2020-07-28 19:04:23,059 INFO L268 CegarLoopResult]: For program point L671-3(lines 671 677) no Hoare annotation was computed. [2020-07-28 19:04:23,059 INFO L268 CegarLoopResult]: For program point L737-5(lines 737 745) no Hoare annotation was computed. [2020-07-28 19:04:23,059 INFO L268 CegarLoopResult]: For program point L671-4(lines 671 677) no Hoare annotation was computed. [2020-07-28 19:04:23,059 INFO L268 CegarLoopResult]: For program point L671-5(lines 671 677) no Hoare annotation was computed. [2020-07-28 19:04:23,059 INFO L268 CegarLoopResult]: For program point L606(lines 606 610) no Hoare annotation was computed. [2020-07-28 19:04:23,059 INFO L268 CegarLoopResult]: For program point L939(lines 939 952) no Hoare annotation was computed. [2020-07-28 19:04:23,059 INFO L264 CegarLoopResult]: At program point L708(lines 708 714) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse2 (not (= 0 ~systemActive~0))) (.cse3 (= 1 ULTIMATE.start_main_~tmp~4))) (or (and .cse0 .cse1 .cse2 .cse3 (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0)) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3))) [2020-07-28 19:04:23,059 INFO L264 CegarLoopResult]: At program point L708-1(lines 708 714) the Hoare annotation is: false [2020-07-28 19:04:23,060 INFO L264 CegarLoopResult]: At program point L708-2(lines 708 714) the Hoare annotation is: false [2020-07-28 19:04:23,060 INFO L268 CegarLoopResult]: For program point L543(line 543) no Hoare annotation was computed. [2020-07-28 19:04:23,060 INFO L268 CegarLoopResult]: For program point L543-1(line 543) no Hoare annotation was computed. [2020-07-28 19:04:23,060 INFO L268 CegarLoopResult]: For program point L543-2(line 543) no Hoare annotation was computed. [2020-07-28 19:04:23,060 INFO L264 CegarLoopResult]: At program point L676(lines 667 680) the Hoare annotation is: (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~8) (= 1 ULTIMATE.start_main_~tmp~4) (= 0 ~pumpRunning~0) (= 0 ULTIMATE.start_processEnvironment_~tmp~6) (= 1 ~waterLevel~0)) [2020-07-28 19:04:23,060 INFO L264 CegarLoopResult]: At program point L676-1(lines 667 680) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse2 (not (= 0 ~systemActive~0))) (.cse3 (= 1 ULTIMATE.start_main_~tmp~4)) (.cse4 (= 0 ~pumpRunning~0))) (or (and (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse0 .cse1 .cse2 .cse3 .cse4 (= 1 ~waterLevel~0)) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2020-07-28 19:04:23,061 INFO L264 CegarLoopResult]: At program point L676-2(lines 667 680) the Hoare annotation is: false [2020-07-28 19:04:23,061 INFO L264 CegarLoopResult]: At program point L676-3(lines 667 680) the Hoare annotation is: false [2020-07-28 19:04:23,061 INFO L264 CegarLoopResult]: At program point L676-4(lines 667 680) the Hoare annotation is: false [2020-07-28 19:04:23,061 INFO L264 CegarLoopResult]: At program point L676-5(lines 667 680) the Hoare annotation is: false [2020-07-28 19:04:23,061 INFO L264 CegarLoopResult]: At program point L578(lines 573 581) the Hoare annotation is: (and (= 1 |ULTIMATE.start_valid_product_#res|) (not (= 0 ~systemActive~0)) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0)) [2020-07-28 19:04:23,061 INFO L264 CegarLoopResult]: At program point L447-2(lines 447 461) the Hoare annotation is: false [2020-07-28 19:04:23,061 INFO L268 CegarLoopResult]: For program point L910(lines 909 956) no Hoare annotation was computed. [2020-07-28 19:04:23,061 INFO L268 CegarLoopResult]: For program point L448(line 448) no Hoare annotation was computed. [2020-07-28 19:04:23,061 INFO L268 CegarLoopResult]: For program point L911(lines 911 915) no Hoare annotation was computed. [2020-07-28 19:04:23,061 INFO L264 CegarLoopResult]: At program point L812(lines 807 815) the Hoare annotation is: false [2020-07-28 19:04:23,062 INFO L264 CegarLoopResult]: At program point L812-1(lines 807 815) the Hoare annotation is: false [2020-07-28 19:04:23,062 INFO L264 CegarLoopResult]: At program point L812-2(lines 807 815) the Hoare annotation is: false [2020-07-28 19:04:23,062 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:04:23,062 INFO L268 CegarLoopResult]: For program point L417(lines 417 430) no Hoare annotation was computed. [2020-07-28 19:04:23,062 INFO L264 CegarLoopResult]: At program point L417-1(lines 1 964) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (not (= 0 ~systemActive~0))) (.cse1 (= 1 |ULTIMATE.start_valid_product_#res|))) (or (and .cse0 .cse1 .cse2 (= 0 ~pumpRunning~0) (= ULTIMATE.start_main_~tmp~4 ~waterLevel~0) (= 1 ~waterLevel~0)) (and (<= 2 ~waterLevel~0) .cse0 .cse2 .cse1 (<= 1 |ULTIMATE.start_getWaterLevel_#res|) (= 1 ULTIMATE.start_main_~tmp~4) (<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~3)))) [2020-07-28 19:04:23,062 INFO L268 CegarLoopResult]: For program point L417-2(lines 417 430) no Hoare annotation was computed. [2020-07-28 19:04:23,062 INFO L264 CegarLoopResult]: At program point L417-3(lines 1 964) the Hoare annotation is: false [2020-07-28 19:04:23,062 INFO L268 CegarLoopResult]: For program point L417-4(lines 417 430) no Hoare annotation was computed. [2020-07-28 19:04:23,062 INFO L264 CegarLoopResult]: At program point L417-5(lines 1 964) the Hoare annotation is: false [2020-07-28 19:04:23,063 INFO L268 CegarLoopResult]: For program point L880(lines 880 884) no Hoare annotation was computed. [2020-07-28 19:04:23,063 INFO L268 CegarLoopResult]: For program point L880-2(lines 880 884) no Hoare annotation was computed. [2020-07-28 19:04:23,063 INFO L268 CegarLoopResult]: For program point L880-3(lines 880 884) no Hoare annotation was computed. [2020-07-28 19:04:23,063 INFO L268 CegarLoopResult]: For program point L880-5(lines 880 884) no Hoare annotation was computed. [2020-07-28 19:04:23,063 INFO L268 CegarLoopResult]: For program point L880-6(lines 880 884) no Hoare annotation was computed. [2020-07-28 19:04:23,063 INFO L268 CegarLoopResult]: For program point L880-8(lines 880 884) no Hoare annotation was computed. [2020-07-28 19:04:23,063 INFO L268 CegarLoopResult]: For program point L451(lines 451 455) no Hoare annotation was computed. [2020-07-28 19:04:23,063 INFO L268 CegarLoopResult]: For program point L451-1(lines 701 707) no Hoare annotation was computed. [2020-07-28 19:04:23,064 INFO L268 CegarLoopResult]: For program point L947(lines 947 951) no Hoare annotation was computed. [2020-07-28 19:04:23,064 INFO L264 CegarLoopResult]: At program point L947-2(lines 701 707) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse1 (not (= 0 ~systemActive~0))) (.cse3 (= 1 ULTIMATE.start_main_~tmp~4))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse2 .cse1 .cse3 (= 0 ~pumpRunning~0) (= ULTIMATE.start_main_~tmp~4 ~waterLevel~0)))) [2020-07-28 19:04:23,064 INFO L268 CegarLoopResult]: For program point L618(lines 618 622) no Hoare annotation was computed. [2020-07-28 19:04:23,064 INFO L268 CegarLoopResult]: For program point L421(lines 421 427) no Hoare annotation was computed. [2020-07-28 19:04:23,064 INFO L268 CegarLoopResult]: For program point L421-2(lines 421 427) no Hoare annotation was computed. [2020-07-28 19:04:23,064 INFO L268 CegarLoopResult]: For program point L421-4(lines 421 427) no Hoare annotation was computed. [2020-07-28 19:04:23,064 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:04:23,064 INFO L264 CegarLoopResult]: At program point L686(lines 681 689) the Hoare annotation is: (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (not (= 0 ~systemActive~0)) (= 1 |ULTIMATE.start_valid_product_#res|) (<= 1 ~waterLevel~0) (= 1 ULTIMATE.start_main_~tmp~4)) [2020-07-28 19:04:23,064 INFO L264 CegarLoopResult]: At program point L686-1(lines 681 689) the Hoare annotation is: false [2020-07-28 19:04:23,065 INFO L264 CegarLoopResult]: At program point L686-2(lines 681 689) the Hoare annotation is: false [2020-07-28 19:04:23,065 INFO L268 CegarLoopResult]: For program point L919(lines 919 925) no Hoare annotation was computed. [2020-07-28 19:04:23,065 INFO L264 CegarLoopResult]: At program point L919-1(lines 919 925) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 |ULTIMATE.start_valid_product_#res|)) (.cse1 (not (= 0 ~systemActive~0))) (.cse3 (= 1 ULTIMATE.start_main_~tmp~4))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and .cse0 .cse2 .cse1 .cse3 (= 0 ~pumpRunning~0) (= ULTIMATE.start_main_~tmp~4 ~waterLevel~0)))) [2020-07-28 19:04:23,065 INFO L264 CegarLoopResult]: At program point L886(lines 871 889) the Hoare annotation is: (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2)) (not (= 0 ~systemActive~0)) (= 1 |ULTIMATE.start_valid_product_#res|) (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~8) (<= 1 ~waterLevel~0) (not (= 0 |ULTIMATE.start_isLowWaterLevel_#res|)) (= 1 ULTIMATE.start_main_~tmp~4)) [2020-07-28 19:04:23,065 INFO L264 CegarLoopResult]: At program point L886-1(lines 871 889) the Hoare annotation is: false [2020-07-28 19:04:23,065 INFO L264 CegarLoopResult]: At program point L886-2(lines 871 889) the Hoare annotation is: false [2020-07-28 19:04:23,065 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:04:23,065 INFO L268 CegarLoopResult]: For program point L525(lines 525 532) no Hoare annotation was computed. [2020-07-28 19:04:23,065 INFO L271 CegarLoopResult]: At program point L525-1(lines 525 532) the Hoare annotation is: true [2020-07-28 19:04:23,066 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:04:23,066 INFO L264 CegarLoopResult]: At program point L957(lines 908 958) the Hoare annotation is: false [2020-07-28 19:04:23,066 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 543) no Hoare annotation was computed. [2020-07-28 19:04:23,066 INFO L268 CegarLoopResult]: For program point L759(lines 759 776) no Hoare annotation was computed. [2020-07-28 19:04:23,066 INFO L268 CegarLoopResult]: For program point L759-1(lines 759 776) no Hoare annotation was computed. [2020-07-28 19:04:23,066 INFO L268 CegarLoopResult]: For program point L759-2(lines 759 776) no Hoare annotation was computed. [2020-07-28 19:04:23,066 INFO L268 CegarLoopResult]: For program point L594(lines 594 598) no Hoare annotation was computed. [2020-07-28 19:04:23,066 INFO L268 CegarLoopResult]: For program point L594-3(lines 594 598) no Hoare annotation was computed. [2020-07-28 19:04:23,066 INFO L268 CegarLoopResult]: For program point L594-6(lines 594 598) no Hoare annotation was computed. [2020-07-28 19:04:23,071 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:04:23,071 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:04:23,079 WARN L170 areAnnotationChecker]: L525 has no Hoare annotation [2020-07-28 19:04:23,079 WARN L170 areAnnotationChecker]: L525 has no Hoare annotation [2020-07-28 19:04:23,079 WARN L170 areAnnotationChecker]: L525 has no Hoare annotation [2020-07-28 19:04:23,081 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2020-07-28 19:04:23,081 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:04:23,082 WARN L170 areAnnotationChecker]: L701-1 has no Hoare annotation [2020-07-28 19:04:23,082 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2020-07-28 19:04:23,082 WARN L170 areAnnotationChecker]: L910 has no Hoare annotation [2020-07-28 19:04:23,082 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:04:23,082 WARN L170 areAnnotationChecker]: L701-1 has no Hoare annotation [2020-07-28 19:04:23,082 WARN L170 areAnnotationChecker]: L701-1 has no Hoare annotation [2020-07-28 19:04:23,082 WARN L170 areAnnotationChecker]: L911 has no Hoare annotation [2020-07-28 19:04:23,082 WARN L170 areAnnotationChecker]: L594-3 has no Hoare annotation [2020-07-28 19:04:23,082 WARN L170 areAnnotationChecker]: L594-3 has no Hoare annotation [2020-07-28 19:04:23,082 WARN L170 areAnnotationChecker]: L759-1 has no Hoare annotation [2020-07-28 19:04:23,082 WARN L170 areAnnotationChecker]: L919 has no Hoare annotation [2020-07-28 19:04:23,082 WARN L170 areAnnotationChecker]: L919 has no Hoare annotation [2020-07-28 19:04:23,083 WARN L170 areAnnotationChecker]: L759-1 has no Hoare annotation [2020-07-28 19:04:23,083 WARN L170 areAnnotationChecker]: L759-1 has no Hoare annotation [2020-07-28 19:04:23,083 WARN L170 areAnnotationChecker]: L606 has no Hoare annotation [2020-07-28 19:04:23,083 WARN L170 areAnnotationChecker]: L606 has no Hoare annotation [2020-07-28 19:04:23,083 WARN L170 areAnnotationChecker]: L929 has no Hoare annotation [2020-07-28 19:04:23,083 WARN L170 areAnnotationChecker]: L880-3 has no Hoare annotation [2020-07-28 19:04:23,083 WARN L170 areAnnotationChecker]: L733-3 has no Hoare annotation [2020-07-28 19:04:23,083 WARN L170 areAnnotationChecker]: L733-3 has no Hoare annotation [2020-07-28 19:04:23,083 WARN L170 areAnnotationChecker]: L417-2 has no Hoare annotation [2020-07-28 19:04:23,083 WARN L170 areAnnotationChecker]: L929 has no Hoare annotation [2020-07-28 19:04:23,084 WARN L170 areAnnotationChecker]: L929 has no Hoare annotation [2020-07-28 19:04:23,084 WARN L170 areAnnotationChecker]: L880-3 has no Hoare annotation [2020-07-28 19:04:23,084 WARN L170 areAnnotationChecker]: L880-3 has no Hoare annotation [2020-07-28 19:04:23,084 WARN L170 areAnnotationChecker]: L671-3 has no Hoare annotation [2020-07-28 19:04:23,084 WARN L170 areAnnotationChecker]: L671-3 has no Hoare annotation [2020-07-28 19:04:23,084 WARN L170 areAnnotationChecker]: L417-2 has no Hoare annotation [2020-07-28 19:04:23,084 WARN L170 areAnnotationChecker]: L417-2 has no Hoare annotation [2020-07-28 19:04:23,084 WARN L170 areAnnotationChecker]: L618 has no Hoare annotation [2020-07-28 19:04:23,085 WARN L170 areAnnotationChecker]: L618 has no Hoare annotation [2020-07-28 19:04:23,085 WARN L170 areAnnotationChecker]: L939 has no Hoare annotation [2020-07-28 19:04:23,085 WARN L170 areAnnotationChecker]: L880-5 has no Hoare annotation [2020-07-28 19:04:23,086 WARN L170 areAnnotationChecker]: L861-9 has no Hoare annotation [2020-07-28 19:04:23,086 WARN L170 areAnnotationChecker]: L421-2 has no Hoare annotation [2020-07-28 19:04:23,086 WARN L170 areAnnotationChecker]: L939 has no Hoare annotation [2020-07-28 19:04:23,086 WARN L170 areAnnotationChecker]: L939 has no Hoare annotation [2020-07-28 19:04:23,086 WARN L170 areAnnotationChecker]: L763-1 has no Hoare annotation [2020-07-28 19:04:23,086 WARN L170 areAnnotationChecker]: L861-9 has no Hoare annotation [2020-07-28 19:04:23,086 WARN L170 areAnnotationChecker]: L861-9 has no Hoare annotation [2020-07-28 19:04:23,086 WARN L170 areAnnotationChecker]: L421-2 has no Hoare annotation [2020-07-28 19:04:23,086 WARN L170 areAnnotationChecker]: L421-2 has no Hoare annotation [2020-07-28 19:04:23,086 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2020-07-28 19:04:23,086 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2020-07-28 19:04:23,088 WARN L170 areAnnotationChecker]: L947 has no Hoare annotation [2020-07-28 19:04:23,089 WARN L170 areAnnotationChecker]: L947 has no Hoare annotation [2020-07-28 19:04:23,089 WARN L170 areAnnotationChecker]: L763-1 has no Hoare annotation [2020-07-28 19:04:23,089 WARN L170 areAnnotationChecker]: L763-1 has no Hoare annotation [2020-07-28 19:04:23,089 WARN L170 areAnnotationChecker]: L861-11 has no Hoare annotation [2020-07-28 19:04:23,089 WARN L170 areAnnotationChecker]: L543-1 has no Hoare annotation [2020-07-28 19:04:23,089 WARN L170 areAnnotationChecker]: L543-1 has no Hoare annotation [2020-07-28 19:04:23,090 WARN L170 areAnnotationChecker]: L448 has no Hoare annotation [2020-07-28 19:04:23,090 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2020-07-28 19:04:23,090 WARN L170 areAnnotationChecker]: L594 has no Hoare annotation [2020-07-28 19:04:23,090 WARN L170 areAnnotationChecker]: L759 has no Hoare annotation [2020-07-28 19:04:23,092 WARN L170 areAnnotationChecker]: L733-2 has no Hoare annotation [2020-07-28 19:04:23,092 WARN L170 areAnnotationChecker]: L733-2 has no Hoare annotation [2020-07-28 19:04:23,092 WARN L170 areAnnotationChecker]: L737-3 has no Hoare annotation [2020-07-28 19:04:23,092 WARN L170 areAnnotationChecker]: L451 has no Hoare annotation [2020-07-28 19:04:23,092 WARN L170 areAnnotationChecker]: L451 has no Hoare annotation [2020-07-28 19:04:23,092 WARN L170 areAnnotationChecker]: L759 has no Hoare annotation [2020-07-28 19:04:23,092 WARN L170 areAnnotationChecker]: L759 has no Hoare annotation [2020-07-28 19:04:23,094 WARN L170 areAnnotationChecker]: L671-2 has no Hoare annotation [2020-07-28 19:04:23,094 WARN L170 areAnnotationChecker]: L671-2 has no Hoare annotation [2020-07-28 19:04:23,094 WARN L170 areAnnotationChecker]: L737-3 has no Hoare annotation [2020-07-28 19:04:23,094 WARN L170 areAnnotationChecker]: L737-3 has no Hoare annotation [2020-07-28 19:04:23,094 WARN L170 areAnnotationChecker]: L451-1 has no Hoare annotation [2020-07-28 19:04:23,094 WARN L170 areAnnotationChecker]: L451-1 has no Hoare annotation [2020-07-28 19:04:23,095 WARN L170 areAnnotationChecker]: L880 has no Hoare annotation [2020-07-28 19:04:23,095 WARN L170 areAnnotationChecker]: L733-1 has no Hoare annotation [2020-07-28 19:04:23,095 WARN L170 areAnnotationChecker]: L733-1 has no Hoare annotation [2020-07-28 19:04:23,095 WARN L170 areAnnotationChecker]: L417 has no Hoare annotation [2020-07-28 19:04:23,095 WARN L170 areAnnotationChecker]: L861-6 has no Hoare annotation [2020-07-28 19:04:23,095 WARN L170 areAnnotationChecker]: L594-6 has no Hoare annotation [2020-07-28 19:04:23,095 WARN L170 areAnnotationChecker]: L594-6 has no Hoare annotation [2020-07-28 19:04:23,095 WARN L170 areAnnotationChecker]: L759-2 has no Hoare annotation [2020-07-28 19:04:23,095 WARN L170 areAnnotationChecker]: L880 has no Hoare annotation [2020-07-28 19:04:23,095 WARN L170 areAnnotationChecker]: L880 has no Hoare annotation [2020-07-28 19:04:23,095 WARN L170 areAnnotationChecker]: L671-1 has no Hoare annotation [2020-07-28 19:04:23,095 WARN L170 areAnnotationChecker]: L671-1 has no Hoare annotation [2020-07-28 19:04:23,096 WARN L170 areAnnotationChecker]: L417 has no Hoare annotation [2020-07-28 19:04:23,096 WARN L170 areAnnotationChecker]: L417 has no Hoare annotation [2020-07-28 19:04:23,096 WARN L170 areAnnotationChecker]: L861-6 has no Hoare annotation [2020-07-28 19:04:23,096 WARN L170 areAnnotationChecker]: L861-6 has no Hoare annotation [2020-07-28 19:04:23,096 WARN L170 areAnnotationChecker]: L759-2 has no Hoare annotation [2020-07-28 19:04:23,096 WARN L170 areAnnotationChecker]: L759-2 has no Hoare annotation [2020-07-28 19:04:23,096 WARN L170 areAnnotationChecker]: L880-2 has no Hoare annotation [2020-07-28 19:04:23,097 WARN L170 areAnnotationChecker]: L861-3 has no Hoare annotation [2020-07-28 19:04:23,097 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2020-07-28 19:04:23,097 WARN L170 areAnnotationChecker]: L861-8 has no Hoare annotation [2020-07-28 19:04:23,097 WARN L170 areAnnotationChecker]: L880-6 has no Hoare annotation [2020-07-28 19:04:23,097 WARN L170 areAnnotationChecker]: L733-5 has no Hoare annotation [2020-07-28 19:04:23,098 WARN L170 areAnnotationChecker]: L733-5 has no Hoare annotation [2020-07-28 19:04:23,098 WARN L170 areAnnotationChecker]: L417-4 has no Hoare annotation [2020-07-28 19:04:23,098 WARN L170 areAnnotationChecker]: L763 has no Hoare annotation [2020-07-28 19:04:23,098 WARN L170 areAnnotationChecker]: L861-3 has no Hoare annotation [2020-07-28 19:04:23,098 WARN L170 areAnnotationChecker]: L861-3 has no Hoare annotation [2020-07-28 19:04:23,098 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2020-07-28 19:04:23,098 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2020-07-28 19:04:23,099 WARN L170 areAnnotationChecker]: L737-2 has no Hoare annotation [2020-07-28 19:04:23,099 WARN L170 areAnnotationChecker]: L880-6 has no Hoare annotation [2020-07-28 19:04:23,099 WARN L170 areAnnotationChecker]: L880-6 has no Hoare annotation [2020-07-28 19:04:23,099 WARN L170 areAnnotationChecker]: L671-5 has no Hoare annotation [2020-07-28 19:04:23,099 WARN L170 areAnnotationChecker]: L671-5 has no Hoare annotation [2020-07-28 19:04:23,099 WARN L170 areAnnotationChecker]: L417-4 has no Hoare annotation [2020-07-28 19:04:23,099 WARN L170 areAnnotationChecker]: L417-4 has no Hoare annotation [2020-07-28 19:04:23,099 WARN L170 areAnnotationChecker]: L763 has no Hoare annotation [2020-07-28 19:04:23,099 WARN L170 areAnnotationChecker]: L763 has no Hoare annotation [2020-07-28 19:04:23,099 WARN L170 areAnnotationChecker]: L861-5 has no Hoare annotation [2020-07-28 19:04:23,100 WARN L170 areAnnotationChecker]: L543 has no Hoare annotation [2020-07-28 19:04:23,100 WARN L170 areAnnotationChecker]: L543 has no Hoare annotation [2020-07-28 19:04:23,100 WARN L170 areAnnotationChecker]: L737-2 has no Hoare annotation [2020-07-28 19:04:23,100 WARN L170 areAnnotationChecker]: L737-2 has no Hoare annotation [2020-07-28 19:04:23,100 WARN L170 areAnnotationChecker]: L880-8 has no Hoare annotation [2020-07-28 19:04:23,100 WARN L170 areAnnotationChecker]: L861-15 has no Hoare annotation [2020-07-28 19:04:23,100 WARN L170 areAnnotationChecker]: L421-4 has no Hoare annotation [2020-07-28 19:04:23,101 WARN L170 areAnnotationChecker]: L733 has no Hoare annotation [2020-07-28 19:04:23,101 WARN L170 areAnnotationChecker]: L733 has no Hoare annotation [2020-07-28 19:04:23,101 WARN L170 areAnnotationChecker]: L737-1 has no Hoare annotation [2020-07-28 19:04:23,101 WARN L170 areAnnotationChecker]: L763-2 has no Hoare annotation [2020-07-28 19:04:23,101 WARN L170 areAnnotationChecker]: L861-15 has no Hoare annotation [2020-07-28 19:04:23,101 WARN L170 areAnnotationChecker]: L861-15 has no Hoare annotation [2020-07-28 19:04:23,101 WARN L170 areAnnotationChecker]: L421-4 has no Hoare annotation [2020-07-28 19:04:23,102 WARN L170 areAnnotationChecker]: L421-4 has no Hoare annotation [2020-07-28 19:04:23,102 WARN L170 areAnnotationChecker]: L671 has no Hoare annotation [2020-07-28 19:04:23,102 WARN L170 areAnnotationChecker]: L671 has no Hoare annotation [2020-07-28 19:04:23,102 WARN L170 areAnnotationChecker]: L737-1 has no Hoare annotation [2020-07-28 19:04:23,102 WARN L170 areAnnotationChecker]: L737-1 has no Hoare annotation [2020-07-28 19:04:23,102 WARN L170 areAnnotationChecker]: L763-2 has no Hoare annotation [2020-07-28 19:04:23,102 WARN L170 areAnnotationChecker]: L763-2 has no Hoare annotation [2020-07-28 19:04:23,103 WARN L170 areAnnotationChecker]: L861-17 has no Hoare annotation [2020-07-28 19:04:23,103 WARN L170 areAnnotationChecker]: L543-2 has no Hoare annotation [2020-07-28 19:04:23,103 WARN L170 areAnnotationChecker]: L543-2 has no Hoare annotation [2020-07-28 19:04:23,103 WARN L170 areAnnotationChecker]: L861 has no Hoare annotation [2020-07-28 19:04:23,103 WARN L170 areAnnotationChecker]: L733-4 has no Hoare annotation [2020-07-28 19:04:23,103 WARN L170 areAnnotationChecker]: L733-4 has no Hoare annotation [2020-07-28 19:04:23,103 WARN L170 areAnnotationChecker]: L737-5 has no Hoare annotation [2020-07-28 19:04:23,103 WARN L170 areAnnotationChecker]: L861 has no Hoare annotation [2020-07-28 19:04:23,103 WARN L170 areAnnotationChecker]: L861 has no Hoare annotation [2020-07-28 19:04:23,104 WARN L170 areAnnotationChecker]: L671-4 has no Hoare annotation [2020-07-28 19:04:23,104 WARN L170 areAnnotationChecker]: L671-4 has no Hoare annotation [2020-07-28 19:04:23,104 WARN L170 areAnnotationChecker]: L737-5 has no Hoare annotation [2020-07-28 19:04:23,104 WARN L170 areAnnotationChecker]: L737-5 has no Hoare annotation [2020-07-28 19:04:23,104 WARN L170 areAnnotationChecker]: L861-2 has no Hoare annotation [2020-07-28 19:04:23,104 WARN L170 areAnnotationChecker]: L861-12 has no Hoare annotation [2020-07-28 19:04:23,104 WARN L170 areAnnotationChecker]: L737 has no Hoare annotation [2020-07-28 19:04:23,104 WARN L170 areAnnotationChecker]: L861-12 has no Hoare annotation [2020-07-28 19:04:23,104 WARN L170 areAnnotationChecker]: L861-12 has no Hoare annotation [2020-07-28 19:04:23,104 WARN L170 areAnnotationChecker]: L737 has no Hoare annotation [2020-07-28 19:04:23,104 WARN L170 areAnnotationChecker]: L737 has no Hoare annotation [2020-07-28 19:04:23,104 WARN L170 areAnnotationChecker]: L861-14 has no Hoare annotation [2020-07-28 19:04:23,105 WARN L170 areAnnotationChecker]: L737-4 has no Hoare annotation [2020-07-28 19:04:23,105 WARN L170 areAnnotationChecker]: L737-4 has no Hoare annotation [2020-07-28 19:04:23,105 WARN L170 areAnnotationChecker]: L737-4 has no Hoare annotation [2020-07-28 19:04:23,105 INFO L163 areAnnotationChecker]: CFG has 16 edges. 16 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:04:23,161 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:04:23 BoogieIcfgContainer [2020-07-28 19:04:23,161 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:04:23,162 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:04:23,162 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:04:23,162 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:04:23,163 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:03:52" (3/4) ... [2020-07-28 19:04:23,167 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:04:23,200 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:04:23,201 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:04:23,203 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:04:23,204 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:04:23,205 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:04:23,206 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:04:23,207 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:04:23,249 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((1 == \result && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel [2020-07-28 19:04:23,249 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((1 == \result && !(0 == systemActive)) && 0 == pumpRunning) && tmp == waterLevel) && 1 == waterLevel [2020-07-28 19:04:23,250 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && tmp == waterLevel) && 1 == waterLevel) || ((((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 1 <= \result) && 1 == tmp) && 1 <= tmp) [2020-07-28 19:04:23,251 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && tmp == waterLevel) [2020-07-28 19:04:23,252 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && tmp == waterLevel) [2020-07-28 19:04:23,253 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && tmp == waterLevel) [2020-07-28 19:04:23,254 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 <= waterLevel) && 1 == tmp [2020-07-28 19:04:23,254 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) || ((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) [2020-07-28 19:04:23,256 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 <= \result) && 1 == tmp) || ((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 <= \result) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) [2020-07-28 19:04:23,257 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == \result && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 1 <= waterLevel) && 1 == tmp [2020-07-28 19:04:23,261 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((1 == \result && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) [2020-07-28 19:04:23,264 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0 == \result && 0 == splverifierCounter) && !(0 == tmp___0)) && !(0 == systemActive)) && 1 == \result) && 0 == tmp) && 1 <= waterLevel) && !(0 == \result)) && 1 == tmp [2020-07-28 19:04:23,265 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((1 == \result && 0 == tmp___0) && 0 == splverifierCounter) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && tmp == waterLevel) && 0 == pumpRunning) && 1 == waterLevel) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) [2020-07-28 19:04:23,269 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((0 == \result && 1 == \result) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && 0 == pumpRunning) && 0 == tmp) && 1 == waterLevel [2020-07-28 19:04:23,270 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((((1 == \result && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == tmp) && 0 == \result) && 0 == tmp) && 1 == waterLevel) && 0 == \result) && 1 == \result) && 0 == tmp___0) && 0 == splverifierCounter) && 0 == pumpRunning [2020-07-28 19:04:23,366 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:04:23,367 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:04:23,369 INFO L168 Benchmark]: Toolchain (without parser) took 33667.54 ms. Allocated memory was 1.0 GB in the beginning and 1.6 GB in the end (delta: 533.7 MB). Free memory was 953.5 MB in the beginning and 1.3 GB in the end (delta: -319.6 MB). Peak memory consumption was 214.1 MB. Max. memory is 11.5 GB. [2020-07-28 19:04:23,370 INFO L168 Benchmark]: CDTParser took 0.89 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:04:23,370 INFO L168 Benchmark]: CACSL2BoogieTranslator took 733.66 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 118.5 MB). Free memory was 953.5 MB in the beginning and 1.1 GB in the end (delta: -140.4 MB). Peak memory consumption was 31.8 MB. Max. memory is 11.5 GB. [2020-07-28 19:04:23,371 INFO L168 Benchmark]: Boogie Procedure Inliner took 119.20 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:04:23,371 INFO L168 Benchmark]: Boogie Preprocessor took 58.19 ms. Allocated memory is still 1.1 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:04:23,372 INFO L168 Benchmark]: RCFGBuilder took 1742.07 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 914.0 MB in the end (delta: 173.3 MB). Peak memory consumption was 173.3 MB. Max. memory is 11.5 GB. [2020-07-28 19:04:23,372 INFO L168 Benchmark]: TraceAbstraction took 30802.20 ms. Allocated memory was 1.1 GB in the beginning and 1.6 GB in the end (delta: 415.2 MB). Free memory was 907.3 MB in the beginning and 1.3 GB in the end (delta: -380.3 MB). Peak memory consumption was 34.9 MB. Max. memory is 11.5 GB. [2020-07-28 19:04:23,373 INFO L168 Benchmark]: Witness Printer took 204.80 ms. Allocated memory is still 1.6 GB. Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: 14.5 MB). Peak memory consumption was 14.5 MB. Max. memory is 11.5 GB. [2020-07-28 19:04:23,375 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.89 ms. Allocated memory is still 1.0 GB. Free memory is still 981.7 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 733.66 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 118.5 MB). Free memory was 953.5 MB in the beginning and 1.1 GB in the end (delta: -140.4 MB). Peak memory consumption was 31.8 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 119.20 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 58.19 ms. Allocated memory is still 1.1 GB. Free memory is still 1.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * RCFGBuilder took 1742.07 ms. Allocated memory is still 1.1 GB. Free memory was 1.1 GB in the beginning and 914.0 MB in the end (delta: 173.3 MB). Peak memory consumption was 173.3 MB. Max. memory is 11.5 GB. * TraceAbstraction took 30802.20 ms. Allocated memory was 1.1 GB in the beginning and 1.6 GB in the end (delta: 415.2 MB). Free memory was 907.3 MB in the beginning and 1.3 GB in the end (delta: -380.3 MB). Peak memory consumption was 34.9 MB. Max. memory is 11.5 GB. * Witness Printer took 204.80 ms. Allocated memory is still 1.6 GB. Free memory was 1.3 GB in the beginning and 1.3 GB in the end (delta: 14.5 MB). Peak memory consumption was 14.5 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 543]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 543]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 543]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 667]: Loop Invariant Derived loop invariant: ((((((((0 == \result && 1 == \result) && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 0 == tmp) && 1 == tmp) && 0 == pumpRunning) && 0 == tmp) && 1 == waterLevel - InvariantResult [Line: 667]: Loop Invariant Derived loop invariant: ((((((1 == \result && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) - InvariantResult [Line: 667]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 658]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 <= \result) && 1 == tmp) || ((((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 <= \result) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) - InvariantResult [Line: 667]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 919]: Loop Invariant Derived loop invariant: ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && tmp == waterLevel) - InvariantResult [Line: 658]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 871]: Loop Invariant Derived loop invariant: (((((((0 == \result && 0 == splverifierCounter) && !(0 == tmp___0)) && !(0 == systemActive)) && 1 == \result) && 0 == tmp) && 1 <= waterLevel) && !(0 == \result)) && 1 == tmp - InvariantResult [Line: 667]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 871]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 658]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 667]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 701]: Loop Invariant Derived loop invariant: ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && tmp == waterLevel) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (!(0 == systemActive) && 0 == pumpRunning) && 1 == waterLevel - InvariantResult [Line: 708]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && 1 == waterLevel) || ((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) - InvariantResult [Line: 681]: Loop Invariant Derived loop invariant: ((((0 == \result && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 1 <= waterLevel) && 1 == tmp - InvariantResult [Line: 708]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: (((((((((((1 == \result && !(0 == systemActive)) && 1 == tmp) && 0 == tmp) && 1 == tmp) && 0 == \result) && 0 == tmp) && 1 == waterLevel) && 0 == \result) && 1 == \result) && 0 == tmp___0) && 0 == splverifierCounter) && 0 == pumpRunning - InvariantResult [Line: 681]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 573]: Loop Invariant Derived loop invariant: ((1 == \result && !(0 == systemActive)) && 0 == pumpRunning) && 1 == waterLevel - InvariantResult [Line: 708]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: (((((((((1 == \result && 0 == tmp___0) && 0 == splverifierCounter) && 1 == tmp) && 1 == \result) && !(0 == systemActive)) && 0 == \result) && tmp == waterLevel) && 0 == pumpRunning) && 1 == waterLevel) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) - InvariantResult [Line: 525]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 807]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 681]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 515]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 807]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 929]: Loop Invariant Derived loop invariant: ((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 1 == tmp) || (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 == tmp) && 0 == pumpRunning) && tmp == waterLevel) - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 0 == pumpRunning) && tmp == waterLevel) && 1 == waterLevel) || ((((((2 <= waterLevel && 0 == splverifierCounter) && !(0 == systemActive)) && 1 == \result) && 1 <= \result) && 1 == tmp) && 1 <= tmp) - InvariantResult [Line: 807]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 852]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 871]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 908]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: (((0 == splverifierCounter && 1 == \result) && !(0 == systemActive)) && 1 <= waterLevel) && 1 == tmp - InvariantResult [Line: 447]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 494]: Loop Invariant Derived loop invariant: (((1 == \result && !(0 == systemActive)) && 0 == pumpRunning) && tmp == waterLevel) && 1 == waterLevel - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 700]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 117 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 24.3s, OverallIterations: 12, TraceHistogramMax: 3, AutomataDifference: 17.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 6.2s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1213 SDtfs, 2269 SDslu, 2226 SDs, 0 SdLazy, 417 SolverSat, 82 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.7s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 160 GetRequests, 92 SyntacticMatches, 0 SemanticMatches, 68 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 53 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=264occurred in iteration=11, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 3.1s AutomataMinimizationTime, 12 MinimizatonAttempts, 1143 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 43 LocationsWithAnnotation, 43 PreInvPairs, 116 NumberOfFragments, 547 HoareAnnotationTreeSize, 43 FomulaSimplifications, 792580 FormulaSimplificationTreeSizeReduction, 1.8s HoareSimplificationTime, 43 FomulaSimplificationsInter, 113055 FormulaSimplificationTreeSizeReductionInter, 4.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.5s SatisfiabilityAnalysisTime, 1.5s InterpolantComputationTime, 541 NumberOfCodeBlocks, 541 NumberOfCodeBlocksAsserted, 13 NumberOfCheckSat, 528 ConstructedInterpolants, 0 QuantifiedInterpolants, 43874 SizeOfPredicates, 4 NumberOfNonLiveVariables, 403 ConjunctsInSsa, 6 ConjunctsInUnsatCore, 13 InterpolantComputations, 11 PerfectInterpolantSequences, 156/168 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...