./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product53.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product53.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ae33dcba0147a107c551c432e2bfc2c49f1e3070 ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:03:52,547 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:03:52,550 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:03:52,569 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:03:52,570 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:03:52,573 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:03:52,575 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:03:52,587 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:03:52,591 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:03:52,594 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:03:52,597 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:03:52,599 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:03:52,599 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:03:52,603 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:03:52,604 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:03:52,606 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:03:52,608 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:03:52,609 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:03:52,612 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:03:52,616 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:03:52,622 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:03:52,625 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:03:52,627 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:03:52,628 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:03:52,631 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:03:52,632 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:03:52,632 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:03:52,634 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:03:52,634 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:03:52,635 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:03:52,636 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:03:52,637 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:03:52,638 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:03:52,639 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:03:52,640 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:03:52,640 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:03:52,641 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:03:52,642 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:03:52,642 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:03:52,643 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:03:52,645 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:03:52,645 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:03:52,686 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:03:52,687 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:03:52,688 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:03:52,688 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:03:52,689 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:03:52,689 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:03:52,689 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:03:52,690 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:03:52,690 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:03:52,691 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:03:52,692 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:03:52,692 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:03:52,692 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:03:52,693 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:03:52,693 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:03:52,693 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:03:52,693 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:03:52,694 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:03:52,694 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:03:52,694 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:03:52,695 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:03:52,695 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:03:52,695 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:03:52,696 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:03:52,696 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:03:52,696 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:03:52,696 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:03:52,697 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:03:52,697 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:03:52,697 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ae33dcba0147a107c551c432e2bfc2c49f1e3070 [2020-07-28 19:03:53,030 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:03:53,045 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:03:53,049 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:03:53,051 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:03:53,051 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:03:53,052 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product53.cil.c [2020-07-28 19:03:53,119 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6a860b547/f6f9236ef94c479cbe7494f3b6b74df0/FLAGeb18f72e8 [2020-07-28 19:03:53,666 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:03:53,667 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product53.cil.c [2020-07-28 19:03:53,680 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6a860b547/f6f9236ef94c479cbe7494f3b6b74df0/FLAGeb18f72e8 [2020-07-28 19:03:54,003 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6a860b547/f6f9236ef94c479cbe7494f3b6b74df0 [2020-07-28 19:03:54,007 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:03:54,011 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:03:54,012 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:03:54,012 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:03:54,016 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:03:54,018 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:03:54" (1/1) ... [2020-07-28 19:03:54,023 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@bb3e83b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:54, skipping insertion in model container [2020-07-28 19:03:54,024 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:03:54" (1/1) ... [2020-07-28 19:03:54,032 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:03:54,085 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:03:54,546 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:03:54,561 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:03:54,712 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:03:54,748 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:03:54,748 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:54 WrapperNode [2020-07-28 19:03:54,749 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:03:54,750 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:03:54,750 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:03:54,750 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:03:54,759 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:54" (1/1) ... [2020-07-28 19:03:54,779 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:54" (1/1) ... [2020-07-28 19:03:54,868 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:03:54,874 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:03:54,875 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:03:54,875 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:03:54,890 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:54" (1/1) ... [2020-07-28 19:03:54,891 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:54" (1/1) ... [2020-07-28 19:03:54,898 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:54" (1/1) ... [2020-07-28 19:03:54,899 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:54" (1/1) ... [2020-07-28 19:03:54,922 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:54" (1/1) ... [2020-07-28 19:03:54,936 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:54" (1/1) ... [2020-07-28 19:03:54,941 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:54" (1/1) ... [2020-07-28 19:03:54,949 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:03:54,949 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:03:54,950 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:03:54,950 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:03:54,951 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:54" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:03:55,033 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:03:55,033 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:03:55,033 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:03:55,034 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:03:57,205 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:03:57,206 INFO L295 CfgBuilder]: Removed 276 assume(true) statements. [2020-07-28 19:03:57,215 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:03:57 BoogieIcfgContainer [2020-07-28 19:03:57,215 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:03:57,219 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:03:57,221 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:03:57,224 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:03:57,225 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:03:54" (1/3) ... [2020-07-28 19:03:57,227 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7eac94d2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:03:57, skipping insertion in model container [2020-07-28 19:03:57,228 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:03:54" (2/3) ... [2020-07-28 19:03:57,228 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7eac94d2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:03:57, skipping insertion in model container [2020-07-28 19:03:57,228 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:03:57" (3/3) ... [2020-07-28 19:03:57,230 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product53.cil.c [2020-07-28 19:03:57,242 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:03:57,252 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:03:57,265 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:03:57,289 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:03:57,290 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:03:57,290 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:03:57,290 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:03:57,291 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:03:57,291 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:03:57,291 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:03:57,291 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:03:57,313 INFO L276 IsEmpty]: Start isEmpty. Operand 189 states. [2020-07-28 19:03:57,320 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2020-07-28 19:03:57,321 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:03:57,322 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:03:57,323 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:03:57,329 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:03:57,330 INFO L82 PathProgramCache]: Analyzing trace with hash 2002794138, now seen corresponding path program 1 times [2020-07-28 19:03:57,340 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:03:57,341 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [828129302] [2020-07-28 19:03:57,341 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:03:57,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:03:57,673 INFO L280 TraceCheckUtils]: 0: Hoare triple {192#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(13);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(110, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 2 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 3 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string50.base, #t~string50.offset, 1);call write~init~int(80, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(117, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(109, #t~string50.base, 3 + #t~string50.offset, 1);call write~init~int(112, #t~string50.base, 4 + #t~string50.offset, 1);call write~init~int(58, #t~string50.base, 5 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 6 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string52.base, #t~string52.offset, 1);call write~init~int(110, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string54.base, #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string56.base, #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string58.base, #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 1 + #t~string58.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(13);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(77, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(101, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(116, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(104, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string67.base, #t~string67.offset, 1);call write~init~int(82, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(73, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(84, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(75, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {192#true} is VALID [2020-07-28 19:03:57,674 INFO L280 TraceCheckUtils]: 1: Hoare triple {192#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {192#true} is VALID [2020-07-28 19:03:57,674 INFO L280 TraceCheckUtils]: 2: Hoare triple {192#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {192#true} is VALID [2020-07-28 19:03:57,675 INFO L280 TraceCheckUtils]: 3: Hoare triple {192#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {192#true} is VALID [2020-07-28 19:03:57,675 INFO L280 TraceCheckUtils]: 4: Hoare triple {192#true} assume 0 != main_~tmp~10; {192#true} is VALID [2020-07-28 19:03:57,676 INFO L280 TraceCheckUtils]: 5: Hoare triple {192#true} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {192#true} is VALID [2020-07-28 19:03:57,677 INFO L280 TraceCheckUtils]: 6: Hoare triple {192#true} assume false; {193#false} is VALID [2020-07-28 19:03:57,677 INFO L280 TraceCheckUtils]: 7: Hoare triple {193#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {193#false} is VALID [2020-07-28 19:03:57,678 INFO L280 TraceCheckUtils]: 8: Hoare triple {193#false} assume !(0 != ~pumpRunning~0); {193#false} is VALID [2020-07-28 19:03:57,678 INFO L280 TraceCheckUtils]: 9: Hoare triple {193#false} assume !(0 != ~systemActive~0); {193#false} is VALID [2020-07-28 19:03:57,679 INFO L280 TraceCheckUtils]: 10: Hoare triple {193#false} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {193#false} is VALID [2020-07-28 19:03:57,679 INFO L280 TraceCheckUtils]: 11: Hoare triple {193#false} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {193#false} is VALID [2020-07-28 19:03:57,680 INFO L280 TraceCheckUtils]: 12: Hoare triple {193#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {193#false} is VALID [2020-07-28 19:03:57,680 INFO L280 TraceCheckUtils]: 13: Hoare triple {193#false} __utac_acc__Specification4_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret73 && __utac_acc__Specification4_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret73;havoc __utac_acc__Specification4_spec__1_#t~ret73; {193#false} is VALID [2020-07-28 19:03:57,681 INFO L280 TraceCheckUtils]: 14: Hoare triple {193#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {193#false} is VALID [2020-07-28 19:03:57,681 INFO L280 TraceCheckUtils]: 15: Hoare triple {193#false} assume !false; {193#false} is VALID [2020-07-28 19:03:57,685 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:03:57,686 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [828129302] [2020-07-28 19:03:57,687 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:03:57,688 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:03:57,689 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [789090764] [2020-07-28 19:03:57,696 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 16 [2020-07-28 19:03:57,698 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:03:57,703 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:03:57,745 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 16 edges. 16 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:03:57,745 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:03:57,746 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:03:57,755 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:03:57,757 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:03:57,759 INFO L87 Difference]: Start difference. First operand 189 states. Second operand 2 states. [2020-07-28 19:03:58,303 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:58,303 INFO L93 Difference]: Finished difference Result 372 states and 569 transitions. [2020-07-28 19:03:58,303 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:03:58,304 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 16 [2020-07-28 19:03:58,304 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:03:58,305 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:03:58,318 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 569 transitions. [2020-07-28 19:03:58,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:03:58,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 569 transitions. [2020-07-28 19:03:58,328 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 569 transitions. [2020-07-28 19:03:59,167 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 569 edges. 569 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:03:59,193 INFO L225 Difference]: With dead ends: 372 [2020-07-28 19:03:59,194 INFO L226 Difference]: Without dead ends: 185 [2020-07-28 19:03:59,198 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:03:59,217 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 185 states. [2020-07-28 19:03:59,275 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 185 to 185. [2020-07-28 19:03:59,275 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:03:59,276 INFO L82 GeneralOperation]: Start isEquivalent. First operand 185 states. Second operand 185 states. [2020-07-28 19:03:59,277 INFO L74 IsIncluded]: Start isIncluded. First operand 185 states. Second operand 185 states. [2020-07-28 19:03:59,277 INFO L87 Difference]: Start difference. First operand 185 states. Second operand 185 states. [2020-07-28 19:03:59,289 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:59,289 INFO L93 Difference]: Finished difference Result 185 states and 276 transitions. [2020-07-28 19:03:59,290 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 276 transitions. [2020-07-28 19:03:59,292 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:03:59,292 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:03:59,293 INFO L74 IsIncluded]: Start isIncluded. First operand 185 states. Second operand 185 states. [2020-07-28 19:03:59,293 INFO L87 Difference]: Start difference. First operand 185 states. Second operand 185 states. [2020-07-28 19:03:59,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:59,304 INFO L93 Difference]: Finished difference Result 185 states and 276 transitions. [2020-07-28 19:03:59,305 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 276 transitions. [2020-07-28 19:03:59,307 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:03:59,307 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:03:59,307 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:03:59,308 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:03:59,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 185 states. [2020-07-28 19:03:59,318 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 185 states to 185 states and 276 transitions. [2020-07-28 19:03:59,320 INFO L78 Accepts]: Start accepts. Automaton has 185 states and 276 transitions. Word has length 16 [2020-07-28 19:03:59,320 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:03:59,320 INFO L479 AbstractCegarLoop]: Abstraction has 185 states and 276 transitions. [2020-07-28 19:03:59,321 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:03:59,321 INFO L276 IsEmpty]: Start isEmpty. Operand 185 states and 276 transitions. [2020-07-28 19:03:59,322 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2020-07-28 19:03:59,322 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:03:59,322 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:03:59,323 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:03:59,323 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:03:59,323 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:03:59,324 INFO L82 PathProgramCache]: Analyzing trace with hash 956037241, now seen corresponding path program 1 times [2020-07-28 19:03:59,324 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:03:59,324 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [16568179] [2020-07-28 19:03:59,325 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:03:59,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:03:59,487 INFO L280 TraceCheckUtils]: 0: Hoare triple {1316#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(13);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(110, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 2 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 3 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string50.base, #t~string50.offset, 1);call write~init~int(80, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(117, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(109, #t~string50.base, 3 + #t~string50.offset, 1);call write~init~int(112, #t~string50.base, 4 + #t~string50.offset, 1);call write~init~int(58, #t~string50.base, 5 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 6 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string52.base, #t~string52.offset, 1);call write~init~int(110, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string54.base, #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string56.base, #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string58.base, #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 1 + #t~string58.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(13);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(77, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(101, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(116, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(104, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string67.base, #t~string67.offset, 1);call write~init~int(82, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(73, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(84, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(75, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {1316#true} is VALID [2020-07-28 19:03:59,487 INFO L280 TraceCheckUtils]: 1: Hoare triple {1316#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {1316#true} is VALID [2020-07-28 19:03:59,488 INFO L280 TraceCheckUtils]: 2: Hoare triple {1316#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1316#true} is VALID [2020-07-28 19:03:59,488 INFO L280 TraceCheckUtils]: 3: Hoare triple {1316#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {1316#true} is VALID [2020-07-28 19:03:59,488 INFO L280 TraceCheckUtils]: 4: Hoare triple {1316#true} assume 0 != main_~tmp~10; {1316#true} is VALID [2020-07-28 19:03:59,490 INFO L280 TraceCheckUtils]: 5: Hoare triple {1316#true} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1318#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:03:59,491 INFO L280 TraceCheckUtils]: 6: Hoare triple {1318#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {1318#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:03:59,493 INFO L280 TraceCheckUtils]: 7: Hoare triple {1318#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {1317#false} is VALID [2020-07-28 19:03:59,493 INFO L280 TraceCheckUtils]: 8: Hoare triple {1317#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {1317#false} is VALID [2020-07-28 19:03:59,494 INFO L280 TraceCheckUtils]: 9: Hoare triple {1317#false} assume !(0 != ~pumpRunning~0); {1317#false} is VALID [2020-07-28 19:03:59,494 INFO L280 TraceCheckUtils]: 10: Hoare triple {1317#false} assume !(0 != ~systemActive~0); {1317#false} is VALID [2020-07-28 19:03:59,495 INFO L280 TraceCheckUtils]: 11: Hoare triple {1317#false} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {1317#false} is VALID [2020-07-28 19:03:59,495 INFO L280 TraceCheckUtils]: 12: Hoare triple {1317#false} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {1317#false} is VALID [2020-07-28 19:03:59,495 INFO L280 TraceCheckUtils]: 13: Hoare triple {1317#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {1317#false} is VALID [2020-07-28 19:03:59,496 INFO L280 TraceCheckUtils]: 14: Hoare triple {1317#false} __utac_acc__Specification4_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret73 && __utac_acc__Specification4_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret73;havoc __utac_acc__Specification4_spec__1_#t~ret73; {1317#false} is VALID [2020-07-28 19:03:59,496 INFO L280 TraceCheckUtils]: 15: Hoare triple {1317#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {1317#false} is VALID [2020-07-28 19:03:59,496 INFO L280 TraceCheckUtils]: 16: Hoare triple {1317#false} assume !false; {1317#false} is VALID [2020-07-28 19:03:59,498 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:03:59,499 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [16568179] [2020-07-28 19:03:59,499 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:03:59,499 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:03:59,500 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1735626241] [2020-07-28 19:03:59,501 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 17 [2020-07-28 19:03:59,502 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:03:59,502 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:03:59,543 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 17 edges. 17 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:03:59,543 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:03:59,544 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:03:59,544 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:03:59,545 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:03:59,545 INFO L87 Difference]: Start difference. First operand 185 states and 276 transitions. Second operand 3 states. [2020-07-28 19:03:59,834 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:03:59,835 INFO L93 Difference]: Finished difference Result 185 states and 276 transitions. [2020-07-28 19:03:59,835 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:03:59,835 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 17 [2020-07-28 19:03:59,835 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:03:59,835 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:03:59,840 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 276 transitions. [2020-07-28 19:03:59,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:03:59,844 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 276 transitions. [2020-07-28 19:03:59,844 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 276 transitions. [2020-07-28 19:04:00,160 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 276 edges. 276 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:00,162 INFO L225 Difference]: With dead ends: 185 [2020-07-28 19:04:00,162 INFO L226 Difference]: Without dead ends: 71 [2020-07-28 19:04:00,165 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:04:00,165 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2020-07-28 19:04:00,194 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 71. [2020-07-28 19:04:00,195 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:00,195 INFO L82 GeneralOperation]: Start isEquivalent. First operand 71 states. Second operand 71 states. [2020-07-28 19:04:00,195 INFO L74 IsIncluded]: Start isIncluded. First operand 71 states. Second operand 71 states. [2020-07-28 19:04:00,195 INFO L87 Difference]: Start difference. First operand 71 states. Second operand 71 states. [2020-07-28 19:04:00,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:00,200 INFO L93 Difference]: Finished difference Result 71 states and 105 transitions. [2020-07-28 19:04:00,201 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 105 transitions. [2020-07-28 19:04:00,201 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:00,201 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:00,201 INFO L74 IsIncluded]: Start isIncluded. First operand 71 states. Second operand 71 states. [2020-07-28 19:04:00,202 INFO L87 Difference]: Start difference. First operand 71 states. Second operand 71 states. [2020-07-28 19:04:00,209 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:00,209 INFO L93 Difference]: Finished difference Result 71 states and 105 transitions. [2020-07-28 19:04:00,209 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 105 transitions. [2020-07-28 19:04:00,210 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:00,210 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:00,210 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:00,211 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:00,211 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 71 states. [2020-07-28 19:04:00,214 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 105 transitions. [2020-07-28 19:04:00,215 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 105 transitions. Word has length 17 [2020-07-28 19:04:00,216 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:00,216 INFO L479 AbstractCegarLoop]: Abstraction has 71 states and 105 transitions. [2020-07-28 19:04:00,216 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:04:00,216 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 105 transitions. [2020-07-28 19:04:00,217 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2020-07-28 19:04:00,217 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:00,218 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:00,218 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:04:00,218 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:00,218 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:00,219 INFO L82 PathProgramCache]: Analyzing trace with hash 748559286, now seen corresponding path program 1 times [2020-07-28 19:04:00,219 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:00,220 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [556030215] [2020-07-28 19:04:00,221 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:00,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:00,372 INFO L280 TraceCheckUtils]: 0: Hoare triple {1807#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(13);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(110, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 2 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 3 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string50.base, #t~string50.offset, 1);call write~init~int(80, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(117, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(109, #t~string50.base, 3 + #t~string50.offset, 1);call write~init~int(112, #t~string50.base, 4 + #t~string50.offset, 1);call write~init~int(58, #t~string50.base, 5 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 6 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string52.base, #t~string52.offset, 1);call write~init~int(110, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string54.base, #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string56.base, #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string58.base, #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 1 + #t~string58.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(13);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(77, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(101, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(116, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(104, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string67.base, #t~string67.offset, 1);call write~init~int(82, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(73, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(84, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(75, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {1809#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:04:00,373 INFO L280 TraceCheckUtils]: 1: Hoare triple {1809#(= 1 ~systemActive~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {1809#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:04:00,374 INFO L280 TraceCheckUtils]: 2: Hoare triple {1809#(= 1 ~systemActive~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {1810#(= |ULTIMATE.start_valid_product_#res| ~systemActive~0)} is VALID [2020-07-28 19:04:00,375 INFO L280 TraceCheckUtils]: 3: Hoare triple {1810#(= |ULTIMATE.start_valid_product_#res| ~systemActive~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {1811#(= ULTIMATE.start_main_~tmp~10 ~systemActive~0)} is VALID [2020-07-28 19:04:00,376 INFO L280 TraceCheckUtils]: 4: Hoare triple {1811#(= ULTIMATE.start_main_~tmp~10 ~systemActive~0)} assume 0 != main_~tmp~10; {1812#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:00,377 INFO L280 TraceCheckUtils]: 5: Hoare triple {1812#(not (= 0 ~systemActive~0))} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1812#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:00,378 INFO L280 TraceCheckUtils]: 6: Hoare triple {1812#(not (= 0 ~systemActive~0))} assume !false; {1812#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:00,379 INFO L280 TraceCheckUtils]: 7: Hoare triple {1812#(not (= 0 ~systemActive~0))} assume test_~splverifierCounter~0 < 4; {1812#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:00,379 INFO L280 TraceCheckUtils]: 8: Hoare triple {1812#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {1812#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:00,380 INFO L280 TraceCheckUtils]: 9: Hoare triple {1812#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp~3); {1812#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:00,381 INFO L280 TraceCheckUtils]: 10: Hoare triple {1812#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {1812#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:00,382 INFO L280 TraceCheckUtils]: 11: Hoare triple {1812#(not (= 0 ~systemActive~0))} assume !(0 != test_~tmp___0~0); {1812#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:00,383 INFO L280 TraceCheckUtils]: 12: Hoare triple {1812#(not (= 0 ~systemActive~0))} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {1812#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:00,384 INFO L280 TraceCheckUtils]: 13: Hoare triple {1812#(not (= 0 ~systemActive~0))} assume 0 != test_~tmp___2~0; {1812#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:00,389 INFO L280 TraceCheckUtils]: 14: Hoare triple {1812#(not (= 0 ~systemActive~0))} assume !(0 != ~pumpRunning~0); {1812#(not (= 0 ~systemActive~0))} is VALID [2020-07-28 19:04:00,390 INFO L280 TraceCheckUtils]: 15: Hoare triple {1812#(not (= 0 ~systemActive~0))} assume !(0 != ~systemActive~0); {1808#false} is VALID [2020-07-28 19:04:00,390 INFO L280 TraceCheckUtils]: 16: Hoare triple {1808#false} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {1808#false} is VALID [2020-07-28 19:04:00,391 INFO L280 TraceCheckUtils]: 17: Hoare triple {1808#false} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {1808#false} is VALID [2020-07-28 19:04:00,391 INFO L280 TraceCheckUtils]: 18: Hoare triple {1808#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {1808#false} is VALID [2020-07-28 19:04:00,391 INFO L280 TraceCheckUtils]: 19: Hoare triple {1808#false} __utac_acc__Specification4_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret73 && __utac_acc__Specification4_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret73;havoc __utac_acc__Specification4_spec__1_#t~ret73; {1808#false} is VALID [2020-07-28 19:04:00,392 INFO L280 TraceCheckUtils]: 20: Hoare triple {1808#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {1808#false} is VALID [2020-07-28 19:04:00,392 INFO L280 TraceCheckUtils]: 21: Hoare triple {1808#false} assume !false; {1808#false} is VALID [2020-07-28 19:04:00,394 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:00,394 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [556030215] [2020-07-28 19:04:00,395 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:00,395 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:04:00,395 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1551926959] [2020-07-28 19:04:00,395 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 22 [2020-07-28 19:04:00,396 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:00,396 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:04:00,430 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 22 edges. 22 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:00,430 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:04:00,431 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:00,431 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:04:00,431 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:04:00,431 INFO L87 Difference]: Start difference. First operand 71 states and 105 transitions. Second operand 6 states. [2020-07-28 19:04:01,036 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:01,037 INFO L93 Difference]: Finished difference Result 136 states and 204 transitions. [2020-07-28 19:04:01,037 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:04:01,037 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 22 [2020-07-28 19:04:01,038 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:01,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:04:01,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 204 transitions. [2020-07-28 19:04:01,041 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:04:01,043 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 204 transitions. [2020-07-28 19:04:01,043 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 204 transitions. [2020-07-28 19:04:01,369 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 204 edges. 204 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:01,371 INFO L225 Difference]: With dead ends: 136 [2020-07-28 19:04:01,371 INFO L226 Difference]: Without dead ends: 71 [2020-07-28 19:04:01,372 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:04:01,373 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 71 states. [2020-07-28 19:04:01,462 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 71 to 71. [2020-07-28 19:04:01,462 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:01,462 INFO L82 GeneralOperation]: Start isEquivalent. First operand 71 states. Second operand 71 states. [2020-07-28 19:04:01,462 INFO L74 IsIncluded]: Start isIncluded. First operand 71 states. Second operand 71 states. [2020-07-28 19:04:01,463 INFO L87 Difference]: Start difference. First operand 71 states. Second operand 71 states. [2020-07-28 19:04:01,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:01,466 INFO L93 Difference]: Finished difference Result 71 states and 104 transitions. [2020-07-28 19:04:01,466 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 104 transitions. [2020-07-28 19:04:01,467 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:01,467 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:01,467 INFO L74 IsIncluded]: Start isIncluded. First operand 71 states. Second operand 71 states. [2020-07-28 19:04:01,468 INFO L87 Difference]: Start difference. First operand 71 states. Second operand 71 states. [2020-07-28 19:04:01,471 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:01,471 INFO L93 Difference]: Finished difference Result 71 states and 104 transitions. [2020-07-28 19:04:01,471 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 104 transitions. [2020-07-28 19:04:01,472 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:01,472 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:01,473 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:01,474 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:01,475 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 71 states. [2020-07-28 19:04:01,480 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 71 states to 71 states and 104 transitions. [2020-07-28 19:04:01,480 INFO L78 Accepts]: Start accepts. Automaton has 71 states and 104 transitions. Word has length 22 [2020-07-28 19:04:01,481 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:01,482 INFO L479 AbstractCegarLoop]: Abstraction has 71 states and 104 transitions. [2020-07-28 19:04:01,482 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:04:01,483 INFO L276 IsEmpty]: Start isEmpty. Operand 71 states and 104 transitions. [2020-07-28 19:04:01,483 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2020-07-28 19:04:01,483 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:01,483 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:01,484 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:04:01,484 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:01,484 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:01,484 INFO L82 PathProgramCache]: Analyzing trace with hash -682519882, now seen corresponding path program 1 times [2020-07-28 19:04:01,484 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:01,485 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1620170090] [2020-07-28 19:04:01,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:01,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:01,615 INFO L280 TraceCheckUtils]: 0: Hoare triple {2237#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(13);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(110, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 2 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 3 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string50.base, #t~string50.offset, 1);call write~init~int(80, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(117, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(109, #t~string50.base, 3 + #t~string50.offset, 1);call write~init~int(112, #t~string50.base, 4 + #t~string50.offset, 1);call write~init~int(58, #t~string50.base, 5 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 6 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string52.base, #t~string52.offset, 1);call write~init~int(110, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string54.base, #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string56.base, #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string58.base, #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 1 + #t~string58.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(13);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(77, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(101, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(116, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(104, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string67.base, #t~string67.offset, 1);call write~init~int(82, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(73, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(84, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(75, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,616 INFO L280 TraceCheckUtils]: 1: Hoare triple {2239#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,617 INFO L280 TraceCheckUtils]: 2: Hoare triple {2239#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,618 INFO L280 TraceCheckUtils]: 3: Hoare triple {2239#(= 0 ~pumpRunning~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,619 INFO L280 TraceCheckUtils]: 4: Hoare triple {2239#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~10; {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,620 INFO L280 TraceCheckUtils]: 5: Hoare triple {2239#(= 0 ~pumpRunning~0)} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,621 INFO L280 TraceCheckUtils]: 6: Hoare triple {2239#(= 0 ~pumpRunning~0)} assume !false; {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,621 INFO L280 TraceCheckUtils]: 7: Hoare triple {2239#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,622 INFO L280 TraceCheckUtils]: 8: Hoare triple {2239#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,623 INFO L280 TraceCheckUtils]: 9: Hoare triple {2239#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~3); {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,624 INFO L280 TraceCheckUtils]: 10: Hoare triple {2239#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,625 INFO L280 TraceCheckUtils]: 11: Hoare triple {2239#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~0); {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,626 INFO L280 TraceCheckUtils]: 12: Hoare triple {2239#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,627 INFO L280 TraceCheckUtils]: 13: Hoare triple {2239#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0; {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,628 INFO L280 TraceCheckUtils]: 14: Hoare triple {2239#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,629 INFO L280 TraceCheckUtils]: 15: Hoare triple {2239#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,630 INFO L280 TraceCheckUtils]: 16: Hoare triple {2239#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,631 INFO L280 TraceCheckUtils]: 17: Hoare triple {2239#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {2239#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:01,632 INFO L280 TraceCheckUtils]: 18: Hoare triple {2239#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {2238#false} is VALID [2020-07-28 19:04:01,632 INFO L280 TraceCheckUtils]: 19: Hoare triple {2238#false} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {2238#false} is VALID [2020-07-28 19:04:01,632 INFO L280 TraceCheckUtils]: 20: Hoare triple {2238#false} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {2238#false} is VALID [2020-07-28 19:04:01,633 INFO L280 TraceCheckUtils]: 21: Hoare triple {2238#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {2238#false} is VALID [2020-07-28 19:04:01,633 INFO L280 TraceCheckUtils]: 22: Hoare triple {2238#false} __utac_acc__Specification4_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret73 && __utac_acc__Specification4_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret73;havoc __utac_acc__Specification4_spec__1_#t~ret73; {2238#false} is VALID [2020-07-28 19:04:01,634 INFO L280 TraceCheckUtils]: 23: Hoare triple {2238#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {2238#false} is VALID [2020-07-28 19:04:01,634 INFO L280 TraceCheckUtils]: 24: Hoare triple {2238#false} assume !false; {2238#false} is VALID [2020-07-28 19:04:01,636 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:01,636 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1620170090] [2020-07-28 19:04:01,637 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:01,637 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:04:01,637 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1949621789] [2020-07-28 19:04:01,638 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 25 [2020-07-28 19:04:01,638 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:01,638 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:04:01,674 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:01,675 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:04:01,675 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:01,675 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:04:01,676 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:04:01,676 INFO L87 Difference]: Start difference. First operand 71 states and 104 transitions. Second operand 3 states. [2020-07-28 19:04:02,023 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:02,024 INFO L93 Difference]: Finished difference Result 145 states and 214 transitions. [2020-07-28 19:04:02,024 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:04:02,024 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 25 [2020-07-28 19:04:02,024 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:02,025 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:04:02,027 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 214 transitions. [2020-07-28 19:04:02,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:04:02,030 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 214 transitions. [2020-07-28 19:04:02,031 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 214 transitions. [2020-07-28 19:04:02,309 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 214 edges. 214 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:02,311 INFO L225 Difference]: With dead ends: 145 [2020-07-28 19:04:02,311 INFO L226 Difference]: Without dead ends: 80 [2020-07-28 19:04:02,312 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:04:02,313 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 80 states. [2020-07-28 19:04:02,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 80 to 78. [2020-07-28 19:04:02,397 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:02,398 INFO L82 GeneralOperation]: Start isEquivalent. First operand 80 states. Second operand 78 states. [2020-07-28 19:04:02,398 INFO L74 IsIncluded]: Start isIncluded. First operand 80 states. Second operand 78 states. [2020-07-28 19:04:02,398 INFO L87 Difference]: Start difference. First operand 80 states. Second operand 78 states. [2020-07-28 19:04:02,401 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:02,401 INFO L93 Difference]: Finished difference Result 80 states and 111 transitions. [2020-07-28 19:04:02,401 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 111 transitions. [2020-07-28 19:04:02,402 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:02,402 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:02,402 INFO L74 IsIncluded]: Start isIncluded. First operand 78 states. Second operand 80 states. [2020-07-28 19:04:02,403 INFO L87 Difference]: Start difference. First operand 78 states. Second operand 80 states. [2020-07-28 19:04:02,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:02,406 INFO L93 Difference]: Finished difference Result 80 states and 111 transitions. [2020-07-28 19:04:02,406 INFO L276 IsEmpty]: Start isEmpty. Operand 80 states and 111 transitions. [2020-07-28 19:04:02,407 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:02,407 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:02,407 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:02,407 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:02,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 78 states. [2020-07-28 19:04:02,410 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78 states to 78 states and 110 transitions. [2020-07-28 19:04:02,410 INFO L78 Accepts]: Start accepts. Automaton has 78 states and 110 transitions. Word has length 25 [2020-07-28 19:04:02,411 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:02,411 INFO L479 AbstractCegarLoop]: Abstraction has 78 states and 110 transitions. [2020-07-28 19:04:02,411 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:04:02,412 INFO L276 IsEmpty]: Start isEmpty. Operand 78 states and 110 transitions. [2020-07-28 19:04:02,412 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2020-07-28 19:04:02,412 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:02,413 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:02,413 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:04:02,413 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:02,414 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:02,414 INFO L82 PathProgramCache]: Analyzing trace with hash -1459548505, now seen corresponding path program 1 times [2020-07-28 19:04:02,414 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:02,415 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1229163529] [2020-07-28 19:04:02,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:02,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:02,503 INFO L280 TraceCheckUtils]: 0: Hoare triple {2700#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(13);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(110, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 2 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 3 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string50.base, #t~string50.offset, 1);call write~init~int(80, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(117, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(109, #t~string50.base, 3 + #t~string50.offset, 1);call write~init~int(112, #t~string50.base, 4 + #t~string50.offset, 1);call write~init~int(58, #t~string50.base, 5 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 6 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string52.base, #t~string52.offset, 1);call write~init~int(110, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string54.base, #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string56.base, #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string58.base, #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 1 + #t~string58.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(13);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(77, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(101, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(116, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(104, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string67.base, #t~string67.offset, 1);call write~init~int(82, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(73, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(84, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(75, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {2700#true} is VALID [2020-07-28 19:04:02,503 INFO L280 TraceCheckUtils]: 1: Hoare triple {2700#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {2700#true} is VALID [2020-07-28 19:04:02,504 INFO L280 TraceCheckUtils]: 2: Hoare triple {2700#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {2700#true} is VALID [2020-07-28 19:04:02,504 INFO L280 TraceCheckUtils]: 3: Hoare triple {2700#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {2700#true} is VALID [2020-07-28 19:04:02,504 INFO L280 TraceCheckUtils]: 4: Hoare triple {2700#true} assume 0 != main_~tmp~10; {2700#true} is VALID [2020-07-28 19:04:02,505 INFO L280 TraceCheckUtils]: 5: Hoare triple {2700#true} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2700#true} is VALID [2020-07-28 19:04:02,505 INFO L280 TraceCheckUtils]: 6: Hoare triple {2700#true} assume !false; {2700#true} is VALID [2020-07-28 19:04:02,505 INFO L280 TraceCheckUtils]: 7: Hoare triple {2700#true} assume test_~splverifierCounter~0 < 4; {2700#true} is VALID [2020-07-28 19:04:02,505 INFO L280 TraceCheckUtils]: 8: Hoare triple {2700#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {2700#true} is VALID [2020-07-28 19:04:02,506 INFO L280 TraceCheckUtils]: 9: Hoare triple {2700#true} assume !(0 != test_~tmp~3); {2700#true} is VALID [2020-07-28 19:04:02,506 INFO L280 TraceCheckUtils]: 10: Hoare triple {2700#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {2700#true} is VALID [2020-07-28 19:04:02,506 INFO L280 TraceCheckUtils]: 11: Hoare triple {2700#true} assume !(0 != test_~tmp___0~0); {2700#true} is VALID [2020-07-28 19:04:02,506 INFO L280 TraceCheckUtils]: 12: Hoare triple {2700#true} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {2700#true} is VALID [2020-07-28 19:04:02,507 INFO L280 TraceCheckUtils]: 13: Hoare triple {2700#true} assume 0 != test_~tmp___2~0; {2700#true} is VALID [2020-07-28 19:04:02,507 INFO L280 TraceCheckUtils]: 14: Hoare triple {2700#true} assume !(0 != ~pumpRunning~0); {2700#true} is VALID [2020-07-28 19:04:02,507 INFO L280 TraceCheckUtils]: 15: Hoare triple {2700#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {2700#true} is VALID [2020-07-28 19:04:02,507 INFO L280 TraceCheckUtils]: 16: Hoare triple {2700#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {2700#true} is VALID [2020-07-28 19:04:02,508 INFO L280 TraceCheckUtils]: 17: Hoare triple {2700#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {2700#true} is VALID [2020-07-28 19:04:02,508 INFO L280 TraceCheckUtils]: 18: Hoare triple {2700#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret59, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~11;havoc isHighWaterSensorDry_~retValue_acc~11; {2700#true} is VALID [2020-07-28 19:04:02,509 INFO L280 TraceCheckUtils]: 19: Hoare triple {2700#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~11 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~11; {2700#true} is VALID [2020-07-28 19:04:02,510 INFO L280 TraceCheckUtils]: 20: Hoare triple {2700#true} isHighWaterLevel_#t~ret59 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret59 && isHighWaterLevel_#t~ret59 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret59;havoc isHighWaterLevel_#t~ret59; {2700#true} is VALID [2020-07-28 19:04:02,511 INFO L280 TraceCheckUtils]: 21: Hoare triple {2700#true} assume 0 != isHighWaterLevel_~tmp~7;isHighWaterLevel_~tmp___0~1 := 0; {2702#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} is VALID [2020-07-28 19:04:02,512 INFO L280 TraceCheckUtils]: 22: Hoare triple {2702#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {2703#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:04:02,513 INFO L280 TraceCheckUtils]: 23: Hoare triple {2703#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__highWaterSensor_#t~ret39 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret39 && processEnvironment__wrappee__highWaterSensor_#t~ret39 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret39;havoc processEnvironment__wrappee__highWaterSensor_#t~ret39; {2704#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~4)} is VALID [2020-07-28 19:04:02,514 INFO L280 TraceCheckUtils]: 24: Hoare triple {2704#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~4)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;~pumpRunning~0 := 1; {2701#false} is VALID [2020-07-28 19:04:02,514 INFO L280 TraceCheckUtils]: 25: Hoare triple {2701#false} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {2701#false} is VALID [2020-07-28 19:04:02,515 INFO L280 TraceCheckUtils]: 26: Hoare triple {2701#false} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {2701#false} is VALID [2020-07-28 19:04:02,515 INFO L280 TraceCheckUtils]: 27: Hoare triple {2701#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {2701#false} is VALID [2020-07-28 19:04:02,515 INFO L280 TraceCheckUtils]: 28: Hoare triple {2701#false} __utac_acc__Specification4_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret73 && __utac_acc__Specification4_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret73;havoc __utac_acc__Specification4_spec__1_#t~ret73; {2701#false} is VALID [2020-07-28 19:04:02,515 INFO L280 TraceCheckUtils]: 29: Hoare triple {2701#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {2701#false} is VALID [2020-07-28 19:04:02,516 INFO L280 TraceCheckUtils]: 30: Hoare triple {2701#false} assume !false; {2701#false} is VALID [2020-07-28 19:04:02,517 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:02,517 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1229163529] [2020-07-28 19:04:02,518 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:02,518 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:04:02,518 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1156973598] [2020-07-28 19:04:02,518 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 31 [2020-07-28 19:04:02,519 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:02,519 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:04:02,561 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:02,562 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:04:02,562 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:02,562 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:04:02,563 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:04:02,563 INFO L87 Difference]: Start difference. First operand 78 states and 110 transitions. Second operand 5 states. [2020-07-28 19:04:03,411 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:03,412 INFO L93 Difference]: Finished difference Result 204 states and 285 transitions. [2020-07-28 19:04:03,412 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:04:03,412 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 31 [2020-07-28 19:04:03,412 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:03,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:03,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 231 transitions. [2020-07-28 19:04:03,416 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:03,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 231 transitions. [2020-07-28 19:04:03,419 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 231 transitions. [2020-07-28 19:04:03,677 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 231 edges. 231 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:03,680 INFO L225 Difference]: With dead ends: 204 [2020-07-28 19:04:03,680 INFO L226 Difference]: Without dead ends: 132 [2020-07-28 19:04:03,681 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:04:03,682 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132 states. [2020-07-28 19:04:03,791 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132 to 87. [2020-07-28 19:04:03,791 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:03,791 INFO L82 GeneralOperation]: Start isEquivalent. First operand 132 states. Second operand 87 states. [2020-07-28 19:04:03,792 INFO L74 IsIncluded]: Start isIncluded. First operand 132 states. Second operand 87 states. [2020-07-28 19:04:03,792 INFO L87 Difference]: Start difference. First operand 132 states. Second operand 87 states. [2020-07-28 19:04:03,796 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:03,796 INFO L93 Difference]: Finished difference Result 132 states and 178 transitions. [2020-07-28 19:04:03,797 INFO L276 IsEmpty]: Start isEmpty. Operand 132 states and 178 transitions. [2020-07-28 19:04:03,797 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:03,797 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:03,798 INFO L74 IsIncluded]: Start isIncluded. First operand 87 states. Second operand 132 states. [2020-07-28 19:04:03,798 INFO L87 Difference]: Start difference. First operand 87 states. Second operand 132 states. [2020-07-28 19:04:03,802 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:03,803 INFO L93 Difference]: Finished difference Result 132 states and 178 transitions. [2020-07-28 19:04:03,803 INFO L276 IsEmpty]: Start isEmpty. Operand 132 states and 178 transitions. [2020-07-28 19:04:03,804 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:03,804 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:03,804 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:03,804 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:03,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 87 states. [2020-07-28 19:04:03,808 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 119 transitions. [2020-07-28 19:04:03,808 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 119 transitions. Word has length 31 [2020-07-28 19:04:03,809 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:03,809 INFO L479 AbstractCegarLoop]: Abstraction has 87 states and 119 transitions. [2020-07-28 19:04:03,809 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:04:03,810 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 119 transitions. [2020-07-28 19:04:03,810 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2020-07-28 19:04:03,810 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:03,811 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:03,811 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:04:03,811 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:03,811 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:03,812 INFO L82 PathProgramCache]: Analyzing trace with hash 1202962538, now seen corresponding path program 1 times [2020-07-28 19:04:03,812 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:03,812 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1547951269] [2020-07-28 19:04:03,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:03,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:03,960 INFO L280 TraceCheckUtils]: 0: Hoare triple {3366#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(13);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(110, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 2 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 3 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string50.base, #t~string50.offset, 1);call write~init~int(80, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(117, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(109, #t~string50.base, 3 + #t~string50.offset, 1);call write~init~int(112, #t~string50.base, 4 + #t~string50.offset, 1);call write~init~int(58, #t~string50.base, 5 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 6 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string52.base, #t~string52.offset, 1);call write~init~int(110, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string54.base, #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string56.base, #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string58.base, #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 1 + #t~string58.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(13);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(77, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(101, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(116, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(104, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string67.base, #t~string67.offset, 1);call write~init~int(82, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(73, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(84, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(75, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {3368#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:03,961 INFO L280 TraceCheckUtils]: 1: Hoare triple {3368#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {3368#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:03,962 INFO L280 TraceCheckUtils]: 2: Hoare triple {3368#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {3369#(= |ULTIMATE.start_valid_product_#res| ~waterLevel~0)} is VALID [2020-07-28 19:04:03,963 INFO L280 TraceCheckUtils]: 3: Hoare triple {3369#(= |ULTIMATE.start_valid_product_#res| ~waterLevel~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {3370#(= ULTIMATE.start_main_~tmp~10 ~waterLevel~0)} is VALID [2020-07-28 19:04:03,964 INFO L280 TraceCheckUtils]: 4: Hoare triple {3370#(= ULTIMATE.start_main_~tmp~10 ~waterLevel~0)} assume 0 != main_~tmp~10; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,965 INFO L280 TraceCheckUtils]: 5: Hoare triple {3371#(not (= 0 ~waterLevel~0))} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,966 INFO L280 TraceCheckUtils]: 6: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume !false; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,966 INFO L280 TraceCheckUtils]: 7: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume test_~splverifierCounter~0 < 4; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,967 INFO L280 TraceCheckUtils]: 8: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,969 INFO L280 TraceCheckUtils]: 9: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume !(0 != test_~tmp~3); {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,970 INFO L280 TraceCheckUtils]: 10: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,972 INFO L280 TraceCheckUtils]: 11: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume !(0 != test_~tmp___0~0); {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,974 INFO L280 TraceCheckUtils]: 12: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,977 INFO L280 TraceCheckUtils]: 13: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume 0 != test_~tmp___2~0; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,978 INFO L280 TraceCheckUtils]: 14: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume !(0 != ~pumpRunning~0); {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,978 INFO L280 TraceCheckUtils]: 15: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,979 INFO L280 TraceCheckUtils]: 16: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,980 INFO L280 TraceCheckUtils]: 17: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,981 INFO L280 TraceCheckUtils]: 18: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret59, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~11;havoc isHighWaterSensorDry_~retValue_acc~11; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,982 INFO L280 TraceCheckUtils]: 19: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~11 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~11; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,983 INFO L280 TraceCheckUtils]: 20: Hoare triple {3371#(not (= 0 ~waterLevel~0))} isHighWaterLevel_#t~ret59 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret59 && isHighWaterLevel_#t~ret59 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret59;havoc isHighWaterLevel_#t~ret59; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,983 INFO L280 TraceCheckUtils]: 21: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume 0 != isHighWaterLevel_~tmp~7;isHighWaterLevel_~tmp___0~1 := 0; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,984 INFO L280 TraceCheckUtils]: 22: Hoare triple {3371#(not (= 0 ~waterLevel~0))} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,985 INFO L280 TraceCheckUtils]: 23: Hoare triple {3371#(not (= 0 ~waterLevel~0))} processEnvironment__wrappee__highWaterSensor_#t~ret39 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret39 && processEnvironment__wrappee__highWaterSensor_#t~ret39 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret39;havoc processEnvironment__wrappee__highWaterSensor_#t~ret39; {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,986 INFO L280 TraceCheckUtils]: 24: Hoare triple {3371#(not (= 0 ~waterLevel~0))} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~4); {3371#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:03,987 INFO L280 TraceCheckUtils]: 25: Hoare triple {3371#(not (= 0 ~waterLevel~0))} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {3372#(not (= 0 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:04:03,988 INFO L280 TraceCheckUtils]: 26: Hoare triple {3372#(not (= 0 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {3373#(not (= 0 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~9))} is VALID [2020-07-28 19:04:03,989 INFO L280 TraceCheckUtils]: 27: Hoare triple {3373#(not (= 0 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~9))} assume 0 == __utac_acc__Specification4_spec__1_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {3367#false} is VALID [2020-07-28 19:04:03,990 INFO L280 TraceCheckUtils]: 28: Hoare triple {3367#false} __utac_acc__Specification4_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret73 && __utac_acc__Specification4_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret73;havoc __utac_acc__Specification4_spec__1_#t~ret73; {3367#false} is VALID [2020-07-28 19:04:03,990 INFO L280 TraceCheckUtils]: 29: Hoare triple {3367#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {3367#false} is VALID [2020-07-28 19:04:03,991 INFO L280 TraceCheckUtils]: 30: Hoare triple {3367#false} assume !false; {3367#false} is VALID [2020-07-28 19:04:03,994 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:03,995 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1547951269] [2020-07-28 19:04:03,995 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:03,995 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2020-07-28 19:04:03,995 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [107397988] [2020-07-28 19:04:03,996 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 31 [2020-07-28 19:04:03,996 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:03,997 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states. [2020-07-28 19:04:04,049 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:04,049 INFO L459 AbstractCegarLoop]: Interpolant automaton has 8 states [2020-07-28 19:04:04,049 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:04,050 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2020-07-28 19:04:04,050 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2020-07-28 19:04:04,050 INFO L87 Difference]: Start difference. First operand 87 states and 119 transitions. Second operand 8 states. [2020-07-28 19:04:06,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:06,761 INFO L93 Difference]: Finished difference Result 568 states and 795 transitions. [2020-07-28 19:04:06,762 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2020-07-28 19:04:06,762 INFO L78 Accepts]: Start accepts. Automaton has 8 states. Word has length 31 [2020-07-28 19:04:06,762 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:06,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:04:06,767 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 562 transitions. [2020-07-28 19:04:06,768 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 8 states. [2020-07-28 19:04:06,773 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13 states to 13 states and 562 transitions. [2020-07-28 19:04:06,774 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 13 states and 562 transitions. [2020-07-28 19:04:07,510 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 562 edges. 562 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:07,524 INFO L225 Difference]: With dead ends: 568 [2020-07-28 19:04:07,525 INFO L226 Difference]: Without dead ends: 487 [2020-07-28 19:04:07,526 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=71, Invalid=169, Unknown=0, NotChecked=0, Total=240 [2020-07-28 19:04:07,527 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 487 states. [2020-07-28 19:04:07,874 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 487 to 204. [2020-07-28 19:04:07,874 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:07,874 INFO L82 GeneralOperation]: Start isEquivalent. First operand 487 states. Second operand 204 states. [2020-07-28 19:04:07,874 INFO L74 IsIncluded]: Start isIncluded. First operand 487 states. Second operand 204 states. [2020-07-28 19:04:07,874 INFO L87 Difference]: Start difference. First operand 487 states. Second operand 204 states. [2020-07-28 19:04:07,896 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:07,896 INFO L93 Difference]: Finished difference Result 487 states and 672 transitions. [2020-07-28 19:04:07,896 INFO L276 IsEmpty]: Start isEmpty. Operand 487 states and 672 transitions. [2020-07-28 19:04:07,898 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:07,898 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:07,898 INFO L74 IsIncluded]: Start isIncluded. First operand 204 states. Second operand 487 states. [2020-07-28 19:04:07,898 INFO L87 Difference]: Start difference. First operand 204 states. Second operand 487 states. [2020-07-28 19:04:07,918 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:07,918 INFO L93 Difference]: Finished difference Result 487 states and 672 transitions. [2020-07-28 19:04:07,919 INFO L276 IsEmpty]: Start isEmpty. Operand 487 states and 672 transitions. [2020-07-28 19:04:07,920 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:07,920 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:07,920 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:07,921 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:07,921 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 204 states. [2020-07-28 19:04:07,935 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 276 transitions. [2020-07-28 19:04:07,937 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 276 transitions. Word has length 31 [2020-07-28 19:04:07,938 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:07,938 INFO L479 AbstractCegarLoop]: Abstraction has 204 states and 276 transitions. [2020-07-28 19:04:07,938 INFO L480 AbstractCegarLoop]: Interpolant automaton has 8 states. [2020-07-28 19:04:07,939 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 276 transitions. [2020-07-28 19:04:07,940 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2020-07-28 19:04:07,941 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:07,942 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:07,942 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:04:07,943 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:07,943 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:07,943 INFO L82 PathProgramCache]: Analyzing trace with hash -568007825, now seen corresponding path program 1 times [2020-07-28 19:04:07,943 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:07,944 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1497092220] [2020-07-28 19:04:07,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:07,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:08,054 INFO L280 TraceCheckUtils]: 0: Hoare triple {5398#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(13);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(110, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 2 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 3 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string50.base, #t~string50.offset, 1);call write~init~int(80, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(117, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(109, #t~string50.base, 3 + #t~string50.offset, 1);call write~init~int(112, #t~string50.base, 4 + #t~string50.offset, 1);call write~init~int(58, #t~string50.base, 5 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 6 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string52.base, #t~string52.offset, 1);call write~init~int(110, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string54.base, #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string56.base, #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string58.base, #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 1 + #t~string58.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(13);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(77, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(101, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(116, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(104, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string67.base, #t~string67.offset, 1);call write~init~int(82, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(73, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(84, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(75, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {5398#true} is VALID [2020-07-28 19:04:08,055 INFO L280 TraceCheckUtils]: 1: Hoare triple {5398#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {5398#true} is VALID [2020-07-28 19:04:08,056 INFO L280 TraceCheckUtils]: 2: Hoare triple {5398#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {5400#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:04:08,058 INFO L280 TraceCheckUtils]: 3: Hoare triple {5400#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {5401#(= 1 ULTIMATE.start_main_~tmp~10)} is VALID [2020-07-28 19:04:08,058 INFO L280 TraceCheckUtils]: 4: Hoare triple {5401#(= 1 ULTIMATE.start_main_~tmp~10)} assume 0 != main_~tmp~10; {5398#true} is VALID [2020-07-28 19:04:08,058 INFO L280 TraceCheckUtils]: 5: Hoare triple {5398#true} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {5398#true} is VALID [2020-07-28 19:04:08,058 INFO L280 TraceCheckUtils]: 6: Hoare triple {5398#true} assume !false; {5398#true} is VALID [2020-07-28 19:04:08,059 INFO L280 TraceCheckUtils]: 7: Hoare triple {5398#true} assume test_~splverifierCounter~0 < 4; {5398#true} is VALID [2020-07-28 19:04:08,059 INFO L280 TraceCheckUtils]: 8: Hoare triple {5398#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {5398#true} is VALID [2020-07-28 19:04:08,059 INFO L280 TraceCheckUtils]: 9: Hoare triple {5398#true} assume !(0 != test_~tmp~3); {5398#true} is VALID [2020-07-28 19:04:08,059 INFO L280 TraceCheckUtils]: 10: Hoare triple {5398#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {5398#true} is VALID [2020-07-28 19:04:08,059 INFO L280 TraceCheckUtils]: 11: Hoare triple {5398#true} assume !(0 != test_~tmp___0~0); {5398#true} is VALID [2020-07-28 19:04:08,060 INFO L280 TraceCheckUtils]: 12: Hoare triple {5398#true} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {5398#true} is VALID [2020-07-28 19:04:08,060 INFO L280 TraceCheckUtils]: 13: Hoare triple {5398#true} assume 0 != test_~tmp___2~0; {5398#true} is VALID [2020-07-28 19:04:08,060 INFO L280 TraceCheckUtils]: 14: Hoare triple {5398#true} assume !(0 != ~pumpRunning~0); {5398#true} is VALID [2020-07-28 19:04:08,061 INFO L280 TraceCheckUtils]: 15: Hoare triple {5398#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {5398#true} is VALID [2020-07-28 19:04:08,061 INFO L280 TraceCheckUtils]: 16: Hoare triple {5398#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {5398#true} is VALID [2020-07-28 19:04:08,061 INFO L280 TraceCheckUtils]: 17: Hoare triple {5398#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {5398#true} is VALID [2020-07-28 19:04:08,061 INFO L280 TraceCheckUtils]: 18: Hoare triple {5398#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret59, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~11;havoc isHighWaterSensorDry_~retValue_acc~11; {5398#true} is VALID [2020-07-28 19:04:08,065 INFO L280 TraceCheckUtils]: 19: Hoare triple {5398#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~11 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~11; {5402#(not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))} is VALID [2020-07-28 19:04:08,066 INFO L280 TraceCheckUtils]: 20: Hoare triple {5402#(not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|))} isHighWaterLevel_#t~ret59 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret59 && isHighWaterLevel_#t~ret59 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret59;havoc isHighWaterLevel_#t~ret59; {5403#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~7))} is VALID [2020-07-28 19:04:08,067 INFO L280 TraceCheckUtils]: 21: Hoare triple {5403#(not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~7))} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {5399#false} is VALID [2020-07-28 19:04:08,067 INFO L280 TraceCheckUtils]: 22: Hoare triple {5399#false} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {5399#false} is VALID [2020-07-28 19:04:08,067 INFO L280 TraceCheckUtils]: 23: Hoare triple {5399#false} processEnvironment__wrappee__highWaterSensor_#t~ret39 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret39 && processEnvironment__wrappee__highWaterSensor_#t~ret39 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret39;havoc processEnvironment__wrappee__highWaterSensor_#t~ret39; {5399#false} is VALID [2020-07-28 19:04:08,067 INFO L280 TraceCheckUtils]: 24: Hoare triple {5399#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;~pumpRunning~0 := 1; {5399#false} is VALID [2020-07-28 19:04:08,067 INFO L280 TraceCheckUtils]: 25: Hoare triple {5399#false} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {5399#false} is VALID [2020-07-28 19:04:08,068 INFO L280 TraceCheckUtils]: 26: Hoare triple {5399#false} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {5399#false} is VALID [2020-07-28 19:04:08,068 INFO L280 TraceCheckUtils]: 27: Hoare triple {5399#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~9); {5399#false} is VALID [2020-07-28 19:04:08,068 INFO L280 TraceCheckUtils]: 28: Hoare triple {5399#false} assume !false; {5399#false} is VALID [2020-07-28 19:04:08,068 INFO L280 TraceCheckUtils]: 29: Hoare triple {5399#false} assume test_~splverifierCounter~0 < 4; {5399#false} is VALID [2020-07-28 19:04:08,069 INFO L280 TraceCheckUtils]: 30: Hoare triple {5399#false} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {5399#false} is VALID [2020-07-28 19:04:08,069 INFO L280 TraceCheckUtils]: 31: Hoare triple {5399#false} assume !(0 != test_~tmp~3); {5399#false} is VALID [2020-07-28 19:04:08,069 INFO L280 TraceCheckUtils]: 32: Hoare triple {5399#false} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {5399#false} is VALID [2020-07-28 19:04:08,071 INFO L280 TraceCheckUtils]: 33: Hoare triple {5399#false} assume !(0 != test_~tmp___0~0); {5399#false} is VALID [2020-07-28 19:04:08,071 INFO L280 TraceCheckUtils]: 34: Hoare triple {5399#false} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {5399#false} is VALID [2020-07-28 19:04:08,071 INFO L280 TraceCheckUtils]: 35: Hoare triple {5399#false} assume 0 != test_~tmp___2~0; {5399#false} is VALID [2020-07-28 19:04:08,071 INFO L280 TraceCheckUtils]: 36: Hoare triple {5399#false} assume 0 != ~pumpRunning~0; {5399#false} is VALID [2020-07-28 19:04:08,072 INFO L280 TraceCheckUtils]: 37: Hoare triple {5399#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {5399#false} is VALID [2020-07-28 19:04:08,072 INFO L280 TraceCheckUtils]: 38: Hoare triple {5399#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {5399#false} is VALID [2020-07-28 19:04:08,072 INFO L280 TraceCheckUtils]: 39: Hoare triple {5399#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret42, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~9;havoc isMethaneLevelCritical_~retValue_acc~9;isMethaneLevelCritical_~retValue_acc~9 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~9; {5399#false} is VALID [2020-07-28 19:04:08,073 INFO L280 TraceCheckUtils]: 40: Hoare triple {5399#false} isMethaneAlarm_#t~ret42 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret42 && isMethaneAlarm_#t~ret42 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret42;havoc isMethaneAlarm_#t~ret42;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {5399#false} is VALID [2020-07-28 19:04:08,073 INFO L280 TraceCheckUtils]: 41: Hoare triple {5399#false} processEnvironment_#t~ret41 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret41 && processEnvironment_#t~ret41 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret41;havoc processEnvironment_#t~ret41; {5399#false} is VALID [2020-07-28 19:04:08,073 INFO L280 TraceCheckUtils]: 42: Hoare triple {5399#false} assume 0 != processEnvironment_~tmp~6;~pumpRunning~0 := 0; {5399#false} is VALID [2020-07-28 19:04:08,073 INFO L280 TraceCheckUtils]: 43: Hoare triple {5399#false} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {5399#false} is VALID [2020-07-28 19:04:08,074 INFO L280 TraceCheckUtils]: 44: Hoare triple {5399#false} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {5399#false} is VALID [2020-07-28 19:04:08,074 INFO L280 TraceCheckUtils]: 45: Hoare triple {5399#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {5399#false} is VALID [2020-07-28 19:04:08,074 INFO L280 TraceCheckUtils]: 46: Hoare triple {5399#false} __utac_acc__Specification4_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret73 && __utac_acc__Specification4_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret73;havoc __utac_acc__Specification4_spec__1_#t~ret73; {5399#false} is VALID [2020-07-28 19:04:08,075 INFO L280 TraceCheckUtils]: 47: Hoare triple {5399#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {5399#false} is VALID [2020-07-28 19:04:08,076 INFO L280 TraceCheckUtils]: 48: Hoare triple {5399#false} assume !false; {5399#false} is VALID [2020-07-28 19:04:08,078 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:04:08,078 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1497092220] [2020-07-28 19:04:08,078 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:08,079 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-28 19:04:08,079 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1511947044] [2020-07-28 19:04:08,079 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 49 [2020-07-28 19:04:08,081 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:08,081 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:04:08,139 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 47 edges. 47 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:08,139 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:04:08,140 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:08,140 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:04:08,140 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:04:08,141 INFO L87 Difference]: Start difference. First operand 204 states and 276 transitions. Second operand 6 states. [2020-07-28 19:04:09,562 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:09,562 INFO L93 Difference]: Finished difference Result 476 states and 640 transitions. [2020-07-28 19:04:09,562 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2020-07-28 19:04:09,563 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 49 [2020-07-28 19:04:09,563 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:09,563 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:04:09,565 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 242 transitions. [2020-07-28 19:04:09,565 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:04:09,567 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 242 transitions. [2020-07-28 19:04:09,567 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 242 transitions. [2020-07-28 19:04:09,876 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 242 edges. 242 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:09,884 INFO L225 Difference]: With dead ends: 476 [2020-07-28 19:04:09,884 INFO L226 Difference]: Without dead ends: 278 [2020-07-28 19:04:09,885 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=34, Invalid=56, Unknown=0, NotChecked=0, Total=90 [2020-07-28 19:04:09,886 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 278 states. [2020-07-28 19:04:10,253 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 278 to 182. [2020-07-28 19:04:10,253 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:10,254 INFO L82 GeneralOperation]: Start isEquivalent. First operand 278 states. Second operand 182 states. [2020-07-28 19:04:10,254 INFO L74 IsIncluded]: Start isIncluded. First operand 278 states. Second operand 182 states. [2020-07-28 19:04:10,254 INFO L87 Difference]: Start difference. First operand 278 states. Second operand 182 states. [2020-07-28 19:04:10,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:10,261 INFO L93 Difference]: Finished difference Result 278 states and 363 transitions. [2020-07-28 19:04:10,261 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 363 transitions. [2020-07-28 19:04:10,262 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:10,263 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:10,263 INFO L74 IsIncluded]: Start isIncluded. First operand 182 states. Second operand 278 states. [2020-07-28 19:04:10,263 INFO L87 Difference]: Start difference. First operand 182 states. Second operand 278 states. [2020-07-28 19:04:10,270 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:10,271 INFO L93 Difference]: Finished difference Result 278 states and 363 transitions. [2020-07-28 19:04:10,271 INFO L276 IsEmpty]: Start isEmpty. Operand 278 states and 363 transitions. [2020-07-28 19:04:10,272 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:10,272 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:10,272 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:10,272 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:10,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 182 states. [2020-07-28 19:04:10,276 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 240 transitions. [2020-07-28 19:04:10,277 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 240 transitions. Word has length 49 [2020-07-28 19:04:10,277 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:10,277 INFO L479 AbstractCegarLoop]: Abstraction has 182 states and 240 transitions. [2020-07-28 19:04:10,277 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:04:10,278 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 240 transitions. [2020-07-28 19:04:10,279 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 51 [2020-07-28 19:04:10,279 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:10,279 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:10,279 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:04:10,280 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:10,280 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:10,280 INFO L82 PathProgramCache]: Analyzing trace with hash 1384539631, now seen corresponding path program 1 times [2020-07-28 19:04:10,281 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:10,281 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1491474042] [2020-07-28 19:04:10,281 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:10,307 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:10,363 INFO L280 TraceCheckUtils]: 0: Hoare triple {6852#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(13);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(110, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 2 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 3 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string50.base, #t~string50.offset, 1);call write~init~int(80, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(117, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(109, #t~string50.base, 3 + #t~string50.offset, 1);call write~init~int(112, #t~string50.base, 4 + #t~string50.offset, 1);call write~init~int(58, #t~string50.base, 5 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 6 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string52.base, #t~string52.offset, 1);call write~init~int(110, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string54.base, #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string56.base, #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string58.base, #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 1 + #t~string58.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(13);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(77, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(101, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(116, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(104, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string67.base, #t~string67.offset, 1);call write~init~int(82, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(73, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(84, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(75, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {6852#true} is VALID [2020-07-28 19:04:10,363 INFO L280 TraceCheckUtils]: 1: Hoare triple {6852#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {6852#true} is VALID [2020-07-28 19:04:10,364 INFO L280 TraceCheckUtils]: 2: Hoare triple {6852#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {6852#true} is VALID [2020-07-28 19:04:10,364 INFO L280 TraceCheckUtils]: 3: Hoare triple {6852#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {6852#true} is VALID [2020-07-28 19:04:10,364 INFO L280 TraceCheckUtils]: 4: Hoare triple {6852#true} assume 0 != main_~tmp~10; {6852#true} is VALID [2020-07-28 19:04:10,364 INFO L280 TraceCheckUtils]: 5: Hoare triple {6852#true} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {6852#true} is VALID [2020-07-28 19:04:10,364 INFO L280 TraceCheckUtils]: 6: Hoare triple {6852#true} assume !false; {6852#true} is VALID [2020-07-28 19:04:10,365 INFO L280 TraceCheckUtils]: 7: Hoare triple {6852#true} assume test_~splverifierCounter~0 < 4; {6852#true} is VALID [2020-07-28 19:04:10,365 INFO L280 TraceCheckUtils]: 8: Hoare triple {6852#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {6852#true} is VALID [2020-07-28 19:04:10,365 INFO L280 TraceCheckUtils]: 9: Hoare triple {6852#true} assume 0 != test_~tmp~3; {6852#true} is VALID [2020-07-28 19:04:10,365 INFO L280 TraceCheckUtils]: 10: Hoare triple {6852#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {6852#true} is VALID [2020-07-28 19:04:10,366 INFO L280 TraceCheckUtils]: 11: Hoare triple {6852#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {6852#true} is VALID [2020-07-28 19:04:10,366 INFO L280 TraceCheckUtils]: 12: Hoare triple {6852#true} assume !(0 != test_~tmp___0~0); {6852#true} is VALID [2020-07-28 19:04:10,366 INFO L280 TraceCheckUtils]: 13: Hoare triple {6852#true} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {6852#true} is VALID [2020-07-28 19:04:10,367 INFO L280 TraceCheckUtils]: 14: Hoare triple {6852#true} assume 0 != test_~tmp___2~0; {6852#true} is VALID [2020-07-28 19:04:10,367 INFO L280 TraceCheckUtils]: 15: Hoare triple {6852#true} assume !(0 != ~pumpRunning~0); {6852#true} is VALID [2020-07-28 19:04:10,367 INFO L280 TraceCheckUtils]: 16: Hoare triple {6852#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {6852#true} is VALID [2020-07-28 19:04:10,368 INFO L280 TraceCheckUtils]: 17: Hoare triple {6852#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {6852#true} is VALID [2020-07-28 19:04:10,368 INFO L280 TraceCheckUtils]: 18: Hoare triple {6852#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {6852#true} is VALID [2020-07-28 19:04:10,368 INFO L280 TraceCheckUtils]: 19: Hoare triple {6852#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret59, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~11;havoc isHighWaterSensorDry_~retValue_acc~11; {6852#true} is VALID [2020-07-28 19:04:10,368 INFO L280 TraceCheckUtils]: 20: Hoare triple {6852#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~11; {6852#true} is VALID [2020-07-28 19:04:10,369 INFO L280 TraceCheckUtils]: 21: Hoare triple {6852#true} isHighWaterLevel_#t~ret59 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret59 && isHighWaterLevel_#t~ret59 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret59;havoc isHighWaterLevel_#t~ret59; {6852#true} is VALID [2020-07-28 19:04:10,369 INFO L280 TraceCheckUtils]: 22: Hoare triple {6852#true} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {6852#true} is VALID [2020-07-28 19:04:10,369 INFO L280 TraceCheckUtils]: 23: Hoare triple {6852#true} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {6852#true} is VALID [2020-07-28 19:04:10,369 INFO L280 TraceCheckUtils]: 24: Hoare triple {6852#true} processEnvironment__wrappee__highWaterSensor_#t~ret39 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret39 && processEnvironment__wrappee__highWaterSensor_#t~ret39 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret39;havoc processEnvironment__wrappee__highWaterSensor_#t~ret39; {6852#true} is VALID [2020-07-28 19:04:10,370 INFO L280 TraceCheckUtils]: 25: Hoare triple {6852#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;~pumpRunning~0 := 1; {6852#true} is VALID [2020-07-28 19:04:10,370 INFO L280 TraceCheckUtils]: 26: Hoare triple {6852#true} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {6852#true} is VALID [2020-07-28 19:04:10,370 INFO L280 TraceCheckUtils]: 27: Hoare triple {6852#true} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {6852#true} is VALID [2020-07-28 19:04:10,371 INFO L280 TraceCheckUtils]: 28: Hoare triple {6852#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~9); {6852#true} is VALID [2020-07-28 19:04:10,371 INFO L280 TraceCheckUtils]: 29: Hoare triple {6852#true} assume !false; {6852#true} is VALID [2020-07-28 19:04:10,371 INFO L280 TraceCheckUtils]: 30: Hoare triple {6852#true} assume test_~splverifierCounter~0 < 4; {6852#true} is VALID [2020-07-28 19:04:10,372 INFO L280 TraceCheckUtils]: 31: Hoare triple {6852#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {6852#true} is VALID [2020-07-28 19:04:10,372 INFO L280 TraceCheckUtils]: 32: Hoare triple {6852#true} assume !(0 != test_~tmp~3); {6852#true} is VALID [2020-07-28 19:04:10,372 INFO L280 TraceCheckUtils]: 33: Hoare triple {6852#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {6852#true} is VALID [2020-07-28 19:04:10,373 INFO L280 TraceCheckUtils]: 34: Hoare triple {6852#true} assume !(0 != test_~tmp___0~0); {6852#true} is VALID [2020-07-28 19:04:10,373 INFO L280 TraceCheckUtils]: 35: Hoare triple {6852#true} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {6852#true} is VALID [2020-07-28 19:04:10,373 INFO L280 TraceCheckUtils]: 36: Hoare triple {6852#true} assume 0 != test_~tmp___2~0; {6852#true} is VALID [2020-07-28 19:04:10,373 INFO L280 TraceCheckUtils]: 37: Hoare triple {6852#true} assume 0 != ~pumpRunning~0; {6852#true} is VALID [2020-07-28 19:04:10,374 INFO L280 TraceCheckUtils]: 38: Hoare triple {6852#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {6852#true} is VALID [2020-07-28 19:04:10,374 INFO L280 TraceCheckUtils]: 39: Hoare triple {6852#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {6852#true} is VALID [2020-07-28 19:04:10,374 INFO L280 TraceCheckUtils]: 40: Hoare triple {6852#true} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret42, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~9;havoc isMethaneLevelCritical_~retValue_acc~9;isMethaneLevelCritical_~retValue_acc~9 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~9; {6852#true} is VALID [2020-07-28 19:04:10,375 INFO L280 TraceCheckUtils]: 41: Hoare triple {6852#true} isMethaneAlarm_#t~ret42 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret42 && isMethaneAlarm_#t~ret42 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret42;havoc isMethaneAlarm_#t~ret42;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {6852#true} is VALID [2020-07-28 19:04:10,375 INFO L280 TraceCheckUtils]: 42: Hoare triple {6852#true} processEnvironment_#t~ret41 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret41 && processEnvironment_#t~ret41 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret41;havoc processEnvironment_#t~ret41; {6852#true} is VALID [2020-07-28 19:04:10,376 INFO L280 TraceCheckUtils]: 43: Hoare triple {6852#true} assume 0 != processEnvironment_~tmp~6;~pumpRunning~0 := 0; {6854#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:10,376 INFO L280 TraceCheckUtils]: 44: Hoare triple {6854#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {6854#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:10,377 INFO L280 TraceCheckUtils]: 45: Hoare triple {6854#(= 0 ~pumpRunning~0)} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {6854#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:10,378 INFO L280 TraceCheckUtils]: 46: Hoare triple {6854#(= 0 ~pumpRunning~0)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {6855#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:04:10,379 INFO L280 TraceCheckUtils]: 47: Hoare triple {6855#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification4_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret73 && __utac_acc__Specification4_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret73;havoc __utac_acc__Specification4_spec__1_#t~ret73; {6856#(= 0 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp___0~3)} is VALID [2020-07-28 19:04:10,379 INFO L280 TraceCheckUtils]: 48: Hoare triple {6856#(= 0 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp___0~3)} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {6853#false} is VALID [2020-07-28 19:04:10,380 INFO L280 TraceCheckUtils]: 49: Hoare triple {6853#false} assume !false; {6853#false} is VALID [2020-07-28 19:04:10,382 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 19:04:10,382 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1491474042] [2020-07-28 19:04:10,382 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:10,383 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:04:10,383 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1457669515] [2020-07-28 19:04:10,383 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 50 [2020-07-28 19:04:10,383 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:10,384 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:04:10,440 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 42 edges. 42 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:10,440 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:04:10,440 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:10,440 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:04:10,441 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:04:10,441 INFO L87 Difference]: Start difference. First operand 182 states and 240 transitions. Second operand 5 states. [2020-07-28 19:04:12,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:12,577 INFO L93 Difference]: Finished difference Result 486 states and 647 transitions. [2020-07-28 19:04:12,577 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 19:04:12,578 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 50 [2020-07-28 19:04:12,578 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:12,579 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:12,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 314 transitions. [2020-07-28 19:04:12,581 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:12,585 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 314 transitions. [2020-07-28 19:04:12,586 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 314 transitions. [2020-07-28 19:04:12,992 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 314 edges. 314 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:13,008 INFO L225 Difference]: With dead ends: 486 [2020-07-28 19:04:13,008 INFO L226 Difference]: Without dead ends: 484 [2020-07-28 19:04:13,009 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:04:13,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 484 states. [2020-07-28 19:04:13,449 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 484 to 182. [2020-07-28 19:04:13,449 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:13,449 INFO L82 GeneralOperation]: Start isEquivalent. First operand 484 states. Second operand 182 states. [2020-07-28 19:04:13,450 INFO L74 IsIncluded]: Start isIncluded. First operand 484 states. Second operand 182 states. [2020-07-28 19:04:13,450 INFO L87 Difference]: Start difference. First operand 484 states. Second operand 182 states. [2020-07-28 19:04:13,469 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:13,470 INFO L93 Difference]: Finished difference Result 484 states and 645 transitions. [2020-07-28 19:04:13,470 INFO L276 IsEmpty]: Start isEmpty. Operand 484 states and 645 transitions. [2020-07-28 19:04:13,472 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:13,472 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:13,472 INFO L74 IsIncluded]: Start isIncluded. First operand 182 states. Second operand 484 states. [2020-07-28 19:04:13,472 INFO L87 Difference]: Start difference. First operand 182 states. Second operand 484 states. [2020-07-28 19:04:13,490 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:13,490 INFO L93 Difference]: Finished difference Result 484 states and 645 transitions. [2020-07-28 19:04:13,491 INFO L276 IsEmpty]: Start isEmpty. Operand 484 states and 645 transitions. [2020-07-28 19:04:13,492 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:13,492 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:13,492 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:13,492 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:13,493 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 182 states. [2020-07-28 19:04:13,496 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 182 states to 182 states and 239 transitions. [2020-07-28 19:04:13,496 INFO L78 Accepts]: Start accepts. Automaton has 182 states and 239 transitions. Word has length 50 [2020-07-28 19:04:13,497 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:13,497 INFO L479 AbstractCegarLoop]: Abstraction has 182 states and 239 transitions. [2020-07-28 19:04:13,497 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:04:13,497 INFO L276 IsEmpty]: Start isEmpty. Operand 182 states and 239 transitions. [2020-07-28 19:04:13,499 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 58 [2020-07-28 19:04:13,499 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:13,499 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:13,500 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:04:13,500 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:13,500 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:13,501 INFO L82 PathProgramCache]: Analyzing trace with hash 1017395360, now seen corresponding path program 1 times [2020-07-28 19:04:13,501 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:13,501 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1889118487] [2020-07-28 19:04:13,502 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:13,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:13,667 INFO L280 TraceCheckUtils]: 0: Hoare triple {8737#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(13);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(110, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 2 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 3 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string50.base, #t~string50.offset, 1);call write~init~int(80, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(117, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(109, #t~string50.base, 3 + #t~string50.offset, 1);call write~init~int(112, #t~string50.base, 4 + #t~string50.offset, 1);call write~init~int(58, #t~string50.base, 5 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 6 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string52.base, #t~string52.offset, 1);call write~init~int(110, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string54.base, #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string56.base, #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string58.base, #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 1 + #t~string58.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(13);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(77, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(101, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(116, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(104, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string67.base, #t~string67.offset, 1);call write~init~int(82, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(73, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(84, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(75, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {8739#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,668 INFO L280 TraceCheckUtils]: 1: Hoare triple {8739#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {8739#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,668 INFO L280 TraceCheckUtils]: 2: Hoare triple {8739#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {8739#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,669 INFO L280 TraceCheckUtils]: 3: Hoare triple {8739#(= 1 ~waterLevel~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {8739#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,670 INFO L280 TraceCheckUtils]: 4: Hoare triple {8739#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {8739#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,670 INFO L280 TraceCheckUtils]: 5: Hoare triple {8739#(= 1 ~waterLevel~0)} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {8739#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,671 INFO L280 TraceCheckUtils]: 6: Hoare triple {8739#(= 1 ~waterLevel~0)} assume !false; {8739#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,672 INFO L280 TraceCheckUtils]: 7: Hoare triple {8739#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {8739#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,674 INFO L280 TraceCheckUtils]: 8: Hoare triple {8739#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {8739#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,675 INFO L280 TraceCheckUtils]: 9: Hoare triple {8739#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~3; {8739#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,678 INFO L280 TraceCheckUtils]: 10: Hoare triple {8739#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,680 INFO L280 TraceCheckUtils]: 11: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,684 INFO L280 TraceCheckUtils]: 12: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,685 INFO L280 TraceCheckUtils]: 13: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,688 INFO L280 TraceCheckUtils]: 14: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,692 INFO L280 TraceCheckUtils]: 15: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,693 INFO L280 TraceCheckUtils]: 16: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,693 INFO L280 TraceCheckUtils]: 17: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,694 INFO L280 TraceCheckUtils]: 18: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,695 INFO L280 TraceCheckUtils]: 19: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret59, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~11;havoc isHighWaterSensorDry_~retValue_acc~11; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,696 INFO L280 TraceCheckUtils]: 20: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~11; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,696 INFO L280 TraceCheckUtils]: 21: Hoare triple {8740#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret59 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret59 && isHighWaterLevel_#t~ret59 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret59;havoc isHighWaterLevel_#t~ret59; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,697 INFO L280 TraceCheckUtils]: 22: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,698 INFO L280 TraceCheckUtils]: 23: Hoare triple {8740#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,698 INFO L280 TraceCheckUtils]: 24: Hoare triple {8740#(<= 2 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret39 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret39 && processEnvironment__wrappee__highWaterSensor_#t~ret39 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret39;havoc processEnvironment__wrappee__highWaterSensor_#t~ret39; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,699 INFO L280 TraceCheckUtils]: 25: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;~pumpRunning~0 := 1; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,699 INFO L280 TraceCheckUtils]: 26: Hoare triple {8740#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,700 INFO L280 TraceCheckUtils]: 27: Hoare triple {8740#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,701 INFO L280 TraceCheckUtils]: 28: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~9); {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,702 INFO L280 TraceCheckUtils]: 29: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume !false; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,702 INFO L280 TraceCheckUtils]: 30: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,703 INFO L280 TraceCheckUtils]: 31: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,704 INFO L280 TraceCheckUtils]: 32: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~3); {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,704 INFO L280 TraceCheckUtils]: 33: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,705 INFO L280 TraceCheckUtils]: 34: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,706 INFO L280 TraceCheckUtils]: 35: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,707 INFO L280 TraceCheckUtils]: 36: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,708 INFO L280 TraceCheckUtils]: 37: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,709 INFO L280 TraceCheckUtils]: 38: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,710 INFO L280 TraceCheckUtils]: 39: Hoare triple {8741#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,710 INFO L280 TraceCheckUtils]: 40: Hoare triple {8741#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret42, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~9;havoc isMethaneLevelCritical_~retValue_acc~9;isMethaneLevelCritical_~retValue_acc~9 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~9; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,720 INFO L280 TraceCheckUtils]: 41: Hoare triple {8741#(<= 1 ~waterLevel~0)} isMethaneAlarm_#t~ret42 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret42 && isMethaneAlarm_#t~ret42 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret42;havoc isMethaneAlarm_#t~ret42;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,721 INFO L280 TraceCheckUtils]: 42: Hoare triple {8741#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret41 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret41 && processEnvironment_#t~ret41 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret41;havoc processEnvironment_#t~ret41; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,721 INFO L280 TraceCheckUtils]: 43: Hoare triple {8741#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,722 INFO L280 TraceCheckUtils]: 44: Hoare triple {8741#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret60, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~12;havoc isLowWaterSensorDry_~retValue_acc~12;isLowWaterSensorDry_~retValue_acc~12 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~12; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,724 INFO L280 TraceCheckUtils]: 45: Hoare triple {8741#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret60 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret60 && isLowWaterLevel_#t~ret60 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret60;havoc isLowWaterLevel_#t~ret60; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,726 INFO L280 TraceCheckUtils]: 46: Hoare triple {8741#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,727 INFO L280 TraceCheckUtils]: 47: Hoare triple {8741#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,728 INFO L280 TraceCheckUtils]: 48: Hoare triple {8741#(<= 1 ~waterLevel~0)} processEnvironment__wrappee__lowWaterSensor_#t~ret40 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret40 && processEnvironment__wrappee__lowWaterSensor_#t~ret40 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~5 := processEnvironment__wrappee__lowWaterSensor_#t~ret40;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,729 INFO L280 TraceCheckUtils]: 49: Hoare triple {8741#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~5);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,729 INFO L280 TraceCheckUtils]: 50: Hoare triple {8741#(<= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:13,730 INFO L280 TraceCheckUtils]: 51: Hoare triple {8741#(<= 1 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {8742#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:04:13,731 INFO L280 TraceCheckUtils]: 52: Hoare triple {8742#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {8743#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~9)} is VALID [2020-07-28 19:04:13,732 INFO L280 TraceCheckUtils]: 53: Hoare triple {8743#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~9)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {8738#false} is VALID [2020-07-28 19:04:13,732 INFO L280 TraceCheckUtils]: 54: Hoare triple {8738#false} __utac_acc__Specification4_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret73 && __utac_acc__Specification4_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret73;havoc __utac_acc__Specification4_spec__1_#t~ret73; {8738#false} is VALID [2020-07-28 19:04:13,733 INFO L280 TraceCheckUtils]: 55: Hoare triple {8738#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {8738#false} is VALID [2020-07-28 19:04:13,733 INFO L280 TraceCheckUtils]: 56: Hoare triple {8738#false} assume !false; {8738#false} is VALID [2020-07-28 19:04:13,738 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2020-07-28 19:04:13,739 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1889118487] [2020-07-28 19:04:13,742 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1453334659] [2020-07-28 19:04:13,744 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:04:13,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:13,878 INFO L263 TraceCheckSpWp]: Trace formula consists of 418 conjuncts, 6 conjunts are in the unsatisfiable core [2020-07-28 19:04:13,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:13,914 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:04:14,129 INFO L280 TraceCheckUtils]: 0: Hoare triple {8737#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(13);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(110, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 2 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 3 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string50.base, #t~string50.offset, 1);call write~init~int(80, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(117, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(109, #t~string50.base, 3 + #t~string50.offset, 1);call write~init~int(112, #t~string50.base, 4 + #t~string50.offset, 1);call write~init~int(58, #t~string50.base, 5 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 6 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string52.base, #t~string52.offset, 1);call write~init~int(110, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string54.base, #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string56.base, #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string58.base, #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 1 + #t~string58.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(13);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(77, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(101, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(116, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(104, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string67.base, #t~string67.offset, 1);call write~init~int(82, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(73, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(84, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(75, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {8737#true} is VALID [2020-07-28 19:04:14,130 INFO L280 TraceCheckUtils]: 1: Hoare triple {8737#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {8737#true} is VALID [2020-07-28 19:04:14,130 INFO L280 TraceCheckUtils]: 2: Hoare triple {8737#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {8737#true} is VALID [2020-07-28 19:04:14,130 INFO L280 TraceCheckUtils]: 3: Hoare triple {8737#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {8737#true} is VALID [2020-07-28 19:04:14,131 INFO L280 TraceCheckUtils]: 4: Hoare triple {8737#true} assume 0 != main_~tmp~10; {8737#true} is VALID [2020-07-28 19:04:14,131 INFO L280 TraceCheckUtils]: 5: Hoare triple {8737#true} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {8737#true} is VALID [2020-07-28 19:04:14,132 INFO L280 TraceCheckUtils]: 6: Hoare triple {8737#true} assume !false; {8737#true} is VALID [2020-07-28 19:04:14,132 INFO L280 TraceCheckUtils]: 7: Hoare triple {8737#true} assume test_~splverifierCounter~0 < 4; {8737#true} is VALID [2020-07-28 19:04:14,132 INFO L280 TraceCheckUtils]: 8: Hoare triple {8737#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {8737#true} is VALID [2020-07-28 19:04:14,133 INFO L280 TraceCheckUtils]: 9: Hoare triple {8737#true} assume 0 != test_~tmp~3; {8737#true} is VALID [2020-07-28 19:04:14,133 INFO L280 TraceCheckUtils]: 10: Hoare triple {8737#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8737#true} is VALID [2020-07-28 19:04:14,133 INFO L280 TraceCheckUtils]: 11: Hoare triple {8737#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {8737#true} is VALID [2020-07-28 19:04:14,133 INFO L280 TraceCheckUtils]: 12: Hoare triple {8737#true} assume !(0 != test_~tmp___0~0); {8737#true} is VALID [2020-07-28 19:04:14,134 INFO L280 TraceCheckUtils]: 13: Hoare triple {8737#true} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {8737#true} is VALID [2020-07-28 19:04:14,134 INFO L280 TraceCheckUtils]: 14: Hoare triple {8737#true} assume 0 != test_~tmp___2~0; {8737#true} is VALID [2020-07-28 19:04:14,134 INFO L280 TraceCheckUtils]: 15: Hoare triple {8737#true} assume !(0 != ~pumpRunning~0); {8737#true} is VALID [2020-07-28 19:04:14,135 INFO L280 TraceCheckUtils]: 16: Hoare triple {8737#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {8737#true} is VALID [2020-07-28 19:04:14,135 INFO L280 TraceCheckUtils]: 17: Hoare triple {8737#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {8737#true} is VALID [2020-07-28 19:04:14,136 INFO L280 TraceCheckUtils]: 18: Hoare triple {8737#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {8737#true} is VALID [2020-07-28 19:04:14,136 INFO L280 TraceCheckUtils]: 19: Hoare triple {8737#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret59, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~11;havoc isHighWaterSensorDry_~retValue_acc~11; {8737#true} is VALID [2020-07-28 19:04:14,137 INFO L280 TraceCheckUtils]: 20: Hoare triple {8737#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~11; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,138 INFO L280 TraceCheckUtils]: 21: Hoare triple {8740#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret59 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret59 && isHighWaterLevel_#t~ret59 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret59;havoc isHighWaterLevel_#t~ret59; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,139 INFO L280 TraceCheckUtils]: 22: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,140 INFO L280 TraceCheckUtils]: 23: Hoare triple {8740#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,141 INFO L280 TraceCheckUtils]: 24: Hoare triple {8740#(<= 2 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret39 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret39 && processEnvironment__wrappee__highWaterSensor_#t~ret39 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret39;havoc processEnvironment__wrappee__highWaterSensor_#t~ret39; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,142 INFO L280 TraceCheckUtils]: 25: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;~pumpRunning~0 := 1; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,142 INFO L280 TraceCheckUtils]: 26: Hoare triple {8740#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,143 INFO L280 TraceCheckUtils]: 27: Hoare triple {8740#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,144 INFO L280 TraceCheckUtils]: 28: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~9); {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,145 INFO L280 TraceCheckUtils]: 29: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume !false; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,146 INFO L280 TraceCheckUtils]: 30: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,147 INFO L280 TraceCheckUtils]: 31: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,148 INFO L280 TraceCheckUtils]: 32: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~3); {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,149 INFO L280 TraceCheckUtils]: 33: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,150 INFO L280 TraceCheckUtils]: 34: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,150 INFO L280 TraceCheckUtils]: 35: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,151 INFO L280 TraceCheckUtils]: 36: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,152 INFO L280 TraceCheckUtils]: 37: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {8740#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,153 INFO L280 TraceCheckUtils]: 38: Hoare triple {8740#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,154 INFO L280 TraceCheckUtils]: 39: Hoare triple {8741#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,155 INFO L280 TraceCheckUtils]: 40: Hoare triple {8741#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret42, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~9;havoc isMethaneLevelCritical_~retValue_acc~9;isMethaneLevelCritical_~retValue_acc~9 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~9; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,155 INFO L280 TraceCheckUtils]: 41: Hoare triple {8741#(<= 1 ~waterLevel~0)} isMethaneAlarm_#t~ret42 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret42 && isMethaneAlarm_#t~ret42 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret42;havoc isMethaneAlarm_#t~ret42;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,156 INFO L280 TraceCheckUtils]: 42: Hoare triple {8741#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret41 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret41 && processEnvironment_#t~ret41 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret41;havoc processEnvironment_#t~ret41; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,157 INFO L280 TraceCheckUtils]: 43: Hoare triple {8741#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,157 INFO L280 TraceCheckUtils]: 44: Hoare triple {8741#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret60, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~12;havoc isLowWaterSensorDry_~retValue_acc~12;isLowWaterSensorDry_~retValue_acc~12 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~12; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,158 INFO L280 TraceCheckUtils]: 45: Hoare triple {8741#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret60 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret60 && isLowWaterLevel_#t~ret60 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret60;havoc isLowWaterLevel_#t~ret60; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,160 INFO L280 TraceCheckUtils]: 46: Hoare triple {8741#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,160 INFO L280 TraceCheckUtils]: 47: Hoare triple {8741#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,161 INFO L280 TraceCheckUtils]: 48: Hoare triple {8741#(<= 1 ~waterLevel~0)} processEnvironment__wrappee__lowWaterSensor_#t~ret40 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret40 && processEnvironment__wrappee__lowWaterSensor_#t~ret40 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~5 := processEnvironment__wrappee__lowWaterSensor_#t~ret40;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,162 INFO L280 TraceCheckUtils]: 49: Hoare triple {8741#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~5);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,163 INFO L280 TraceCheckUtils]: 50: Hoare triple {8741#(<= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {8741#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:14,163 INFO L280 TraceCheckUtils]: 51: Hoare triple {8741#(<= 1 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {8742#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:04:14,164 INFO L280 TraceCheckUtils]: 52: Hoare triple {8742#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {8743#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~9)} is VALID [2020-07-28 19:04:14,165 INFO L280 TraceCheckUtils]: 53: Hoare triple {8743#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~9)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {8738#false} is VALID [2020-07-28 19:04:14,165 INFO L280 TraceCheckUtils]: 54: Hoare triple {8738#false} __utac_acc__Specification4_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret73 && __utac_acc__Specification4_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret73;havoc __utac_acc__Specification4_spec__1_#t~ret73; {8738#false} is VALID [2020-07-28 19:04:14,166 INFO L280 TraceCheckUtils]: 55: Hoare triple {8738#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {8738#false} is VALID [2020-07-28 19:04:14,166 INFO L280 TraceCheckUtils]: 56: Hoare triple {8738#false} assume !false; {8738#false} is VALID [2020-07-28 19:04:14,172 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:14,172 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:04:14,172 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6] total 7 [2020-07-28 19:04:14,173 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1460940113] [2020-07-28 19:04:14,173 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 57 [2020-07-28 19:04:14,174 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:14,174 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:04:14,277 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:14,277 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:04:14,277 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:14,278 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:04:14,278 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:04:14,278 INFO L87 Difference]: Start difference. First operand 182 states and 239 transitions. Second operand 7 states. [2020-07-28 19:04:16,759 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:16,760 INFO L93 Difference]: Finished difference Result 560 states and 747 transitions. [2020-07-28 19:04:16,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2020-07-28 19:04:16,760 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 57 [2020-07-28 19:04:16,761 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:16,761 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:04:16,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 451 transitions. [2020-07-28 19:04:16,765 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:04:16,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 451 transitions. [2020-07-28 19:04:16,794 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states and 451 transitions. [2020-07-28 19:04:17,380 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 451 edges. 451 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:17,393 INFO L225 Difference]: With dead ends: 560 [2020-07-28 19:04:17,394 INFO L226 Difference]: Without dead ends: 409 [2020-07-28 19:04:17,395 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 73 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=60, Invalid=122, Unknown=0, NotChecked=0, Total=182 [2020-07-28 19:04:17,396 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 409 states. [2020-07-28 19:04:17,991 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 409 to 224. [2020-07-28 19:04:17,991 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:17,992 INFO L82 GeneralOperation]: Start isEquivalent. First operand 409 states. Second operand 224 states. [2020-07-28 19:04:17,992 INFO L74 IsIncluded]: Start isIncluded. First operand 409 states. Second operand 224 states. [2020-07-28 19:04:17,992 INFO L87 Difference]: Start difference. First operand 409 states. Second operand 224 states. [2020-07-28 19:04:18,003 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:18,003 INFO L93 Difference]: Finished difference Result 409 states and 530 transitions. [2020-07-28 19:04:18,003 INFO L276 IsEmpty]: Start isEmpty. Operand 409 states and 530 transitions. [2020-07-28 19:04:18,004 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:18,005 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:18,005 INFO L74 IsIncluded]: Start isIncluded. First operand 224 states. Second operand 409 states. [2020-07-28 19:04:18,005 INFO L87 Difference]: Start difference. First operand 224 states. Second operand 409 states. [2020-07-28 19:04:18,017 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:18,018 INFO L93 Difference]: Finished difference Result 409 states and 530 transitions. [2020-07-28 19:04:18,018 INFO L276 IsEmpty]: Start isEmpty. Operand 409 states and 530 transitions. [2020-07-28 19:04:18,019 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:18,020 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:18,020 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:18,020 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:18,020 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 224 states. [2020-07-28 19:04:18,025 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 224 states to 224 states and 293 transitions. [2020-07-28 19:04:18,026 INFO L78 Accepts]: Start accepts. Automaton has 224 states and 293 transitions. Word has length 57 [2020-07-28 19:04:18,026 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:18,026 INFO L479 AbstractCegarLoop]: Abstraction has 224 states and 293 transitions. [2020-07-28 19:04:18,027 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:04:18,027 INFO L276 IsEmpty]: Start isEmpty. Operand 224 states and 293 transitions. [2020-07-28 19:04:18,028 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2020-07-28 19:04:18,028 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:18,028 INFO L422 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:18,243 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable8 [2020-07-28 19:04:18,244 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:18,244 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:18,244 INFO L82 PathProgramCache]: Analyzing trace with hash 1837292485, now seen corresponding path program 2 times [2020-07-28 19:04:18,244 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:18,245 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [802003900] [2020-07-28 19:04:18,245 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:18,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:18,464 INFO L280 TraceCheckUtils]: 0: Hoare triple {10799#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(13);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(110, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 2 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 3 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string50.base, #t~string50.offset, 1);call write~init~int(80, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(117, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(109, #t~string50.base, 3 + #t~string50.offset, 1);call write~init~int(112, #t~string50.base, 4 + #t~string50.offset, 1);call write~init~int(58, #t~string50.base, 5 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 6 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string52.base, #t~string52.offset, 1);call write~init~int(110, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string54.base, #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string56.base, #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string58.base, #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 1 + #t~string58.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(13);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(77, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(101, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(116, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(104, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string67.base, #t~string67.offset, 1);call write~init~int(82, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(73, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(84, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(75, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {10801#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,465 INFO L280 TraceCheckUtils]: 1: Hoare triple {10801#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {10801#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,466 INFO L280 TraceCheckUtils]: 2: Hoare triple {10801#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {10801#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,467 INFO L280 TraceCheckUtils]: 3: Hoare triple {10801#(= 1 ~waterLevel~0)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {10801#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,467 INFO L280 TraceCheckUtils]: 4: Hoare triple {10801#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~10; {10801#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,468 INFO L280 TraceCheckUtils]: 5: Hoare triple {10801#(= 1 ~waterLevel~0)} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {10801#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,469 INFO L280 TraceCheckUtils]: 6: Hoare triple {10801#(= 1 ~waterLevel~0)} assume !false; {10801#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,469 INFO L280 TraceCheckUtils]: 7: Hoare triple {10801#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {10801#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,470 INFO L280 TraceCheckUtils]: 8: Hoare triple {10801#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {10801#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,471 INFO L280 TraceCheckUtils]: 9: Hoare triple {10801#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~3; {10801#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,472 INFO L280 TraceCheckUtils]: 10: Hoare triple {10801#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,472 INFO L280 TraceCheckUtils]: 11: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,473 INFO L280 TraceCheckUtils]: 12: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,474 INFO L280 TraceCheckUtils]: 13: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,474 INFO L280 TraceCheckUtils]: 14: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,475 INFO L280 TraceCheckUtils]: 15: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,476 INFO L280 TraceCheckUtils]: 16: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,476 INFO L280 TraceCheckUtils]: 17: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,477 INFO L280 TraceCheckUtils]: 18: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,478 INFO L280 TraceCheckUtils]: 19: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret59, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~11;havoc isHighWaterSensorDry_~retValue_acc~11; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,479 INFO L280 TraceCheckUtils]: 20: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~11; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,479 INFO L280 TraceCheckUtils]: 21: Hoare triple {10802#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret59 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret59 && isHighWaterLevel_#t~ret59 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret59;havoc isHighWaterLevel_#t~ret59; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,483 INFO L280 TraceCheckUtils]: 22: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,484 INFO L280 TraceCheckUtils]: 23: Hoare triple {10802#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,484 INFO L280 TraceCheckUtils]: 24: Hoare triple {10802#(<= 2 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret39 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret39 && processEnvironment__wrappee__highWaterSensor_#t~ret39 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret39;havoc processEnvironment__wrappee__highWaterSensor_#t~ret39; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,485 INFO L280 TraceCheckUtils]: 25: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;~pumpRunning~0 := 1; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,486 INFO L280 TraceCheckUtils]: 26: Hoare triple {10802#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,487 INFO L280 TraceCheckUtils]: 27: Hoare triple {10802#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,487 INFO L280 TraceCheckUtils]: 28: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~9); {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,491 INFO L280 TraceCheckUtils]: 29: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume !false; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,492 INFO L280 TraceCheckUtils]: 30: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,492 INFO L280 TraceCheckUtils]: 31: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,493 INFO L280 TraceCheckUtils]: 32: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~3); {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,494 INFO L280 TraceCheckUtils]: 33: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,495 INFO L280 TraceCheckUtils]: 34: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,495 INFO L280 TraceCheckUtils]: 35: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,496 INFO L280 TraceCheckUtils]: 36: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,496 INFO L280 TraceCheckUtils]: 37: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {10802#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,497 INFO L280 TraceCheckUtils]: 38: Hoare triple {10802#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {10803#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,498 INFO L280 TraceCheckUtils]: 39: Hoare triple {10803#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {10803#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,501 INFO L280 TraceCheckUtils]: 40: Hoare triple {10803#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret42, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~9;havoc isMethaneLevelCritical_~retValue_acc~9;isMethaneLevelCritical_~retValue_acc~9 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~9; {10803#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,504 INFO L280 TraceCheckUtils]: 41: Hoare triple {10803#(<= 1 ~waterLevel~0)} isMethaneAlarm_#t~ret42 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret42 && isMethaneAlarm_#t~ret42 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret42;havoc isMethaneAlarm_#t~ret42;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {10803#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,506 INFO L280 TraceCheckUtils]: 42: Hoare triple {10803#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret41 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret41 && processEnvironment_#t~ret41 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret41;havoc processEnvironment_#t~ret41; {10803#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,506 INFO L280 TraceCheckUtils]: 43: Hoare triple {10803#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {10803#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,507 INFO L280 TraceCheckUtils]: 44: Hoare triple {10803#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret60, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~12;havoc isLowWaterSensorDry_~retValue_acc~12;isLowWaterSensorDry_~retValue_acc~12 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~12; {10804#(= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)} is VALID [2020-07-28 19:04:18,508 INFO L280 TraceCheckUtils]: 45: Hoare triple {10804#(= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|)} isLowWaterLevel_#t~ret60 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret60 && isLowWaterLevel_#t~ret60 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret60;havoc isLowWaterLevel_#t~ret60; {10805#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp~8)} is VALID [2020-07-28 19:04:18,509 INFO L280 TraceCheckUtils]: 46: Hoare triple {10805#(= 0 ULTIMATE.start_isLowWaterLevel_~tmp~8)} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {10800#false} is VALID [2020-07-28 19:04:18,509 INFO L280 TraceCheckUtils]: 47: Hoare triple {10800#false} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {10800#false} is VALID [2020-07-28 19:04:18,509 INFO L280 TraceCheckUtils]: 48: Hoare triple {10800#false} processEnvironment__wrappee__lowWaterSensor_#t~ret40 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret40 && processEnvironment__wrappee__lowWaterSensor_#t~ret40 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~5 := processEnvironment__wrappee__lowWaterSensor_#t~ret40;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40; {10800#false} is VALID [2020-07-28 19:04:18,510 INFO L280 TraceCheckUtils]: 49: Hoare triple {10800#false} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~5);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {10800#false} is VALID [2020-07-28 19:04:18,510 INFO L280 TraceCheckUtils]: 50: Hoare triple {10800#false} assume !(0 == ~pumpRunning~0); {10800#false} is VALID [2020-07-28 19:04:18,510 INFO L280 TraceCheckUtils]: 51: Hoare triple {10800#false} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {10800#false} is VALID [2020-07-28 19:04:18,510 INFO L280 TraceCheckUtils]: 52: Hoare triple {10800#false} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {10800#false} is VALID [2020-07-28 19:04:18,510 INFO L280 TraceCheckUtils]: 53: Hoare triple {10800#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~9); {10800#false} is VALID [2020-07-28 19:04:18,510 INFO L280 TraceCheckUtils]: 54: Hoare triple {10800#false} assume !false; {10800#false} is VALID [2020-07-28 19:04:18,511 INFO L280 TraceCheckUtils]: 55: Hoare triple {10800#false} assume test_~splverifierCounter~0 < 4; {10800#false} is VALID [2020-07-28 19:04:18,511 INFO L280 TraceCheckUtils]: 56: Hoare triple {10800#false} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {10800#false} is VALID [2020-07-28 19:04:18,511 INFO L280 TraceCheckUtils]: 57: Hoare triple {10800#false} assume !(0 != test_~tmp~3); {10800#false} is VALID [2020-07-28 19:04:18,511 INFO L280 TraceCheckUtils]: 58: Hoare triple {10800#false} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {10800#false} is VALID [2020-07-28 19:04:18,512 INFO L280 TraceCheckUtils]: 59: Hoare triple {10800#false} assume !(0 != test_~tmp___0~0); {10800#false} is VALID [2020-07-28 19:04:18,512 INFO L280 TraceCheckUtils]: 60: Hoare triple {10800#false} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {10800#false} is VALID [2020-07-28 19:04:18,512 INFO L280 TraceCheckUtils]: 61: Hoare triple {10800#false} assume 0 != test_~tmp___2~0; {10800#false} is VALID [2020-07-28 19:04:18,512 INFO L280 TraceCheckUtils]: 62: Hoare triple {10800#false} assume 0 != ~pumpRunning~0; {10800#false} is VALID [2020-07-28 19:04:18,512 INFO L280 TraceCheckUtils]: 63: Hoare triple {10800#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {10800#false} is VALID [2020-07-28 19:04:18,513 INFO L280 TraceCheckUtils]: 64: Hoare triple {10800#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {10800#false} is VALID [2020-07-28 19:04:18,513 INFO L280 TraceCheckUtils]: 65: Hoare triple {10800#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret42, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~9;havoc isMethaneLevelCritical_~retValue_acc~9;isMethaneLevelCritical_~retValue_acc~9 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~9; {10800#false} is VALID [2020-07-28 19:04:18,513 INFO L280 TraceCheckUtils]: 66: Hoare triple {10800#false} isMethaneAlarm_#t~ret42 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret42 && isMethaneAlarm_#t~ret42 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret42;havoc isMethaneAlarm_#t~ret42;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {10800#false} is VALID [2020-07-28 19:04:18,513 INFO L280 TraceCheckUtils]: 67: Hoare triple {10800#false} processEnvironment_#t~ret41 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret41 && processEnvironment_#t~ret41 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret41;havoc processEnvironment_#t~ret41; {10800#false} is VALID [2020-07-28 19:04:18,513 INFO L280 TraceCheckUtils]: 68: Hoare triple {10800#false} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {10800#false} is VALID [2020-07-28 19:04:18,513 INFO L280 TraceCheckUtils]: 69: Hoare triple {10800#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret60, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~12;havoc isLowWaterSensorDry_~retValue_acc~12;isLowWaterSensorDry_~retValue_acc~12 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~12; {10800#false} is VALID [2020-07-28 19:04:18,514 INFO L280 TraceCheckUtils]: 70: Hoare triple {10800#false} isLowWaterLevel_#t~ret60 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret60 && isLowWaterLevel_#t~ret60 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret60;havoc isLowWaterLevel_#t~ret60; {10800#false} is VALID [2020-07-28 19:04:18,514 INFO L280 TraceCheckUtils]: 71: Hoare triple {10800#false} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {10800#false} is VALID [2020-07-28 19:04:18,514 INFO L280 TraceCheckUtils]: 72: Hoare triple {10800#false} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {10800#false} is VALID [2020-07-28 19:04:18,515 INFO L280 TraceCheckUtils]: 73: Hoare triple {10800#false} processEnvironment__wrappee__lowWaterSensor_#t~ret40 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret40 && processEnvironment__wrappee__lowWaterSensor_#t~ret40 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~5 := processEnvironment__wrappee__lowWaterSensor_#t~ret40;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40; {10800#false} is VALID [2020-07-28 19:04:18,515 INFO L280 TraceCheckUtils]: 74: Hoare triple {10800#false} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~5);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {10800#false} is VALID [2020-07-28 19:04:18,515 INFO L280 TraceCheckUtils]: 75: Hoare triple {10800#false} assume !(0 == ~pumpRunning~0); {10800#false} is VALID [2020-07-28 19:04:18,515 INFO L280 TraceCheckUtils]: 76: Hoare triple {10800#false} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {10800#false} is VALID [2020-07-28 19:04:18,516 INFO L280 TraceCheckUtils]: 77: Hoare triple {10800#false} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {10800#false} is VALID [2020-07-28 19:04:18,516 INFO L280 TraceCheckUtils]: 78: Hoare triple {10800#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {10800#false} is VALID [2020-07-28 19:04:18,516 INFO L280 TraceCheckUtils]: 79: Hoare triple {10800#false} __utac_acc__Specification4_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret73 && __utac_acc__Specification4_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret73;havoc __utac_acc__Specification4_spec__1_#t~ret73; {10800#false} is VALID [2020-07-28 19:04:18,517 INFO L280 TraceCheckUtils]: 80: Hoare triple {10800#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {10800#false} is VALID [2020-07-28 19:04:18,517 INFO L280 TraceCheckUtils]: 81: Hoare triple {10800#false} assume !false; {10800#false} is VALID [2020-07-28 19:04:18,525 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 35 proven. 6 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2020-07-28 19:04:18,526 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [802003900] [2020-07-28 19:04:18,526 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2005216053] [2020-07-28 19:04:18,526 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:04:18,695 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2020-07-28 19:04:18,695 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2020-07-28 19:04:18,698 INFO L263 TraceCheckSpWp]: Trace formula consists of 491 conjuncts, 8 conjunts are in the unsatisfiable core [2020-07-28 19:04:18,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:18,736 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:04:18,844 INFO L342 QuantifierPusher]: Applying distributivity to a CONJUNCTION[2, 2, 2, 1] term [2020-07-28 19:04:18,845 INFO L523 QuantifierPusher]: Distributing 2 conjuncts over 2 disjuncts [2020-07-28 19:04:18,915 INFO L280 TraceCheckUtils]: 0: Hoare triple {10799#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(13);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(110, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 2 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 3 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string50.base, #t~string50.offset, 1);call write~init~int(80, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(117, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(109, #t~string50.base, 3 + #t~string50.offset, 1);call write~init~int(112, #t~string50.base, 4 + #t~string50.offset, 1);call write~init~int(58, #t~string50.base, 5 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 6 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string52.base, #t~string52.offset, 1);call write~init~int(110, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string54.base, #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string56.base, #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string58.base, #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 1 + #t~string58.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(13);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(77, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(101, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(116, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(104, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string67.base, #t~string67.offset, 1);call write~init~int(82, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(73, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(84, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(75, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {10799#true} is VALID [2020-07-28 19:04:18,915 INFO L280 TraceCheckUtils]: 1: Hoare triple {10799#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {10799#true} is VALID [2020-07-28 19:04:18,915 INFO L280 TraceCheckUtils]: 2: Hoare triple {10799#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {10799#true} is VALID [2020-07-28 19:04:18,916 INFO L280 TraceCheckUtils]: 3: Hoare triple {10799#true} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {10799#true} is VALID [2020-07-28 19:04:18,916 INFO L280 TraceCheckUtils]: 4: Hoare triple {10799#true} assume 0 != main_~tmp~10; {10799#true} is VALID [2020-07-28 19:04:18,916 INFO L280 TraceCheckUtils]: 5: Hoare triple {10799#true} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {10799#true} is VALID [2020-07-28 19:04:18,916 INFO L280 TraceCheckUtils]: 6: Hoare triple {10799#true} assume !false; {10799#true} is VALID [2020-07-28 19:04:18,917 INFO L280 TraceCheckUtils]: 7: Hoare triple {10799#true} assume test_~splverifierCounter~0 < 4; {10799#true} is VALID [2020-07-28 19:04:18,917 INFO L280 TraceCheckUtils]: 8: Hoare triple {10799#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {10799#true} is VALID [2020-07-28 19:04:18,917 INFO L280 TraceCheckUtils]: 9: Hoare triple {10799#true} assume 0 != test_~tmp~3; {10799#true} is VALID [2020-07-28 19:04:18,917 INFO L280 TraceCheckUtils]: 10: Hoare triple {10799#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {10799#true} is VALID [2020-07-28 19:04:18,918 INFO L280 TraceCheckUtils]: 11: Hoare triple {10799#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {10799#true} is VALID [2020-07-28 19:04:18,918 INFO L280 TraceCheckUtils]: 12: Hoare triple {10799#true} assume !(0 != test_~tmp___0~0); {10799#true} is VALID [2020-07-28 19:04:18,918 INFO L280 TraceCheckUtils]: 13: Hoare triple {10799#true} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {10799#true} is VALID [2020-07-28 19:04:18,918 INFO L280 TraceCheckUtils]: 14: Hoare triple {10799#true} assume 0 != test_~tmp___2~0; {10799#true} is VALID [2020-07-28 19:04:18,919 INFO L280 TraceCheckUtils]: 15: Hoare triple {10799#true} assume !(0 != ~pumpRunning~0); {10799#true} is VALID [2020-07-28 19:04:18,919 INFO L280 TraceCheckUtils]: 16: Hoare triple {10799#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {10799#true} is VALID [2020-07-28 19:04:18,919 INFO L280 TraceCheckUtils]: 17: Hoare triple {10799#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {10799#true} is VALID [2020-07-28 19:04:18,919 INFO L280 TraceCheckUtils]: 18: Hoare triple {10799#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {10799#true} is VALID [2020-07-28 19:04:18,919 INFO L280 TraceCheckUtils]: 19: Hoare triple {10799#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret59, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~11;havoc isHighWaterSensorDry_~retValue_acc~11; {10799#true} is VALID [2020-07-28 19:04:18,920 INFO L280 TraceCheckUtils]: 20: Hoare triple {10799#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~11; {10799#true} is VALID [2020-07-28 19:04:18,920 INFO L280 TraceCheckUtils]: 21: Hoare triple {10799#true} isHighWaterLevel_#t~ret59 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret59 && isHighWaterLevel_#t~ret59 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret59;havoc isHighWaterLevel_#t~ret59; {10799#true} is VALID [2020-07-28 19:04:18,920 INFO L280 TraceCheckUtils]: 22: Hoare triple {10799#true} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {10799#true} is VALID [2020-07-28 19:04:18,920 INFO L280 TraceCheckUtils]: 23: Hoare triple {10799#true} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {10799#true} is VALID [2020-07-28 19:04:18,920 INFO L280 TraceCheckUtils]: 24: Hoare triple {10799#true} processEnvironment__wrappee__highWaterSensor_#t~ret39 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret39 && processEnvironment__wrappee__highWaterSensor_#t~ret39 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret39;havoc processEnvironment__wrappee__highWaterSensor_#t~ret39; {10799#true} is VALID [2020-07-28 19:04:18,920 INFO L280 TraceCheckUtils]: 25: Hoare triple {10799#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;~pumpRunning~0 := 1; {10799#true} is VALID [2020-07-28 19:04:18,920 INFO L280 TraceCheckUtils]: 26: Hoare triple {10799#true} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {10799#true} is VALID [2020-07-28 19:04:18,921 INFO L280 TraceCheckUtils]: 27: Hoare triple {10799#true} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {10799#true} is VALID [2020-07-28 19:04:18,921 INFO L280 TraceCheckUtils]: 28: Hoare triple {10799#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~9); {10799#true} is VALID [2020-07-28 19:04:18,921 INFO L280 TraceCheckUtils]: 29: Hoare triple {10799#true} assume !false; {10799#true} is VALID [2020-07-28 19:04:18,921 INFO L280 TraceCheckUtils]: 30: Hoare triple {10799#true} assume test_~splverifierCounter~0 < 4; {10799#true} is VALID [2020-07-28 19:04:18,921 INFO L280 TraceCheckUtils]: 31: Hoare triple {10799#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {10799#true} is VALID [2020-07-28 19:04:18,922 INFO L280 TraceCheckUtils]: 32: Hoare triple {10799#true} assume !(0 != test_~tmp~3); {10799#true} is VALID [2020-07-28 19:04:18,922 INFO L280 TraceCheckUtils]: 33: Hoare triple {10799#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {10799#true} is VALID [2020-07-28 19:04:18,922 INFO L280 TraceCheckUtils]: 34: Hoare triple {10799#true} assume !(0 != test_~tmp___0~0); {10799#true} is VALID [2020-07-28 19:04:18,922 INFO L280 TraceCheckUtils]: 35: Hoare triple {10799#true} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {10799#true} is VALID [2020-07-28 19:04:18,922 INFO L280 TraceCheckUtils]: 36: Hoare triple {10799#true} assume 0 != test_~tmp___2~0; {10799#true} is VALID [2020-07-28 19:04:18,923 INFO L280 TraceCheckUtils]: 37: Hoare triple {10799#true} assume 0 != ~pumpRunning~0; {10799#true} is VALID [2020-07-28 19:04:18,923 INFO L280 TraceCheckUtils]: 38: Hoare triple {10799#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {10799#true} is VALID [2020-07-28 19:04:18,923 INFO L280 TraceCheckUtils]: 39: Hoare triple {10799#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {10799#true} is VALID [2020-07-28 19:04:18,923 INFO L280 TraceCheckUtils]: 40: Hoare triple {10799#true} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret42, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~9;havoc isMethaneLevelCritical_~retValue_acc~9;isMethaneLevelCritical_~retValue_acc~9 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~9; {10799#true} is VALID [2020-07-28 19:04:18,923 INFO L280 TraceCheckUtils]: 41: Hoare triple {10799#true} isMethaneAlarm_#t~ret42 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret42 && isMethaneAlarm_#t~ret42 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret42;havoc isMethaneAlarm_#t~ret42;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {10799#true} is VALID [2020-07-28 19:04:18,924 INFO L280 TraceCheckUtils]: 42: Hoare triple {10799#true} processEnvironment_#t~ret41 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret41 && processEnvironment_#t~ret41 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret41;havoc processEnvironment_#t~ret41; {10799#true} is VALID [2020-07-28 19:04:18,924 INFO L280 TraceCheckUtils]: 43: Hoare triple {10799#true} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {10799#true} is VALID [2020-07-28 19:04:18,931 INFO L280 TraceCheckUtils]: 44: Hoare triple {10799#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret60, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~12;havoc isLowWaterSensorDry_~retValue_acc~12;isLowWaterSensorDry_~retValue_acc~12 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~12; {10941#(or (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (not (= 0 ~waterLevel~0))) (and (= 1 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 0 ~waterLevel~0)))} is VALID [2020-07-28 19:04:18,932 INFO L280 TraceCheckUtils]: 45: Hoare triple {10941#(or (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (not (= 0 ~waterLevel~0))) (and (= 1 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 0 ~waterLevel~0)))} isLowWaterLevel_#t~ret60 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret60 && isLowWaterLevel_#t~ret60 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret60;havoc isLowWaterLevel_#t~ret60; {10945#(or (and (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~8) (not (= 0 ~waterLevel~0))) (and (= 1 ULTIMATE.start_isLowWaterLevel_~tmp~8) (= 0 ~waterLevel~0)))} is VALID [2020-07-28 19:04:18,933 INFO L280 TraceCheckUtils]: 46: Hoare triple {10945#(or (and (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~8) (not (= 0 ~waterLevel~0))) (and (= 1 ULTIMATE.start_isLowWaterLevel_~tmp~8) (= 0 ~waterLevel~0)))} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,934 INFO L280 TraceCheckUtils]: 47: Hoare triple {10949#(= 0 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,934 INFO L280 TraceCheckUtils]: 48: Hoare triple {10949#(= 0 ~waterLevel~0)} processEnvironment__wrappee__lowWaterSensor_#t~ret40 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret40 && processEnvironment__wrappee__lowWaterSensor_#t~ret40 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~5 := processEnvironment__wrappee__lowWaterSensor_#t~ret40;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40; {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,935 INFO L280 TraceCheckUtils]: 49: Hoare triple {10949#(= 0 ~waterLevel~0)} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~5);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,936 INFO L280 TraceCheckUtils]: 50: Hoare triple {10949#(= 0 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,936 INFO L280 TraceCheckUtils]: 51: Hoare triple {10949#(= 0 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,937 INFO L280 TraceCheckUtils]: 52: Hoare triple {10949#(= 0 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,937 INFO L280 TraceCheckUtils]: 53: Hoare triple {10949#(= 0 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~9); {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,938 INFO L280 TraceCheckUtils]: 54: Hoare triple {10949#(= 0 ~waterLevel~0)} assume !false; {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,939 INFO L280 TraceCheckUtils]: 55: Hoare triple {10949#(= 0 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,939 INFO L280 TraceCheckUtils]: 56: Hoare triple {10949#(= 0 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,940 INFO L280 TraceCheckUtils]: 57: Hoare triple {10949#(= 0 ~waterLevel~0)} assume !(0 != test_~tmp~3); {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,941 INFO L280 TraceCheckUtils]: 58: Hoare triple {10949#(= 0 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,941 INFO L280 TraceCheckUtils]: 59: Hoare triple {10949#(= 0 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,942 INFO L280 TraceCheckUtils]: 60: Hoare triple {10949#(= 0 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,942 INFO L280 TraceCheckUtils]: 61: Hoare triple {10949#(= 0 ~waterLevel~0)} assume 0 != test_~tmp___2~0; {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,943 INFO L280 TraceCheckUtils]: 62: Hoare triple {10949#(= 0 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {10949#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:18,944 INFO L280 TraceCheckUtils]: 63: Hoare triple {10949#(= 0 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {10800#false} is VALID [2020-07-28 19:04:18,944 INFO L280 TraceCheckUtils]: 64: Hoare triple {10800#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {10800#false} is VALID [2020-07-28 19:04:18,944 INFO L280 TraceCheckUtils]: 65: Hoare triple {10800#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret42, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~9;havoc isMethaneLevelCritical_~retValue_acc~9;isMethaneLevelCritical_~retValue_acc~9 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~9; {10800#false} is VALID [2020-07-28 19:04:18,944 INFO L280 TraceCheckUtils]: 66: Hoare triple {10800#false} isMethaneAlarm_#t~ret42 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret42 && isMethaneAlarm_#t~ret42 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret42;havoc isMethaneAlarm_#t~ret42;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {10800#false} is VALID [2020-07-28 19:04:18,945 INFO L280 TraceCheckUtils]: 67: Hoare triple {10800#false} processEnvironment_#t~ret41 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret41 && processEnvironment_#t~ret41 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret41;havoc processEnvironment_#t~ret41; {10800#false} is VALID [2020-07-28 19:04:18,945 INFO L280 TraceCheckUtils]: 68: Hoare triple {10800#false} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {10800#false} is VALID [2020-07-28 19:04:18,945 INFO L280 TraceCheckUtils]: 69: Hoare triple {10800#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret60, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~12;havoc isLowWaterSensorDry_~retValue_acc~12;isLowWaterSensorDry_~retValue_acc~12 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~12; {10800#false} is VALID [2020-07-28 19:04:18,945 INFO L280 TraceCheckUtils]: 70: Hoare triple {10800#false} isLowWaterLevel_#t~ret60 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret60 && isLowWaterLevel_#t~ret60 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret60;havoc isLowWaterLevel_#t~ret60; {10800#false} is VALID [2020-07-28 19:04:18,946 INFO L280 TraceCheckUtils]: 71: Hoare triple {10800#false} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {10800#false} is VALID [2020-07-28 19:04:18,946 INFO L280 TraceCheckUtils]: 72: Hoare triple {10800#false} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {10800#false} is VALID [2020-07-28 19:04:18,946 INFO L280 TraceCheckUtils]: 73: Hoare triple {10800#false} processEnvironment__wrappee__lowWaterSensor_#t~ret40 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret40 && processEnvironment__wrappee__lowWaterSensor_#t~ret40 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~5 := processEnvironment__wrappee__lowWaterSensor_#t~ret40;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40; {10800#false} is VALID [2020-07-28 19:04:18,946 INFO L280 TraceCheckUtils]: 74: Hoare triple {10800#false} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~5);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {10800#false} is VALID [2020-07-28 19:04:18,946 INFO L280 TraceCheckUtils]: 75: Hoare triple {10800#false} assume !(0 == ~pumpRunning~0); {10800#false} is VALID [2020-07-28 19:04:18,946 INFO L280 TraceCheckUtils]: 76: Hoare triple {10800#false} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {10800#false} is VALID [2020-07-28 19:04:18,947 INFO L280 TraceCheckUtils]: 77: Hoare triple {10800#false} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {10800#false} is VALID [2020-07-28 19:04:18,947 INFO L280 TraceCheckUtils]: 78: Hoare triple {10800#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {10800#false} is VALID [2020-07-28 19:04:18,947 INFO L280 TraceCheckUtils]: 79: Hoare triple {10800#false} __utac_acc__Specification4_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret73 && __utac_acc__Specification4_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret73;havoc __utac_acc__Specification4_spec__1_#t~ret73; {10800#false} is VALID [2020-07-28 19:04:18,950 INFO L280 TraceCheckUtils]: 80: Hoare triple {10800#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {10800#false} is VALID [2020-07-28 19:04:18,951 INFO L280 TraceCheckUtils]: 81: Hoare triple {10800#false} assume !false; {10800#false} is VALID [2020-07-28 19:04:18,956 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 19:04:18,956 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2020-07-28 19:04:18,956 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6] total 10 [2020-07-28 19:04:18,957 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [866379544] [2020-07-28 19:04:18,957 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 82 [2020-07-28 19:04:18,958 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:18,958 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:04:19,052 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:19,052 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:04:19,052 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:19,053 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:04:19,053 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2020-07-28 19:04:19,053 INFO L87 Difference]: Start difference. First operand 224 states and 293 transitions. Second operand 5 states. [2020-07-28 19:04:22,057 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:22,057 INFO L93 Difference]: Finished difference Result 730 states and 960 transitions. [2020-07-28 19:04:22,058 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:04:22,058 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 82 [2020-07-28 19:04:22,059 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:22,059 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:22,061 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 288 transitions. [2020-07-28 19:04:22,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:22,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 288 transitions. [2020-07-28 19:04:22,063 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 288 transitions. [2020-07-28 19:04:22,460 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 288 edges. 288 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:22,476 INFO L225 Difference]: With dead ends: 730 [2020-07-28 19:04:22,476 INFO L226 Difference]: Without dead ends: 511 [2020-07-28 19:04:22,477 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 92 GetRequests, 81 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=34, Invalid=122, Unknown=0, NotChecked=0, Total=156 [2020-07-28 19:04:22,478 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 511 states. [2020-07-28 19:04:23,500 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 511 to 307. [2020-07-28 19:04:23,500 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:23,501 INFO L82 GeneralOperation]: Start isEquivalent. First operand 511 states. Second operand 307 states. [2020-07-28 19:04:23,501 INFO L74 IsIncluded]: Start isIncluded. First operand 511 states. Second operand 307 states. [2020-07-28 19:04:23,501 INFO L87 Difference]: Start difference. First operand 511 states. Second operand 307 states. [2020-07-28 19:04:23,515 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:23,515 INFO L93 Difference]: Finished difference Result 511 states and 660 transitions. [2020-07-28 19:04:23,515 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 660 transitions. [2020-07-28 19:04:23,516 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:23,517 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:23,517 INFO L74 IsIncluded]: Start isIncluded. First operand 307 states. Second operand 511 states. [2020-07-28 19:04:23,517 INFO L87 Difference]: Start difference. First operand 307 states. Second operand 511 states. [2020-07-28 19:04:23,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:23,533 INFO L93 Difference]: Finished difference Result 511 states and 660 transitions. [2020-07-28 19:04:23,533 INFO L276 IsEmpty]: Start isEmpty. Operand 511 states and 660 transitions. [2020-07-28 19:04:23,534 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:23,535 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:23,535 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:23,535 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:23,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 307 states. [2020-07-28 19:04:23,543 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 307 states to 307 states and 398 transitions. [2020-07-28 19:04:23,543 INFO L78 Accepts]: Start accepts. Automaton has 307 states and 398 transitions. Word has length 82 [2020-07-28 19:04:23,543 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:23,544 INFO L479 AbstractCegarLoop]: Abstraction has 307 states and 398 transitions. [2020-07-28 19:04:23,544 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:04:23,544 INFO L276 IsEmpty]: Start isEmpty. Operand 307 states and 398 transitions. [2020-07-28 19:04:23,545 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 83 [2020-07-28 19:04:23,545 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:23,546 INFO L422 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:23,760 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2020-07-28 19:04:23,761 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:23,761 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:23,762 INFO L82 PathProgramCache]: Analyzing trace with hash 1442925699, now seen corresponding path program 1 times [2020-07-28 19:04:23,762 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:23,763 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1312031439] [2020-07-28 19:04:23,763 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:23,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:23,885 INFO L280 TraceCheckUtils]: 0: Hoare triple {13464#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string44.base, #t~string44.offset := #Ultimate.allocOnStack(13);call #t~string46.base, #t~string46.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string46.base, #t~string46.offset, 1);call write~init~int(110, #t~string46.base, 1 + #t~string46.offset, 1);call write~init~int(0, #t~string46.base, 2 + #t~string46.offset, 1);call #t~string48.base, #t~string48.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string48.base, #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 1 + #t~string48.offset, 1);call write~init~int(102, #t~string48.base, 2 + #t~string48.offset, 1);call write~init~int(0, #t~string48.base, 3 + #t~string48.offset, 1);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string50.base, #t~string50.offset, 1);call write~init~int(80, #t~string50.base, 1 + #t~string50.offset, 1);call write~init~int(117, #t~string50.base, 2 + #t~string50.offset, 1);call write~init~int(109, #t~string50.base, 3 + #t~string50.offset, 1);call write~init~int(112, #t~string50.base, 4 + #t~string50.offset, 1);call write~init~int(58, #t~string50.base, 5 + #t~string50.offset, 1);call write~init~int(0, #t~string50.base, 6 + #t~string50.offset, 1);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string52.base, #t~string52.offset, 1);call write~init~int(110, #t~string52.base, 1 + #t~string52.offset, 1);call write~init~int(0, #t~string52.base, 2 + #t~string52.offset, 1);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string54.base, #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 1 + #t~string54.offset, 1);call write~init~int(102, #t~string54.base, 2 + #t~string54.offset, 1);call write~init~int(0, #t~string54.base, 3 + #t~string54.offset, 1);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string56.base, #t~string56.offset, 1);call write~init~int(32, #t~string56.base, 1 + #t~string56.offset, 1);call write~init~int(0, #t~string56.base, 2 + #t~string56.offset, 1);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string58.base, #t~string58.offset, 1);call write~init~int(0, #t~string58.base, 1 + #t~string58.offset, 1);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(13);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string65.base, #t~string65.offset, 1);call write~init~int(77, #t~string65.base, 1 + #t~string65.offset, 1);call write~init~int(101, #t~string65.base, 2 + #t~string65.offset, 1);call write~init~int(116, #t~string65.base, 3 + #t~string65.offset, 1);call write~init~int(104, #t~string65.base, 4 + #t~string65.offset, 1);call write~init~int(58, #t~string65.base, 5 + #t~string65.offset, 1);call write~init~int(0, #t~string65.base, 6 + #t~string65.offset, 1);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string67.base, #t~string67.offset, 1);call write~init~int(82, #t~string67.base, 1 + #t~string67.offset, 1);call write~init~int(73, #t~string67.base, 2 + #t~string67.offset, 1);call write~init~int(84, #t~string67.base, 3 + #t~string67.offset, 1);call write~init~int(0, #t~string67.base, 4 + #t~string67.offset, 1);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string69.base, #t~string69.offset, 1);call write~init~int(75, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 2 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string71.base, #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 1 + #t~string71.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~pumpRunning~0 := 0;~systemActive~0 := 1;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0;~cleanupTimeShifts~0 := 4; {13464#true} is VALID [2020-07-28 19:04:23,886 INFO L280 TraceCheckUtils]: 1: Hoare triple {13464#true} havoc main_#res;havoc main_#t~ret74, main_~retValue_acc~13, main_~tmp~10;havoc main_~retValue_acc~13;havoc main_~tmp~10; {13464#true} is VALID [2020-07-28 19:04:23,887 INFO L280 TraceCheckUtils]: 2: Hoare triple {13464#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~8;havoc valid_product_~retValue_acc~8;valid_product_~retValue_acc~8 := 1;valid_product_#res := valid_product_~retValue_acc~8; {13466#(= 1 |ULTIMATE.start_valid_product_#res|)} is VALID [2020-07-28 19:04:23,888 INFO L280 TraceCheckUtils]: 3: Hoare triple {13466#(= 1 |ULTIMATE.start_valid_product_#res|)} main_#t~ret74 := valid_product_#res;assume -2147483648 <= main_#t~ret74 && main_#t~ret74 <= 2147483647;main_~tmp~10 := main_#t~ret74;havoc main_#t~ret74; {13467#(= 1 ULTIMATE.start_main_~tmp~10)} is VALID [2020-07-28 19:04:23,888 INFO L280 TraceCheckUtils]: 4: Hoare triple {13467#(= 1 ULTIMATE.start_main_~tmp~10)} assume 0 != main_~tmp~10; {13464#true} is VALID [2020-07-28 19:04:23,888 INFO L280 TraceCheckUtils]: 5: Hoare triple {13464#true} havoc test_#t~nondet35, test_#t~nondet36, test_#t~nondet37, test_#t~nondet38, test_~splverifierCounter~0, test_~tmp~3, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~3;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {13464#true} is VALID [2020-07-28 19:04:23,888 INFO L280 TraceCheckUtils]: 6: Hoare triple {13464#true} assume !false; {13464#true} is VALID [2020-07-28 19:04:23,889 INFO L280 TraceCheckUtils]: 7: Hoare triple {13464#true} assume test_~splverifierCounter~0 < 4; {13464#true} is VALID [2020-07-28 19:04:23,889 INFO L280 TraceCheckUtils]: 8: Hoare triple {13464#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {13464#true} is VALID [2020-07-28 19:04:23,889 INFO L280 TraceCheckUtils]: 9: Hoare triple {13464#true} assume 0 != test_~tmp~3; {13464#true} is VALID [2020-07-28 19:04:23,890 INFO L280 TraceCheckUtils]: 10: Hoare triple {13464#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {13464#true} is VALID [2020-07-28 19:04:23,890 INFO L280 TraceCheckUtils]: 11: Hoare triple {13464#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {13464#true} is VALID [2020-07-28 19:04:23,890 INFO L280 TraceCheckUtils]: 12: Hoare triple {13464#true} assume !(0 != test_~tmp___0~0); {13464#true} is VALID [2020-07-28 19:04:23,890 INFO L280 TraceCheckUtils]: 13: Hoare triple {13464#true} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {13464#true} is VALID [2020-07-28 19:04:23,890 INFO L280 TraceCheckUtils]: 14: Hoare triple {13464#true} assume 0 != test_~tmp___2~0; {13464#true} is VALID [2020-07-28 19:04:23,890 INFO L280 TraceCheckUtils]: 15: Hoare triple {13464#true} assume !(0 != ~pumpRunning~0); {13464#true} is VALID [2020-07-28 19:04:23,891 INFO L280 TraceCheckUtils]: 16: Hoare triple {13464#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {13464#true} is VALID [2020-07-28 19:04:23,891 INFO L280 TraceCheckUtils]: 17: Hoare triple {13464#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {13464#true} is VALID [2020-07-28 19:04:23,891 INFO L280 TraceCheckUtils]: 18: Hoare triple {13464#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {13464#true} is VALID [2020-07-28 19:04:23,892 INFO L280 TraceCheckUtils]: 19: Hoare triple {13464#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret59, isHighWaterLevel_~retValue_acc~5, isHighWaterLevel_~tmp~7, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~5;havoc isHighWaterLevel_~tmp~7;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~11;havoc isHighWaterSensorDry_~retValue_acc~11; {13464#true} is VALID [2020-07-28 19:04:23,892 INFO L280 TraceCheckUtils]: 20: Hoare triple {13464#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~11 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~11; {13464#true} is VALID [2020-07-28 19:04:23,892 INFO L280 TraceCheckUtils]: 21: Hoare triple {13464#true} isHighWaterLevel_#t~ret59 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret59 && isHighWaterLevel_#t~ret59 <= 2147483647;isHighWaterLevel_~tmp~7 := isHighWaterLevel_#t~ret59;havoc isHighWaterLevel_#t~ret59; {13464#true} is VALID [2020-07-28 19:04:23,892 INFO L280 TraceCheckUtils]: 22: Hoare triple {13464#true} assume !(0 != isHighWaterLevel_~tmp~7);isHighWaterLevel_~tmp___0~1 := 1; {13464#true} is VALID [2020-07-28 19:04:23,892 INFO L280 TraceCheckUtils]: 23: Hoare triple {13464#true} isHighWaterLevel_~retValue_acc~5 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~5; {13464#true} is VALID [2020-07-28 19:04:23,892 INFO L280 TraceCheckUtils]: 24: Hoare triple {13464#true} processEnvironment__wrappee__highWaterSensor_#t~ret39 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret39 && processEnvironment__wrappee__highWaterSensor_#t~ret39 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~4 := processEnvironment__wrappee__highWaterSensor_#t~ret39;havoc processEnvironment__wrappee__highWaterSensor_#t~ret39; {13464#true} is VALID [2020-07-28 19:04:23,893 INFO L280 TraceCheckUtils]: 25: Hoare triple {13464#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~4;~pumpRunning~0 := 1; {13464#true} is VALID [2020-07-28 19:04:23,893 INFO L280 TraceCheckUtils]: 26: Hoare triple {13464#true} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {13464#true} is VALID [2020-07-28 19:04:23,893 INFO L280 TraceCheckUtils]: 27: Hoare triple {13464#true} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {13464#true} is VALID [2020-07-28 19:04:23,893 INFO L280 TraceCheckUtils]: 28: Hoare triple {13464#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~9); {13464#true} is VALID [2020-07-28 19:04:23,893 INFO L280 TraceCheckUtils]: 29: Hoare triple {13464#true} assume !false; {13464#true} is VALID [2020-07-28 19:04:23,893 INFO L280 TraceCheckUtils]: 30: Hoare triple {13464#true} assume test_~splverifierCounter~0 < 4; {13464#true} is VALID [2020-07-28 19:04:23,894 INFO L280 TraceCheckUtils]: 31: Hoare triple {13464#true} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {13464#true} is VALID [2020-07-28 19:04:23,894 INFO L280 TraceCheckUtils]: 32: Hoare triple {13464#true} assume !(0 != test_~tmp~3); {13464#true} is VALID [2020-07-28 19:04:23,894 INFO L280 TraceCheckUtils]: 33: Hoare triple {13464#true} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {13464#true} is VALID [2020-07-28 19:04:23,894 INFO L280 TraceCheckUtils]: 34: Hoare triple {13464#true} assume !(0 != test_~tmp___0~0); {13464#true} is VALID [2020-07-28 19:04:23,895 INFO L280 TraceCheckUtils]: 35: Hoare triple {13464#true} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {13464#true} is VALID [2020-07-28 19:04:23,895 INFO L280 TraceCheckUtils]: 36: Hoare triple {13464#true} assume 0 != test_~tmp___2~0; {13464#true} is VALID [2020-07-28 19:04:23,896 INFO L280 TraceCheckUtils]: 37: Hoare triple {13464#true} assume 0 != ~pumpRunning~0; {13464#true} is VALID [2020-07-28 19:04:23,896 INFO L280 TraceCheckUtils]: 38: Hoare triple {13464#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {13464#true} is VALID [2020-07-28 19:04:23,896 INFO L280 TraceCheckUtils]: 39: Hoare triple {13464#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {13464#true} is VALID [2020-07-28 19:04:23,896 INFO L280 TraceCheckUtils]: 40: Hoare triple {13464#true} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret42, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~9;havoc isMethaneLevelCritical_~retValue_acc~9;isMethaneLevelCritical_~retValue_acc~9 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~9; {13464#true} is VALID [2020-07-28 19:04:23,897 INFO L280 TraceCheckUtils]: 41: Hoare triple {13464#true} isMethaneAlarm_#t~ret42 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret42 && isMethaneAlarm_#t~ret42 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret42;havoc isMethaneAlarm_#t~ret42;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {13464#true} is VALID [2020-07-28 19:04:23,897 INFO L280 TraceCheckUtils]: 42: Hoare triple {13464#true} processEnvironment_#t~ret41 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret41 && processEnvironment_#t~ret41 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret41;havoc processEnvironment_#t~ret41; {13464#true} is VALID [2020-07-28 19:04:23,897 INFO L280 TraceCheckUtils]: 43: Hoare triple {13464#true} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {13464#true} is VALID [2020-07-28 19:04:23,897 INFO L280 TraceCheckUtils]: 44: Hoare triple {13464#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret60, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~12;havoc isLowWaterSensorDry_~retValue_acc~12;isLowWaterSensorDry_~retValue_acc~12 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~12; {13464#true} is VALID [2020-07-28 19:04:23,898 INFO L280 TraceCheckUtils]: 45: Hoare triple {13464#true} isLowWaterLevel_#t~ret60 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret60 && isLowWaterLevel_#t~ret60 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret60;havoc isLowWaterLevel_#t~ret60; {13464#true} is VALID [2020-07-28 19:04:23,899 INFO L280 TraceCheckUtils]: 46: Hoare triple {13464#true} assume !(0 != isLowWaterLevel_~tmp~8);isLowWaterLevel_~tmp___0~2 := 1; {13468#(not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2))} is VALID [2020-07-28 19:04:23,900 INFO L280 TraceCheckUtils]: 47: Hoare triple {13468#(not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2))} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {13469#(not (= 0 |ULTIMATE.start_isLowWaterLevel_#res|))} is VALID [2020-07-28 19:04:23,900 INFO L280 TraceCheckUtils]: 48: Hoare triple {13469#(not (= 0 |ULTIMATE.start_isLowWaterLevel_#res|))} processEnvironment__wrappee__lowWaterSensor_#t~ret40 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret40 && processEnvironment__wrappee__lowWaterSensor_#t~ret40 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~5 := processEnvironment__wrappee__lowWaterSensor_#t~ret40;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40; {13470#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__lowWaterSensor_~tmp~5))} is VALID [2020-07-28 19:04:23,901 INFO L280 TraceCheckUtils]: 49: Hoare triple {13470#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__lowWaterSensor_~tmp~5))} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~5);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {13465#false} is VALID [2020-07-28 19:04:23,902 INFO L280 TraceCheckUtils]: 50: Hoare triple {13465#false} assume !(0 == ~pumpRunning~0); {13465#false} is VALID [2020-07-28 19:04:23,902 INFO L280 TraceCheckUtils]: 51: Hoare triple {13465#false} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {13465#false} is VALID [2020-07-28 19:04:23,902 INFO L280 TraceCheckUtils]: 52: Hoare triple {13465#false} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {13465#false} is VALID [2020-07-28 19:04:23,902 INFO L280 TraceCheckUtils]: 53: Hoare triple {13465#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~9); {13465#false} is VALID [2020-07-28 19:04:23,902 INFO L280 TraceCheckUtils]: 54: Hoare triple {13465#false} assume !false; {13465#false} is VALID [2020-07-28 19:04:23,902 INFO L280 TraceCheckUtils]: 55: Hoare triple {13465#false} assume test_~splverifierCounter~0 < 4; {13465#false} is VALID [2020-07-28 19:04:23,903 INFO L280 TraceCheckUtils]: 56: Hoare triple {13465#false} assume -2147483648 <= test_#t~nondet35 && test_#t~nondet35 <= 2147483647;test_~tmp~3 := test_#t~nondet35;havoc test_#t~nondet35; {13465#false} is VALID [2020-07-28 19:04:23,903 INFO L280 TraceCheckUtils]: 57: Hoare triple {13465#false} assume !(0 != test_~tmp~3); {13465#false} is VALID [2020-07-28 19:04:23,903 INFO L280 TraceCheckUtils]: 58: Hoare triple {13465#false} assume -2147483648 <= test_#t~nondet36 && test_#t~nondet36 <= 2147483647;test_~tmp___0~0 := test_#t~nondet36;havoc test_#t~nondet36; {13465#false} is VALID [2020-07-28 19:04:23,903 INFO L280 TraceCheckUtils]: 59: Hoare triple {13465#false} assume !(0 != test_~tmp___0~0); {13465#false} is VALID [2020-07-28 19:04:23,903 INFO L280 TraceCheckUtils]: 60: Hoare triple {13465#false} assume -2147483648 <= test_#t~nondet37 && test_#t~nondet37 <= 2147483647;test_~tmp___2~0 := test_#t~nondet37;havoc test_#t~nondet37; {13465#false} is VALID [2020-07-28 19:04:23,903 INFO L280 TraceCheckUtils]: 61: Hoare triple {13465#false} assume 0 != test_~tmp___2~0; {13465#false} is VALID [2020-07-28 19:04:23,904 INFO L280 TraceCheckUtils]: 62: Hoare triple {13465#false} assume 0 != ~pumpRunning~0; {13465#false} is VALID [2020-07-28 19:04:23,904 INFO L280 TraceCheckUtils]: 63: Hoare triple {13465#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {13465#false} is VALID [2020-07-28 19:04:23,904 INFO L280 TraceCheckUtils]: 64: Hoare triple {13465#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret41, processEnvironment_~tmp~6;havoc processEnvironment_~tmp~6; {13465#false} is VALID [2020-07-28 19:04:23,905 INFO L280 TraceCheckUtils]: 65: Hoare triple {13465#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret42, isMethaneAlarm_~retValue_acc~3;havoc isMethaneAlarm_~retValue_acc~3;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~9;havoc isMethaneLevelCritical_~retValue_acc~9;isMethaneLevelCritical_~retValue_acc~9 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~9; {13465#false} is VALID [2020-07-28 19:04:23,905 INFO L280 TraceCheckUtils]: 66: Hoare triple {13465#false} isMethaneAlarm_#t~ret42 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret42 && isMethaneAlarm_#t~ret42 <= 2147483647;isMethaneAlarm_~retValue_acc~3 := isMethaneAlarm_#t~ret42;havoc isMethaneAlarm_#t~ret42;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~3; {13465#false} is VALID [2020-07-28 19:04:23,905 INFO L280 TraceCheckUtils]: 67: Hoare triple {13465#false} processEnvironment_#t~ret41 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret41 && processEnvironment_#t~ret41 <= 2147483647;processEnvironment_~tmp~6 := processEnvironment_#t~ret41;havoc processEnvironment_#t~ret41; {13465#false} is VALID [2020-07-28 19:04:23,905 INFO L280 TraceCheckUtils]: 68: Hoare triple {13465#false} assume !(0 != processEnvironment_~tmp~6);havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40, processEnvironment__wrappee__lowWaterSensor_~tmp~5;havoc processEnvironment__wrappee__lowWaterSensor_~tmp~5; {13465#false} is VALID [2020-07-28 19:04:23,906 INFO L280 TraceCheckUtils]: 69: Hoare triple {13465#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret60, isLowWaterLevel_~retValue_acc~6, isLowWaterLevel_~tmp~8, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~6;havoc isLowWaterLevel_~tmp~8;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~12;havoc isLowWaterSensorDry_~retValue_acc~12;isLowWaterSensorDry_~retValue_acc~12 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~12; {13465#false} is VALID [2020-07-28 19:04:23,906 INFO L280 TraceCheckUtils]: 70: Hoare triple {13465#false} isLowWaterLevel_#t~ret60 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret60 && isLowWaterLevel_#t~ret60 <= 2147483647;isLowWaterLevel_~tmp~8 := isLowWaterLevel_#t~ret60;havoc isLowWaterLevel_#t~ret60; {13465#false} is VALID [2020-07-28 19:04:23,906 INFO L280 TraceCheckUtils]: 71: Hoare triple {13465#false} assume 0 != isLowWaterLevel_~tmp~8;isLowWaterLevel_~tmp___0~2 := 0; {13465#false} is VALID [2020-07-28 19:04:23,906 INFO L280 TraceCheckUtils]: 72: Hoare triple {13465#false} isLowWaterLevel_~retValue_acc~6 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~6; {13465#false} is VALID [2020-07-28 19:04:23,907 INFO L280 TraceCheckUtils]: 73: Hoare triple {13465#false} processEnvironment__wrappee__lowWaterSensor_#t~ret40 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__lowWaterSensor_#t~ret40 && processEnvironment__wrappee__lowWaterSensor_#t~ret40 <= 2147483647;processEnvironment__wrappee__lowWaterSensor_~tmp~5 := processEnvironment__wrappee__lowWaterSensor_#t~ret40;havoc processEnvironment__wrappee__lowWaterSensor_#t~ret40; {13465#false} is VALID [2020-07-28 19:04:23,907 INFO L280 TraceCheckUtils]: 74: Hoare triple {13465#false} assume !(0 != processEnvironment__wrappee__lowWaterSensor_~tmp~5);havoc processEnvironment__wrappee__highWaterSensor_#t~ret39, processEnvironment__wrappee__highWaterSensor_~tmp~4;havoc processEnvironment__wrappee__highWaterSensor_~tmp~4; {13465#false} is VALID [2020-07-28 19:04:23,907 INFO L280 TraceCheckUtils]: 75: Hoare triple {13465#false} assume !(0 == ~pumpRunning~0); {13465#false} is VALID [2020-07-28 19:04:23,907 INFO L280 TraceCheckUtils]: 76: Hoare triple {13465#false} havoc __utac_acc__Specification4_spec__1_#t~ret72, __utac_acc__Specification4_spec__1_#t~ret73, __utac_acc__Specification4_spec__1_~tmp~9, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~9;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~10;havoc getWaterLevel_~retValue_acc~10;getWaterLevel_~retValue_acc~10 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~10; {13465#false} is VALID [2020-07-28 19:04:23,907 INFO L280 TraceCheckUtils]: 77: Hoare triple {13465#false} __utac_acc__Specification4_spec__1_#t~ret72 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret72 && __utac_acc__Specification4_spec__1_#t~ret72 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~9 := __utac_acc__Specification4_spec__1_#t~ret72;havoc __utac_acc__Specification4_spec__1_#t~ret72; {13465#false} is VALID [2020-07-28 19:04:23,907 INFO L280 TraceCheckUtils]: 78: Hoare triple {13465#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~9;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~4;havoc isPumpRunning_~retValue_acc~4;isPumpRunning_~retValue_acc~4 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~4; {13465#false} is VALID [2020-07-28 19:04:23,908 INFO L280 TraceCheckUtils]: 79: Hoare triple {13465#false} __utac_acc__Specification4_spec__1_#t~ret73 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret73 && __utac_acc__Specification4_spec__1_#t~ret73 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret73;havoc __utac_acc__Specification4_spec__1_#t~ret73; {13465#false} is VALID [2020-07-28 19:04:23,908 INFO L280 TraceCheckUtils]: 80: Hoare triple {13465#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {13465#false} is VALID [2020-07-28 19:04:23,908 INFO L280 TraceCheckUtils]: 81: Hoare triple {13465#false} assume !false; {13465#false} is VALID [2020-07-28 19:04:23,913 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2020-07-28 19:04:23,914 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1312031439] [2020-07-28 19:04:23,914 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:23,915 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2020-07-28 19:04:23,915 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1385512017] [2020-07-28 19:04:23,915 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 82 [2020-07-28 19:04:23,916 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:23,916 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:04:24,003 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:24,003 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:04:24,003 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:24,004 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:04:24,004 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:04:24,004 INFO L87 Difference]: Start difference. First operand 307 states and 398 transitions. Second operand 7 states. [2020-07-28 19:04:26,331 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:26,332 INFO L93 Difference]: Finished difference Result 602 states and 779 transitions. [2020-07-28 19:04:26,332 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2020-07-28 19:04:26,332 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 82 [2020-07-28 19:04:26,332 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:26,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:04:26,333 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 253 transitions. [2020-07-28 19:04:26,334 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:04:26,335 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 253 transitions. [2020-07-28 19:04:26,335 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 253 transitions. [2020-07-28 19:04:26,695 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 253 edges. 253 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:26,695 INFO L225 Difference]: With dead ends: 602 [2020-07-28 19:04:26,696 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:04:26,698 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=46, Invalid=86, Unknown=0, NotChecked=0, Total=132 [2020-07-28 19:04:26,698 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:04:26,698 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:04:26,698 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:26,698 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:04:26,699 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:04:26,699 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:04:26,699 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:26,699 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:04:26,699 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:04:26,699 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:26,699 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:26,700 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:04:26,700 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:04:26,700 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:26,700 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:04:26,700 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:04:26,700 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:26,700 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:26,700 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:26,701 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:26,701 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:04:26,701 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:04:26,701 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 82 [2020-07-28 19:04:26,701 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:26,702 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:04:26,702 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:04:26,702 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:04:26,703 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:26,703 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2020-07-28 19:04:26,705 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:04:26,909 WARN L193 SmtUtils]: Spent 103.00 ms on a formula simplification. DAG size of input: 120 DAG size of output: 83 [2020-07-28 19:04:27,046 WARN L193 SmtUtils]: Spent 126.00 ms on a formula simplification. DAG size of input: 133 DAG size of output: 110 [2020-07-28 19:04:27,424 WARN L193 SmtUtils]: Spent 247.00 ms on a formula simplification. DAG size of input: 154 DAG size of output: 128 [2020-07-28 19:04:27,688 WARN L193 SmtUtils]: Spent 153.00 ms on a formula simplification. DAG size of input: 155 DAG size of output: 127 [2020-07-28 19:04:27,897 WARN L193 SmtUtils]: Spent 198.00 ms on a formula simplification. DAG size of input: 154 DAG size of output: 128 [2020-07-28 19:04:28,056 WARN L193 SmtUtils]: Spent 155.00 ms on a formula simplification. DAG size of input: 144 DAG size of output: 123 [2020-07-28 19:04:28,563 WARN L193 SmtUtils]: Spent 225.00 ms on a formula simplification. DAG size of input: 74 DAG size of output: 29 [2020-07-28 19:04:29,066 WARN L193 SmtUtils]: Spent 473.00 ms on a formula simplification. DAG size of input: 107 DAG size of output: 25 [2020-07-28 19:04:29,412 WARN L193 SmtUtils]: Spent 240.00 ms on a formula simplification. DAG size of input: 68 DAG size of output: 29 [2020-07-28 19:04:30,037 WARN L193 SmtUtils]: Spent 565.00 ms on a formula simplification. DAG size of input: 125 DAG size of output: 20 [2020-07-28 19:04:30,380 WARN L193 SmtUtils]: Spent 339.00 ms on a formula simplification. DAG size of input: 89 DAG size of output: 22 [2020-07-28 19:04:30,488 WARN L193 SmtUtils]: Spent 103.00 ms on a formula simplification. DAG size of input: 44 DAG size of output: 24 [2020-07-28 19:04:30,999 WARN L193 SmtUtils]: Spent 498.00 ms on a formula simplification. DAG size of input: 123 DAG size of output: 22 [2020-07-28 19:04:31,587 WARN L193 SmtUtils]: Spent 549.00 ms on a formula simplification. DAG size of input: 125 DAG size of output: 20 [2020-07-28 19:04:32,091 WARN L193 SmtUtils]: Spent 497.00 ms on a formula simplification. DAG size of input: 122 DAG size of output: 13 [2020-07-28 19:04:32,483 WARN L193 SmtUtils]: Spent 197.00 ms on a formula simplification. DAG size of input: 60 DAG size of output: 24 [2020-07-28 19:04:32,519 INFO L268 CegarLoopResult]: For program point L762(lines 762 766) no Hoare annotation was computed. [2020-07-28 19:04:32,520 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 750) no Hoare annotation was computed. [2020-07-28 19:04:32,520 INFO L268 CegarLoopResult]: For program point L762-3(lines 762 766) no Hoare annotation was computed. [2020-07-28 19:04:32,520 INFO L268 CegarLoopResult]: For program point L762-6(lines 762 766) no Hoare annotation was computed. [2020-07-28 19:04:32,520 INFO L268 CegarLoopResult]: For program point L697(lines 697 701) no Hoare annotation was computed. [2020-07-28 19:04:32,520 INFO L268 CegarLoopResult]: For program point L697-2(lines 697 701) no Hoare annotation was computed. [2020-07-28 19:04:32,520 INFO L268 CegarLoopResult]: For program point L697-3(lines 697 701) no Hoare annotation was computed. [2020-07-28 19:04:32,520 INFO L268 CegarLoopResult]: For program point L697-5(lines 697 701) no Hoare annotation was computed. [2020-07-28 19:04:32,521 INFO L264 CegarLoopResult]: At program point L499(lines 499 505) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 (= 1 |ULTIMATE.start_valid_product_#res|) (<= 1 ~waterLevel~0) (= 0 ~pumpRunning~0) .cse1 .cse2) (and (<= 2 ~waterLevel~0) .cse0 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) .cse1 .cse2))) [2020-07-28 19:04:32,521 INFO L268 CegarLoopResult]: For program point L697-6(lines 697 701) no Hoare annotation was computed. [2020-07-28 19:04:32,521 INFO L264 CegarLoopResult]: At program point L466(lines 419 467) the Hoare annotation is: false [2020-07-28 19:04:32,521 INFO L264 CegarLoopResult]: At program point L499-1(lines 499 505) the Hoare annotation is: false [2020-07-28 19:04:32,521 INFO L268 CegarLoopResult]: For program point L697-8(lines 697 701) no Hoare annotation was computed. [2020-07-28 19:04:32,522 INFO L264 CegarLoopResult]: At program point L499-2(lines 499 505) the Hoare annotation is: false [2020-07-28 19:04:32,522 INFO L268 CegarLoopResult]: For program point L697-9(lines 697 701) no Hoare annotation was computed. [2020-07-28 19:04:32,522 INFO L268 CegarLoopResult]: For program point L697-11(lines 697 701) no Hoare annotation was computed. [2020-07-28 19:04:32,522 INFO L268 CegarLoopResult]: For program point L697-12(lines 697 701) no Hoare annotation was computed. [2020-07-28 19:04:32,523 INFO L268 CegarLoopResult]: For program point L697-14(lines 697 701) no Hoare annotation was computed. [2020-07-28 19:04:32,523 INFO L268 CegarLoopResult]: For program point L697-15(lines 697 701) no Hoare annotation was computed. [2020-07-28 19:04:32,523 INFO L268 CegarLoopResult]: For program point L697-17(lines 697 701) no Hoare annotation was computed. [2020-07-28 19:04:32,523 INFO L264 CegarLoopResult]: At program point L896-2(lines 896 910) the Hoare annotation is: false [2020-07-28 19:04:32,524 INFO L268 CegarLoopResult]: For program point L897(line 897) no Hoare annotation was computed. [2020-07-28 19:04:32,524 INFO L264 CegarLoopResult]: At program point L831(lines 826 834) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (<= 1 |ULTIMATE.start_getWaterLevel_#res|)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse3 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 (<= 1 ~waterLevel~0) (= 0 ~pumpRunning~0) .cse2 .cse3 .cse4) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3 .cse4))) [2020-07-28 19:04:32,524 INFO L264 CegarLoopResult]: At program point L831-1(lines 826 834) the Hoare annotation is: false [2020-07-28 19:04:32,524 INFO L264 CegarLoopResult]: At program point L831-2(lines 826 834) the Hoare annotation is: false [2020-07-28 19:04:32,525 INFO L264 CegarLoopResult]: At program point L799(lines 794 802) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 1 ~waterLevel~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 1 ~systemActive~0)) [2020-07-28 19:04:32,525 INFO L264 CegarLoopResult]: At program point L799-1(lines 794 802) the Hoare annotation is: false [2020-07-28 19:04:32,525 INFO L264 CegarLoopResult]: At program point L733(lines 1 979) the Hoare annotation is: (and (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:04:32,525 INFO L264 CegarLoopResult]: At program point L799-2(lines 794 802) the Hoare annotation is: false [2020-07-28 19:04:32,525 INFO L268 CegarLoopResult]: For program point L900(lines 900 904) no Hoare annotation was computed. [2020-07-28 19:04:32,525 INFO L268 CegarLoopResult]: For program point L867(lines 867 880) no Hoare annotation was computed. [2020-07-28 19:04:32,526 INFO L268 CegarLoopResult]: For program point L900-1(lines 492 498) no Hoare annotation was computed. [2020-07-28 19:04:32,526 INFO L264 CegarLoopResult]: At program point L867-1(lines 1 979) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse2 (= 1 ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 (<= 1 |ULTIMATE.start_getWaterLevel_#res|) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) .cse1 (<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~9) .cse2) (and .cse0 (= 1 |ULTIMATE.start_valid_product_#res|) (= ULTIMATE.start_main_~tmp~10 ~waterLevel~0) (= 0 ~pumpRunning~0) .cse1 .cse2))) [2020-07-28 19:04:32,526 INFO L268 CegarLoopResult]: For program point L867-2(lines 867 880) no Hoare annotation was computed. [2020-07-28 19:04:32,526 INFO L264 CegarLoopResult]: At program point L867-3(lines 1 979) the Hoare annotation is: false [2020-07-28 19:04:32,526 INFO L268 CegarLoopResult]: For program point L867-4(lines 867 880) no Hoare annotation was computed. [2020-07-28 19:04:32,527 INFO L264 CegarLoopResult]: At program point L867-5(lines 1 979) the Hoare annotation is: false [2020-07-28 19:04:32,527 INFO L268 CegarLoopResult]: For program point L967(lines 967 974) no Hoare annotation was computed. [2020-07-28 19:04:32,527 INFO L271 CegarLoopResult]: At program point L967-1(lines 967 974) the Hoare annotation is: true [2020-07-28 19:04:32,527 INFO L264 CegarLoopResult]: At program point L703(lines 688 706) the Hoare annotation is: (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2)) (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~8) (not (= 0 |ULTIMATE.start_isLowWaterLevel_#res|)) (<= 1 ~waterLevel~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 1 ~systemActive~0)) [2020-07-28 19:04:32,527 INFO L264 CegarLoopResult]: At program point L703-1(lines 688 706) the Hoare annotation is: false [2020-07-28 19:04:32,528 INFO L264 CegarLoopResult]: At program point L703-2(lines 688 706) the Hoare annotation is: false [2020-07-28 19:04:32,528 INFO L264 CegarLoopResult]: At program point L703-3(lines 688 706) the Hoare annotation is: false [2020-07-28 19:04:32,528 INFO L264 CegarLoopResult]: At program point L703-4(lines 688 706) the Hoare annotation is: false [2020-07-28 19:04:32,528 INFO L264 CegarLoopResult]: At program point L703-5(lines 688 706) the Hoare annotation is: false [2020-07-28 19:04:32,529 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 750) no Hoare annotation was computed. [2020-07-28 19:04:32,529 INFO L268 CegarLoopResult]: For program point L440(lines 440 446) no Hoare annotation was computed. [2020-07-28 19:04:32,529 INFO L264 CegarLoopResult]: At program point L440-1(lines 440 446) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse2 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse3 (= 1 ~systemActive~0))) (or (and .cse0 (= 0 ~pumpRunning~0) .cse1 .cse2 (= 1 ~waterLevel~0) .cse3) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3))) [2020-07-28 19:04:32,529 INFO L268 CegarLoopResult]: For program point L871(lines 871 877) no Hoare annotation was computed. [2020-07-28 19:04:32,529 INFO L268 CegarLoopResult]: For program point L871-2(lines 871 877) no Hoare annotation was computed. [2020-07-28 19:04:32,529 INFO L268 CegarLoopResult]: For program point L871-4(lines 871 877) no Hoare annotation was computed. [2020-07-28 19:04:32,530 INFO L268 CegarLoopResult]: For program point L839(lines 839 845) no Hoare annotation was computed. [2020-07-28 19:04:32,530 INFO L268 CegarLoopResult]: For program point L839-1(lines 839 845) no Hoare annotation was computed. [2020-07-28 19:04:32,530 INFO L268 CegarLoopResult]: For program point L839-2(lines 839 845) no Hoare annotation was computed. [2020-07-28 19:04:32,530 INFO L268 CegarLoopResult]: For program point L839-3(lines 839 845) no Hoare annotation was computed. [2020-07-28 19:04:32,530 INFO L268 CegarLoopResult]: For program point L839-4(lines 839 845) no Hoare annotation was computed. [2020-07-28 19:04:32,530 INFO L268 CegarLoopResult]: For program point L839-5(lines 839 845) no Hoare annotation was computed. [2020-07-28 19:04:32,531 INFO L268 CegarLoopResult]: For program point L839-6(lines 839 845) no Hoare annotation was computed. [2020-07-28 19:04:32,531 INFO L268 CegarLoopResult]: For program point L839-7(lines 839 845) no Hoare annotation was computed. [2020-07-28 19:04:32,531 INFO L268 CegarLoopResult]: For program point L839-8(lines 839 845) no Hoare annotation was computed. [2020-07-28 19:04:32,531 INFO L268 CegarLoopResult]: For program point L839-9(lines 839 845) no Hoare annotation was computed. [2020-07-28 19:04:32,531 INFO L268 CegarLoopResult]: For program point L839-10(lines 839 845) no Hoare annotation was computed. [2020-07-28 19:04:32,532 INFO L268 CegarLoopResult]: For program point L839-11(lines 839 845) no Hoare annotation was computed. [2020-07-28 19:04:32,532 INFO L268 CegarLoopResult]: For program point L774(lines 774 778) no Hoare annotation was computed. [2020-07-28 19:04:32,532 INFO L264 CegarLoopResult]: At program point L741(lines 736 744) the Hoare annotation is: (and (= 0 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:04:32,532 INFO L268 CegarLoopResult]: For program point L576(lines 576 593) no Hoare annotation was computed. [2020-07-28 19:04:32,532 INFO L268 CegarLoopResult]: For program point L576-1(lines 576 593) no Hoare annotation was computed. [2020-07-28 19:04:32,533 INFO L268 CegarLoopResult]: For program point L576-2(lines 576 593) no Hoare annotation was computed. [2020-07-28 19:04:32,533 INFO L268 CegarLoopResult]: For program point L678(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,533 INFO L268 CegarLoopResult]: For program point L678-2(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,533 INFO L268 CegarLoopResult]: For program point L678-3(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,533 INFO L268 CegarLoopResult]: For program point L678-5(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,533 INFO L268 CegarLoopResult]: For program point L678-6(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,534 INFO L268 CegarLoopResult]: For program point L678-8(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,534 INFO L268 CegarLoopResult]: For program point L678-9(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,534 INFO L268 CegarLoopResult]: For program point L678-11(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,534 INFO L268 CegarLoopResult]: For program point L678-12(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,534 INFO L268 CegarLoopResult]: For program point L678-14(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,534 INFO L268 CegarLoopResult]: For program point L678-15(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,535 INFO L268 CegarLoopResult]: For program point L678-17(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,535 INFO L268 CegarLoopResult]: For program point L678-18(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,535 INFO L268 CegarLoopResult]: For program point L678-20(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,535 INFO L268 CegarLoopResult]: For program point L678-21(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,535 INFO L271 CegarLoopResult]: At program point L976(lines 957 979) the Hoare annotation is: true [2020-07-28 19:04:32,535 INFO L268 CegarLoopResult]: For program point L678-23(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,536 INFO L268 CegarLoopResult]: For program point L678-24(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,536 INFO L264 CegarLoopResult]: At program point L844(lines 835 848) the Hoare annotation is: (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~8) (= 0 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 1 ~waterLevel~0) (not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (= 1 ~systemActive~0)) [2020-07-28 19:04:32,536 INFO L268 CegarLoopResult]: For program point L678-26(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,536 INFO L264 CegarLoopResult]: At program point L844-1(lines 835 848) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0))) (or (and .cse0 .cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 1 ~waterLevel~0) (not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) .cse2) (and (= 1 ULTIMATE.start_main_~tmp~10) (<= 2 ~waterLevel~0) .cse0 (= 1 |ULTIMATE.start_valid_product_#res|) .cse1 .cse2))) [2020-07-28 19:04:32,536 INFO L268 CegarLoopResult]: For program point L678-27(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,537 INFO L264 CegarLoopResult]: At program point L844-2(lines 835 848) the Hoare annotation is: false [2020-07-28 19:04:32,537 INFO L264 CegarLoopResult]: At program point L844-3(lines 835 848) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse3 (= 1 ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) .cse2 .cse3) (and .cse0 (= 1 |ULTIMATE.start_valid_product_#res|) .cse1 .cse2 (= 1 ~waterLevel~0) (not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) .cse3))) [2020-07-28 19:04:32,537 INFO L268 CegarLoopResult]: For program point L678-29(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,537 INFO L264 CegarLoopResult]: At program point L844-4(lines 835 848) the Hoare annotation is: false [2020-07-28 19:04:32,537 INFO L268 CegarLoopResult]: For program point L678-30(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,538 INFO L264 CegarLoopResult]: At program point L844-5(lines 835 848) the Hoare annotation is: false [2020-07-28 19:04:32,538 INFO L264 CegarLoopResult]: At program point L844-6(lines 835 848) the Hoare annotation is: false [2020-07-28 19:04:32,538 INFO L268 CegarLoopResult]: For program point L678-32(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,538 INFO L264 CegarLoopResult]: At program point L844-7(lines 835 848) the Hoare annotation is: false [2020-07-28 19:04:32,538 INFO L268 CegarLoopResult]: For program point L678-33(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,538 INFO L268 CegarLoopResult]: For program point L580(lines 580 588) no Hoare annotation was computed. [2020-07-28 19:04:32,539 INFO L264 CegarLoopResult]: At program point L844-8(lines 835 848) the Hoare annotation is: false [2020-07-28 19:04:32,539 INFO L268 CegarLoopResult]: For program point L580-1(lines 580 588) no Hoare annotation was computed. [2020-07-28 19:04:32,539 INFO L264 CegarLoopResult]: At program point L844-9(lines 835 848) the Hoare annotation is: false [2020-07-28 19:04:32,539 INFO L268 CegarLoopResult]: For program point L678-35(lines 678 682) no Hoare annotation was computed. [2020-07-28 19:04:32,539 INFO L268 CegarLoopResult]: For program point L580-2(lines 580 588) no Hoare annotation was computed. [2020-07-28 19:04:32,540 INFO L264 CegarLoopResult]: At program point L844-10(lines 835 848) the Hoare annotation is: false [2020-07-28 19:04:32,540 INFO L264 CegarLoopResult]: At program point L844-11(lines 835 848) the Hoare annotation is: false [2020-07-28 19:04:32,540 INFO L264 CegarLoopResult]: At program point L944(lines 940 946) the Hoare annotation is: (and (= 0 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= 1 ~waterLevel~0) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 1 ~systemActive~0)) [2020-07-28 19:04:32,540 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:04:32,540 INFO L268 CegarLoopResult]: For program point L450(lines 450 461) no Hoare annotation was computed. [2020-07-28 19:04:32,541 INFO L268 CegarLoopResult]: For program point L550(lines 550 567) no Hoare annotation was computed. [2020-07-28 19:04:32,541 INFO L268 CegarLoopResult]: For program point L550-1(lines 550 567) no Hoare annotation was computed. [2020-07-28 19:04:32,541 INFO L268 CegarLoopResult]: For program point L550-2(lines 550 567) no Hoare annotation was computed. [2020-07-28 19:04:32,541 INFO L268 CegarLoopResult]: For program point L550-3(lines 550 567) no Hoare annotation was computed. [2020-07-28 19:04:32,542 INFO L268 CegarLoopResult]: For program point L550-4(lines 550 567) no Hoare annotation was computed. [2020-07-28 19:04:32,542 INFO L268 CegarLoopResult]: For program point L550-5(lines 550 567) no Hoare annotation was computed. [2020-07-28 19:04:32,542 INFO L268 CegarLoopResult]: For program point L750(line 750) no Hoare annotation was computed. [2020-07-28 19:04:32,542 INFO L268 CegarLoopResult]: For program point L750-1(line 750) no Hoare annotation was computed. [2020-07-28 19:04:32,542 INFO L264 CegarLoopResult]: At program point L684(lines 669 687) the Hoare annotation is: (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~7)) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~8) (= 0 |ULTIMATE.start_isHighWaterLevel_#res|) (= 0 ~pumpRunning~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= 1 ~waterLevel~0) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) (= 1 ~systemActive~0)) [2020-07-28 19:04:32,543 INFO L268 CegarLoopResult]: For program point L750-2(line 750) no Hoare annotation was computed. [2020-07-28 19:04:32,543 INFO L264 CegarLoopResult]: At program point L684-1(lines 669 687) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse3 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~7)) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1) .cse0 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|) .cse1 .cse2 .cse3 (= 1 ~waterLevel~0) (not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) .cse4))) [2020-07-28 19:04:32,543 INFO L264 CegarLoopResult]: At program point L684-2(lines 669 687) the Hoare annotation is: false [2020-07-28 19:04:32,543 INFO L264 CegarLoopResult]: At program point L684-3(lines 669 687) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse3 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse4 (= 1 ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3 .cse4) (and (not (= 0 ULTIMATE.start_isHighWaterLevel_~tmp~7)) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1) .cse0 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|) .cse1 .cse2 (= 1 ~waterLevel~0) .cse3 (not (= 0 |ULTIMATE.start_isHighWaterSensorDry_#res|)) .cse4))) [2020-07-28 19:04:32,544 INFO L264 CegarLoopResult]: At program point L684-4(lines 669 687) the Hoare annotation is: false [2020-07-28 19:04:32,544 INFO L264 CegarLoopResult]: At program point L684-5(lines 669 687) the Hoare annotation is: false [2020-07-28 19:04:32,544 INFO L264 CegarLoopResult]: At program point L684-6(lines 669 687) the Hoare annotation is: false [2020-07-28 19:04:32,544 INFO L264 CegarLoopResult]: At program point L684-7(lines 669 687) the Hoare annotation is: false [2020-07-28 19:04:32,544 INFO L264 CegarLoopResult]: At program point L684-8(lines 669 687) the Hoare annotation is: false [2020-07-28 19:04:32,544 INFO L264 CegarLoopResult]: At program point L684-9(lines 669 687) the Hoare annotation is: false [2020-07-28 19:04:32,545 INFO L264 CegarLoopResult]: At program point L684-10(lines 669 687) the Hoare annotation is: false [2020-07-28 19:04:32,545 INFO L264 CegarLoopResult]: At program point L684-11(lines 669 687) the Hoare annotation is: false [2020-07-28 19:04:32,545 INFO L268 CegarLoopResult]: For program point L421(lines 420 465) no Hoare annotation was computed. [2020-07-28 19:04:32,545 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:04:32,546 INFO L264 CegarLoopResult]: At program point L620(lines 613 623) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 1 ~waterLevel~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 1 ~systemActive~0)) [2020-07-28 19:04:32,546 INFO L264 CegarLoopResult]: At program point L620-1(lines 613 623) the Hoare annotation is: false [2020-07-28 19:04:32,546 INFO L268 CegarLoopResult]: For program point L554(lines 554 562) no Hoare annotation was computed. [2020-07-28 19:04:32,546 INFO L264 CegarLoopResult]: At program point L620-2(lines 613 623) the Hoare annotation is: false [2020-07-28 19:04:32,546 INFO L268 CegarLoopResult]: For program point L554-1(lines 554 562) no Hoare annotation was computed. [2020-07-28 19:04:32,546 INFO L268 CegarLoopResult]: For program point L554-2(lines 554 562) no Hoare annotation was computed. [2020-07-28 19:04:32,547 INFO L268 CegarLoopResult]: For program point L554-3(lines 554 562) no Hoare annotation was computed. [2020-07-28 19:04:32,547 INFO L268 CegarLoopResult]: For program point L422(lines 422 426) no Hoare annotation was computed. [2020-07-28 19:04:32,547 INFO L268 CegarLoopResult]: For program point L554-4(lines 554 562) no Hoare annotation was computed. [2020-07-28 19:04:32,547 INFO L268 CegarLoopResult]: For program point L554-5(lines 554 562) no Hoare annotation was computed. [2020-07-28 19:04:32,547 INFO L268 CegarLoopResult]: For program point L786(lines 786 790) no Hoare annotation was computed. [2020-07-28 19:04:32,548 INFO L268 CegarLoopResult]: For program point L456(lines 456 460) no Hoare annotation was computed. [2020-07-28 19:04:32,548 INFO L268 CegarLoopResult]: For program point L456-2(lines 492 498) no Hoare annotation was computed. [2020-07-28 19:04:32,548 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:04:32,548 INFO L264 CegarLoopResult]: At program point L854(lines 849 857) the Hoare annotation is: (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 1 ~waterLevel~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 1 ~systemActive~0)) [2020-07-28 19:04:32,548 INFO L264 CegarLoopResult]: At program point L854-1(lines 849 857) the Hoare annotation is: false [2020-07-28 19:04:32,549 INFO L264 CegarLoopResult]: At program point L854-2(lines 849 857) the Hoare annotation is: false [2020-07-28 19:04:32,549 INFO L264 CegarLoopResult]: At program point L854-3(lines 849 857) the Hoare annotation is: false [2020-07-28 19:04:32,549 INFO L264 CegarLoopResult]: At program point L854-4(lines 849 857) the Hoare annotation is: false [2020-07-28 19:04:32,549 INFO L264 CegarLoopResult]: At program point L854-5(lines 849 857) the Hoare annotation is: false [2020-07-28 19:04:32,549 INFO L268 CegarLoopResult]: For program point L524(lines 524 541) no Hoare annotation was computed. [2020-07-28 19:04:32,549 INFO L268 CegarLoopResult]: For program point L524-1(lines 524 541) no Hoare annotation was computed. [2020-07-28 19:04:32,550 INFO L268 CegarLoopResult]: For program point L524-2(lines 524 541) no Hoare annotation was computed. [2020-07-28 19:04:32,550 INFO L268 CegarLoopResult]: For program point L524-3(lines 524 541) no Hoare annotation was computed. [2020-07-28 19:04:32,550 INFO L268 CegarLoopResult]: For program point L524-4(lines 524 541) no Hoare annotation was computed. [2020-07-28 19:04:32,550 INFO L268 CegarLoopResult]: For program point L524-5(lines 524 541) no Hoare annotation was computed. [2020-07-28 19:04:32,550 INFO L268 CegarLoopResult]: For program point L524-6(lines 524 541) no Hoare annotation was computed. [2020-07-28 19:04:32,551 INFO L268 CegarLoopResult]: For program point L524-7(lines 524 541) no Hoare annotation was computed. [2020-07-28 19:04:32,551 INFO L268 CegarLoopResult]: For program point L524-8(lines 524 541) no Hoare annotation was computed. [2020-07-28 19:04:32,551 INFO L268 CegarLoopResult]: For program point L524-9(lines 524 541) no Hoare annotation was computed. [2020-07-28 19:04:32,551 INFO L268 CegarLoopResult]: For program point L524-10(lines 524 541) no Hoare annotation was computed. [2020-07-28 19:04:32,551 INFO L268 CegarLoopResult]: For program point L524-11(lines 524 541) no Hoare annotation was computed. [2020-07-28 19:04:32,551 INFO L264 CegarLoopResult]: At program point L492(lines 491 510) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 1 ~waterLevel~0) (= |ULTIMATE.start_valid_product_#res| ~systemActive~0) (= ULTIMATE.start_main_~tmp~10 ~systemActive~0) (= 1 ~systemActive~0)) [2020-07-28 19:04:32,552 INFO L268 CegarLoopResult]: For program point L492-1(lines 492 498) no Hoare annotation was computed. [2020-07-28 19:04:32,552 INFO L264 CegarLoopResult]: At program point L492-2(lines 491 510) the Hoare annotation is: false [2020-07-28 19:04:32,552 INFO L264 CegarLoopResult]: At program point L492-3(lines 491 510) the Hoare annotation is: false [2020-07-28 19:04:32,552 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:04:32,552 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 750) no Hoare annotation was computed. [2020-07-28 19:04:32,552 INFO L268 CegarLoopResult]: For program point L528(lines 528 536) no Hoare annotation was computed. [2020-07-28 19:04:32,553 INFO L268 CegarLoopResult]: For program point L528-1(lines 528 536) no Hoare annotation was computed. [2020-07-28 19:04:32,553 INFO L268 CegarLoopResult]: For program point L528-2(lines 528 536) no Hoare annotation was computed. [2020-07-28 19:04:32,553 INFO L268 CegarLoopResult]: For program point L528-3(lines 528 536) no Hoare annotation was computed. [2020-07-28 19:04:32,553 INFO L268 CegarLoopResult]: For program point L528-4(lines 528 536) no Hoare annotation was computed. [2020-07-28 19:04:32,553 INFO L268 CegarLoopResult]: For program point L528-5(lines 528 536) no Hoare annotation was computed. [2020-07-28 19:04:32,553 INFO L268 CegarLoopResult]: For program point L528-6(lines 528 536) no Hoare annotation was computed. [2020-07-28 19:04:32,554 INFO L268 CegarLoopResult]: For program point L528-7(lines 528 536) no Hoare annotation was computed. [2020-07-28 19:04:32,554 INFO L268 CegarLoopResult]: For program point L528-8(lines 528 536) no Hoare annotation was computed. [2020-07-28 19:04:32,554 INFO L268 CegarLoopResult]: For program point L528-9(lines 528 536) no Hoare annotation was computed. [2020-07-28 19:04:32,554 INFO L268 CegarLoopResult]: For program point L528-10(lines 528 536) no Hoare annotation was computed. [2020-07-28 19:04:32,554 INFO L268 CegarLoopResult]: For program point L528-11(lines 528 536) no Hoare annotation was computed. [2020-07-28 19:04:32,554 INFO L268 CegarLoopResult]: For program point L430(lines 430 436) no Hoare annotation was computed. [2020-07-28 19:04:32,555 INFO L264 CegarLoopResult]: At program point L430-1(lines 430 436) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= |ULTIMATE.start_valid_product_#res| ~systemActive~0)) (.cse2 (= ULTIMATE.start_main_~tmp~10 ~systemActive~0)) (.cse3 (= 1 ~systemActive~0))) (or (and .cse0 (= 0 ~pumpRunning~0) .cse1 .cse2 (= 1 ~waterLevel~0) .cse3) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3))) [2020-07-28 19:04:32,555 INFO L264 CegarLoopResult]: At program point L629(lines 624 632) the Hoare annotation is: false [2020-07-28 19:04:32,555 INFO L264 CegarLoopResult]: At program point L629-1(lines 624 632) the Hoare annotation is: false [2020-07-28 19:04:32,555 INFO L264 CegarLoopResult]: At program point L629-2(lines 624 632) the Hoare annotation is: false [2020-07-28 19:04:32,560 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:04:32,560 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:04:32,562 WARN L170 areAnnotationChecker]: L967 has no Hoare annotation [2020-07-28 19:04:32,562 WARN L170 areAnnotationChecker]: L967 has no Hoare annotation [2020-07-28 19:04:32,562 WARN L170 areAnnotationChecker]: L967 has no Hoare annotation [2020-07-28 19:04:32,564 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2020-07-28 19:04:32,564 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:04:32,564 WARN L170 areAnnotationChecker]: L492-1 has no Hoare annotation [2020-07-28 19:04:32,564 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2020-07-28 19:04:32,564 WARN L170 areAnnotationChecker]: L421 has no Hoare annotation [2020-07-28 19:04:32,564 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:04:32,564 WARN L170 areAnnotationChecker]: L492-1 has no Hoare annotation [2020-07-28 19:04:32,564 WARN L170 areAnnotationChecker]: L492-1 has no Hoare annotation [2020-07-28 19:04:32,564 WARN L170 areAnnotationChecker]: L422 has no Hoare annotation [2020-07-28 19:04:32,564 WARN L170 areAnnotationChecker]: L762-3 has no Hoare annotation [2020-07-28 19:04:32,565 WARN L170 areAnnotationChecker]: L762-3 has no Hoare annotation [2020-07-28 19:04:32,565 WARN L170 areAnnotationChecker]: L576-1 has no Hoare annotation [2020-07-28 19:04:32,565 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2020-07-28 19:04:32,565 WARN L170 areAnnotationChecker]: L430 has no Hoare annotation [2020-07-28 19:04:32,565 WARN L170 areAnnotationChecker]: L576-1 has no Hoare annotation [2020-07-28 19:04:32,565 WARN L170 areAnnotationChecker]: L576-1 has no Hoare annotation [2020-07-28 19:04:32,565 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2020-07-28 19:04:32,565 WARN L170 areAnnotationChecker]: L774 has no Hoare annotation [2020-07-28 19:04:32,565 WARN L170 areAnnotationChecker]: L440 has no Hoare annotation [2020-07-28 19:04:32,565 WARN L170 areAnnotationChecker]: L550-3 has no Hoare annotation [2020-07-28 19:04:32,565 WARN L170 areAnnotationChecker]: L550-3 has no Hoare annotation [2020-07-28 19:04:32,566 WARN L170 areAnnotationChecker]: L867-2 has no Hoare annotation [2020-07-28 19:04:32,566 WARN L170 areAnnotationChecker]: L440 has no Hoare annotation [2020-07-28 19:04:32,566 WARN L170 areAnnotationChecker]: L440 has no Hoare annotation [2020-07-28 19:04:32,566 WARN L170 areAnnotationChecker]: L580-1 has no Hoare annotation [2020-07-28 19:04:32,566 WARN L170 areAnnotationChecker]: L697-9 has no Hoare annotation [2020-07-28 19:04:32,566 WARN L170 areAnnotationChecker]: L524-7 has no Hoare annotation [2020-07-28 19:04:32,566 WARN L170 areAnnotationChecker]: L524-7 has no Hoare annotation [2020-07-28 19:04:32,566 WARN L170 areAnnotationChecker]: L867-2 has no Hoare annotation [2020-07-28 19:04:32,566 WARN L170 areAnnotationChecker]: L867-2 has no Hoare annotation [2020-07-28 19:04:32,566 WARN L170 areAnnotationChecker]: L786 has no Hoare annotation [2020-07-28 19:04:32,566 WARN L170 areAnnotationChecker]: L786 has no Hoare annotation [2020-07-28 19:04:32,567 WARN L170 areAnnotationChecker]: L450 has no Hoare annotation [2020-07-28 19:04:32,567 WARN L170 areAnnotationChecker]: L580-1 has no Hoare annotation [2020-07-28 19:04:32,567 WARN L170 areAnnotationChecker]: L580-1 has no Hoare annotation [2020-07-28 19:04:32,567 WARN L170 areAnnotationChecker]: L697-9 has no Hoare annotation [2020-07-28 19:04:32,567 WARN L170 areAnnotationChecker]: L697-9 has no Hoare annotation [2020-07-28 19:04:32,567 WARN L170 areAnnotationChecker]: L839-7 has no Hoare annotation [2020-07-28 19:04:32,567 WARN L170 areAnnotationChecker]: L839-7 has no Hoare annotation [2020-07-28 19:04:32,567 WARN L170 areAnnotationChecker]: L871-2 has no Hoare annotation [2020-07-28 19:04:32,567 WARN L170 areAnnotationChecker]: L450 has no Hoare annotation [2020-07-28 19:04:32,567 WARN L170 areAnnotationChecker]: L450 has no Hoare annotation [2020-07-28 19:04:32,567 WARN L170 areAnnotationChecker]: L550-2 has no Hoare annotation [2020-07-28 19:04:32,567 WARN L170 areAnnotationChecker]: L550-2 has no Hoare annotation [2020-07-28 19:04:32,568 WARN L170 areAnnotationChecker]: L697-11 has no Hoare annotation [2020-07-28 19:04:32,568 WARN L170 areAnnotationChecker]: L678-21 has no Hoare annotation [2020-07-28 19:04:32,568 WARN L170 areAnnotationChecker]: L871-2 has no Hoare annotation [2020-07-28 19:04:32,568 WARN L170 areAnnotationChecker]: L871-2 has no Hoare annotation [2020-07-28 19:04:32,568 WARN L170 areAnnotationChecker]: L897 has no Hoare annotation [2020-07-28 19:04:32,568 WARN L170 areAnnotationChecker]: L456-2 has no Hoare annotation [2020-07-28 19:04:32,568 WARN L170 areAnnotationChecker]: L456-2 has no Hoare annotation [2020-07-28 19:04:32,568 WARN L170 areAnnotationChecker]: L456 has no Hoare annotation [2020-07-28 19:04:32,568 WARN L170 areAnnotationChecker]: L456 has no Hoare annotation [2020-07-28 19:04:32,569 WARN L170 areAnnotationChecker]: L697-6 has no Hoare annotation [2020-07-28 19:04:32,569 WARN L170 areAnnotationChecker]: L524-5 has no Hoare annotation [2020-07-28 19:04:32,569 WARN L170 areAnnotationChecker]: L524-5 has no Hoare annotation [2020-07-28 19:04:32,569 WARN L170 areAnnotationChecker]: L554-3 has no Hoare annotation [2020-07-28 19:04:32,569 WARN L170 areAnnotationChecker]: L678-21 has no Hoare annotation [2020-07-28 19:04:32,569 WARN L170 areAnnotationChecker]: L678-21 has no Hoare annotation [2020-07-28 19:04:32,570 WARN L170 areAnnotationChecker]: L750-1 has no Hoare annotation [2020-07-28 19:04:32,570 WARN L170 areAnnotationChecker]: L750-1 has no Hoare annotation [2020-07-28 19:04:32,570 WARN L170 areAnnotationChecker]: L897 has no Hoare annotation [2020-07-28 19:04:32,570 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2020-07-28 19:04:32,570 WARN L170 areAnnotationChecker]: L762 has no Hoare annotation [2020-07-28 19:04:32,570 WARN L170 areAnnotationChecker]: L576 has no Hoare annotation [2020-07-28 19:04:32,571 WARN L170 areAnnotationChecker]: L697-6 has no Hoare annotation [2020-07-28 19:04:32,572 WARN L170 areAnnotationChecker]: L697-6 has no Hoare annotation [2020-07-28 19:04:32,572 WARN L170 areAnnotationChecker]: L839-5 has no Hoare annotation [2020-07-28 19:04:32,572 WARN L170 areAnnotationChecker]: L839-5 has no Hoare annotation [2020-07-28 19:04:32,572 WARN L170 areAnnotationChecker]: L554-3 has no Hoare annotation [2020-07-28 19:04:32,572 WARN L170 areAnnotationChecker]: L554-3 has no Hoare annotation [2020-07-28 19:04:32,572 WARN L170 areAnnotationChecker]: L678-23 has no Hoare annotation [2020-07-28 19:04:32,572 WARN L170 areAnnotationChecker]: L900 has no Hoare annotation [2020-07-28 19:04:32,572 WARN L170 areAnnotationChecker]: L900 has no Hoare annotation [2020-07-28 19:04:32,572 WARN L170 areAnnotationChecker]: L576 has no Hoare annotation [2020-07-28 19:04:32,572 WARN L170 areAnnotationChecker]: L576 has no Hoare annotation [2020-07-28 19:04:32,574 WARN L170 areAnnotationChecker]: L697-8 has no Hoare annotation [2020-07-28 19:04:32,574 WARN L170 areAnnotationChecker]: L678-15 has no Hoare annotation [2020-07-28 19:04:32,574 WARN L170 areAnnotationChecker]: L524-6 has no Hoare annotation [2020-07-28 19:04:32,575 WARN L170 areAnnotationChecker]: L524-6 has no Hoare annotation [2020-07-28 19:04:32,575 WARN L170 areAnnotationChecker]: L528-7 has no Hoare annotation [2020-07-28 19:04:32,575 WARN L170 areAnnotationChecker]: L900-1 has no Hoare annotation [2020-07-28 19:04:32,575 WARN L170 areAnnotationChecker]: L900-1 has no Hoare annotation [2020-07-28 19:04:32,580 WARN L170 areAnnotationChecker]: L550-1 has no Hoare annotation [2020-07-28 19:04:32,580 WARN L170 areAnnotationChecker]: L550-1 has no Hoare annotation [2020-07-28 19:04:32,580 WARN L170 areAnnotationChecker]: L867 has no Hoare annotation [2020-07-28 19:04:32,580 WARN L170 areAnnotationChecker]: L554-2 has no Hoare annotation [2020-07-28 19:04:32,580 WARN L170 areAnnotationChecker]: L678-15 has no Hoare annotation [2020-07-28 19:04:32,581 WARN L170 areAnnotationChecker]: L678-15 has no Hoare annotation [2020-07-28 19:04:32,581 WARN L170 areAnnotationChecker]: L839-6 has no Hoare annotation [2020-07-28 19:04:32,581 WARN L170 areAnnotationChecker]: L839-6 has no Hoare annotation [2020-07-28 19:04:32,581 WARN L170 areAnnotationChecker]: L528-7 has no Hoare annotation [2020-07-28 19:04:32,581 WARN L170 areAnnotationChecker]: L528-7 has no Hoare annotation [2020-07-28 19:04:32,581 WARN L170 areAnnotationChecker]: L762-6 has no Hoare annotation [2020-07-28 19:04:32,581 WARN L170 areAnnotationChecker]: L762-6 has no Hoare annotation [2020-07-28 19:04:32,582 WARN L170 areAnnotationChecker]: L576-2 has no Hoare annotation [2020-07-28 19:04:32,582 WARN L170 areAnnotationChecker]: L580 has no Hoare annotation [2020-07-28 19:04:32,582 WARN L170 areAnnotationChecker]: L697-3 has no Hoare annotation [2020-07-28 19:04:32,582 WARN L170 areAnnotationChecker]: L524-3 has no Hoare annotation [2020-07-28 19:04:32,582 WARN L170 areAnnotationChecker]: L524-3 has no Hoare annotation [2020-07-28 19:04:32,582 WARN L170 areAnnotationChecker]: L867 has no Hoare annotation [2020-07-28 19:04:32,582 WARN L170 areAnnotationChecker]: L867 has no Hoare annotation [2020-07-28 19:04:32,582 WARN L170 areAnnotationChecker]: L554-2 has no Hoare annotation [2020-07-28 19:04:32,582 WARN L170 areAnnotationChecker]: L554-2 has no Hoare annotation [2020-07-28 19:04:32,583 WARN L170 areAnnotationChecker]: L678-17 has no Hoare annotation [2020-07-28 19:04:32,583 WARN L170 areAnnotationChecker]: L678-18 has no Hoare annotation [2020-07-28 19:04:32,583 WARN L170 areAnnotationChecker]: L576-2 has no Hoare annotation [2020-07-28 19:04:32,583 WARN L170 areAnnotationChecker]: L576-2 has no Hoare annotation [2020-07-28 19:04:32,583 WARN L170 areAnnotationChecker]: L580 has no Hoare annotation [2020-07-28 19:04:32,583 WARN L170 areAnnotationChecker]: L580 has no Hoare annotation [2020-07-28 19:04:32,583 WARN L170 areAnnotationChecker]: L697-3 has no Hoare annotation [2020-07-28 19:04:32,583 WARN L170 areAnnotationChecker]: L697-3 has no Hoare annotation [2020-07-28 19:04:32,583 WARN L170 areAnnotationChecker]: L839-3 has no Hoare annotation [2020-07-28 19:04:32,583 WARN L170 areAnnotationChecker]: L839-3 has no Hoare annotation [2020-07-28 19:04:32,583 WARN L170 areAnnotationChecker]: L871 has no Hoare annotation [2020-07-28 19:04:32,584 WARN L170 areAnnotationChecker]: L524-4 has no Hoare annotation [2020-07-28 19:04:32,584 WARN L170 areAnnotationChecker]: L524-4 has no Hoare annotation [2020-07-28 19:04:32,584 WARN L170 areAnnotationChecker]: L528-5 has no Hoare annotation [2020-07-28 19:04:32,584 WARN L170 areAnnotationChecker]: L678-18 has no Hoare annotation [2020-07-28 19:04:32,584 WARN L170 areAnnotationChecker]: L678-18 has no Hoare annotation [2020-07-28 19:04:32,584 WARN L170 areAnnotationChecker]: L550-5 has no Hoare annotation [2020-07-28 19:04:32,585 WARN L170 areAnnotationChecker]: L550-5 has no Hoare annotation [2020-07-28 19:04:32,585 WARN L170 areAnnotationChecker]: L867-4 has no Hoare annotation [2020-07-28 19:04:32,585 WARN L170 areAnnotationChecker]: L550 has no Hoare annotation [2020-07-28 19:04:32,585 WARN L170 areAnnotationChecker]: L550 has no Hoare annotation [2020-07-28 19:04:32,585 WARN L170 areAnnotationChecker]: L697-5 has no Hoare annotation [2020-07-28 19:04:32,586 WARN L170 areAnnotationChecker]: L678-9 has no Hoare annotation [2020-07-28 19:04:32,586 WARN L170 areAnnotationChecker]: L871 has no Hoare annotation [2020-07-28 19:04:32,586 WARN L170 areAnnotationChecker]: L871 has no Hoare annotation [2020-07-28 19:04:32,586 WARN L170 areAnnotationChecker]: L839-4 has no Hoare annotation [2020-07-28 19:04:32,586 WARN L170 areAnnotationChecker]: L839-4 has no Hoare annotation [2020-07-28 19:04:32,586 WARN L170 areAnnotationChecker]: L528-5 has no Hoare annotation [2020-07-28 19:04:32,586 WARN L170 areAnnotationChecker]: L528-5 has no Hoare annotation [2020-07-28 19:04:32,586 WARN L170 areAnnotationChecker]: L678-20 has no Hoare annotation [2020-07-28 19:04:32,586 WARN L170 areAnnotationChecker]: L580-2 has no Hoare annotation [2020-07-28 19:04:32,586 WARN L170 areAnnotationChecker]: L697-15 has no Hoare annotation [2020-07-28 19:04:32,586 WARN L170 areAnnotationChecker]: L524-11 has no Hoare annotation [2020-07-28 19:04:32,587 WARN L170 areAnnotationChecker]: L524-11 has no Hoare annotation [2020-07-28 19:04:32,587 WARN L170 areAnnotationChecker]: L867-4 has no Hoare annotation [2020-07-28 19:04:32,587 WARN L170 areAnnotationChecker]: L867-4 has no Hoare annotation [2020-07-28 19:04:32,587 WARN L170 areAnnotationChecker]: L697 has no Hoare annotation [2020-07-28 19:04:32,587 WARN L170 areAnnotationChecker]: L524-1 has no Hoare annotation [2020-07-28 19:04:32,587 WARN L170 areAnnotationChecker]: L524-1 has no Hoare annotation [2020-07-28 19:04:32,587 WARN L170 areAnnotationChecker]: L554-1 has no Hoare annotation [2020-07-28 19:04:32,589 WARN L170 areAnnotationChecker]: L678-9 has no Hoare annotation [2020-07-28 19:04:32,589 WARN L170 areAnnotationChecker]: L678-9 has no Hoare annotation [2020-07-28 19:04:32,589 WARN L170 areAnnotationChecker]: L750 has no Hoare annotation [2020-07-28 19:04:32,589 WARN L170 areAnnotationChecker]: L750 has no Hoare annotation [2020-07-28 19:04:32,589 WARN L170 areAnnotationChecker]: L678-12 has no Hoare annotation [2020-07-28 19:04:32,590 WARN L170 areAnnotationChecker]: L528-6 has no Hoare annotation [2020-07-28 19:04:32,590 WARN L170 areAnnotationChecker]: L580-2 has no Hoare annotation [2020-07-28 19:04:32,590 WARN L170 areAnnotationChecker]: L580-2 has no Hoare annotation [2020-07-28 19:04:32,590 WARN L170 areAnnotationChecker]: L697-15 has no Hoare annotation [2020-07-28 19:04:32,590 WARN L170 areAnnotationChecker]: L697-15 has no Hoare annotation [2020-07-28 19:04:32,590 WARN L170 areAnnotationChecker]: L839-11 has no Hoare annotation [2020-07-28 19:04:32,591 WARN L170 areAnnotationChecker]: L839-11 has no Hoare annotation [2020-07-28 19:04:32,591 WARN L170 areAnnotationChecker]: L871-4 has no Hoare annotation [2020-07-28 19:04:32,591 WARN L170 areAnnotationChecker]: L697 has no Hoare annotation [2020-07-28 19:04:32,591 WARN L170 areAnnotationChecker]: L697 has no Hoare annotation [2020-07-28 19:04:32,591 WARN L170 areAnnotationChecker]: L839-1 has no Hoare annotation [2020-07-28 19:04:32,591 WARN L170 areAnnotationChecker]: L839-1 has no Hoare annotation [2020-07-28 19:04:32,592 WARN L170 areAnnotationChecker]: L554-1 has no Hoare annotation [2020-07-28 19:04:32,592 WARN L170 areAnnotationChecker]: L554-1 has no Hoare annotation [2020-07-28 19:04:32,592 WARN L170 areAnnotationChecker]: L678-11 has no Hoare annotation [2020-07-28 19:04:32,592 WARN L170 areAnnotationChecker]: L678-12 has no Hoare annotation [2020-07-28 19:04:32,592 WARN L170 areAnnotationChecker]: L678-12 has no Hoare annotation [2020-07-28 19:04:32,592 WARN L170 areAnnotationChecker]: L528-6 has no Hoare annotation [2020-07-28 19:04:32,593 WARN L170 areAnnotationChecker]: L528-6 has no Hoare annotation [2020-07-28 19:04:32,593 WARN L170 areAnnotationChecker]: L550-4 has no Hoare annotation [2020-07-28 19:04:32,593 WARN L170 areAnnotationChecker]: L550-4 has no Hoare annotation [2020-07-28 19:04:32,593 WARN L170 areAnnotationChecker]: L697-17 has no Hoare annotation [2020-07-28 19:04:32,593 WARN L170 areAnnotationChecker]: L678-33 has no Hoare annotation [2020-07-28 19:04:32,593 WARN L170 areAnnotationChecker]: L871-4 has no Hoare annotation [2020-07-28 19:04:32,594 WARN L170 areAnnotationChecker]: L871-4 has no Hoare annotation [2020-07-28 19:04:32,594 WARN L170 areAnnotationChecker]: L697-2 has no Hoare annotation [2020-07-28 19:04:32,594 WARN L170 areAnnotationChecker]: L678-3 has no Hoare annotation [2020-07-28 19:04:32,594 WARN L170 areAnnotationChecker]: L524-2 has no Hoare annotation [2020-07-28 19:04:32,594 WARN L170 areAnnotationChecker]: L524-2 has no Hoare annotation [2020-07-28 19:04:32,594 WARN L170 areAnnotationChecker]: L528-3 has no Hoare annotation [2020-07-28 19:04:32,595 WARN L170 areAnnotationChecker]: L678-14 has no Hoare annotation [2020-07-28 19:04:32,595 WARN L170 areAnnotationChecker]: L697-12 has no Hoare annotation [2020-07-28 19:04:32,595 WARN L170 areAnnotationChecker]: L524-9 has no Hoare annotation [2020-07-28 19:04:32,595 WARN L170 areAnnotationChecker]: L524-9 has no Hoare annotation [2020-07-28 19:04:32,595 WARN L170 areAnnotationChecker]: L554-5 has no Hoare annotation [2020-07-28 19:04:32,595 WARN L170 areAnnotationChecker]: L678-33 has no Hoare annotation [2020-07-28 19:04:32,595 WARN L170 areAnnotationChecker]: L678-33 has no Hoare annotation [2020-07-28 19:04:32,596 WARN L170 areAnnotationChecker]: L750-2 has no Hoare annotation [2020-07-28 19:04:32,596 WARN L170 areAnnotationChecker]: L750-2 has no Hoare annotation [2020-07-28 19:04:32,596 WARN L170 areAnnotationChecker]: L554 has no Hoare annotation [2020-07-28 19:04:32,596 WARN L170 areAnnotationChecker]: L678-3 has no Hoare annotation [2020-07-28 19:04:32,596 WARN L170 areAnnotationChecker]: L678-3 has no Hoare annotation [2020-07-28 19:04:32,597 WARN L170 areAnnotationChecker]: L839-2 has no Hoare annotation [2020-07-28 19:04:32,597 WARN L170 areAnnotationChecker]: L839-2 has no Hoare annotation [2020-07-28 19:04:32,597 WARN L170 areAnnotationChecker]: L528-3 has no Hoare annotation [2020-07-28 19:04:32,597 WARN L170 areAnnotationChecker]: L528-3 has no Hoare annotation [2020-07-28 19:04:32,597 WARN L170 areAnnotationChecker]: L528-4 has no Hoare annotation [2020-07-28 19:04:32,597 WARN L170 areAnnotationChecker]: L697-12 has no Hoare annotation [2020-07-28 19:04:32,597 WARN L170 areAnnotationChecker]: L697-12 has no Hoare annotation [2020-07-28 19:04:32,598 WARN L170 areAnnotationChecker]: L839-9 has no Hoare annotation [2020-07-28 19:04:32,598 WARN L170 areAnnotationChecker]: L839-9 has no Hoare annotation [2020-07-28 19:04:32,598 WARN L170 areAnnotationChecker]: L554-5 has no Hoare annotation [2020-07-28 19:04:32,598 WARN L170 areAnnotationChecker]: L554-5 has no Hoare annotation [2020-07-28 19:04:32,598 WARN L170 areAnnotationChecker]: L678-35 has no Hoare annotation [2020-07-28 19:04:32,598 WARN L170 areAnnotationChecker]: L554 has no Hoare annotation [2020-07-28 19:04:32,599 WARN L170 areAnnotationChecker]: L554 has no Hoare annotation [2020-07-28 19:04:32,599 WARN L170 areAnnotationChecker]: L678-5 has no Hoare annotation [2020-07-28 19:04:32,599 WARN L170 areAnnotationChecker]: L678-6 has no Hoare annotation [2020-07-28 19:04:32,599 WARN L170 areAnnotationChecker]: L528-4 has no Hoare annotation [2020-07-28 19:04:32,599 WARN L170 areAnnotationChecker]: L528-4 has no Hoare annotation [2020-07-28 19:04:32,599 WARN L170 areAnnotationChecker]: L697-14 has no Hoare annotation [2020-07-28 19:04:32,600 WARN L170 areAnnotationChecker]: L678-27 has no Hoare annotation [2020-07-28 19:04:32,600 WARN L170 areAnnotationChecker]: L524-10 has no Hoare annotation [2020-07-28 19:04:32,600 WARN L170 areAnnotationChecker]: L524-10 has no Hoare annotation [2020-07-28 19:04:32,600 WARN L170 areAnnotationChecker]: L528-11 has no Hoare annotation [2020-07-28 19:04:32,600 WARN L170 areAnnotationChecker]: L524 has no Hoare annotation [2020-07-28 19:04:32,600 WARN L170 areAnnotationChecker]: L524 has no Hoare annotation [2020-07-28 19:04:32,601 WARN L170 areAnnotationChecker]: L528-1 has no Hoare annotation [2020-07-28 19:04:32,601 WARN L170 areAnnotationChecker]: L678-6 has no Hoare annotation [2020-07-28 19:04:32,601 WARN L170 areAnnotationChecker]: L678-6 has no Hoare annotation [2020-07-28 19:04:32,601 WARN L170 areAnnotationChecker]: L554-4 has no Hoare annotation [2020-07-28 19:04:32,601 WARN L170 areAnnotationChecker]: L678-27 has no Hoare annotation [2020-07-28 19:04:32,601 WARN L170 areAnnotationChecker]: L678-27 has no Hoare annotation [2020-07-28 19:04:32,601 WARN L170 areAnnotationChecker]: L839-10 has no Hoare annotation [2020-07-28 19:04:32,602 WARN L170 areAnnotationChecker]: L839-10 has no Hoare annotation [2020-07-28 19:04:32,602 WARN L170 areAnnotationChecker]: L528-11 has no Hoare annotation [2020-07-28 19:04:32,602 WARN L170 areAnnotationChecker]: L528-11 has no Hoare annotation [2020-07-28 19:04:32,602 WARN L170 areAnnotationChecker]: L839 has no Hoare annotation [2020-07-28 19:04:32,603 WARN L170 areAnnotationChecker]: L839 has no Hoare annotation [2020-07-28 19:04:32,603 WARN L170 areAnnotationChecker]: L528-1 has no Hoare annotation [2020-07-28 19:04:32,603 WARN L170 areAnnotationChecker]: L528-1 has no Hoare annotation [2020-07-28 19:04:32,603 WARN L170 areAnnotationChecker]: L678-8 has no Hoare annotation [2020-07-28 19:04:32,603 WARN L170 areAnnotationChecker]: L554-4 has no Hoare annotation [2020-07-28 19:04:32,603 WARN L170 areAnnotationChecker]: L554-4 has no Hoare annotation [2020-07-28 19:04:32,604 WARN L170 areAnnotationChecker]: L678-29 has no Hoare annotation [2020-07-28 19:04:32,604 WARN L170 areAnnotationChecker]: L678-30 has no Hoare annotation [2020-07-28 19:04:32,604 WARN L170 areAnnotationChecker]: L678 has no Hoare annotation [2020-07-28 19:04:32,604 WARN L170 areAnnotationChecker]: L528-2 has no Hoare annotation [2020-07-28 19:04:32,604 WARN L170 areAnnotationChecker]: L524-8 has no Hoare annotation [2020-07-28 19:04:32,604 WARN L170 areAnnotationChecker]: L524-8 has no Hoare annotation [2020-07-28 19:04:32,605 WARN L170 areAnnotationChecker]: L528-9 has no Hoare annotation [2020-07-28 19:04:32,605 WARN L170 areAnnotationChecker]: L678-30 has no Hoare annotation [2020-07-28 19:04:32,605 WARN L170 areAnnotationChecker]: L678-30 has no Hoare annotation [2020-07-28 19:04:32,605 WARN L170 areAnnotationChecker]: L678 has no Hoare annotation [2020-07-28 19:04:32,605 WARN L170 areAnnotationChecker]: L678 has no Hoare annotation [2020-07-28 19:04:32,605 WARN L170 areAnnotationChecker]: L528-2 has no Hoare annotation [2020-07-28 19:04:32,606 WARN L170 areAnnotationChecker]: L528-2 has no Hoare annotation [2020-07-28 19:04:32,606 WARN L170 areAnnotationChecker]: L839-8 has no Hoare annotation [2020-07-28 19:04:32,606 WARN L170 areAnnotationChecker]: L839-8 has no Hoare annotation [2020-07-28 19:04:32,606 WARN L170 areAnnotationChecker]: L528-9 has no Hoare annotation [2020-07-28 19:04:32,606 WARN L170 areAnnotationChecker]: L528-9 has no Hoare annotation [2020-07-28 19:04:32,607 WARN L170 areAnnotationChecker]: L678-32 has no Hoare annotation [2020-07-28 19:04:32,607 WARN L170 areAnnotationChecker]: L678-2 has no Hoare annotation [2020-07-28 19:04:32,608 WARN L170 areAnnotationChecker]: L678-24 has no Hoare annotation [2020-07-28 19:04:32,608 WARN L170 areAnnotationChecker]: L528-10 has no Hoare annotation [2020-07-28 19:04:32,608 WARN L170 areAnnotationChecker]: L528 has no Hoare annotation [2020-07-28 19:04:32,608 WARN L170 areAnnotationChecker]: L678-24 has no Hoare annotation [2020-07-28 19:04:32,608 WARN L170 areAnnotationChecker]: L678-24 has no Hoare annotation [2020-07-28 19:04:32,609 WARN L170 areAnnotationChecker]: L528-10 has no Hoare annotation [2020-07-28 19:04:32,609 WARN L170 areAnnotationChecker]: L528-10 has no Hoare annotation [2020-07-28 19:04:32,609 WARN L170 areAnnotationChecker]: L528 has no Hoare annotation [2020-07-28 19:04:32,609 WARN L170 areAnnotationChecker]: L528 has no Hoare annotation [2020-07-28 19:04:32,609 WARN L170 areAnnotationChecker]: L678-26 has no Hoare annotation [2020-07-28 19:04:32,609 WARN L170 areAnnotationChecker]: L528-8 has no Hoare annotation [2020-07-28 19:04:32,610 WARN L170 areAnnotationChecker]: L528-8 has no Hoare annotation [2020-07-28 19:04:32,610 WARN L170 areAnnotationChecker]: L528-8 has no Hoare annotation [2020-07-28 19:04:32,610 INFO L163 areAnnotationChecker]: CFG has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:04:32,670 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:04:32 BoogieIcfgContainer [2020-07-28 19:04:32,670 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:04:32,671 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:04:32,671 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:04:32,671 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:04:32,672 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:03:57" (3/4) ... [2020-07-28 19:04:32,676 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:04:32,713 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:04:32,716 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:04:32,717 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:04:32,719 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:04:32,721 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:04:32,723 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:04:32,724 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:04:32,765 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((0 == pumpRunning && \result == systemActive) && 1 == waterLevel) && 1 == systemActive [2020-07-28 19:04:32,766 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == pumpRunning && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && 1 == systemActive [2020-07-28 19:04:32,767 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((2 <= waterLevel && 0 == splverifierCounter) && 1 <= \result) && \result == systemActive) && tmp == systemActive) && 1 <= tmp) && 1 == systemActive) || (((((0 == splverifierCounter && 1 == \result) && tmp == waterLevel) && 0 == pumpRunning) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:04:32,767 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:04:32,768 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:04:32,770 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == splverifierCounter && 1 <= waterLevel) && \result == systemActive) && tmp == systemActive) && 1 == systemActive [2020-07-28 19:04:32,770 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == splverifierCounter && 1 == \result) && 1 <= waterLevel) && 0 == pumpRunning) && tmp == systemActive) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:04:32,772 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == splverifierCounter && 1 <= \result) && 1 <= waterLevel) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 <= \result) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) [2020-07-28 19:04:32,773 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == splverifierCounter && 1 <= waterLevel) && \result == systemActive) && tmp == systemActive) && 1 == systemActive [2020-07-28 19:04:32,780 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == splverifierCounter && 1 <= waterLevel) && \result == systemActive) && tmp == systemActive) && 1 == systemActive [2020-07-28 19:04:32,782 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || ((((((0 == splverifierCounter && 1 == \result) && 0 == pumpRunning) && tmp == systemActive) && 1 == waterLevel) && !(0 == \result)) && 1 == systemActive) [2020-07-28 19:04:32,788 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || (((((((((!(0 == tmp) && 0 == tmp___0) && 0 == splverifierCounter) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && !(0 == \result)) && 1 == systemActive) [2020-07-28 19:04:32,789 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((0 == \result && 0 == splverifierCounter) && 1 <= waterLevel) && \result == systemActive) && tmp == systemActive) && 1 == systemActive [2020-07-28 19:04:32,790 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == splverifierCounter && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && !(0 == \result)) && 1 == systemActive) || (((((1 == tmp && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:04:32,790 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0 == \result && 0 == splverifierCounter) && !(0 == tmp___0)) && 0 == tmp) && !(0 == \result)) && 1 <= waterLevel) && \result == systemActive) && tmp == systemActive) && 1 == systemActive [2020-07-28 19:04:32,791 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || (((((((((!(0 == tmp) && 0 == tmp___0) && 0 == splverifierCounter) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && !(0 == \result)) && 1 == systemActive) [2020-07-28 19:04:32,792 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((0 == \result && 0 == splverifierCounter) && 0 == tmp) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && !(0 == \result)) && 1 == systemActive [2020-07-28 19:04:32,794 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((((0 == \result && !(0 == tmp)) && 0 == tmp___0) && 0 == splverifierCounter) && 0 == tmp) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && !(0 == \result)) && 1 == systemActive [2020-07-28 19:04:32,928 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:04:32,929 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:04:32,931 INFO L168 Benchmark]: Toolchain (without parser) took 38922.74 ms. Allocated memory was 1.0 GB in the beginning and 1.6 GB in the end (delta: 561.0 MB). Free memory was 961.5 MB in the beginning and 1.2 GB in the end (delta: -224.4 MB). Peak memory consumption was 336.6 MB. Max. memory is 11.5 GB. [2020-07-28 19:04:32,931 INFO L168 Benchmark]: CDTParser took 0.33 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:04:32,932 INFO L168 Benchmark]: CACSL2BoogieTranslator took 737.41 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 123.2 MB). Free memory was 961.5 MB in the beginning and 1.1 GB in the end (delta: -124.6 MB). Peak memory consumption was 27.0 MB. Max. memory is 11.5 GB. [2020-07-28 19:04:32,932 INFO L168 Benchmark]: Boogie Procedure Inliner took 124.44 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:04:32,933 INFO L168 Benchmark]: Boogie Preprocessor took 74.62 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:04:32,933 INFO L168 Benchmark]: RCFGBuilder took 2266.45 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 844.3 MB in the end (delta: 228.4 MB). Peak memory consumption was 228.4 MB. Max. memory is 11.5 GB. [2020-07-28 19:04:32,934 INFO L168 Benchmark]: TraceAbstraction took 35451.68 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 437.8 MB). Free memory was 844.3 MB in the beginning and 1.2 GB in the end (delta: -356.5 MB). Peak memory consumption was 81.3 MB. Max. memory is 11.5 GB. [2020-07-28 19:04:32,934 INFO L168 Benchmark]: Witness Printer took 258.31 ms. Allocated memory is still 1.6 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 14.9 MB). Peak memory consumption was 14.9 MB. Max. memory is 11.5 GB. [2020-07-28 19:04:32,937 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.33 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 737.41 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 123.2 MB). Free memory was 961.5 MB in the beginning and 1.1 GB in the end (delta: -124.6 MB). Peak memory consumption was 27.0 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 124.44 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 74.62 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.7 MB). Peak memory consumption was 6.7 MB. Max. memory is 11.5 GB. * RCFGBuilder took 2266.45 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 844.3 MB in the end (delta: 228.4 MB). Peak memory consumption was 228.4 MB. Max. memory is 11.5 GB. * TraceAbstraction took 35451.68 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 437.8 MB). Free memory was 844.3 MB in the beginning and 1.2 GB in the end (delta: -356.5 MB). Peak memory consumption was 81.3 MB. Max. memory is 11.5 GB. * Witness Printer took 258.31 ms. Allocated memory is still 1.6 GB. Free memory was 1.2 GB in the beginning and 1.2 GB in the end (delta: 14.9 MB). Peak memory consumption was 14.9 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 750]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 750]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 750]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: (((((((0 == \result && 0 == splverifierCounter) && 0 == tmp) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && !(0 == \result)) && 1 == systemActive - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && !(0 == \result)) && 1 == systemActive) || (((((1 == tmp && 2 <= waterLevel) && 0 == splverifierCounter) && 1 == \result) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || (((((((((!(0 == tmp) && 0 == tmp___0) && 0 == splverifierCounter) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && !(0 == \result)) && 1 == systemActive) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 896]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 957]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((((((2 <= waterLevel && 0 == splverifierCounter) && 1 <= \result) && \result == systemActive) && tmp == systemActive) && 1 <= tmp) && 1 == systemActive) || (((((0 == splverifierCounter && 1 == \result) && tmp == waterLevel) && 0 == pumpRunning) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: ((((((((((0 == \result && !(0 == tmp)) && 0 == tmp___0) && 0 == splverifierCounter) && 0 == tmp) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && !(0 == \result)) && 1 == systemActive - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || (((((((((!(0 == tmp) && 0 == tmp___0) && 0 == splverifierCounter) && 0 == \result) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && !(0 == \result)) && 1 == systemActive) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 624]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 669]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 826]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 826]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 940]: Loop Invariant Derived loop invariant: (((0 == pumpRunning && \result == systemActive) && 1 == waterLevel) && tmp == systemActive) && 1 == systemActive - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 440]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 826]: Loop Invariant Derived loop invariant: ((((((0 == splverifierCounter && 1 <= \result) && 1 <= waterLevel) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || (((((2 <= waterLevel && 0 == splverifierCounter) && 1 <= \result) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 688]: Loop Invariant Derived loop invariant: (((((((0 == \result && 0 == splverifierCounter) && !(0 == tmp___0)) && 0 == tmp) && !(0 == \result)) && 1 <= waterLevel) && \result == systemActive) && tmp == systemActive) && 1 == systemActive - InvariantResult [Line: 849]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 491]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 794]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 849]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 499]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 1 == \result) && 1 <= waterLevel) && 0 == pumpRunning) && tmp == systemActive) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (0 == pumpRunning && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 794]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 419]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 499]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 849]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 499]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 849]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 967]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 430]: Loop Invariant Derived loop invariant: (((((0 == splverifierCounter && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == waterLevel) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 491]: Loop Invariant Derived loop invariant: (((0 == splverifierCounter && 1 <= waterLevel) && \result == systemActive) && tmp == systemActive) && 1 == systemActive - InvariantResult [Line: 613]: Loop Invariant Derived loop invariant: (((0 == splverifierCounter && 1 <= waterLevel) && \result == systemActive) && tmp == systemActive) && 1 == systemActive - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 849]: Loop Invariant Derived loop invariant: ((((0 == \result && 0 == splverifierCounter) && 1 <= waterLevel) && \result == systemActive) && tmp == systemActive) && 1 == systemActive - InvariantResult [Line: 613]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 849]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 491]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 613]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 794]: Loop Invariant Derived loop invariant: (((0 == splverifierCounter && 1 <= waterLevel) && \result == systemActive) && tmp == systemActive) && 1 == systemActive - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: (((((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && \result == systemActive) && tmp == systemActive) && 1 == systemActive) || ((((((0 == splverifierCounter && 1 == \result) && 0 == pumpRunning) && tmp == systemActive) && 1 == waterLevel) && !(0 == \result)) && 1 == systemActive) - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 736]: Loop Invariant Derived loop invariant: ((0 == pumpRunning && \result == systemActive) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 835]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 189 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 29.4s, OverallIterations: 11, TraceHistogramMax: 3, AutomataDifference: 21.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 5.8s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1498 SDtfs, 2890 SDslu, 2506 SDs, 0 SdLazy, 484 SolverSat, 105 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 1.1s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 246 GetRequests, 171 SyntacticMatches, 0 SemanticMatches, 75 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=307occurred in iteration=10, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 3.4s AutomataMinimizationTime, 11 MinimizatonAttempts, 1117 StatesRemovedByMinimization, 7 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 66 LocationsWithAnnotation, 66 PreInvPairs, 166 NumberOfFragments, 635 HoareAnnotationTreeSize, 66 FomulaSimplifications, 346453 FormulaSimplificationTreeSizeReduction, 1.4s HoareSimplificationTime, 66 FomulaSimplificationsInter, 117836 FormulaSimplificationTreeSizeReductionInter, 4.2s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.7s SatisfiabilityAnalysisTime, 1.8s InterpolantComputationTime, 601 NumberOfCodeBlocks, 601 NumberOfCodeBlocksAsserted, 14 NumberOfCheckSat, 588 ConstructedInterpolants, 0 QuantifiedInterpolants, 62528 SizeOfPredicates, 7 NumberOfNonLiveVariables, 909 ConjunctsInSsa, 14 ConjunctsInUnsatCore, 13 InterpolantComputations, 10 PerfectInterpolantSequences, 197/215 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...