./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 8bd4bc60 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx12G -Xms1G -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ce17648ffa5822f201dca35a60378555aafbd885 ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-8bd4bc6 [2020-07-28 19:04:23,793 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-28 19:04:23,795 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-28 19:04:23,807 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-28 19:04:23,808 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-28 19:04:23,809 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-28 19:04:23,810 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-28 19:04:23,812 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-28 19:04:23,814 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-28 19:04:23,815 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-28 19:04:23,816 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-28 19:04:23,817 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-28 19:04:23,817 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-28 19:04:23,818 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-28 19:04:23,820 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-28 19:04:23,821 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-28 19:04:23,822 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-28 19:04:23,823 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-28 19:04:23,825 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-28 19:04:23,827 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-28 19:04:23,829 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-28 19:04:23,830 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-28 19:04:23,831 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-28 19:04:23,832 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-28 19:04:23,835 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-28 19:04:23,835 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-28 19:04:23,835 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-28 19:04:23,836 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-28 19:04:23,837 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-28 19:04:23,838 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-28 19:04:23,838 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-28 19:04:23,839 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-28 19:04:23,840 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-28 19:04:23,841 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-28 19:04:23,842 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-28 19:04:23,843 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-28 19:04:23,843 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-28 19:04:23,844 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-28 19:04:23,844 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-28 19:04:23,845 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-28 19:04:23,846 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-28 19:04:23,847 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-32bit-Automizer_Default.epf [2020-07-28 19:04:23,862 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-28 19:04:23,862 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-28 19:04:23,864 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-28 19:04:23,864 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-28 19:04:23,864 INFO L138 SettingsManager]: * Use SBE=true [2020-07-28 19:04:23,865 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-28 19:04:23,865 INFO L138 SettingsManager]: * sizeof long=4 [2020-07-28 19:04:23,865 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-28 19:04:23,865 INFO L138 SettingsManager]: * sizeof POINTER=4 [2020-07-28 19:04:23,866 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-28 19:04:23,866 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-28 19:04:23,866 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-28 19:04:23,867 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-28 19:04:23,867 INFO L138 SettingsManager]: * sizeof long double=12 [2020-07-28 19:04:23,867 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-28 19:04:23,867 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-28 19:04:23,868 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-28 19:04:23,868 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-28 19:04:23,868 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-28 19:04:23,869 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-28 19:04:23,869 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-28 19:04:23,869 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:04:23,870 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-28 19:04:23,870 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-28 19:04:23,870 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-28 19:04:23,870 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-28 19:04:23,871 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-28 19:04:23,871 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-28 19:04:23,871 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-28 19:04:23,872 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(__VERIFIER_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ce17648ffa5822f201dca35a60378555aafbd885 [2020-07-28 19:04:24,168 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-28 19:04:24,181 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-28 19:04:24,185 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-28 19:04:24,187 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-28 19:04:24,187 INFO L275 PluginConnector]: CDTParser initialized [2020-07-28 19:04:24,188 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c [2020-07-28 19:04:24,247 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f7750ea43/d5b794372f4f4524854210992d98732d/FLAG7f8598984 [2020-07-28 19:04:24,704 INFO L306 CDTParser]: Found 1 translation units. [2020-07-28 19:04:24,705 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/minepump_spec4_product62.cil.c [2020-07-28 19:04:24,721 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f7750ea43/d5b794372f4f4524854210992d98732d/FLAG7f8598984 [2020-07-28 19:04:25,068 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f7750ea43/d5b794372f4f4524854210992d98732d [2020-07-28 19:04:25,071 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-28 19:04:25,074 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2020-07-28 19:04:25,075 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-28 19:04:25,076 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-28 19:04:25,079 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-28 19:04:25,081 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:04:25" (1/1) ... [2020-07-28 19:04:25,084 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@25b56b98 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:25, skipping insertion in model container [2020-07-28 19:04:25,084 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 28.07 07:04:25" (1/1) ... [2020-07-28 19:04:25,094 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-28 19:04:25,161 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-28 19:04:25,630 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:04:25,644 INFO L203 MainTranslator]: Completed pre-run [2020-07-28 19:04:25,746 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-28 19:04:25,801 INFO L208 MainTranslator]: Completed translation [2020-07-28 19:04:25,803 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:25 WrapperNode [2020-07-28 19:04:25,803 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-28 19:04:25,805 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2020-07-28 19:04:25,805 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2020-07-28 19:04:25,806 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2020-07-28 19:04:25,815 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:25" (1/1) ... [2020-07-28 19:04:25,855 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:25" (1/1) ... [2020-07-28 19:04:25,941 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2020-07-28 19:04:25,941 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-28 19:04:25,942 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-28 19:04:25,942 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-28 19:04:25,952 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:25" (1/1) ... [2020-07-28 19:04:25,953 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:25" (1/1) ... [2020-07-28 19:04:25,961 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:25" (1/1) ... [2020-07-28 19:04:25,961 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:25" (1/1) ... [2020-07-28 19:04:25,995 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:25" (1/1) ... [2020-07-28 19:04:26,016 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:25" (1/1) ... [2020-07-28 19:04:26,023 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:25" (1/1) ... [2020-07-28 19:04:26,034 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-28 19:04:26,035 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-28 19:04:26,035 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-28 19:04:26,035 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-28 19:04:26,036 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:25" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-28 19:04:26,101 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-28 19:04:26,101 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-28 19:04:26,101 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-28 19:04:26,101 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-28 19:04:28,286 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-28 19:04:28,287 INFO L295 CfgBuilder]: Removed 350 assume(true) statements. [2020-07-28 19:04:28,293 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:04:28 BoogieIcfgContainer [2020-07-28 19:04:28,294 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-28 19:04:28,295 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-28 19:04:28,295 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-28 19:04:28,299 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-28 19:04:28,299 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 28.07 07:04:25" (1/3) ... [2020-07-28 19:04:28,300 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3159bcfa and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:04:28, skipping insertion in model container [2020-07-28 19:04:28,301 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 28.07 07:04:25" (2/3) ... [2020-07-28 19:04:28,301 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3159bcfa and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 28.07 07:04:28, skipping insertion in model container [2020-07-28 19:04:28,301 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:04:28" (3/3) ... [2020-07-28 19:04:28,303 INFO L109 eAbstractionObserver]: Analyzing ICFG minepump_spec4_product62.cil.c [2020-07-28 19:04:28,314 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-28 19:04:28,323 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 3 error locations. [2020-07-28 19:04:28,338 INFO L251 AbstractCegarLoop]: Starting to check reachability of 3 error locations. [2020-07-28 19:04:28,374 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-28 19:04:28,375 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-28 19:04:28,375 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-28 19:04:28,376 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-28 19:04:28,377 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-28 19:04:28,377 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-28 19:04:28,377 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-28 19:04:28,377 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-28 19:04:28,399 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states. [2020-07-28 19:04:28,405 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 17 [2020-07-28 19:04:28,405 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:28,406 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:28,406 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:28,412 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:28,412 INFO L82 PathProgramCache]: Analyzing trace with hash -2100816283, now seen corresponding path program 1 times [2020-07-28 19:04:28,422 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:28,423 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1315505311] [2020-07-28 19:04:28,423 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:28,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:28,757 INFO L280 TraceCheckUtils]: 0: Hoare triple {228#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(30);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(9);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(25);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {228#true} is VALID [2020-07-28 19:04:28,758 INFO L280 TraceCheckUtils]: 1: Hoare triple {228#true} havoc main_#res;havoc main_#t~ret30, main_~retValue_acc~6, main_~tmp~8;havoc main_~retValue_acc~6;havoc main_~tmp~8; {228#true} is VALID [2020-07-28 19:04:28,758 INFO L280 TraceCheckUtils]: 2: Hoare triple {228#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {228#true} is VALID [2020-07-28 19:04:28,759 INFO L280 TraceCheckUtils]: 3: Hoare triple {228#true} main_#t~ret30 := valid_product_#res;assume -2147483648 <= main_#t~ret30 && main_#t~ret30 <= 2147483647;main_~tmp~8 := main_#t~ret30;havoc main_#t~ret30; {228#true} is VALID [2020-07-28 19:04:28,759 INFO L280 TraceCheckUtils]: 4: Hoare triple {228#true} assume 0 != main_~tmp~8; {228#true} is VALID [2020-07-28 19:04:28,760 INFO L280 TraceCheckUtils]: 5: Hoare triple {228#true} havoc test_#t~nondet0, test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {228#true} is VALID [2020-07-28 19:04:28,761 INFO L280 TraceCheckUtils]: 6: Hoare triple {228#true} assume !true; {229#false} is VALID [2020-07-28 19:04:28,761 INFO L280 TraceCheckUtils]: 7: Hoare triple {229#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {229#false} is VALID [2020-07-28 19:04:28,761 INFO L280 TraceCheckUtils]: 8: Hoare triple {229#false} assume !(0 != ~pumpRunning~0); {229#false} is VALID [2020-07-28 19:04:28,762 INFO L280 TraceCheckUtils]: 9: Hoare triple {229#false} assume !(0 != ~systemActive~0); {229#false} is VALID [2020-07-28 19:04:28,762 INFO L280 TraceCheckUtils]: 10: Hoare triple {229#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {229#false} is VALID [2020-07-28 19:04:28,763 INFO L280 TraceCheckUtils]: 11: Hoare triple {229#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {229#false} is VALID [2020-07-28 19:04:28,763 INFO L280 TraceCheckUtils]: 12: Hoare triple {229#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {229#false} is VALID [2020-07-28 19:04:28,763 INFO L280 TraceCheckUtils]: 13: Hoare triple {229#false} __utac_acc__Specification4_spec__1_#t~ret28 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28 && __utac_acc__Specification4_spec__1_#t~ret28 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret28;havoc __utac_acc__Specification4_spec__1_#t~ret28; {229#false} is VALID [2020-07-28 19:04:28,764 INFO L280 TraceCheckUtils]: 14: Hoare triple {229#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {229#false} is VALID [2020-07-28 19:04:28,764 INFO L280 TraceCheckUtils]: 15: Hoare triple {229#false} assume !false; {229#false} is VALID [2020-07-28 19:04:28,769 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:28,770 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1315505311] [2020-07-28 19:04:28,772 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:28,772 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:04:28,773 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [677222504] [2020-07-28 19:04:28,780 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 16 [2020-07-28 19:04:28,782 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:28,787 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states. [2020-07-28 19:04:28,823 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 16 edges. 16 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:28,823 INFO L459 AbstractCegarLoop]: Interpolant automaton has 2 states [2020-07-28 19:04:28,824 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:28,833 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2020-07-28 19:04:28,834 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:04:28,837 INFO L87 Difference]: Start difference. First operand 225 states. Second operand 2 states. [2020-07-28 19:04:29,326 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:29,327 INFO L93 Difference]: Finished difference Result 444 states and 665 transitions. [2020-07-28 19:04:29,327 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2020-07-28 19:04:29,327 INFO L78 Accepts]: Start accepts. Automaton has 2 states. Word has length 16 [2020-07-28 19:04:29,327 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:29,329 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:04:29,342 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 665 transitions. [2020-07-28 19:04:29,342 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 2 states. [2020-07-28 19:04:29,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2 states to 2 states and 665 transitions. [2020-07-28 19:04:29,352 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 2 states and 665 transitions. [2020-07-28 19:04:30,151 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 665 edges. 665 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:30,177 INFO L225 Difference]: With dead ends: 444 [2020-07-28 19:04:30,178 INFO L226 Difference]: Without dead ends: 221 [2020-07-28 19:04:30,183 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2020-07-28 19:04:30,203 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 221 states. [2020-07-28 19:04:30,268 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 221 to 221. [2020-07-28 19:04:30,268 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:30,269 INFO L82 GeneralOperation]: Start isEquivalent. First operand 221 states. Second operand 221 states. [2020-07-28 19:04:30,269 INFO L74 IsIncluded]: Start isIncluded. First operand 221 states. Second operand 221 states. [2020-07-28 19:04:30,269 INFO L87 Difference]: Start difference. First operand 221 states. Second operand 221 states. [2020-07-28 19:04:30,285 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:30,285 INFO L93 Difference]: Finished difference Result 221 states and 324 transitions. [2020-07-28 19:04:30,286 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 324 transitions. [2020-07-28 19:04:30,288 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:30,288 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:30,289 INFO L74 IsIncluded]: Start isIncluded. First operand 221 states. Second operand 221 states. [2020-07-28 19:04:30,289 INFO L87 Difference]: Start difference. First operand 221 states. Second operand 221 states. [2020-07-28 19:04:30,303 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:30,304 INFO L93 Difference]: Finished difference Result 221 states and 324 transitions. [2020-07-28 19:04:30,304 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 324 transitions. [2020-07-28 19:04:30,306 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:30,306 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:30,306 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:30,307 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:30,307 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 221 states. [2020-07-28 19:04:30,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 221 states to 221 states and 324 transitions. [2020-07-28 19:04:30,321 INFO L78 Accepts]: Start accepts. Automaton has 221 states and 324 transitions. Word has length 16 [2020-07-28 19:04:30,322 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:30,322 INFO L479 AbstractCegarLoop]: Abstraction has 221 states and 324 transitions. [2020-07-28 19:04:30,322 INFO L480 AbstractCegarLoop]: Interpolant automaton has 2 states. [2020-07-28 19:04:30,322 INFO L276 IsEmpty]: Start isEmpty. Operand 221 states and 324 transitions. [2020-07-28 19:04:30,323 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2020-07-28 19:04:30,323 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:30,324 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:30,324 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-28 19:04:30,324 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:30,324 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:30,325 INFO L82 PathProgramCache]: Analyzing trace with hash -1936571950, now seen corresponding path program 1 times [2020-07-28 19:04:30,325 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:30,326 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1163344908] [2020-07-28 19:04:30,326 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:30,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:30,474 INFO L280 TraceCheckUtils]: 0: Hoare triple {1607#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(30);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(9);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(25);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {1607#true} is VALID [2020-07-28 19:04:30,474 INFO L280 TraceCheckUtils]: 1: Hoare triple {1607#true} havoc main_#res;havoc main_#t~ret30, main_~retValue_acc~6, main_~tmp~8;havoc main_~retValue_acc~6;havoc main_~tmp~8; {1607#true} is VALID [2020-07-28 19:04:30,475 INFO L280 TraceCheckUtils]: 2: Hoare triple {1607#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {1607#true} is VALID [2020-07-28 19:04:30,475 INFO L280 TraceCheckUtils]: 3: Hoare triple {1607#true} main_#t~ret30 := valid_product_#res;assume -2147483648 <= main_#t~ret30 && main_#t~ret30 <= 2147483647;main_~tmp~8 := main_#t~ret30;havoc main_#t~ret30; {1607#true} is VALID [2020-07-28 19:04:30,476 INFO L280 TraceCheckUtils]: 4: Hoare triple {1607#true} assume 0 != main_~tmp~8; {1607#true} is VALID [2020-07-28 19:04:30,477 INFO L280 TraceCheckUtils]: 5: Hoare triple {1607#true} havoc test_#t~nondet0, test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {1609#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:04:30,478 INFO L280 TraceCheckUtils]: 6: Hoare triple {1609#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !false; {1609#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} is VALID [2020-07-28 19:04:30,479 INFO L280 TraceCheckUtils]: 7: Hoare triple {1609#(= 0 ULTIMATE.start_test_~splverifierCounter~0)} assume !(test_~splverifierCounter~0 < 4); {1608#false} is VALID [2020-07-28 19:04:30,479 INFO L280 TraceCheckUtils]: 8: Hoare triple {1608#false} havoc cleanup_~i~0, cleanup_~__cil_tmp2~0;havoc cleanup_~i~0;havoc cleanup_~__cil_tmp2~0; {1608#false} is VALID [2020-07-28 19:04:30,479 INFO L280 TraceCheckUtils]: 9: Hoare triple {1608#false} assume !(0 != ~pumpRunning~0); {1608#false} is VALID [2020-07-28 19:04:30,479 INFO L280 TraceCheckUtils]: 10: Hoare triple {1608#false} assume !(0 != ~systemActive~0); {1608#false} is VALID [2020-07-28 19:04:30,480 INFO L280 TraceCheckUtils]: 11: Hoare triple {1608#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {1608#false} is VALID [2020-07-28 19:04:30,480 INFO L280 TraceCheckUtils]: 12: Hoare triple {1608#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {1608#false} is VALID [2020-07-28 19:04:30,480 INFO L280 TraceCheckUtils]: 13: Hoare triple {1608#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {1608#false} is VALID [2020-07-28 19:04:30,481 INFO L280 TraceCheckUtils]: 14: Hoare triple {1608#false} __utac_acc__Specification4_spec__1_#t~ret28 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28 && __utac_acc__Specification4_spec__1_#t~ret28 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret28;havoc __utac_acc__Specification4_spec__1_#t~ret28; {1608#false} is VALID [2020-07-28 19:04:30,481 INFO L280 TraceCheckUtils]: 15: Hoare triple {1608#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {1608#false} is VALID [2020-07-28 19:04:30,481 INFO L280 TraceCheckUtils]: 16: Hoare triple {1608#false} assume !false; {1608#false} is VALID [2020-07-28 19:04:30,483 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:30,483 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1163344908] [2020-07-28 19:04:30,483 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:30,483 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:04:30,484 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1935955765] [2020-07-28 19:04:30,485 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 17 [2020-07-28 19:04:30,486 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:30,486 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:04:30,520 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 17 edges. 17 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:30,520 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:04:30,521 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:30,521 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:04:30,521 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:04:30,522 INFO L87 Difference]: Start difference. First operand 221 states and 324 transitions. Second operand 3 states. [2020-07-28 19:04:30,837 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:30,837 INFO L93 Difference]: Finished difference Result 221 states and 324 transitions. [2020-07-28 19:04:30,837 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:04:30,838 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 17 [2020-07-28 19:04:30,838 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:30,838 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:04:30,843 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 324 transitions. [2020-07-28 19:04:30,843 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:04:30,848 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 324 transitions. [2020-07-28 19:04:30,848 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 324 transitions. [2020-07-28 19:04:31,239 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 324 edges. 324 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:31,242 INFO L225 Difference]: With dead ends: 221 [2020-07-28 19:04:31,242 INFO L226 Difference]: Without dead ends: 83 [2020-07-28 19:04:31,244 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:04:31,244 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2020-07-28 19:04:31,288 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 83. [2020-07-28 19:04:31,288 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:31,288 INFO L82 GeneralOperation]: Start isEquivalent. First operand 83 states. Second operand 83 states. [2020-07-28 19:04:31,289 INFO L74 IsIncluded]: Start isIncluded. First operand 83 states. Second operand 83 states. [2020-07-28 19:04:31,289 INFO L87 Difference]: Start difference. First operand 83 states. Second operand 83 states. [2020-07-28 19:04:31,292 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:31,293 INFO L93 Difference]: Finished difference Result 83 states and 121 transitions. [2020-07-28 19:04:31,293 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 121 transitions. [2020-07-28 19:04:31,293 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:31,294 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:31,294 INFO L74 IsIncluded]: Start isIncluded. First operand 83 states. Second operand 83 states. [2020-07-28 19:04:31,294 INFO L87 Difference]: Start difference. First operand 83 states. Second operand 83 states. [2020-07-28 19:04:31,304 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:31,305 INFO L93 Difference]: Finished difference Result 83 states and 121 transitions. [2020-07-28 19:04:31,305 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 121 transitions. [2020-07-28 19:04:31,306 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:31,306 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:31,306 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:31,306 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:31,307 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 83 states. [2020-07-28 19:04:31,312 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 121 transitions. [2020-07-28 19:04:31,312 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 121 transitions. Word has length 17 [2020-07-28 19:04:31,312 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:31,312 INFO L479 AbstractCegarLoop]: Abstraction has 83 states and 121 transitions. [2020-07-28 19:04:31,313 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:04:31,313 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 121 transitions. [2020-07-28 19:04:31,313 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2020-07-28 19:04:31,314 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:31,314 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:31,314 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-28 19:04:31,314 INFO L427 AbstractCegarLoop]: === Iteration 3 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:31,315 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:31,315 INFO L82 PathProgramCache]: Analyzing trace with hash 810617826, now seen corresponding path program 1 times [2020-07-28 19:04:31,315 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:31,317 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [693083924] [2020-07-28 19:04:31,318 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:31,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:31,459 INFO L280 TraceCheckUtils]: 0: Hoare triple {2204#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(30);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(9);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(25);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {2204#true} is VALID [2020-07-28 19:04:31,459 INFO L280 TraceCheckUtils]: 1: Hoare triple {2204#true} havoc main_#res;havoc main_#t~ret30, main_~retValue_acc~6, main_~tmp~8;havoc main_~retValue_acc~6;havoc main_~tmp~8; {2204#true} is VALID [2020-07-28 19:04:31,460 INFO L280 TraceCheckUtils]: 2: Hoare triple {2204#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {2204#true} is VALID [2020-07-28 19:04:31,460 INFO L280 TraceCheckUtils]: 3: Hoare triple {2204#true} main_#t~ret30 := valid_product_#res;assume -2147483648 <= main_#t~ret30 && main_#t~ret30 <= 2147483647;main_~tmp~8 := main_#t~ret30;havoc main_#t~ret30; {2204#true} is VALID [2020-07-28 19:04:31,460 INFO L280 TraceCheckUtils]: 4: Hoare triple {2204#true} assume 0 != main_~tmp~8; {2204#true} is VALID [2020-07-28 19:04:31,461 INFO L280 TraceCheckUtils]: 5: Hoare triple {2204#true} havoc test_#t~nondet0, test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2204#true} is VALID [2020-07-28 19:04:31,461 INFO L280 TraceCheckUtils]: 6: Hoare triple {2204#true} assume !false; {2204#true} is VALID [2020-07-28 19:04:31,461 INFO L280 TraceCheckUtils]: 7: Hoare triple {2204#true} assume test_~splverifierCounter~0 < 4; {2204#true} is VALID [2020-07-28 19:04:31,462 INFO L280 TraceCheckUtils]: 8: Hoare triple {2204#true} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {2204#true} is VALID [2020-07-28 19:04:31,462 INFO L280 TraceCheckUtils]: 9: Hoare triple {2204#true} assume !(0 != test_~tmp~0); {2204#true} is VALID [2020-07-28 19:04:31,462 INFO L280 TraceCheckUtils]: 10: Hoare triple {2204#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {2204#true} is VALID [2020-07-28 19:04:31,463 INFO L280 TraceCheckUtils]: 11: Hoare triple {2204#true} assume !(0 != test_~tmp___0~0); {2204#true} is VALID [2020-07-28 19:04:31,463 INFO L280 TraceCheckUtils]: 12: Hoare triple {2204#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {2204#true} is VALID [2020-07-28 19:04:31,464 INFO L280 TraceCheckUtils]: 13: Hoare triple {2204#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {2206#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:04:31,465 INFO L280 TraceCheckUtils]: 14: Hoare triple {2206#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {2206#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:04:31,465 INFO L280 TraceCheckUtils]: 15: Hoare triple {2206#(= 1 ~systemActive~0)} assume !(0 != ~systemActive~0); {2205#false} is VALID [2020-07-28 19:04:31,466 INFO L280 TraceCheckUtils]: 16: Hoare triple {2205#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {2205#false} is VALID [2020-07-28 19:04:31,466 INFO L280 TraceCheckUtils]: 17: Hoare triple {2205#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {2205#false} is VALID [2020-07-28 19:04:31,467 INFO L280 TraceCheckUtils]: 18: Hoare triple {2205#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {2205#false} is VALID [2020-07-28 19:04:31,467 INFO L280 TraceCheckUtils]: 19: Hoare triple {2205#false} __utac_acc__Specification4_spec__1_#t~ret28 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28 && __utac_acc__Specification4_spec__1_#t~ret28 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret28;havoc __utac_acc__Specification4_spec__1_#t~ret28; {2205#false} is VALID [2020-07-28 19:04:31,467 INFO L280 TraceCheckUtils]: 20: Hoare triple {2205#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {2205#false} is VALID [2020-07-28 19:04:31,468 INFO L280 TraceCheckUtils]: 21: Hoare triple {2205#false} assume !false; {2205#false} is VALID [2020-07-28 19:04:31,470 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:31,471 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [693083924] [2020-07-28 19:04:31,471 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:31,471 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2020-07-28 19:04:31,472 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2020343553] [2020-07-28 19:04:31,472 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 22 [2020-07-28 19:04:31,472 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:31,472 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:04:31,503 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 22 edges. 22 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:31,503 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:04:31,504 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:31,504 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:04:31,504 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:04:31,504 INFO L87 Difference]: Start difference. First operand 83 states and 121 transitions. Second operand 3 states. [2020-07-28 19:04:31,811 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:31,812 INFO L93 Difference]: Finished difference Result 160 states and 236 transitions. [2020-07-28 19:04:31,812 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:04:31,812 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 22 [2020-07-28 19:04:31,812 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:31,812 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:04:31,815 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 236 transitions. [2020-07-28 19:04:31,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:04:31,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 236 transitions. [2020-07-28 19:04:31,819 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 236 transitions. [2020-07-28 19:04:32,126 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 236 edges. 236 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:32,129 INFO L225 Difference]: With dead ends: 160 [2020-07-28 19:04:32,129 INFO L226 Difference]: Without dead ends: 83 [2020-07-28 19:04:32,130 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:04:32,130 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83 states. [2020-07-28 19:04:32,190 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83 to 83. [2020-07-28 19:04:32,191 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:32,191 INFO L82 GeneralOperation]: Start isEquivalent. First operand 83 states. Second operand 83 states. [2020-07-28 19:04:32,191 INFO L74 IsIncluded]: Start isIncluded. First operand 83 states. Second operand 83 states. [2020-07-28 19:04:32,191 INFO L87 Difference]: Start difference. First operand 83 states. Second operand 83 states. [2020-07-28 19:04:32,195 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:32,196 INFO L93 Difference]: Finished difference Result 83 states and 120 transitions. [2020-07-28 19:04:32,196 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 120 transitions. [2020-07-28 19:04:32,196 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:32,196 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:32,196 INFO L74 IsIncluded]: Start isIncluded. First operand 83 states. Second operand 83 states. [2020-07-28 19:04:32,197 INFO L87 Difference]: Start difference. First operand 83 states. Second operand 83 states. [2020-07-28 19:04:32,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:32,200 INFO L93 Difference]: Finished difference Result 83 states and 120 transitions. [2020-07-28 19:04:32,200 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 120 transitions. [2020-07-28 19:04:32,200 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:32,200 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:32,201 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:32,201 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:32,201 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 83 states. [2020-07-28 19:04:32,204 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 83 states to 83 states and 120 transitions. [2020-07-28 19:04:32,204 INFO L78 Accepts]: Start accepts. Automaton has 83 states and 120 transitions. Word has length 22 [2020-07-28 19:04:32,204 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:32,204 INFO L479 AbstractCegarLoop]: Abstraction has 83 states and 120 transitions. [2020-07-28 19:04:32,205 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:04:32,205 INFO L276 IsEmpty]: Start isEmpty. Operand 83 states and 120 transitions. [2020-07-28 19:04:32,205 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 26 [2020-07-28 19:04:32,205 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:32,205 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:32,206 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2020-07-28 19:04:32,206 INFO L427 AbstractCegarLoop]: === Iteration 4 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:32,206 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:32,206 INFO L82 PathProgramCache]: Analyzing trace with hash 442460312, now seen corresponding path program 1 times [2020-07-28 19:04:32,207 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:32,207 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [322428738] [2020-07-28 19:04:32,207 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:32,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:32,312 INFO L280 TraceCheckUtils]: 0: Hoare triple {2714#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(30);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(9);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(25);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,313 INFO L280 TraceCheckUtils]: 1: Hoare triple {2716#(= 0 ~pumpRunning~0)} havoc main_#res;havoc main_#t~ret30, main_~retValue_acc~6, main_~tmp~8;havoc main_~retValue_acc~6;havoc main_~tmp~8; {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,314 INFO L280 TraceCheckUtils]: 2: Hoare triple {2716#(= 0 ~pumpRunning~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,315 INFO L280 TraceCheckUtils]: 3: Hoare triple {2716#(= 0 ~pumpRunning~0)} main_#t~ret30 := valid_product_#res;assume -2147483648 <= main_#t~ret30 && main_#t~ret30 <= 2147483647;main_~tmp~8 := main_#t~ret30;havoc main_#t~ret30; {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,315 INFO L280 TraceCheckUtils]: 4: Hoare triple {2716#(= 0 ~pumpRunning~0)} assume 0 != main_~tmp~8; {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,316 INFO L280 TraceCheckUtils]: 5: Hoare triple {2716#(= 0 ~pumpRunning~0)} havoc test_#t~nondet0, test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,316 INFO L280 TraceCheckUtils]: 6: Hoare triple {2716#(= 0 ~pumpRunning~0)} assume !false; {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,317 INFO L280 TraceCheckUtils]: 7: Hoare triple {2716#(= 0 ~pumpRunning~0)} assume test_~splverifierCounter~0 < 4; {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,318 INFO L280 TraceCheckUtils]: 8: Hoare triple {2716#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,318 INFO L280 TraceCheckUtils]: 9: Hoare triple {2716#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp~0); {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,319 INFO L280 TraceCheckUtils]: 10: Hoare triple {2716#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,319 INFO L280 TraceCheckUtils]: 11: Hoare triple {2716#(= 0 ~pumpRunning~0)} assume !(0 != test_~tmp___0~0); {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,320 INFO L280 TraceCheckUtils]: 12: Hoare triple {2716#(= 0 ~pumpRunning~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,321 INFO L280 TraceCheckUtils]: 13: Hoare triple {2716#(= 0 ~pumpRunning~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,321 INFO L280 TraceCheckUtils]: 14: Hoare triple {2716#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0); {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,322 INFO L280 TraceCheckUtils]: 15: Hoare triple {2716#(= 0 ~pumpRunning~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,323 INFO L280 TraceCheckUtils]: 16: Hoare triple {2716#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,323 INFO L280 TraceCheckUtils]: 17: Hoare triple {2716#(= 0 ~pumpRunning~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {2716#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:32,324 INFO L280 TraceCheckUtils]: 18: Hoare triple {2716#(= 0 ~pumpRunning~0)} assume !(0 == ~pumpRunning~0); {2715#false} is VALID [2020-07-28 19:04:32,324 INFO L280 TraceCheckUtils]: 19: Hoare triple {2715#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {2715#false} is VALID [2020-07-28 19:04:32,324 INFO L280 TraceCheckUtils]: 20: Hoare triple {2715#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {2715#false} is VALID [2020-07-28 19:04:32,325 INFO L280 TraceCheckUtils]: 21: Hoare triple {2715#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {2715#false} is VALID [2020-07-28 19:04:32,325 INFO L280 TraceCheckUtils]: 22: Hoare triple {2715#false} __utac_acc__Specification4_spec__1_#t~ret28 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28 && __utac_acc__Specification4_spec__1_#t~ret28 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret28;havoc __utac_acc__Specification4_spec__1_#t~ret28; {2715#false} is VALID [2020-07-28 19:04:32,325 INFO L280 TraceCheckUtils]: 23: Hoare triple {2715#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {2715#false} is VALID [2020-07-28 19:04:32,325 INFO L280 TraceCheckUtils]: 24: Hoare triple {2715#false} assume !false; {2715#false} is VALID [2020-07-28 19:04:32,327 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:32,327 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [322428738] [2020-07-28 19:04:32,327 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:32,327 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2020-07-28 19:04:32,328 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [334661276] [2020-07-28 19:04:32,328 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 25 [2020-07-28 19:04:32,328 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:32,329 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states. [2020-07-28 19:04:32,358 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 25 edges. 25 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:32,359 INFO L459 AbstractCegarLoop]: Interpolant automaton has 3 states [2020-07-28 19:04:32,359 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:32,359 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2020-07-28 19:04:32,360 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:04:32,360 INFO L87 Difference]: Start difference. First operand 83 states and 120 transitions. Second operand 3 states. [2020-07-28 19:04:32,632 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:32,633 INFO L93 Difference]: Finished difference Result 166 states and 242 transitions. [2020-07-28 19:04:32,633 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2020-07-28 19:04:32,633 INFO L78 Accepts]: Start accepts. Automaton has 3 states. Word has length 25 [2020-07-28 19:04:32,634 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:32,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:04:32,638 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 242 transitions. [2020-07-28 19:04:32,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 3 states. [2020-07-28 19:04:32,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 242 transitions. [2020-07-28 19:04:32,642 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 242 transitions. [2020-07-28 19:04:32,898 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 242 edges. 242 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:32,900 INFO L225 Difference]: With dead ends: 166 [2020-07-28 19:04:32,900 INFO L226 Difference]: Without dead ends: 89 [2020-07-28 19:04:32,901 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2020-07-28 19:04:32,902 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 89 states. [2020-07-28 19:04:32,971 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 89 to 87. [2020-07-28 19:04:32,972 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:32,972 INFO L82 GeneralOperation]: Start isEquivalent. First operand 89 states. Second operand 87 states. [2020-07-28 19:04:32,972 INFO L74 IsIncluded]: Start isIncluded. First operand 89 states. Second operand 87 states. [2020-07-28 19:04:32,972 INFO L87 Difference]: Start difference. First operand 89 states. Second operand 87 states. [2020-07-28 19:04:32,977 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:32,977 INFO L93 Difference]: Finished difference Result 89 states and 123 transitions. [2020-07-28 19:04:32,977 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 123 transitions. [2020-07-28 19:04:32,977 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:32,978 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:32,978 INFO L74 IsIncluded]: Start isIncluded. First operand 87 states. Second operand 89 states. [2020-07-28 19:04:32,978 INFO L87 Difference]: Start difference. First operand 87 states. Second operand 89 states. [2020-07-28 19:04:32,982 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:32,982 INFO L93 Difference]: Finished difference Result 89 states and 123 transitions. [2020-07-28 19:04:32,983 INFO L276 IsEmpty]: Start isEmpty. Operand 89 states and 123 transitions. [2020-07-28 19:04:32,983 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:32,983 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:32,984 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:32,984 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:32,984 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 87 states. [2020-07-28 19:04:32,987 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 87 states to 87 states and 122 transitions. [2020-07-28 19:04:32,988 INFO L78 Accepts]: Start accepts. Automaton has 87 states and 122 transitions. Word has length 25 [2020-07-28 19:04:32,988 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:32,988 INFO L479 AbstractCegarLoop]: Abstraction has 87 states and 122 transitions. [2020-07-28 19:04:32,988 INFO L480 AbstractCegarLoop]: Interpolant automaton has 3 states. [2020-07-28 19:04:32,989 INFO L276 IsEmpty]: Start isEmpty. Operand 87 states and 122 transitions. [2020-07-28 19:04:32,990 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2020-07-28 19:04:32,990 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:32,990 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:32,990 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2020-07-28 19:04:32,991 INFO L427 AbstractCegarLoop]: === Iteration 5 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:32,991 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:32,991 INFO L82 PathProgramCache]: Analyzing trace with hash -1878336052, now seen corresponding path program 1 times [2020-07-28 19:04:32,991 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:32,992 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1358592595] [2020-07-28 19:04:32,993 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:33,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:33,182 INFO L280 TraceCheckUtils]: 0: Hoare triple {3250#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(30);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(9);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(25);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {3252#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:33,183 INFO L280 TraceCheckUtils]: 1: Hoare triple {3252#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret30, main_~retValue_acc~6, main_~tmp~8;havoc main_~retValue_acc~6;havoc main_~tmp~8; {3252#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:33,184 INFO L280 TraceCheckUtils]: 2: Hoare triple {3252#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {3252#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:33,184 INFO L280 TraceCheckUtils]: 3: Hoare triple {3252#(= 1 ~waterLevel~0)} main_#t~ret30 := valid_product_#res;assume -2147483648 <= main_#t~ret30 && main_#t~ret30 <= 2147483647;main_~tmp~8 := main_#t~ret30;havoc main_#t~ret30; {3252#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:33,184 INFO L280 TraceCheckUtils]: 4: Hoare triple {3252#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~8; {3252#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:33,185 INFO L280 TraceCheckUtils]: 5: Hoare triple {3252#(= 1 ~waterLevel~0)} havoc test_#t~nondet0, test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {3252#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:33,185 INFO L280 TraceCheckUtils]: 6: Hoare triple {3252#(= 1 ~waterLevel~0)} assume !false; {3252#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:33,186 INFO L280 TraceCheckUtils]: 7: Hoare triple {3252#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {3252#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:33,186 INFO L280 TraceCheckUtils]: 8: Hoare triple {3252#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {3252#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:33,187 INFO L280 TraceCheckUtils]: 9: Hoare triple {3252#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp~0); {3252#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:33,191 INFO L280 TraceCheckUtils]: 10: Hoare triple {3252#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {3252#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:33,192 INFO L280 TraceCheckUtils]: 11: Hoare triple {3252#(= 1 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {3252#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:33,195 INFO L280 TraceCheckUtils]: 12: Hoare triple {3252#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {3252#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:33,196 INFO L280 TraceCheckUtils]: 13: Hoare triple {3252#(= 1 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {3253#(= ~waterLevel~0 ~systemActive~0)} is VALID [2020-07-28 19:04:33,196 INFO L280 TraceCheckUtils]: 14: Hoare triple {3253#(= ~waterLevel~0 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {3253#(= ~waterLevel~0 ~systemActive~0)} is VALID [2020-07-28 19:04:33,197 INFO L280 TraceCheckUtils]: 15: Hoare triple {3253#(= ~waterLevel~0 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {3254#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:33,197 INFO L280 TraceCheckUtils]: 16: Hoare triple {3254#(not (= 0 ~waterLevel~0))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {3254#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:33,198 INFO L280 TraceCheckUtils]: 17: Hoare triple {3254#(not (= 0 ~waterLevel~0))} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {3254#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:33,198 INFO L280 TraceCheckUtils]: 18: Hoare triple {3254#(not (= 0 ~waterLevel~0))} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {3254#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:33,199 INFO L280 TraceCheckUtils]: 19: Hoare triple {3254#(not (= 0 ~waterLevel~0))} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~12 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {3254#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:33,199 INFO L280 TraceCheckUtils]: 20: Hoare triple {3254#(not (= 0 ~waterLevel~0))} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {3254#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:33,200 INFO L280 TraceCheckUtils]: 21: Hoare triple {3254#(not (= 0 ~waterLevel~0))} assume 0 != isHighWaterLevel_~tmp~5;isHighWaterLevel_~tmp___0~1 := 0; {3254#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:33,200 INFO L280 TraceCheckUtils]: 22: Hoare triple {3254#(not (= 0 ~waterLevel~0))} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {3254#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:33,204 INFO L280 TraceCheckUtils]: 23: Hoare triple {3254#(not (= 0 ~waterLevel~0))} processEnvironment__wrappee__highWaterSensor_#t~ret4 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret4 && processEnvironment__wrappee__highWaterSensor_#t~ret4 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret4;havoc processEnvironment__wrappee__highWaterSensor_#t~ret4; {3254#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:33,204 INFO L280 TraceCheckUtils]: 24: Hoare triple {3254#(not (= 0 ~waterLevel~0))} assume !(0 != processEnvironment__wrappee__highWaterSensor_~tmp~1); {3254#(not (= 0 ~waterLevel~0))} is VALID [2020-07-28 19:04:33,205 INFO L280 TraceCheckUtils]: 25: Hoare triple {3254#(not (= 0 ~waterLevel~0))} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {3255#(not (= 0 |ULTIMATE.start_getWaterLevel_#res|))} is VALID [2020-07-28 19:04:33,205 INFO L280 TraceCheckUtils]: 26: Hoare triple {3255#(not (= 0 |ULTIMATE.start_getWaterLevel_#res|))} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {3256#(not (= 0 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~7))} is VALID [2020-07-28 19:04:33,209 INFO L280 TraceCheckUtils]: 27: Hoare triple {3256#(not (= 0 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~7))} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {3251#false} is VALID [2020-07-28 19:04:33,209 INFO L280 TraceCheckUtils]: 28: Hoare triple {3251#false} __utac_acc__Specification4_spec__1_#t~ret28 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28 && __utac_acc__Specification4_spec__1_#t~ret28 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret28;havoc __utac_acc__Specification4_spec__1_#t~ret28; {3251#false} is VALID [2020-07-28 19:04:33,209 INFO L280 TraceCheckUtils]: 29: Hoare triple {3251#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {3251#false} is VALID [2020-07-28 19:04:33,210 INFO L280 TraceCheckUtils]: 30: Hoare triple {3251#false} assume !false; {3251#false} is VALID [2020-07-28 19:04:33,212 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:33,212 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1358592595] [2020-07-28 19:04:33,212 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:33,212 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2020-07-28 19:04:33,213 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [450968714] [2020-07-28 19:04:33,213 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 31 [2020-07-28 19:04:33,213 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:33,213 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:04:33,257 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:33,258 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:04:33,258 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:33,258 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:04:33,258 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:04:33,258 INFO L87 Difference]: Start difference. First operand 87 states and 122 transitions. Second operand 7 states. [2020-07-28 19:04:35,098 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:35,098 INFO L93 Difference]: Finished difference Result 568 states and 818 transitions. [2020-07-28 19:04:35,098 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2020-07-28 19:04:35,099 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 31 [2020-07-28 19:04:35,099 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:35,099 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:04:35,106 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 654 transitions. [2020-07-28 19:04:35,107 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:04:35,112 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 654 transitions. [2020-07-28 19:04:35,113 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 654 transitions. [2020-07-28 19:04:35,899 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 654 edges. 654 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:35,917 INFO L225 Difference]: With dead ends: 568 [2020-07-28 19:04:35,918 INFO L226 Difference]: Without dead ends: 487 [2020-07-28 19:04:35,918 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 19 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=58, Invalid=124, Unknown=0, NotChecked=0, Total=182 [2020-07-28 19:04:35,920 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 487 states. [2020-07-28 19:04:36,162 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 487 to 204. [2020-07-28 19:04:36,162 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:36,162 INFO L82 GeneralOperation]: Start isEquivalent. First operand 487 states. Second operand 204 states. [2020-07-28 19:04:36,162 INFO L74 IsIncluded]: Start isIncluded. First operand 487 states. Second operand 204 states. [2020-07-28 19:04:36,163 INFO L87 Difference]: Start difference. First operand 487 states. Second operand 204 states. [2020-07-28 19:04:36,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:36,182 INFO L93 Difference]: Finished difference Result 487 states and 692 transitions. [2020-07-28 19:04:36,182 INFO L276 IsEmpty]: Start isEmpty. Operand 487 states and 692 transitions. [2020-07-28 19:04:36,183 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:36,183 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:36,183 INFO L74 IsIncluded]: Start isIncluded. First operand 204 states. Second operand 487 states. [2020-07-28 19:04:36,183 INFO L87 Difference]: Start difference. First operand 204 states. Second operand 487 states. [2020-07-28 19:04:36,202 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:36,202 INFO L93 Difference]: Finished difference Result 487 states and 692 transitions. [2020-07-28 19:04:36,202 INFO L276 IsEmpty]: Start isEmpty. Operand 487 states and 692 transitions. [2020-07-28 19:04:36,203 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:36,203 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:36,203 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:36,204 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:36,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 204 states. [2020-07-28 19:04:36,209 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 204 states to 204 states and 283 transitions. [2020-07-28 19:04:36,209 INFO L78 Accepts]: Start accepts. Automaton has 204 states and 283 transitions. Word has length 31 [2020-07-28 19:04:36,210 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:36,210 INFO L479 AbstractCegarLoop]: Abstraction has 204 states and 283 transitions. [2020-07-28 19:04:36,211 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:04:36,211 INFO L276 IsEmpty]: Start isEmpty. Operand 204 states and 283 transitions. [2020-07-28 19:04:36,215 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2020-07-28 19:04:36,215 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:36,215 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:36,215 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2020-07-28 19:04:36,216 INFO L427 AbstractCegarLoop]: === Iteration 6 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:36,216 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:36,216 INFO L82 PathProgramCache]: Analyzing trace with hash 46891967, now seen corresponding path program 1 times [2020-07-28 19:04:36,216 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:36,217 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [968432049] [2020-07-28 19:04:36,217 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:36,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:36,376 INFO L280 TraceCheckUtils]: 0: Hoare triple {5332#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(30);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(9);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(25);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {5332#true} is VALID [2020-07-28 19:04:36,376 INFO L280 TraceCheckUtils]: 1: Hoare triple {5332#true} havoc main_#res;havoc main_#t~ret30, main_~retValue_acc~6, main_~tmp~8;havoc main_~retValue_acc~6;havoc main_~tmp~8; {5332#true} is VALID [2020-07-28 19:04:36,376 INFO L280 TraceCheckUtils]: 2: Hoare triple {5332#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {5332#true} is VALID [2020-07-28 19:04:36,377 INFO L280 TraceCheckUtils]: 3: Hoare triple {5332#true} main_#t~ret30 := valid_product_#res;assume -2147483648 <= main_#t~ret30 && main_#t~ret30 <= 2147483647;main_~tmp~8 := main_#t~ret30;havoc main_#t~ret30; {5332#true} is VALID [2020-07-28 19:04:36,377 INFO L280 TraceCheckUtils]: 4: Hoare triple {5332#true} assume 0 != main_~tmp~8; {5332#true} is VALID [2020-07-28 19:04:36,378 INFO L280 TraceCheckUtils]: 5: Hoare triple {5332#true} havoc test_#t~nondet0, test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {5332#true} is VALID [2020-07-28 19:04:36,378 INFO L280 TraceCheckUtils]: 6: Hoare triple {5332#true} assume !false; {5332#true} is VALID [2020-07-28 19:04:36,379 INFO L280 TraceCheckUtils]: 7: Hoare triple {5332#true} assume test_~splverifierCounter~0 < 4; {5332#true} is VALID [2020-07-28 19:04:36,379 INFO L280 TraceCheckUtils]: 8: Hoare triple {5332#true} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {5332#true} is VALID [2020-07-28 19:04:36,380 INFO L280 TraceCheckUtils]: 9: Hoare triple {5332#true} assume !(0 != test_~tmp~0); {5332#true} is VALID [2020-07-28 19:04:36,380 INFO L280 TraceCheckUtils]: 10: Hoare triple {5332#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {5332#true} is VALID [2020-07-28 19:04:36,380 INFO L280 TraceCheckUtils]: 11: Hoare triple {5332#true} assume !(0 != test_~tmp___0~0); {5332#true} is VALID [2020-07-28 19:04:36,381 INFO L280 TraceCheckUtils]: 12: Hoare triple {5332#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {5332#true} is VALID [2020-07-28 19:04:36,381 INFO L280 TraceCheckUtils]: 13: Hoare triple {5332#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {5332#true} is VALID [2020-07-28 19:04:36,386 INFO L280 TraceCheckUtils]: 14: Hoare triple {5332#true} assume !(0 != ~pumpRunning~0); {5332#true} is VALID [2020-07-28 19:04:36,387 INFO L280 TraceCheckUtils]: 15: Hoare triple {5332#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {5332#true} is VALID [2020-07-28 19:04:36,387 INFO L280 TraceCheckUtils]: 16: Hoare triple {5332#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {5332#true} is VALID [2020-07-28 19:04:36,388 INFO L280 TraceCheckUtils]: 17: Hoare triple {5332#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {5332#true} is VALID [2020-07-28 19:04:36,388 INFO L280 TraceCheckUtils]: 18: Hoare triple {5332#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {5332#true} is VALID [2020-07-28 19:04:36,388 INFO L280 TraceCheckUtils]: 19: Hoare triple {5332#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~12 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {5332#true} is VALID [2020-07-28 19:04:36,389 INFO L280 TraceCheckUtils]: 20: Hoare triple {5332#true} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {5332#true} is VALID [2020-07-28 19:04:36,407 INFO L280 TraceCheckUtils]: 21: Hoare triple {5332#true} assume 0 != isHighWaterLevel_~tmp~5;isHighWaterLevel_~tmp___0~1 := 0; {5334#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} is VALID [2020-07-28 19:04:36,408 INFO L280 TraceCheckUtils]: 22: Hoare triple {5334#(= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1)} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {5335#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} is VALID [2020-07-28 19:04:36,410 INFO L280 TraceCheckUtils]: 23: Hoare triple {5335#(= 0 |ULTIMATE.start_isHighWaterLevel_#res|)} processEnvironment__wrappee__highWaterSensor_#t~ret4 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret4 && processEnvironment__wrappee__highWaterSensor_#t~ret4 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret4;havoc processEnvironment__wrappee__highWaterSensor_#t~ret4; {5336#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1)} is VALID [2020-07-28 19:04:36,411 INFO L280 TraceCheckUtils]: 24: Hoare triple {5336#(= 0 ULTIMATE.start_processEnvironment__wrappee__highWaterSensor_~tmp~1)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret7, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {5333#false} is VALID [2020-07-28 19:04:36,412 INFO L280 TraceCheckUtils]: 25: Hoare triple {5333#false} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {5333#false} is VALID [2020-07-28 19:04:36,412 INFO L280 TraceCheckUtils]: 26: Hoare triple {5333#false} activatePump_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret7 && activatePump_#t~ret7 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret7;havoc activatePump_#t~ret7; {5333#false} is VALID [2020-07-28 19:04:36,412 INFO L280 TraceCheckUtils]: 27: Hoare triple {5333#false} assume !(0 != activatePump_~tmp~4);~pumpRunning~0 := 1; {5333#false} is VALID [2020-07-28 19:04:36,413 INFO L280 TraceCheckUtils]: 28: Hoare triple {5333#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {5333#false} is VALID [2020-07-28 19:04:36,413 INFO L280 TraceCheckUtils]: 29: Hoare triple {5333#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {5333#false} is VALID [2020-07-28 19:04:36,414 INFO L280 TraceCheckUtils]: 30: Hoare triple {5333#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7); {5333#false} is VALID [2020-07-28 19:04:36,414 INFO L280 TraceCheckUtils]: 31: Hoare triple {5333#false} assume !false; {5333#false} is VALID [2020-07-28 19:04:36,415 INFO L280 TraceCheckUtils]: 32: Hoare triple {5333#false} assume test_~splverifierCounter~0 < 4; {5333#false} is VALID [2020-07-28 19:04:36,415 INFO L280 TraceCheckUtils]: 33: Hoare triple {5333#false} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {5333#false} is VALID [2020-07-28 19:04:36,415 INFO L280 TraceCheckUtils]: 34: Hoare triple {5333#false} assume !(0 != test_~tmp~0); {5333#false} is VALID [2020-07-28 19:04:36,416 INFO L280 TraceCheckUtils]: 35: Hoare triple {5333#false} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {5333#false} is VALID [2020-07-28 19:04:36,416 INFO L280 TraceCheckUtils]: 36: Hoare triple {5333#false} assume !(0 != test_~tmp___0~0); {5333#false} is VALID [2020-07-28 19:04:36,416 INFO L280 TraceCheckUtils]: 37: Hoare triple {5333#false} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {5333#false} is VALID [2020-07-28 19:04:36,417 INFO L280 TraceCheckUtils]: 38: Hoare triple {5333#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {5333#false} is VALID [2020-07-28 19:04:36,417 INFO L280 TraceCheckUtils]: 39: Hoare triple {5333#false} assume 0 != ~pumpRunning~0; {5333#false} is VALID [2020-07-28 19:04:36,418 INFO L280 TraceCheckUtils]: 40: Hoare triple {5333#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {5333#false} is VALID [2020-07-28 19:04:36,418 INFO L280 TraceCheckUtils]: 41: Hoare triple {5333#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {5333#false} is VALID [2020-07-28 19:04:36,420 INFO L280 TraceCheckUtils]: 42: Hoare triple {5333#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {5333#false} is VALID [2020-07-28 19:04:36,421 INFO L280 TraceCheckUtils]: 43: Hoare triple {5333#false} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {5333#false} is VALID [2020-07-28 19:04:36,421 INFO L280 TraceCheckUtils]: 44: Hoare triple {5333#false} processEnvironment_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret6 && processEnvironment_#t~ret6 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret6;havoc processEnvironment_#t~ret6; {5333#false} is VALID [2020-07-28 19:04:36,421 INFO L280 TraceCheckUtils]: 45: Hoare triple {5333#false} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {5333#false} is VALID [2020-07-28 19:04:36,421 INFO L280 TraceCheckUtils]: 46: Hoare triple {5333#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {5333#false} is VALID [2020-07-28 19:04:36,422 INFO L280 TraceCheckUtils]: 47: Hoare triple {5333#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {5333#false} is VALID [2020-07-28 19:04:36,422 INFO L280 TraceCheckUtils]: 48: Hoare triple {5333#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {5333#false} is VALID [2020-07-28 19:04:36,422 INFO L280 TraceCheckUtils]: 49: Hoare triple {5333#false} __utac_acc__Specification4_spec__1_#t~ret28 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28 && __utac_acc__Specification4_spec__1_#t~ret28 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret28;havoc __utac_acc__Specification4_spec__1_#t~ret28; {5333#false} is VALID [2020-07-28 19:04:36,422 INFO L280 TraceCheckUtils]: 50: Hoare triple {5333#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {5333#false} is VALID [2020-07-28 19:04:36,423 INFO L280 TraceCheckUtils]: 51: Hoare triple {5333#false} assume !false; {5333#false} is VALID [2020-07-28 19:04:36,428 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:04:36,429 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [968432049] [2020-07-28 19:04:36,430 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:36,430 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:04:36,431 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [191936670] [2020-07-28 19:04:36,431 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 52 [2020-07-28 19:04:36,432 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:36,432 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:04:36,510 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:36,510 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:04:36,510 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:36,511 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:04:36,511 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:04:36,511 INFO L87 Difference]: Start difference. First operand 204 states and 283 transitions. Second operand 5 states. [2020-07-28 19:04:37,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:37,625 INFO L93 Difference]: Finished difference Result 540 states and 739 transitions. [2020-07-28 19:04:37,625 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:04:37,625 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 52 [2020-07-28 19:04:37,625 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:37,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:37,632 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 255 transitions. [2020-07-28 19:04:37,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:37,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 255 transitions. [2020-07-28 19:04:37,637 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 255 transitions. [2020-07-28 19:04:37,884 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 255 edges. 255 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:37,896 INFO L225 Difference]: With dead ends: 540 [2020-07-28 19:04:37,897 INFO L226 Difference]: Without dead ends: 342 [2020-07-28 19:04:37,898 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:04:37,900 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 342 states. [2020-07-28 19:04:38,195 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 342 to 225. [2020-07-28 19:04:38,195 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:38,195 INFO L82 GeneralOperation]: Start isEquivalent. First operand 342 states. Second operand 225 states. [2020-07-28 19:04:38,195 INFO L74 IsIncluded]: Start isIncluded. First operand 342 states. Second operand 225 states. [2020-07-28 19:04:38,196 INFO L87 Difference]: Start difference. First operand 342 states. Second operand 225 states. [2020-07-28 19:04:38,207 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:38,208 INFO L93 Difference]: Finished difference Result 342 states and 455 transitions. [2020-07-28 19:04:38,208 INFO L276 IsEmpty]: Start isEmpty. Operand 342 states and 455 transitions. [2020-07-28 19:04:38,209 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:38,210 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:38,210 INFO L74 IsIncluded]: Start isIncluded. First operand 225 states. Second operand 342 states. [2020-07-28 19:04:38,210 INFO L87 Difference]: Start difference. First operand 225 states. Second operand 342 states. [2020-07-28 19:04:38,221 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:38,221 INFO L93 Difference]: Finished difference Result 342 states and 455 transitions. [2020-07-28 19:04:38,222 INFO L276 IsEmpty]: Start isEmpty. Operand 342 states and 455 transitions. [2020-07-28 19:04:38,223 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:38,223 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:38,223 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:38,223 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:38,223 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 225 states. [2020-07-28 19:04:38,230 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 225 states to 225 states and 304 transitions. [2020-07-28 19:04:38,231 INFO L78 Accepts]: Start accepts. Automaton has 225 states and 304 transitions. Word has length 52 [2020-07-28 19:04:38,231 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:38,231 INFO L479 AbstractCegarLoop]: Abstraction has 225 states and 304 transitions. [2020-07-28 19:04:38,232 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:04:38,232 INFO L276 IsEmpty]: Start isEmpty. Operand 225 states and 304 transitions. [2020-07-28 19:04:38,233 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 53 [2020-07-28 19:04:38,233 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:38,233 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:38,234 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2020-07-28 19:04:38,234 INFO L427 AbstractCegarLoop]: === Iteration 7 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:38,234 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:38,234 INFO L82 PathProgramCache]: Analyzing trace with hash 748491841, now seen corresponding path program 1 times [2020-07-28 19:04:38,235 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:38,235 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1610775183] [2020-07-28 19:04:38,235 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:38,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:38,306 INFO L280 TraceCheckUtils]: 0: Hoare triple {7095#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(30);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(9);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(25);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {7095#true} is VALID [2020-07-28 19:04:38,307 INFO L280 TraceCheckUtils]: 1: Hoare triple {7095#true} havoc main_#res;havoc main_#t~ret30, main_~retValue_acc~6, main_~tmp~8;havoc main_~retValue_acc~6;havoc main_~tmp~8; {7095#true} is VALID [2020-07-28 19:04:38,307 INFO L280 TraceCheckUtils]: 2: Hoare triple {7095#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {7095#true} is VALID [2020-07-28 19:04:38,307 INFO L280 TraceCheckUtils]: 3: Hoare triple {7095#true} main_#t~ret30 := valid_product_#res;assume -2147483648 <= main_#t~ret30 && main_#t~ret30 <= 2147483647;main_~tmp~8 := main_#t~ret30;havoc main_#t~ret30; {7095#true} is VALID [2020-07-28 19:04:38,307 INFO L280 TraceCheckUtils]: 4: Hoare triple {7095#true} assume 0 != main_~tmp~8; {7095#true} is VALID [2020-07-28 19:04:38,308 INFO L280 TraceCheckUtils]: 5: Hoare triple {7095#true} havoc test_#t~nondet0, test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {7095#true} is VALID [2020-07-28 19:04:38,308 INFO L280 TraceCheckUtils]: 6: Hoare triple {7095#true} assume !false; {7095#true} is VALID [2020-07-28 19:04:38,308 INFO L280 TraceCheckUtils]: 7: Hoare triple {7095#true} assume test_~splverifierCounter~0 < 4; {7095#true} is VALID [2020-07-28 19:04:38,308 INFO L280 TraceCheckUtils]: 8: Hoare triple {7095#true} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {7095#true} is VALID [2020-07-28 19:04:38,308 INFO L280 TraceCheckUtils]: 9: Hoare triple {7095#true} assume !(0 != test_~tmp~0); {7095#true} is VALID [2020-07-28 19:04:38,309 INFO L280 TraceCheckUtils]: 10: Hoare triple {7095#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {7095#true} is VALID [2020-07-28 19:04:38,309 INFO L280 TraceCheckUtils]: 11: Hoare triple {7095#true} assume !(0 != test_~tmp___0~0); {7095#true} is VALID [2020-07-28 19:04:38,310 INFO L280 TraceCheckUtils]: 12: Hoare triple {7095#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {7095#true} is VALID [2020-07-28 19:04:38,310 INFO L280 TraceCheckUtils]: 13: Hoare triple {7095#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {7095#true} is VALID [2020-07-28 19:04:38,310 INFO L280 TraceCheckUtils]: 14: Hoare triple {7095#true} assume !(0 != ~pumpRunning~0); {7095#true} is VALID [2020-07-28 19:04:38,311 INFO L280 TraceCheckUtils]: 15: Hoare triple {7095#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {7095#true} is VALID [2020-07-28 19:04:38,311 INFO L280 TraceCheckUtils]: 16: Hoare triple {7095#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {7095#true} is VALID [2020-07-28 19:04:38,311 INFO L280 TraceCheckUtils]: 17: Hoare triple {7095#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {7095#true} is VALID [2020-07-28 19:04:38,312 INFO L280 TraceCheckUtils]: 18: Hoare triple {7095#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {7095#true} is VALID [2020-07-28 19:04:38,312 INFO L280 TraceCheckUtils]: 19: Hoare triple {7095#true} assume ~waterLevel~0 < 2;isHighWaterSensorDry_~retValue_acc~12 := 1;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {7097#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} is VALID [2020-07-28 19:04:38,313 INFO L280 TraceCheckUtils]: 20: Hoare triple {7097#(= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|)} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {7098#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~5)} is VALID [2020-07-28 19:04:38,314 INFO L280 TraceCheckUtils]: 21: Hoare triple {7098#(= 1 ULTIMATE.start_isHighWaterLevel_~tmp~5)} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {7096#false} is VALID [2020-07-28 19:04:38,314 INFO L280 TraceCheckUtils]: 22: Hoare triple {7096#false} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {7096#false} is VALID [2020-07-28 19:04:38,314 INFO L280 TraceCheckUtils]: 23: Hoare triple {7096#false} processEnvironment__wrappee__highWaterSensor_#t~ret4 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret4 && processEnvironment__wrappee__highWaterSensor_#t~ret4 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret4;havoc processEnvironment__wrappee__highWaterSensor_#t~ret4; {7096#false} is VALID [2020-07-28 19:04:38,315 INFO L280 TraceCheckUtils]: 24: Hoare triple {7096#false} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret7, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {7096#false} is VALID [2020-07-28 19:04:38,315 INFO L280 TraceCheckUtils]: 25: Hoare triple {7096#false} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {7096#false} is VALID [2020-07-28 19:04:38,315 INFO L280 TraceCheckUtils]: 26: Hoare triple {7096#false} activatePump_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret7 && activatePump_#t~ret7 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret7;havoc activatePump_#t~ret7; {7096#false} is VALID [2020-07-28 19:04:38,315 INFO L280 TraceCheckUtils]: 27: Hoare triple {7096#false} assume !(0 != activatePump_~tmp~4);~pumpRunning~0 := 1; {7096#false} is VALID [2020-07-28 19:04:38,316 INFO L280 TraceCheckUtils]: 28: Hoare triple {7096#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {7096#false} is VALID [2020-07-28 19:04:38,316 INFO L280 TraceCheckUtils]: 29: Hoare triple {7096#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {7096#false} is VALID [2020-07-28 19:04:38,316 INFO L280 TraceCheckUtils]: 30: Hoare triple {7096#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7); {7096#false} is VALID [2020-07-28 19:04:38,317 INFO L280 TraceCheckUtils]: 31: Hoare triple {7096#false} assume !false; {7096#false} is VALID [2020-07-28 19:04:38,317 INFO L280 TraceCheckUtils]: 32: Hoare triple {7096#false} assume test_~splverifierCounter~0 < 4; {7096#false} is VALID [2020-07-28 19:04:38,317 INFO L280 TraceCheckUtils]: 33: Hoare triple {7096#false} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {7096#false} is VALID [2020-07-28 19:04:38,317 INFO L280 TraceCheckUtils]: 34: Hoare triple {7096#false} assume !(0 != test_~tmp~0); {7096#false} is VALID [2020-07-28 19:04:38,318 INFO L280 TraceCheckUtils]: 35: Hoare triple {7096#false} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {7096#false} is VALID [2020-07-28 19:04:38,318 INFO L280 TraceCheckUtils]: 36: Hoare triple {7096#false} assume !(0 != test_~tmp___0~0); {7096#false} is VALID [2020-07-28 19:04:38,318 INFO L280 TraceCheckUtils]: 37: Hoare triple {7096#false} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {7096#false} is VALID [2020-07-28 19:04:38,318 INFO L280 TraceCheckUtils]: 38: Hoare triple {7096#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {7096#false} is VALID [2020-07-28 19:04:38,319 INFO L280 TraceCheckUtils]: 39: Hoare triple {7096#false} assume 0 != ~pumpRunning~0; {7096#false} is VALID [2020-07-28 19:04:38,319 INFO L280 TraceCheckUtils]: 40: Hoare triple {7096#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {7096#false} is VALID [2020-07-28 19:04:38,319 INFO L280 TraceCheckUtils]: 41: Hoare triple {7096#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {7096#false} is VALID [2020-07-28 19:04:38,319 INFO L280 TraceCheckUtils]: 42: Hoare triple {7096#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {7096#false} is VALID [2020-07-28 19:04:38,319 INFO L280 TraceCheckUtils]: 43: Hoare triple {7096#false} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {7096#false} is VALID [2020-07-28 19:04:38,320 INFO L280 TraceCheckUtils]: 44: Hoare triple {7096#false} processEnvironment_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret6 && processEnvironment_#t~ret6 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret6;havoc processEnvironment_#t~ret6; {7096#false} is VALID [2020-07-28 19:04:38,320 INFO L280 TraceCheckUtils]: 45: Hoare triple {7096#false} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {7096#false} is VALID [2020-07-28 19:04:38,320 INFO L280 TraceCheckUtils]: 46: Hoare triple {7096#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {7096#false} is VALID [2020-07-28 19:04:38,321 INFO L280 TraceCheckUtils]: 47: Hoare triple {7096#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {7096#false} is VALID [2020-07-28 19:04:38,321 INFO L280 TraceCheckUtils]: 48: Hoare triple {7096#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {7096#false} is VALID [2020-07-28 19:04:38,322 INFO L280 TraceCheckUtils]: 49: Hoare triple {7096#false} __utac_acc__Specification4_spec__1_#t~ret28 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28 && __utac_acc__Specification4_spec__1_#t~ret28 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret28;havoc __utac_acc__Specification4_spec__1_#t~ret28; {7096#false} is VALID [2020-07-28 19:04:38,322 INFO L280 TraceCheckUtils]: 50: Hoare triple {7096#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {7096#false} is VALID [2020-07-28 19:04:38,322 INFO L280 TraceCheckUtils]: 51: Hoare triple {7096#false} assume !false; {7096#false} is VALID [2020-07-28 19:04:38,324 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 0 refuted. 0 times theorem prover too weak. 3 trivial. 0 not checked. [2020-07-28 19:04:38,325 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1610775183] [2020-07-28 19:04:38,325 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:38,325 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2020-07-28 19:04:38,326 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1029212175] [2020-07-28 19:04:38,326 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 52 [2020-07-28 19:04:38,327 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:38,327 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states. [2020-07-28 19:04:38,380 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 50 edges. 50 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:38,381 INFO L459 AbstractCegarLoop]: Interpolant automaton has 4 states [2020-07-28 19:04:38,381 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:38,381 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2020-07-28 19:04:38,382 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2020-07-28 19:04:38,382 INFO L87 Difference]: Start difference. First operand 225 states and 304 transitions. Second operand 4 states. [2020-07-28 19:04:39,330 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:39,331 INFO L93 Difference]: Finished difference Result 476 states and 640 transitions. [2020-07-28 19:04:39,331 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2020-07-28 19:04:39,331 INFO L78 Accepts]: Start accepts. Automaton has 4 states. Word has length 52 [2020-07-28 19:04:39,332 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:39,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:04:39,334 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 232 transitions. [2020-07-28 19:04:39,334 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 4 states. [2020-07-28 19:04:39,336 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 232 transitions. [2020-07-28 19:04:39,336 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 232 transitions. [2020-07-28 19:04:39,571 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 232 edges. 232 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:39,578 INFO L225 Difference]: With dead ends: 476 [2020-07-28 19:04:39,579 INFO L226 Difference]: Without dead ends: 257 [2020-07-28 19:04:39,581 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:04:39,582 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 257 states. [2020-07-28 19:04:39,864 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 257 to 191. [2020-07-28 19:04:39,864 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:39,864 INFO L82 GeneralOperation]: Start isEquivalent. First operand 257 states. Second operand 191 states. [2020-07-28 19:04:39,864 INFO L74 IsIncluded]: Start isIncluded. First operand 257 states. Second operand 191 states. [2020-07-28 19:04:39,864 INFO L87 Difference]: Start difference. First operand 257 states. Second operand 191 states. [2020-07-28 19:04:39,875 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:39,875 INFO L93 Difference]: Finished difference Result 257 states and 335 transitions. [2020-07-28 19:04:39,875 INFO L276 IsEmpty]: Start isEmpty. Operand 257 states and 335 transitions. [2020-07-28 19:04:39,876 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:39,876 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:39,877 INFO L74 IsIncluded]: Start isIncluded. First operand 191 states. Second operand 257 states. [2020-07-28 19:04:39,877 INFO L87 Difference]: Start difference. First operand 191 states. Second operand 257 states. [2020-07-28 19:04:39,883 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:39,884 INFO L93 Difference]: Finished difference Result 257 states and 335 transitions. [2020-07-28 19:04:39,884 INFO L276 IsEmpty]: Start isEmpty. Operand 257 states and 335 transitions. [2020-07-28 19:04:39,885 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:39,885 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:39,885 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:39,885 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:39,886 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 191 states. [2020-07-28 19:04:39,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 191 states to 191 states and 252 transitions. [2020-07-28 19:04:39,892 INFO L78 Accepts]: Start accepts. Automaton has 191 states and 252 transitions. Word has length 52 [2020-07-28 19:04:39,892 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:39,892 INFO L479 AbstractCegarLoop]: Abstraction has 191 states and 252 transitions. [2020-07-28 19:04:39,892 INFO L480 AbstractCegarLoop]: Interpolant automaton has 4 states. [2020-07-28 19:04:39,892 INFO L276 IsEmpty]: Start isEmpty. Operand 191 states and 252 transitions. [2020-07-28 19:04:39,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2020-07-28 19:04:39,895 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:39,895 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:39,895 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2020-07-28 19:04:39,895 INFO L427 AbstractCegarLoop]: === Iteration 8 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:39,896 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:39,896 INFO L82 PathProgramCache]: Analyzing trace with hash -1947303487, now seen corresponding path program 1 times [2020-07-28 19:04:39,896 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:39,897 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1527814957] [2020-07-28 19:04:39,898 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:39,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:40,065 INFO L280 TraceCheckUtils]: 0: Hoare triple {8542#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(30);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(9);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(25);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,066 INFO L280 TraceCheckUtils]: 1: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} havoc main_#res;havoc main_#t~ret30, main_~retValue_acc~6, main_~tmp~8;havoc main_~retValue_acc~6;havoc main_~tmp~8; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,067 INFO L280 TraceCheckUtils]: 2: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,067 INFO L280 TraceCheckUtils]: 3: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} main_#t~ret30 := valid_product_#res;assume -2147483648 <= main_#t~ret30 && main_#t~ret30 <= 2147483647;main_~tmp~8 := main_#t~ret30;havoc main_#t~ret30; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,068 INFO L280 TraceCheckUtils]: 4: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume 0 != main_~tmp~8; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,069 INFO L280 TraceCheckUtils]: 5: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} havoc test_#t~nondet0, test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,069 INFO L280 TraceCheckUtils]: 6: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume !false; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,070 INFO L280 TraceCheckUtils]: 7: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,071 INFO L280 TraceCheckUtils]: 8: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,071 INFO L280 TraceCheckUtils]: 9: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp~0; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,072 INFO L280 TraceCheckUtils]: 10: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,073 INFO L280 TraceCheckUtils]: 11: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,074 INFO L280 TraceCheckUtils]: 12: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~0); {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,074 INFO L280 TraceCheckUtils]: 13: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,075 INFO L280 TraceCheckUtils]: 14: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,076 INFO L280 TraceCheckUtils]: 15: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0); {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,076 INFO L280 TraceCheckUtils]: 16: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,077 INFO L280 TraceCheckUtils]: 17: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,078 INFO L280 TraceCheckUtils]: 18: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,078 INFO L280 TraceCheckUtils]: 19: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,079 INFO L280 TraceCheckUtils]: 20: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,080 INFO L280 TraceCheckUtils]: 21: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,081 INFO L280 TraceCheckUtils]: 22: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,081 INFO L280 TraceCheckUtils]: 23: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,082 INFO L280 TraceCheckUtils]: 24: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} processEnvironment__wrappee__highWaterSensor_#t~ret4 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret4 && processEnvironment__wrappee__highWaterSensor_#t~ret4 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret4;havoc processEnvironment__wrappee__highWaterSensor_#t~ret4; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,083 INFO L280 TraceCheckUtils]: 25: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret7, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,083 INFO L280 TraceCheckUtils]: 26: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,084 INFO L280 TraceCheckUtils]: 27: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} activatePump_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret7 && activatePump_#t~ret7 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret7;havoc activatePump_#t~ret7; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,085 INFO L280 TraceCheckUtils]: 28: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume !(0 != activatePump_~tmp~4);~pumpRunning~0 := 1; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,085 INFO L280 TraceCheckUtils]: 29: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,086 INFO L280 TraceCheckUtils]: 30: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,087 INFO L280 TraceCheckUtils]: 31: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7); {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,087 INFO L280 TraceCheckUtils]: 32: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume !false; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,088 INFO L280 TraceCheckUtils]: 33: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume test_~splverifierCounter~0 < 4; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,089 INFO L280 TraceCheckUtils]: 34: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,089 INFO L280 TraceCheckUtils]: 35: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp~0); {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,090 INFO L280 TraceCheckUtils]: 36: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,091 INFO L280 TraceCheckUtils]: 37: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume !(0 != test_~tmp___0~0); {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,091 INFO L280 TraceCheckUtils]: 38: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,092 INFO L280 TraceCheckUtils]: 39: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,093 INFO L280 TraceCheckUtils]: 40: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,093 INFO L280 TraceCheckUtils]: 41: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,094 INFO L280 TraceCheckUtils]: 42: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {8544#(= 0 ~methaneLevelCritical~0)} is VALID [2020-07-28 19:04:40,095 INFO L280 TraceCheckUtils]: 43: Hoare triple {8544#(= 0 ~methaneLevelCritical~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {8545#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} is VALID [2020-07-28 19:04:40,096 INFO L280 TraceCheckUtils]: 44: Hoare triple {8545#(= 0 |ULTIMATE.start_isMethaneLevelCritical_#res|)} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {8546#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} is VALID [2020-07-28 19:04:40,097 INFO L280 TraceCheckUtils]: 45: Hoare triple {8546#(= 0 |ULTIMATE.start_isMethaneAlarm_#res|)} processEnvironment_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret6 && processEnvironment_#t~ret6 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret6;havoc processEnvironment_#t~ret6; {8547#(= 0 ULTIMATE.start_processEnvironment_~tmp~3)} is VALID [2020-07-28 19:04:40,097 INFO L280 TraceCheckUtils]: 46: Hoare triple {8547#(= 0 ULTIMATE.start_processEnvironment_~tmp~3)} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {8543#false} is VALID [2020-07-28 19:04:40,098 INFO L280 TraceCheckUtils]: 47: Hoare triple {8543#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {8543#false} is VALID [2020-07-28 19:04:40,098 INFO L280 TraceCheckUtils]: 48: Hoare triple {8543#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {8543#false} is VALID [2020-07-28 19:04:40,098 INFO L280 TraceCheckUtils]: 49: Hoare triple {8543#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {8543#false} is VALID [2020-07-28 19:04:40,098 INFO L280 TraceCheckUtils]: 50: Hoare triple {8543#false} __utac_acc__Specification4_spec__1_#t~ret28 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28 && __utac_acc__Specification4_spec__1_#t~ret28 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret28;havoc __utac_acc__Specification4_spec__1_#t~ret28; {8543#false} is VALID [2020-07-28 19:04:40,099 INFO L280 TraceCheckUtils]: 51: Hoare triple {8543#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {8543#false} is VALID [2020-07-28 19:04:40,099 INFO L280 TraceCheckUtils]: 52: Hoare triple {8543#false} assume !false; {8543#false} is VALID [2020-07-28 19:04:40,103 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 19:04:40,104 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1527814957] [2020-07-28 19:04:40,104 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:40,104 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:04:40,105 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [995543026] [2020-07-28 19:04:40,105 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 53 [2020-07-28 19:04:40,106 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:40,106 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states. [2020-07-28 19:04:40,163 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 45 edges. 45 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:40,163 INFO L459 AbstractCegarLoop]: Interpolant automaton has 6 states [2020-07-28 19:04:40,163 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:40,164 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2020-07-28 19:04:40,164 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2020-07-28 19:04:40,164 INFO L87 Difference]: Start difference. First operand 191 states and 252 transitions. Second operand 6 states. [2020-07-28 19:04:42,509 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:42,510 INFO L93 Difference]: Finished difference Result 871 states and 1182 transitions. [2020-07-28 19:04:42,510 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2020-07-28 19:04:42,510 INFO L78 Accepts]: Start accepts. Automaton has 6 states. Word has length 53 [2020-07-28 19:04:42,511 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:42,511 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:04:42,513 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 439 transitions. [2020-07-28 19:04:42,514 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 6 states. [2020-07-28 19:04:42,516 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 439 transitions. [2020-07-28 19:04:42,516 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 439 transitions. [2020-07-28 19:04:43,011 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 439 edges. 439 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:43,038 INFO L225 Difference]: With dead ends: 871 [2020-07-28 19:04:43,038 INFO L226 Difference]: Without dead ends: 686 [2020-07-28 19:04:43,039 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 16 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=103, Unknown=0, NotChecked=0, Total=156 [2020-07-28 19:04:43,040 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 686 states. [2020-07-28 19:04:43,717 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 686 to 374. [2020-07-28 19:04:43,717 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:43,717 INFO L82 GeneralOperation]: Start isEquivalent. First operand 686 states. Second operand 374 states. [2020-07-28 19:04:43,717 INFO L74 IsIncluded]: Start isIncluded. First operand 686 states. Second operand 374 states. [2020-07-28 19:04:43,717 INFO L87 Difference]: Start difference. First operand 686 states. Second operand 374 states. [2020-07-28 19:04:43,748 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:43,749 INFO L93 Difference]: Finished difference Result 686 states and 923 transitions. [2020-07-28 19:04:43,749 INFO L276 IsEmpty]: Start isEmpty. Operand 686 states and 923 transitions. [2020-07-28 19:04:43,750 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:43,751 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:43,751 INFO L74 IsIncluded]: Start isIncluded. First operand 374 states. Second operand 686 states. [2020-07-28 19:04:43,751 INFO L87 Difference]: Start difference. First operand 374 states. Second operand 686 states. [2020-07-28 19:04:43,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:43,791 INFO L93 Difference]: Finished difference Result 686 states and 923 transitions. [2020-07-28 19:04:43,791 INFO L276 IsEmpty]: Start isEmpty. Operand 686 states and 923 transitions. [2020-07-28 19:04:43,792 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:43,793 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:43,793 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:43,793 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:43,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 374 states. [2020-07-28 19:04:43,811 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 374 states to 374 states and 490 transitions. [2020-07-28 19:04:43,811 INFO L78 Accepts]: Start accepts. Automaton has 374 states and 490 transitions. Word has length 53 [2020-07-28 19:04:43,812 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:43,812 INFO L479 AbstractCegarLoop]: Abstraction has 374 states and 490 transitions. [2020-07-28 19:04:43,812 INFO L480 AbstractCegarLoop]: Interpolant automaton has 6 states. [2020-07-28 19:04:43,812 INFO L276 IsEmpty]: Start isEmpty. Operand 374 states and 490 transitions. [2020-07-28 19:04:43,813 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 55 [2020-07-28 19:04:43,813 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:43,813 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:43,813 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2020-07-28 19:04:43,814 INFO L427 AbstractCegarLoop]: === Iteration 9 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:43,814 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:43,814 INFO L82 PathProgramCache]: Analyzing trace with hash -1332214153, now seen corresponding path program 1 times [2020-07-28 19:04:43,815 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:43,815 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [146496783] [2020-07-28 19:04:43,815 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:43,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:43,914 INFO L280 TraceCheckUtils]: 0: Hoare triple {11672#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(30);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(9);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(25);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {11672#true} is VALID [2020-07-28 19:04:43,914 INFO L280 TraceCheckUtils]: 1: Hoare triple {11672#true} havoc main_#res;havoc main_#t~ret30, main_~retValue_acc~6, main_~tmp~8;havoc main_~retValue_acc~6;havoc main_~tmp~8; {11672#true} is VALID [2020-07-28 19:04:43,915 INFO L280 TraceCheckUtils]: 2: Hoare triple {11672#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {11672#true} is VALID [2020-07-28 19:04:43,915 INFO L280 TraceCheckUtils]: 3: Hoare triple {11672#true} main_#t~ret30 := valid_product_#res;assume -2147483648 <= main_#t~ret30 && main_#t~ret30 <= 2147483647;main_~tmp~8 := main_#t~ret30;havoc main_#t~ret30; {11672#true} is VALID [2020-07-28 19:04:43,915 INFO L280 TraceCheckUtils]: 4: Hoare triple {11672#true} assume 0 != main_~tmp~8; {11672#true} is VALID [2020-07-28 19:04:43,915 INFO L280 TraceCheckUtils]: 5: Hoare triple {11672#true} havoc test_#t~nondet0, test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {11672#true} is VALID [2020-07-28 19:04:43,915 INFO L280 TraceCheckUtils]: 6: Hoare triple {11672#true} assume !false; {11672#true} is VALID [2020-07-28 19:04:43,916 INFO L280 TraceCheckUtils]: 7: Hoare triple {11672#true} assume test_~splverifierCounter~0 < 4; {11672#true} is VALID [2020-07-28 19:04:43,916 INFO L280 TraceCheckUtils]: 8: Hoare triple {11672#true} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {11672#true} is VALID [2020-07-28 19:04:43,916 INFO L280 TraceCheckUtils]: 9: Hoare triple {11672#true} assume 0 != test_~tmp~0; {11672#true} is VALID [2020-07-28 19:04:43,917 INFO L280 TraceCheckUtils]: 10: Hoare triple {11672#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {11672#true} is VALID [2020-07-28 19:04:43,917 INFO L280 TraceCheckUtils]: 11: Hoare triple {11672#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {11672#true} is VALID [2020-07-28 19:04:43,917 INFO L280 TraceCheckUtils]: 12: Hoare triple {11672#true} assume !(0 != test_~tmp___0~0); {11672#true} is VALID [2020-07-28 19:04:43,917 INFO L280 TraceCheckUtils]: 13: Hoare triple {11672#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {11672#true} is VALID [2020-07-28 19:04:43,918 INFO L280 TraceCheckUtils]: 14: Hoare triple {11672#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {11672#true} is VALID [2020-07-28 19:04:43,918 INFO L280 TraceCheckUtils]: 15: Hoare triple {11672#true} assume !(0 != ~pumpRunning~0); {11672#true} is VALID [2020-07-28 19:04:43,918 INFO L280 TraceCheckUtils]: 16: Hoare triple {11672#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {11672#true} is VALID [2020-07-28 19:04:43,919 INFO L280 TraceCheckUtils]: 17: Hoare triple {11672#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {11672#true} is VALID [2020-07-28 19:04:43,919 INFO L280 TraceCheckUtils]: 18: Hoare triple {11672#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {11672#true} is VALID [2020-07-28 19:04:43,919 INFO L280 TraceCheckUtils]: 19: Hoare triple {11672#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {11672#true} is VALID [2020-07-28 19:04:43,919 INFO L280 TraceCheckUtils]: 20: Hoare triple {11672#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {11672#true} is VALID [2020-07-28 19:04:43,919 INFO L280 TraceCheckUtils]: 21: Hoare triple {11672#true} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {11672#true} is VALID [2020-07-28 19:04:43,920 INFO L280 TraceCheckUtils]: 22: Hoare triple {11672#true} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {11672#true} is VALID [2020-07-28 19:04:43,920 INFO L280 TraceCheckUtils]: 23: Hoare triple {11672#true} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {11672#true} is VALID [2020-07-28 19:04:43,920 INFO L280 TraceCheckUtils]: 24: Hoare triple {11672#true} processEnvironment__wrappee__highWaterSensor_#t~ret4 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret4 && processEnvironment__wrappee__highWaterSensor_#t~ret4 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret4;havoc processEnvironment__wrappee__highWaterSensor_#t~ret4; {11672#true} is VALID [2020-07-28 19:04:43,921 INFO L280 TraceCheckUtils]: 25: Hoare triple {11672#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret7, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {11672#true} is VALID [2020-07-28 19:04:43,921 INFO L280 TraceCheckUtils]: 26: Hoare triple {11672#true} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {11672#true} is VALID [2020-07-28 19:04:43,921 INFO L280 TraceCheckUtils]: 27: Hoare triple {11672#true} activatePump_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret7 && activatePump_#t~ret7 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret7;havoc activatePump_#t~ret7; {11672#true} is VALID [2020-07-28 19:04:43,921 INFO L280 TraceCheckUtils]: 28: Hoare triple {11672#true} assume !(0 != activatePump_~tmp~4);~pumpRunning~0 := 1; {11672#true} is VALID [2020-07-28 19:04:43,922 INFO L280 TraceCheckUtils]: 29: Hoare triple {11672#true} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {11672#true} is VALID [2020-07-28 19:04:43,922 INFO L280 TraceCheckUtils]: 30: Hoare triple {11672#true} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {11672#true} is VALID [2020-07-28 19:04:43,922 INFO L280 TraceCheckUtils]: 31: Hoare triple {11672#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7); {11672#true} is VALID [2020-07-28 19:04:43,922 INFO L280 TraceCheckUtils]: 32: Hoare triple {11672#true} assume !false; {11672#true} is VALID [2020-07-28 19:04:43,923 INFO L280 TraceCheckUtils]: 33: Hoare triple {11672#true} assume test_~splverifierCounter~0 < 4; {11672#true} is VALID [2020-07-28 19:04:43,923 INFO L280 TraceCheckUtils]: 34: Hoare triple {11672#true} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {11672#true} is VALID [2020-07-28 19:04:43,923 INFO L280 TraceCheckUtils]: 35: Hoare triple {11672#true} assume !(0 != test_~tmp~0); {11672#true} is VALID [2020-07-28 19:04:43,924 INFO L280 TraceCheckUtils]: 36: Hoare triple {11672#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {11672#true} is VALID [2020-07-28 19:04:43,924 INFO L280 TraceCheckUtils]: 37: Hoare triple {11672#true} assume 0 != test_~tmp___0~0; {11672#true} is VALID [2020-07-28 19:04:43,924 INFO L280 TraceCheckUtils]: 38: Hoare triple {11672#true} assume !(0 != ~methaneLevelCritical~0);~methaneLevelCritical~0 := 1; {11672#true} is VALID [2020-07-28 19:04:43,924 INFO L280 TraceCheckUtils]: 39: Hoare triple {11672#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {11672#true} is VALID [2020-07-28 19:04:43,925 INFO L280 TraceCheckUtils]: 40: Hoare triple {11672#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {11672#true} is VALID [2020-07-28 19:04:43,925 INFO L280 TraceCheckUtils]: 41: Hoare triple {11672#true} assume 0 != ~pumpRunning~0; {11672#true} is VALID [2020-07-28 19:04:43,925 INFO L280 TraceCheckUtils]: 42: Hoare triple {11672#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {11672#true} is VALID [2020-07-28 19:04:43,925 INFO L280 TraceCheckUtils]: 43: Hoare triple {11672#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {11672#true} is VALID [2020-07-28 19:04:43,926 INFO L280 TraceCheckUtils]: 44: Hoare triple {11672#true} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {11672#true} is VALID [2020-07-28 19:04:43,926 INFO L280 TraceCheckUtils]: 45: Hoare triple {11672#true} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {11672#true} is VALID [2020-07-28 19:04:43,926 INFO L280 TraceCheckUtils]: 46: Hoare triple {11672#true} processEnvironment_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret6 && processEnvironment_#t~ret6 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret6;havoc processEnvironment_#t~ret6; {11672#true} is VALID [2020-07-28 19:04:43,927 INFO L280 TraceCheckUtils]: 47: Hoare triple {11672#true} assume 0 != processEnvironment_~tmp~3;~pumpRunning~0 := 0; {11674#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:43,928 INFO L280 TraceCheckUtils]: 48: Hoare triple {11674#(= 0 ~pumpRunning~0)} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {11674#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:43,928 INFO L280 TraceCheckUtils]: 49: Hoare triple {11674#(= 0 ~pumpRunning~0)} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {11674#(= 0 ~pumpRunning~0)} is VALID [2020-07-28 19:04:43,929 INFO L280 TraceCheckUtils]: 50: Hoare triple {11674#(= 0 ~pumpRunning~0)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {11675#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} is VALID [2020-07-28 19:04:43,930 INFO L280 TraceCheckUtils]: 51: Hoare triple {11675#(= 0 |ULTIMATE.start_isPumpRunning_#res|)} __utac_acc__Specification4_spec__1_#t~ret28 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28 && __utac_acc__Specification4_spec__1_#t~ret28 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret28;havoc __utac_acc__Specification4_spec__1_#t~ret28; {11676#(= 0 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp___0~3)} is VALID [2020-07-28 19:04:43,930 INFO L280 TraceCheckUtils]: 52: Hoare triple {11676#(= 0 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp___0~3)} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {11673#false} is VALID [2020-07-28 19:04:43,931 INFO L280 TraceCheckUtils]: 53: Hoare triple {11673#false} assume !false; {11673#false} is VALID [2020-07-28 19:04:43,933 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 3 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 19:04:43,934 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [146496783] [2020-07-28 19:04:43,934 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-28 19:04:43,934 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-28 19:04:43,934 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [768759208] [2020-07-28 19:04:43,935 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 54 [2020-07-28 19:04:43,935 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:43,935 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:04:43,985 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 47 edges. 47 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:43,985 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:04:43,985 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:43,985 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:04:43,986 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-28 19:04:43,986 INFO L87 Difference]: Start difference. First operand 374 states and 490 transitions. Second operand 5 states. [2020-07-28 19:04:47,028 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:47,028 INFO L93 Difference]: Finished difference Result 1022 states and 1347 transitions. [2020-07-28 19:04:47,028 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-28 19:04:47,029 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 54 [2020-07-28 19:04:47,029 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:47,029 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:47,031 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 354 transitions. [2020-07-28 19:04:47,031 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:47,032 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 354 transitions. [2020-07-28 19:04:47,032 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 354 transitions. [2020-07-28 19:04:47,459 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 354 edges. 354 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:47,510 INFO L225 Difference]: With dead ends: 1022 [2020-07-28 19:04:47,510 INFO L226 Difference]: Without dead ends: 1020 [2020-07-28 19:04:47,511 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:04:47,512 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1020 states. [2020-07-28 19:04:48,323 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1020 to 374. [2020-07-28 19:04:48,324 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:48,324 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1020 states. Second operand 374 states. [2020-07-28 19:04:48,324 INFO L74 IsIncluded]: Start isIncluded. First operand 1020 states. Second operand 374 states. [2020-07-28 19:04:48,324 INFO L87 Difference]: Start difference. First operand 1020 states. Second operand 374 states. [2020-07-28 19:04:48,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:48,392 INFO L93 Difference]: Finished difference Result 1020 states and 1344 transitions. [2020-07-28 19:04:48,393 INFO L276 IsEmpty]: Start isEmpty. Operand 1020 states and 1344 transitions. [2020-07-28 19:04:48,395 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:48,395 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:48,396 INFO L74 IsIncluded]: Start isIncluded. First operand 374 states. Second operand 1020 states. [2020-07-28 19:04:48,396 INFO L87 Difference]: Start difference. First operand 374 states. Second operand 1020 states. [2020-07-28 19:04:48,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:48,451 INFO L93 Difference]: Finished difference Result 1020 states and 1344 transitions. [2020-07-28 19:04:48,451 INFO L276 IsEmpty]: Start isEmpty. Operand 1020 states and 1344 transitions. [2020-07-28 19:04:48,453 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:48,454 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:48,454 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:48,454 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:48,454 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 374 states. [2020-07-28 19:04:48,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 374 states to 374 states and 488 transitions. [2020-07-28 19:04:48,466 INFO L78 Accepts]: Start accepts. Automaton has 374 states and 488 transitions. Word has length 54 [2020-07-28 19:04:48,466 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:48,466 INFO L479 AbstractCegarLoop]: Abstraction has 374 states and 488 transitions. [2020-07-28 19:04:48,467 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:04:48,467 INFO L276 IsEmpty]: Start isEmpty. Operand 374 states and 488 transitions. [2020-07-28 19:04:48,468 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 61 [2020-07-28 19:04:48,468 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:48,468 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:48,468 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2020-07-28 19:04:48,469 INFO L427 AbstractCegarLoop]: === Iteration 10 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:48,469 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:48,469 INFO L82 PathProgramCache]: Analyzing trace with hash -1553978118, now seen corresponding path program 1 times [2020-07-28 19:04:48,469 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:48,470 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [487919649] [2020-07-28 19:04:48,470 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:48,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:48,578 INFO L280 TraceCheckUtils]: 0: Hoare triple {15670#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(30);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(9);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(25);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {15672#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,579 INFO L280 TraceCheckUtils]: 1: Hoare triple {15672#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret30, main_~retValue_acc~6, main_~tmp~8;havoc main_~retValue_acc~6;havoc main_~tmp~8; {15672#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,579 INFO L280 TraceCheckUtils]: 2: Hoare triple {15672#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {15672#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,580 INFO L280 TraceCheckUtils]: 3: Hoare triple {15672#(= 1 ~waterLevel~0)} main_#t~ret30 := valid_product_#res;assume -2147483648 <= main_#t~ret30 && main_#t~ret30 <= 2147483647;main_~tmp~8 := main_#t~ret30;havoc main_#t~ret30; {15672#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,581 INFO L280 TraceCheckUtils]: 4: Hoare triple {15672#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~8; {15672#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,581 INFO L280 TraceCheckUtils]: 5: Hoare triple {15672#(= 1 ~waterLevel~0)} havoc test_#t~nondet0, test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {15672#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,582 INFO L280 TraceCheckUtils]: 6: Hoare triple {15672#(= 1 ~waterLevel~0)} assume !false; {15672#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,582 INFO L280 TraceCheckUtils]: 7: Hoare triple {15672#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {15672#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,583 INFO L280 TraceCheckUtils]: 8: Hoare triple {15672#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {15672#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,584 INFO L280 TraceCheckUtils]: 9: Hoare triple {15672#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~0; {15672#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,584 INFO L280 TraceCheckUtils]: 10: Hoare triple {15672#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,585 INFO L280 TraceCheckUtils]: 11: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,585 INFO L280 TraceCheckUtils]: 12: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,586 INFO L280 TraceCheckUtils]: 13: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,587 INFO L280 TraceCheckUtils]: 14: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,587 INFO L280 TraceCheckUtils]: 15: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,588 INFO L280 TraceCheckUtils]: 16: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,588 INFO L280 TraceCheckUtils]: 17: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,589 INFO L280 TraceCheckUtils]: 18: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,589 INFO L280 TraceCheckUtils]: 19: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,590 INFO L280 TraceCheckUtils]: 20: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,591 INFO L280 TraceCheckUtils]: 21: Hoare triple {15673#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,592 INFO L280 TraceCheckUtils]: 22: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,592 INFO L280 TraceCheckUtils]: 23: Hoare triple {15673#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,593 INFO L280 TraceCheckUtils]: 24: Hoare triple {15673#(<= 2 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret4 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret4 && processEnvironment__wrappee__highWaterSensor_#t~ret4 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret4;havoc processEnvironment__wrappee__highWaterSensor_#t~ret4; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,593 INFO L280 TraceCheckUtils]: 25: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret7, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,594 INFO L280 TraceCheckUtils]: 26: Hoare triple {15673#(<= 2 ~waterLevel~0)} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,594 INFO L280 TraceCheckUtils]: 27: Hoare triple {15673#(<= 2 ~waterLevel~0)} activatePump_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret7 && activatePump_#t~ret7 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret7;havoc activatePump_#t~ret7; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,595 INFO L280 TraceCheckUtils]: 28: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~4);~pumpRunning~0 := 1; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,596 INFO L280 TraceCheckUtils]: 29: Hoare triple {15673#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,596 INFO L280 TraceCheckUtils]: 30: Hoare triple {15673#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,597 INFO L280 TraceCheckUtils]: 31: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7); {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,597 INFO L280 TraceCheckUtils]: 32: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !false; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,598 INFO L280 TraceCheckUtils]: 33: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,598 INFO L280 TraceCheckUtils]: 34: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,599 INFO L280 TraceCheckUtils]: 35: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~0); {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,599 INFO L280 TraceCheckUtils]: 36: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,600 INFO L280 TraceCheckUtils]: 37: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,601 INFO L280 TraceCheckUtils]: 38: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,601 INFO L280 TraceCheckUtils]: 39: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,602 INFO L280 TraceCheckUtils]: 40: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,603 INFO L280 TraceCheckUtils]: 41: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,603 INFO L280 TraceCheckUtils]: 42: Hoare triple {15674#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,604 INFO L280 TraceCheckUtils]: 43: Hoare triple {15674#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,605 INFO L280 TraceCheckUtils]: 44: Hoare triple {15674#(<= 1 ~waterLevel~0)} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,606 INFO L280 TraceCheckUtils]: 45: Hoare triple {15674#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret6 && processEnvironment_#t~ret6 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret6;havoc processEnvironment_#t~ret6; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,607 INFO L280 TraceCheckUtils]: 46: Hoare triple {15674#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,607 INFO L280 TraceCheckUtils]: 47: Hoare triple {15674#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret26, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~6, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~6;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,608 INFO L280 TraceCheckUtils]: 48: Hoare triple {15674#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret26 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret26 && isLowWaterLevel_#t~ret26 <= 2147483647;isLowWaterLevel_~tmp~6 := isLowWaterLevel_#t~ret26;havoc isLowWaterLevel_#t~ret26; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,608 INFO L280 TraceCheckUtils]: 49: Hoare triple {15674#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~6;isLowWaterLevel_~tmp___0~2 := 0; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,609 INFO L280 TraceCheckUtils]: 50: Hoare triple {15674#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,609 INFO L280 TraceCheckUtils]: 51: Hoare triple {15674#(<= 1 ~waterLevel~0)} processEnvironment__wrappee__methaneQuery_#t~ret5 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret5 && processEnvironment__wrappee__methaneQuery_#t~ret5 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret5;havoc processEnvironment__wrappee__methaneQuery_#t~ret5; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,610 INFO L280 TraceCheckUtils]: 52: Hoare triple {15674#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,611 INFO L280 TraceCheckUtils]: 53: Hoare triple {15674#(<= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:48,611 INFO L280 TraceCheckUtils]: 54: Hoare triple {15674#(<= 1 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {15675#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:04:48,612 INFO L280 TraceCheckUtils]: 55: Hoare triple {15675#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {15676#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~7)} is VALID [2020-07-28 19:04:48,613 INFO L280 TraceCheckUtils]: 56: Hoare triple {15676#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~7)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {15671#false} is VALID [2020-07-28 19:04:48,613 INFO L280 TraceCheckUtils]: 57: Hoare triple {15671#false} __utac_acc__Specification4_spec__1_#t~ret28 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28 && __utac_acc__Specification4_spec__1_#t~ret28 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret28;havoc __utac_acc__Specification4_spec__1_#t~ret28; {15671#false} is VALID [2020-07-28 19:04:48,613 INFO L280 TraceCheckUtils]: 58: Hoare triple {15671#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {15671#false} is VALID [2020-07-28 19:04:48,613 INFO L280 TraceCheckUtils]: 59: Hoare triple {15671#false} assume !false; {15671#false} is VALID [2020-07-28 19:04:48,619 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 0 proven. 9 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2020-07-28 19:04:48,619 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [487919649] [2020-07-28 19:04:48,619 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [975612796] [2020-07-28 19:04:48,620 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:04:48,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:48,779 INFO L263 TraceCheckSpWp]: Trace formula consists of 438 conjuncts, 6 conjunts are in the unsatisfiable core [2020-07-28 19:04:48,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:48,816 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:04:49,041 INFO L280 TraceCheckUtils]: 0: Hoare triple {15670#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(30);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(9);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(25);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {15670#true} is VALID [2020-07-28 19:04:49,041 INFO L280 TraceCheckUtils]: 1: Hoare triple {15670#true} havoc main_#res;havoc main_#t~ret30, main_~retValue_acc~6, main_~tmp~8;havoc main_~retValue_acc~6;havoc main_~tmp~8; {15670#true} is VALID [2020-07-28 19:04:49,042 INFO L280 TraceCheckUtils]: 2: Hoare triple {15670#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {15670#true} is VALID [2020-07-28 19:04:49,042 INFO L280 TraceCheckUtils]: 3: Hoare triple {15670#true} main_#t~ret30 := valid_product_#res;assume -2147483648 <= main_#t~ret30 && main_#t~ret30 <= 2147483647;main_~tmp~8 := main_#t~ret30;havoc main_#t~ret30; {15670#true} is VALID [2020-07-28 19:04:49,042 INFO L280 TraceCheckUtils]: 4: Hoare triple {15670#true} assume 0 != main_~tmp~8; {15670#true} is VALID [2020-07-28 19:04:49,042 INFO L280 TraceCheckUtils]: 5: Hoare triple {15670#true} havoc test_#t~nondet0, test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {15670#true} is VALID [2020-07-28 19:04:49,042 INFO L280 TraceCheckUtils]: 6: Hoare triple {15670#true} assume !false; {15670#true} is VALID [2020-07-28 19:04:49,043 INFO L280 TraceCheckUtils]: 7: Hoare triple {15670#true} assume test_~splverifierCounter~0 < 4; {15670#true} is VALID [2020-07-28 19:04:49,043 INFO L280 TraceCheckUtils]: 8: Hoare triple {15670#true} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {15670#true} is VALID [2020-07-28 19:04:49,043 INFO L280 TraceCheckUtils]: 9: Hoare triple {15670#true} assume 0 != test_~tmp~0; {15670#true} is VALID [2020-07-28 19:04:49,045 INFO L280 TraceCheckUtils]: 10: Hoare triple {15670#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {15670#true} is VALID [2020-07-28 19:04:49,045 INFO L280 TraceCheckUtils]: 11: Hoare triple {15670#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {15670#true} is VALID [2020-07-28 19:04:49,045 INFO L280 TraceCheckUtils]: 12: Hoare triple {15670#true} assume !(0 != test_~tmp___0~0); {15670#true} is VALID [2020-07-28 19:04:49,046 INFO L280 TraceCheckUtils]: 13: Hoare triple {15670#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {15670#true} is VALID [2020-07-28 19:04:49,046 INFO L280 TraceCheckUtils]: 14: Hoare triple {15670#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {15670#true} is VALID [2020-07-28 19:04:49,046 INFO L280 TraceCheckUtils]: 15: Hoare triple {15670#true} assume !(0 != ~pumpRunning~0); {15670#true} is VALID [2020-07-28 19:04:49,046 INFO L280 TraceCheckUtils]: 16: Hoare triple {15670#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {15670#true} is VALID [2020-07-28 19:04:49,046 INFO L280 TraceCheckUtils]: 17: Hoare triple {15670#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {15670#true} is VALID [2020-07-28 19:04:49,047 INFO L280 TraceCheckUtils]: 18: Hoare triple {15670#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {15670#true} is VALID [2020-07-28 19:04:49,047 INFO L280 TraceCheckUtils]: 19: Hoare triple {15670#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {15670#true} is VALID [2020-07-28 19:04:49,049 INFO L280 TraceCheckUtils]: 20: Hoare triple {15670#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,049 INFO L280 TraceCheckUtils]: 21: Hoare triple {15673#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,050 INFO L280 TraceCheckUtils]: 22: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,050 INFO L280 TraceCheckUtils]: 23: Hoare triple {15673#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,051 INFO L280 TraceCheckUtils]: 24: Hoare triple {15673#(<= 2 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret4 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret4 && processEnvironment__wrappee__highWaterSensor_#t~ret4 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret4;havoc processEnvironment__wrappee__highWaterSensor_#t~ret4; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,052 INFO L280 TraceCheckUtils]: 25: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret7, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,052 INFO L280 TraceCheckUtils]: 26: Hoare triple {15673#(<= 2 ~waterLevel~0)} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,053 INFO L280 TraceCheckUtils]: 27: Hoare triple {15673#(<= 2 ~waterLevel~0)} activatePump_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret7 && activatePump_#t~ret7 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret7;havoc activatePump_#t~ret7; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,056 INFO L280 TraceCheckUtils]: 28: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~4);~pumpRunning~0 := 1; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,057 INFO L280 TraceCheckUtils]: 29: Hoare triple {15673#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,058 INFO L280 TraceCheckUtils]: 30: Hoare triple {15673#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,058 INFO L280 TraceCheckUtils]: 31: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7); {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,060 INFO L280 TraceCheckUtils]: 32: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !false; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,060 INFO L280 TraceCheckUtils]: 33: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,061 INFO L280 TraceCheckUtils]: 34: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,062 INFO L280 TraceCheckUtils]: 35: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~0); {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,062 INFO L280 TraceCheckUtils]: 36: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,063 INFO L280 TraceCheckUtils]: 37: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,063 INFO L280 TraceCheckUtils]: 38: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,064 INFO L280 TraceCheckUtils]: 39: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,064 INFO L280 TraceCheckUtils]: 40: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {15673#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,065 INFO L280 TraceCheckUtils]: 41: Hoare triple {15673#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,066 INFO L280 TraceCheckUtils]: 42: Hoare triple {15674#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,067 INFO L280 TraceCheckUtils]: 43: Hoare triple {15674#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,067 INFO L280 TraceCheckUtils]: 44: Hoare triple {15674#(<= 1 ~waterLevel~0)} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,068 INFO L280 TraceCheckUtils]: 45: Hoare triple {15674#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret6 && processEnvironment_#t~ret6 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret6;havoc processEnvironment_#t~ret6; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,068 INFO L280 TraceCheckUtils]: 46: Hoare triple {15674#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,069 INFO L280 TraceCheckUtils]: 47: Hoare triple {15674#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret26, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~6, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~6;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,070 INFO L280 TraceCheckUtils]: 48: Hoare triple {15674#(<= 1 ~waterLevel~0)} isLowWaterLevel_#t~ret26 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret26 && isLowWaterLevel_#t~ret26 <= 2147483647;isLowWaterLevel_~tmp~6 := isLowWaterLevel_#t~ret26;havoc isLowWaterLevel_#t~ret26; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,070 INFO L280 TraceCheckUtils]: 49: Hoare triple {15674#(<= 1 ~waterLevel~0)} assume 0 != isLowWaterLevel_~tmp~6;isLowWaterLevel_~tmp___0~2 := 0; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,071 INFO L280 TraceCheckUtils]: 50: Hoare triple {15674#(<= 1 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,071 INFO L280 TraceCheckUtils]: 51: Hoare triple {15674#(<= 1 ~waterLevel~0)} processEnvironment__wrappee__methaneQuery_#t~ret5 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret5 && processEnvironment__wrappee__methaneQuery_#t~ret5 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret5;havoc processEnvironment__wrappee__methaneQuery_#t~ret5; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,072 INFO L280 TraceCheckUtils]: 52: Hoare triple {15674#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,073 INFO L280 TraceCheckUtils]: 53: Hoare triple {15674#(<= 1 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {15674#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:49,074 INFO L280 TraceCheckUtils]: 54: Hoare triple {15674#(<= 1 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {15675#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} is VALID [2020-07-28 19:04:49,074 INFO L280 TraceCheckUtils]: 55: Hoare triple {15675#(<= 1 |ULTIMATE.start_getWaterLevel_#res|)} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {15676#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~7)} is VALID [2020-07-28 19:04:49,075 INFO L280 TraceCheckUtils]: 56: Hoare triple {15676#(<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~7)} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {15671#false} is VALID [2020-07-28 19:04:49,075 INFO L280 TraceCheckUtils]: 57: Hoare triple {15671#false} __utac_acc__Specification4_spec__1_#t~ret28 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28 && __utac_acc__Specification4_spec__1_#t~ret28 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret28;havoc __utac_acc__Specification4_spec__1_#t~ret28; {15671#false} is VALID [2020-07-28 19:04:49,075 INFO L280 TraceCheckUtils]: 58: Hoare triple {15671#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {15671#false} is VALID [2020-07-28 19:04:49,076 INFO L280 TraceCheckUtils]: 59: Hoare triple {15671#false} assume !false; {15671#false} is VALID [2020-07-28 19:04:49,082 INFO L134 CoverageAnalysis]: Checked inductivity of 14 backedges. 11 proven. 3 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-28 19:04:49,083 INFO L220 FreeRefinementEngine]: Constructing automaton from 0 perfect and 2 imperfect interpolant sequences. [2020-07-28 19:04:49,083 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [6, 6] total 7 [2020-07-28 19:04:49,083 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [244768800] [2020-07-28 19:04:49,084 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 60 [2020-07-28 19:04:49,084 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:49,084 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states. [2020-07-28 19:04:49,177 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 77 edges. 77 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:49,177 INFO L459 AbstractCegarLoop]: Interpolant automaton has 7 states [2020-07-28 19:04:49,177 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:49,178 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2020-07-28 19:04:49,178 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2020-07-28 19:04:49,178 INFO L87 Difference]: Start difference. First operand 374 states and 488 transitions. Second operand 7 states. [2020-07-28 19:04:52,381 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:52,382 INFO L93 Difference]: Finished difference Result 1156 states and 1524 transitions. [2020-07-28 19:04:52,382 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2020-07-28 19:04:52,382 INFO L78 Accepts]: Start accepts. Automaton has 7 states. Word has length 60 [2020-07-28 19:04:52,383 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:52,383 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:04:52,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 486 transitions. [2020-07-28 19:04:52,387 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 7 states. [2020-07-28 19:04:52,393 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 486 transitions. [2020-07-28 19:04:52,393 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states and 486 transitions. [2020-07-28 19:04:52,896 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 486 edges. 486 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:52,932 INFO L225 Difference]: With dead ends: 1156 [2020-07-28 19:04:52,933 INFO L226 Difference]: Without dead ends: 838 [2020-07-28 19:04:52,934 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 76 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 23 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=60, Invalid=122, Unknown=0, NotChecked=0, Total=182 [2020-07-28 19:04:52,934 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 838 states. [2020-07-28 19:04:54,082 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 838 to 458. [2020-07-28 19:04:54,083 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:04:54,083 INFO L82 GeneralOperation]: Start isEquivalent. First operand 838 states. Second operand 458 states. [2020-07-28 19:04:54,083 INFO L74 IsIncluded]: Start isIncluded. First operand 838 states. Second operand 458 states. [2020-07-28 19:04:54,083 INFO L87 Difference]: Start difference. First operand 838 states. Second operand 458 states. [2020-07-28 19:04:54,132 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:54,132 INFO L93 Difference]: Finished difference Result 838 states and 1073 transitions. [2020-07-28 19:04:54,132 INFO L276 IsEmpty]: Start isEmpty. Operand 838 states and 1073 transitions. [2020-07-28 19:04:54,134 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:54,135 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:54,135 INFO L74 IsIncluded]: Start isIncluded. First operand 458 states. Second operand 838 states. [2020-07-28 19:04:54,135 INFO L87 Difference]: Start difference. First operand 458 states. Second operand 838 states. [2020-07-28 19:04:54,196 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:54,196 INFO L93 Difference]: Finished difference Result 838 states and 1073 transitions. [2020-07-28 19:04:54,196 INFO L276 IsEmpty]: Start isEmpty. Operand 838 states and 1073 transitions. [2020-07-28 19:04:54,199 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:04:54,199 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:04:54,199 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:04:54,199 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:04:54,199 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 458 states. [2020-07-28 19:04:54,231 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 458 states to 458 states and 594 transitions. [2020-07-28 19:04:54,232 INFO L78 Accepts]: Start accepts. Automaton has 458 states and 594 transitions. Word has length 60 [2020-07-28 19:04:54,232 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:04:54,232 INFO L479 AbstractCegarLoop]: Abstraction has 458 states and 594 transitions. [2020-07-28 19:04:54,232 INFO L480 AbstractCegarLoop]: Interpolant automaton has 7 states. [2020-07-28 19:04:54,232 INFO L276 IsEmpty]: Start isEmpty. Operand 458 states and 594 transitions. [2020-07-28 19:04:54,235 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2020-07-28 19:04:54,235 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:04:54,235 INFO L422 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:04:54,448 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable9 [2020-07-28 19:04:54,449 INFO L427 AbstractCegarLoop]: === Iteration 11 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:04:54,449 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:04:54,449 INFO L82 PathProgramCache]: Analyzing trace with hash -1156162525, now seen corresponding path program 2 times [2020-07-28 19:04:54,449 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:04:54,450 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2094153241] [2020-07-28 19:04:54,450 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:04:54,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:54,669 INFO L280 TraceCheckUtils]: 0: Hoare triple {19782#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(30);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(9);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(25);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {19784#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,670 INFO L280 TraceCheckUtils]: 1: Hoare triple {19784#(= 1 ~waterLevel~0)} havoc main_#res;havoc main_#t~ret30, main_~retValue_acc~6, main_~tmp~8;havoc main_~retValue_acc~6;havoc main_~tmp~8; {19784#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,671 INFO L280 TraceCheckUtils]: 2: Hoare triple {19784#(= 1 ~waterLevel~0)} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {19784#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,671 INFO L280 TraceCheckUtils]: 3: Hoare triple {19784#(= 1 ~waterLevel~0)} main_#t~ret30 := valid_product_#res;assume -2147483648 <= main_#t~ret30 && main_#t~ret30 <= 2147483647;main_~tmp~8 := main_#t~ret30;havoc main_#t~ret30; {19784#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,672 INFO L280 TraceCheckUtils]: 4: Hoare triple {19784#(= 1 ~waterLevel~0)} assume 0 != main_~tmp~8; {19784#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,673 INFO L280 TraceCheckUtils]: 5: Hoare triple {19784#(= 1 ~waterLevel~0)} havoc test_#t~nondet0, test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {19784#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,673 INFO L280 TraceCheckUtils]: 6: Hoare triple {19784#(= 1 ~waterLevel~0)} assume !false; {19784#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,674 INFO L280 TraceCheckUtils]: 7: Hoare triple {19784#(= 1 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {19784#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,674 INFO L280 TraceCheckUtils]: 8: Hoare triple {19784#(= 1 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {19784#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,675 INFO L280 TraceCheckUtils]: 9: Hoare triple {19784#(= 1 ~waterLevel~0)} assume 0 != test_~tmp~0; {19784#(= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,676 INFO L280 TraceCheckUtils]: 10: Hoare triple {19784#(= 1 ~waterLevel~0)} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,677 INFO L280 TraceCheckUtils]: 11: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,677 INFO L280 TraceCheckUtils]: 12: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,678 INFO L280 TraceCheckUtils]: 13: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,678 INFO L280 TraceCheckUtils]: 14: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,679 INFO L280 TraceCheckUtils]: 15: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0); {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,680 INFO L280 TraceCheckUtils]: 16: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,680 INFO L280 TraceCheckUtils]: 17: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,681 INFO L280 TraceCheckUtils]: 18: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,682 INFO L280 TraceCheckUtils]: 19: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,682 INFO L280 TraceCheckUtils]: 20: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,683 INFO L280 TraceCheckUtils]: 21: Hoare triple {19785#(<= 2 ~waterLevel~0)} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,684 INFO L280 TraceCheckUtils]: 22: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,685 INFO L280 TraceCheckUtils]: 23: Hoare triple {19785#(<= 2 ~waterLevel~0)} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,685 INFO L280 TraceCheckUtils]: 24: Hoare triple {19785#(<= 2 ~waterLevel~0)} processEnvironment__wrappee__highWaterSensor_#t~ret4 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret4 && processEnvironment__wrappee__highWaterSensor_#t~ret4 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret4;havoc processEnvironment__wrappee__highWaterSensor_#t~ret4; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,686 INFO L280 TraceCheckUtils]: 25: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret7, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,687 INFO L280 TraceCheckUtils]: 26: Hoare triple {19785#(<= 2 ~waterLevel~0)} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,687 INFO L280 TraceCheckUtils]: 27: Hoare triple {19785#(<= 2 ~waterLevel~0)} activatePump_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret7 && activatePump_#t~ret7 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret7;havoc activatePump_#t~ret7; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,688 INFO L280 TraceCheckUtils]: 28: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume !(0 != activatePump_~tmp~4);~pumpRunning~0 := 1; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,689 INFO L280 TraceCheckUtils]: 29: Hoare triple {19785#(<= 2 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,689 INFO L280 TraceCheckUtils]: 30: Hoare triple {19785#(<= 2 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,690 INFO L280 TraceCheckUtils]: 31: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7); {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,691 INFO L280 TraceCheckUtils]: 32: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume !false; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,691 INFO L280 TraceCheckUtils]: 33: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,692 INFO L280 TraceCheckUtils]: 34: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,692 INFO L280 TraceCheckUtils]: 35: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp~0); {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,693 INFO L280 TraceCheckUtils]: 36: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,694 INFO L280 TraceCheckUtils]: 37: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,694 INFO L280 TraceCheckUtils]: 38: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,695 INFO L280 TraceCheckUtils]: 39: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,696 INFO L280 TraceCheckUtils]: 40: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {19785#(<= 2 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,697 INFO L280 TraceCheckUtils]: 41: Hoare triple {19785#(<= 2 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19786#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,697 INFO L280 TraceCheckUtils]: 42: Hoare triple {19786#(<= 1 ~waterLevel~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {19786#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,698 INFO L280 TraceCheckUtils]: 43: Hoare triple {19786#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {19786#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,699 INFO L280 TraceCheckUtils]: 44: Hoare triple {19786#(<= 1 ~waterLevel~0)} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {19786#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,699 INFO L280 TraceCheckUtils]: 45: Hoare triple {19786#(<= 1 ~waterLevel~0)} processEnvironment_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret6 && processEnvironment_#t~ret6 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret6;havoc processEnvironment_#t~ret6; {19786#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,700 INFO L280 TraceCheckUtils]: 46: Hoare triple {19786#(<= 1 ~waterLevel~0)} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {19786#(<= 1 ~waterLevel~0)} is VALID [2020-07-28 19:04:54,701 INFO L280 TraceCheckUtils]: 47: Hoare triple {19786#(<= 1 ~waterLevel~0)} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret26, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~6, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~6;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {19787#(and (<= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (<= |ULTIMATE.start_isLowWaterSensorDry_#res| 0))} is VALID [2020-07-28 19:04:54,703 INFO L280 TraceCheckUtils]: 48: Hoare triple {19787#(and (<= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (<= |ULTIMATE.start_isLowWaterSensorDry_#res| 0))} isLowWaterLevel_#t~ret26 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret26 && isLowWaterLevel_#t~ret26 <= 2147483647;isLowWaterLevel_~tmp~6 := isLowWaterLevel_#t~ret26;havoc isLowWaterLevel_#t~ret26; {19788#(and (<= ULTIMATE.start_isLowWaterLevel_~tmp~6 0) (< 0 (+ ULTIMATE.start_isLowWaterLevel_~tmp~6 1)))} is VALID [2020-07-28 19:04:54,704 INFO L280 TraceCheckUtils]: 49: Hoare triple {19788#(and (<= ULTIMATE.start_isLowWaterLevel_~tmp~6 0) (< 0 (+ ULTIMATE.start_isLowWaterLevel_~tmp~6 1)))} assume 0 != isLowWaterLevel_~tmp~6;isLowWaterLevel_~tmp___0~2 := 0; {19783#false} is VALID [2020-07-28 19:04:54,704 INFO L280 TraceCheckUtils]: 50: Hoare triple {19783#false} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {19783#false} is VALID [2020-07-28 19:04:54,704 INFO L280 TraceCheckUtils]: 51: Hoare triple {19783#false} processEnvironment__wrappee__methaneQuery_#t~ret5 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret5 && processEnvironment__wrappee__methaneQuery_#t~ret5 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret5;havoc processEnvironment__wrappee__methaneQuery_#t~ret5; {19783#false} is VALID [2020-07-28 19:04:54,705 INFO L280 TraceCheckUtils]: 52: Hoare triple {19783#false} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {19783#false} is VALID [2020-07-28 19:04:54,705 INFO L280 TraceCheckUtils]: 53: Hoare triple {19783#false} assume !(0 == ~pumpRunning~0); {19783#false} is VALID [2020-07-28 19:04:54,705 INFO L280 TraceCheckUtils]: 54: Hoare triple {19783#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {19783#false} is VALID [2020-07-28 19:04:54,706 INFO L280 TraceCheckUtils]: 55: Hoare triple {19783#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {19783#false} is VALID [2020-07-28 19:04:54,706 INFO L280 TraceCheckUtils]: 56: Hoare triple {19783#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7); {19783#false} is VALID [2020-07-28 19:04:54,706 INFO L280 TraceCheckUtils]: 57: Hoare triple {19783#false} assume !false; {19783#false} is VALID [2020-07-28 19:04:54,706 INFO L280 TraceCheckUtils]: 58: Hoare triple {19783#false} assume test_~splverifierCounter~0 < 4; {19783#false} is VALID [2020-07-28 19:04:54,706 INFO L280 TraceCheckUtils]: 59: Hoare triple {19783#false} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {19783#false} is VALID [2020-07-28 19:04:54,707 INFO L280 TraceCheckUtils]: 60: Hoare triple {19783#false} assume !(0 != test_~tmp~0); {19783#false} is VALID [2020-07-28 19:04:54,707 INFO L280 TraceCheckUtils]: 61: Hoare triple {19783#false} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {19783#false} is VALID [2020-07-28 19:04:54,707 INFO L280 TraceCheckUtils]: 62: Hoare triple {19783#false} assume !(0 != test_~tmp___0~0); {19783#false} is VALID [2020-07-28 19:04:54,707 INFO L280 TraceCheckUtils]: 63: Hoare triple {19783#false} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {19783#false} is VALID [2020-07-28 19:04:54,708 INFO L280 TraceCheckUtils]: 64: Hoare triple {19783#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {19783#false} is VALID [2020-07-28 19:04:54,708 INFO L280 TraceCheckUtils]: 65: Hoare triple {19783#false} assume 0 != ~pumpRunning~0; {19783#false} is VALID [2020-07-28 19:04:54,708 INFO L280 TraceCheckUtils]: 66: Hoare triple {19783#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19783#false} is VALID [2020-07-28 19:04:54,710 INFO L280 TraceCheckUtils]: 67: Hoare triple {19783#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {19783#false} is VALID [2020-07-28 19:04:54,710 INFO L280 TraceCheckUtils]: 68: Hoare triple {19783#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {19783#false} is VALID [2020-07-28 19:04:54,711 INFO L280 TraceCheckUtils]: 69: Hoare triple {19783#false} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {19783#false} is VALID [2020-07-28 19:04:54,711 INFO L280 TraceCheckUtils]: 70: Hoare triple {19783#false} processEnvironment_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret6 && processEnvironment_#t~ret6 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret6;havoc processEnvironment_#t~ret6; {19783#false} is VALID [2020-07-28 19:04:54,717 INFO L280 TraceCheckUtils]: 71: Hoare triple {19783#false} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {19783#false} is VALID [2020-07-28 19:04:54,717 INFO L280 TraceCheckUtils]: 72: Hoare triple {19783#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret26, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~6, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~6;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {19783#false} is VALID [2020-07-28 19:04:54,718 INFO L280 TraceCheckUtils]: 73: Hoare triple {19783#false} isLowWaterLevel_#t~ret26 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret26 && isLowWaterLevel_#t~ret26 <= 2147483647;isLowWaterLevel_~tmp~6 := isLowWaterLevel_#t~ret26;havoc isLowWaterLevel_#t~ret26; {19783#false} is VALID [2020-07-28 19:04:54,719 INFO L280 TraceCheckUtils]: 74: Hoare triple {19783#false} assume 0 != isLowWaterLevel_~tmp~6;isLowWaterLevel_~tmp___0~2 := 0; {19783#false} is VALID [2020-07-28 19:04:54,720 INFO L280 TraceCheckUtils]: 75: Hoare triple {19783#false} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {19783#false} is VALID [2020-07-28 19:04:54,721 INFO L280 TraceCheckUtils]: 76: Hoare triple {19783#false} processEnvironment__wrappee__methaneQuery_#t~ret5 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret5 && processEnvironment__wrappee__methaneQuery_#t~ret5 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret5;havoc processEnvironment__wrappee__methaneQuery_#t~ret5; {19783#false} is VALID [2020-07-28 19:04:54,721 INFO L280 TraceCheckUtils]: 77: Hoare triple {19783#false} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {19783#false} is VALID [2020-07-28 19:04:54,721 INFO L280 TraceCheckUtils]: 78: Hoare triple {19783#false} assume !(0 == ~pumpRunning~0); {19783#false} is VALID [2020-07-28 19:04:54,722 INFO L280 TraceCheckUtils]: 79: Hoare triple {19783#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {19783#false} is VALID [2020-07-28 19:04:54,723 INFO L280 TraceCheckUtils]: 80: Hoare triple {19783#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {19783#false} is VALID [2020-07-28 19:04:54,724 INFO L280 TraceCheckUtils]: 81: Hoare triple {19783#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {19783#false} is VALID [2020-07-28 19:04:54,724 INFO L280 TraceCheckUtils]: 82: Hoare triple {19783#false} __utac_acc__Specification4_spec__1_#t~ret28 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28 && __utac_acc__Specification4_spec__1_#t~ret28 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret28;havoc __utac_acc__Specification4_spec__1_#t~ret28; {19783#false} is VALID [2020-07-28 19:04:54,724 INFO L280 TraceCheckUtils]: 83: Hoare triple {19783#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {19783#false} is VALID [2020-07-28 19:04:54,726 INFO L280 TraceCheckUtils]: 84: Hoare triple {19783#false} assume !false; {19783#false} is VALID [2020-07-28 19:04:54,746 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 35 proven. 6 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2020-07-28 19:04:54,747 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2094153241] [2020-07-28 19:04:54,747 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [357597027] [2020-07-28 19:04:54,747 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:04:55,121 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2020-07-28 19:04:55,121 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2020-07-28 19:04:55,125 INFO L263 TraceCheckSpWp]: Trace formula consists of 513 conjuncts, 8 conjunts are in the unsatisfiable core [2020-07-28 19:04:55,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:04:55,154 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:04:55,258 INFO L342 QuantifierPusher]: Applying distributivity to a CONJUNCTION[2, 2, 2, 1] term [2020-07-28 19:04:55,259 INFO L523 QuantifierPusher]: Distributing 2 conjuncts over 2 disjuncts [2020-07-28 19:04:55,317 INFO L280 TraceCheckUtils]: 0: Hoare triple {19782#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(30);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(9);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(25);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {19782#true} is VALID [2020-07-28 19:04:55,317 INFO L280 TraceCheckUtils]: 1: Hoare triple {19782#true} havoc main_#res;havoc main_#t~ret30, main_~retValue_acc~6, main_~tmp~8;havoc main_~retValue_acc~6;havoc main_~tmp~8; {19782#true} is VALID [2020-07-28 19:04:55,317 INFO L280 TraceCheckUtils]: 2: Hoare triple {19782#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {19782#true} is VALID [2020-07-28 19:04:55,317 INFO L280 TraceCheckUtils]: 3: Hoare triple {19782#true} main_#t~ret30 := valid_product_#res;assume -2147483648 <= main_#t~ret30 && main_#t~ret30 <= 2147483647;main_~tmp~8 := main_#t~ret30;havoc main_#t~ret30; {19782#true} is VALID [2020-07-28 19:04:55,318 INFO L280 TraceCheckUtils]: 4: Hoare triple {19782#true} assume 0 != main_~tmp~8; {19782#true} is VALID [2020-07-28 19:04:55,318 INFO L280 TraceCheckUtils]: 5: Hoare triple {19782#true} havoc test_#t~nondet0, test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {19782#true} is VALID [2020-07-28 19:04:55,318 INFO L280 TraceCheckUtils]: 6: Hoare triple {19782#true} assume !false; {19782#true} is VALID [2020-07-28 19:04:55,318 INFO L280 TraceCheckUtils]: 7: Hoare triple {19782#true} assume test_~splverifierCounter~0 < 4; {19782#true} is VALID [2020-07-28 19:04:55,319 INFO L280 TraceCheckUtils]: 8: Hoare triple {19782#true} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {19782#true} is VALID [2020-07-28 19:04:55,319 INFO L280 TraceCheckUtils]: 9: Hoare triple {19782#true} assume 0 != test_~tmp~0; {19782#true} is VALID [2020-07-28 19:04:55,319 INFO L280 TraceCheckUtils]: 10: Hoare triple {19782#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {19782#true} is VALID [2020-07-28 19:04:55,319 INFO L280 TraceCheckUtils]: 11: Hoare triple {19782#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {19782#true} is VALID [2020-07-28 19:04:55,319 INFO L280 TraceCheckUtils]: 12: Hoare triple {19782#true} assume !(0 != test_~tmp___0~0); {19782#true} is VALID [2020-07-28 19:04:55,320 INFO L280 TraceCheckUtils]: 13: Hoare triple {19782#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {19782#true} is VALID [2020-07-28 19:04:55,320 INFO L280 TraceCheckUtils]: 14: Hoare triple {19782#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {19782#true} is VALID [2020-07-28 19:04:55,320 INFO L280 TraceCheckUtils]: 15: Hoare triple {19782#true} assume !(0 != ~pumpRunning~0); {19782#true} is VALID [2020-07-28 19:04:55,320 INFO L280 TraceCheckUtils]: 16: Hoare triple {19782#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {19782#true} is VALID [2020-07-28 19:04:55,320 INFO L280 TraceCheckUtils]: 17: Hoare triple {19782#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {19782#true} is VALID [2020-07-28 19:04:55,320 INFO L280 TraceCheckUtils]: 18: Hoare triple {19782#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {19782#true} is VALID [2020-07-28 19:04:55,321 INFO L280 TraceCheckUtils]: 19: Hoare triple {19782#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {19782#true} is VALID [2020-07-28 19:04:55,321 INFO L280 TraceCheckUtils]: 20: Hoare triple {19782#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {19782#true} is VALID [2020-07-28 19:04:55,321 INFO L280 TraceCheckUtils]: 21: Hoare triple {19782#true} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {19782#true} is VALID [2020-07-28 19:04:55,321 INFO L280 TraceCheckUtils]: 22: Hoare triple {19782#true} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {19782#true} is VALID [2020-07-28 19:04:55,321 INFO L280 TraceCheckUtils]: 23: Hoare triple {19782#true} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {19782#true} is VALID [2020-07-28 19:04:55,321 INFO L280 TraceCheckUtils]: 24: Hoare triple {19782#true} processEnvironment__wrappee__highWaterSensor_#t~ret4 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret4 && processEnvironment__wrappee__highWaterSensor_#t~ret4 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret4;havoc processEnvironment__wrappee__highWaterSensor_#t~ret4; {19782#true} is VALID [2020-07-28 19:04:55,321 INFO L280 TraceCheckUtils]: 25: Hoare triple {19782#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret7, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {19782#true} is VALID [2020-07-28 19:04:55,322 INFO L280 TraceCheckUtils]: 26: Hoare triple {19782#true} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {19782#true} is VALID [2020-07-28 19:04:55,322 INFO L280 TraceCheckUtils]: 27: Hoare triple {19782#true} activatePump_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret7 && activatePump_#t~ret7 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret7;havoc activatePump_#t~ret7; {19782#true} is VALID [2020-07-28 19:04:55,322 INFO L280 TraceCheckUtils]: 28: Hoare triple {19782#true} assume !(0 != activatePump_~tmp~4);~pumpRunning~0 := 1; {19782#true} is VALID [2020-07-28 19:04:55,322 INFO L280 TraceCheckUtils]: 29: Hoare triple {19782#true} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {19782#true} is VALID [2020-07-28 19:04:55,322 INFO L280 TraceCheckUtils]: 30: Hoare triple {19782#true} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {19782#true} is VALID [2020-07-28 19:04:55,322 INFO L280 TraceCheckUtils]: 31: Hoare triple {19782#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7); {19782#true} is VALID [2020-07-28 19:04:55,322 INFO L280 TraceCheckUtils]: 32: Hoare triple {19782#true} assume !false; {19782#true} is VALID [2020-07-28 19:04:55,323 INFO L280 TraceCheckUtils]: 33: Hoare triple {19782#true} assume test_~splverifierCounter~0 < 4; {19782#true} is VALID [2020-07-28 19:04:55,323 INFO L280 TraceCheckUtils]: 34: Hoare triple {19782#true} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {19782#true} is VALID [2020-07-28 19:04:55,323 INFO L280 TraceCheckUtils]: 35: Hoare triple {19782#true} assume !(0 != test_~tmp~0); {19782#true} is VALID [2020-07-28 19:04:55,323 INFO L280 TraceCheckUtils]: 36: Hoare triple {19782#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {19782#true} is VALID [2020-07-28 19:04:55,323 INFO L280 TraceCheckUtils]: 37: Hoare triple {19782#true} assume !(0 != test_~tmp___0~0); {19782#true} is VALID [2020-07-28 19:04:55,323 INFO L280 TraceCheckUtils]: 38: Hoare triple {19782#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {19782#true} is VALID [2020-07-28 19:04:55,323 INFO L280 TraceCheckUtils]: 39: Hoare triple {19782#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {19782#true} is VALID [2020-07-28 19:04:55,323 INFO L280 TraceCheckUtils]: 40: Hoare triple {19782#true} assume 0 != ~pumpRunning~0; {19782#true} is VALID [2020-07-28 19:04:55,324 INFO L280 TraceCheckUtils]: 41: Hoare triple {19782#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19782#true} is VALID [2020-07-28 19:04:55,324 INFO L280 TraceCheckUtils]: 42: Hoare triple {19782#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {19782#true} is VALID [2020-07-28 19:04:55,324 INFO L280 TraceCheckUtils]: 43: Hoare triple {19782#true} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {19782#true} is VALID [2020-07-28 19:04:55,324 INFO L280 TraceCheckUtils]: 44: Hoare triple {19782#true} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {19782#true} is VALID [2020-07-28 19:04:55,324 INFO L280 TraceCheckUtils]: 45: Hoare triple {19782#true} processEnvironment_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret6 && processEnvironment_#t~ret6 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret6;havoc processEnvironment_#t~ret6; {19782#true} is VALID [2020-07-28 19:04:55,324 INFO L280 TraceCheckUtils]: 46: Hoare triple {19782#true} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {19782#true} is VALID [2020-07-28 19:04:55,326 INFO L280 TraceCheckUtils]: 47: Hoare triple {19782#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret26, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~6, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~6;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {19933#(or (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (not (= 0 ~waterLevel~0))) (and (= 1 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 0 ~waterLevel~0)))} is VALID [2020-07-28 19:04:55,327 INFO L280 TraceCheckUtils]: 48: Hoare triple {19933#(or (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (not (= 0 ~waterLevel~0))) (and (= 1 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 0 ~waterLevel~0)))} isLowWaterLevel_#t~ret26 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret26 && isLowWaterLevel_#t~ret26 <= 2147483647;isLowWaterLevel_~tmp~6 := isLowWaterLevel_#t~ret26;havoc isLowWaterLevel_#t~ret26; {19937#(or (and (= 1 ULTIMATE.start_isLowWaterLevel_~tmp~6) (= 0 ~waterLevel~0)) (and (not (= 0 ~waterLevel~0)) (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~6)))} is VALID [2020-07-28 19:04:55,328 INFO L280 TraceCheckUtils]: 49: Hoare triple {19937#(or (and (= 1 ULTIMATE.start_isLowWaterLevel_~tmp~6) (= 0 ~waterLevel~0)) (and (not (= 0 ~waterLevel~0)) (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~6)))} assume 0 != isLowWaterLevel_~tmp~6;isLowWaterLevel_~tmp___0~2 := 0; {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,328 INFO L280 TraceCheckUtils]: 50: Hoare triple {19941#(= 0 ~waterLevel~0)} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,329 INFO L280 TraceCheckUtils]: 51: Hoare triple {19941#(= 0 ~waterLevel~0)} processEnvironment__wrappee__methaneQuery_#t~ret5 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret5 && processEnvironment__wrappee__methaneQuery_#t~ret5 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret5;havoc processEnvironment__wrappee__methaneQuery_#t~ret5; {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,329 INFO L280 TraceCheckUtils]: 52: Hoare triple {19941#(= 0 ~waterLevel~0)} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,330 INFO L280 TraceCheckUtils]: 53: Hoare triple {19941#(= 0 ~waterLevel~0)} assume !(0 == ~pumpRunning~0); {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,330 INFO L280 TraceCheckUtils]: 54: Hoare triple {19941#(= 0 ~waterLevel~0)} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,331 INFO L280 TraceCheckUtils]: 55: Hoare triple {19941#(= 0 ~waterLevel~0)} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,331 INFO L280 TraceCheckUtils]: 56: Hoare triple {19941#(= 0 ~waterLevel~0)} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7); {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,332 INFO L280 TraceCheckUtils]: 57: Hoare triple {19941#(= 0 ~waterLevel~0)} assume !false; {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,332 INFO L280 TraceCheckUtils]: 58: Hoare triple {19941#(= 0 ~waterLevel~0)} assume test_~splverifierCounter~0 < 4; {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,333 INFO L280 TraceCheckUtils]: 59: Hoare triple {19941#(= 0 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,333 INFO L280 TraceCheckUtils]: 60: Hoare triple {19941#(= 0 ~waterLevel~0)} assume !(0 != test_~tmp~0); {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,334 INFO L280 TraceCheckUtils]: 61: Hoare triple {19941#(= 0 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,334 INFO L280 TraceCheckUtils]: 62: Hoare triple {19941#(= 0 ~waterLevel~0)} assume !(0 != test_~tmp___0~0); {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,335 INFO L280 TraceCheckUtils]: 63: Hoare triple {19941#(= 0 ~waterLevel~0)} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,335 INFO L280 TraceCheckUtils]: 64: Hoare triple {19941#(= 0 ~waterLevel~0)} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,335 INFO L280 TraceCheckUtils]: 65: Hoare triple {19941#(= 0 ~waterLevel~0)} assume 0 != ~pumpRunning~0; {19941#(= 0 ~waterLevel~0)} is VALID [2020-07-28 19:04:55,336 INFO L280 TraceCheckUtils]: 66: Hoare triple {19941#(= 0 ~waterLevel~0)} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {19783#false} is VALID [2020-07-28 19:04:55,336 INFO L280 TraceCheckUtils]: 67: Hoare triple {19783#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {19783#false} is VALID [2020-07-28 19:04:55,336 INFO L280 TraceCheckUtils]: 68: Hoare triple {19783#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {19783#false} is VALID [2020-07-28 19:04:55,336 INFO L280 TraceCheckUtils]: 69: Hoare triple {19783#false} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {19783#false} is VALID [2020-07-28 19:04:55,336 INFO L280 TraceCheckUtils]: 70: Hoare triple {19783#false} processEnvironment_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret6 && processEnvironment_#t~ret6 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret6;havoc processEnvironment_#t~ret6; {19783#false} is VALID [2020-07-28 19:04:55,337 INFO L280 TraceCheckUtils]: 71: Hoare triple {19783#false} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {19783#false} is VALID [2020-07-28 19:04:55,337 INFO L280 TraceCheckUtils]: 72: Hoare triple {19783#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret26, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~6, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~6;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {19783#false} is VALID [2020-07-28 19:04:55,337 INFO L280 TraceCheckUtils]: 73: Hoare triple {19783#false} isLowWaterLevel_#t~ret26 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret26 && isLowWaterLevel_#t~ret26 <= 2147483647;isLowWaterLevel_~tmp~6 := isLowWaterLevel_#t~ret26;havoc isLowWaterLevel_#t~ret26; {19783#false} is VALID [2020-07-28 19:04:55,337 INFO L280 TraceCheckUtils]: 74: Hoare triple {19783#false} assume 0 != isLowWaterLevel_~tmp~6;isLowWaterLevel_~tmp___0~2 := 0; {19783#false} is VALID [2020-07-28 19:04:55,337 INFO L280 TraceCheckUtils]: 75: Hoare triple {19783#false} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {19783#false} is VALID [2020-07-28 19:04:55,337 INFO L280 TraceCheckUtils]: 76: Hoare triple {19783#false} processEnvironment__wrappee__methaneQuery_#t~ret5 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret5 && processEnvironment__wrappee__methaneQuery_#t~ret5 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret5;havoc processEnvironment__wrappee__methaneQuery_#t~ret5; {19783#false} is VALID [2020-07-28 19:04:55,337 INFO L280 TraceCheckUtils]: 77: Hoare triple {19783#false} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {19783#false} is VALID [2020-07-28 19:04:55,338 INFO L280 TraceCheckUtils]: 78: Hoare triple {19783#false} assume !(0 == ~pumpRunning~0); {19783#false} is VALID [2020-07-28 19:04:55,338 INFO L280 TraceCheckUtils]: 79: Hoare triple {19783#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {19783#false} is VALID [2020-07-28 19:04:55,338 INFO L280 TraceCheckUtils]: 80: Hoare triple {19783#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {19783#false} is VALID [2020-07-28 19:04:55,338 INFO L280 TraceCheckUtils]: 81: Hoare triple {19783#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {19783#false} is VALID [2020-07-28 19:04:55,338 INFO L280 TraceCheckUtils]: 82: Hoare triple {19783#false} __utac_acc__Specification4_spec__1_#t~ret28 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28 && __utac_acc__Specification4_spec__1_#t~ret28 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret28;havoc __utac_acc__Specification4_spec__1_#t~ret28; {19783#false} is VALID [2020-07-28 19:04:55,338 INFO L280 TraceCheckUtils]: 83: Hoare triple {19783#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {19783#false} is VALID [2020-07-28 19:04:55,339 INFO L280 TraceCheckUtils]: 84: Hoare triple {19783#false} assume !false; {19783#false} is VALID [2020-07-28 19:04:55,344 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2020-07-28 19:04:55,345 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2020-07-28 19:04:55,345 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6] total 10 [2020-07-28 19:04:55,345 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [495979947] [2020-07-28 19:04:55,346 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 85 [2020-07-28 19:04:55,346 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:04:55,346 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:04:55,427 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 77 edges. 77 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:55,427 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:04:55,427 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:04:55,428 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:04:55,428 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2020-07-28 19:04:55,428 INFO L87 Difference]: Start difference. First operand 458 states and 594 transitions. Second operand 5 states. [2020-07-28 19:04:59,346 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:04:59,346 INFO L93 Difference]: Finished difference Result 1485 states and 1930 transitions. [2020-07-28 19:04:59,346 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2020-07-28 19:04:59,346 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 85 [2020-07-28 19:04:59,346 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:04:59,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:59,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 320 transitions. [2020-07-28 19:04:59,351 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:04:59,355 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 320 transitions. [2020-07-28 19:04:59,355 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 320 transitions. [2020-07-28 19:04:59,733 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 320 edges. 320 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:04:59,782 INFO L225 Difference]: With dead ends: 1485 [2020-07-28 19:04:59,782 INFO L226 Difference]: Without dead ends: 1031 [2020-07-28 19:04:59,784 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 95 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 7 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=34, Invalid=122, Unknown=0, NotChecked=0, Total=156 [2020-07-28 19:04:59,785 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1031 states. [2020-07-28 19:05:01,526 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1031 to 624. [2020-07-28 19:05:01,526 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:01,526 INFO L82 GeneralOperation]: Start isEquivalent. First operand 1031 states. Second operand 624 states. [2020-07-28 19:05:01,526 INFO L74 IsIncluded]: Start isIncluded. First operand 1031 states. Second operand 624 states. [2020-07-28 19:05:01,526 INFO L87 Difference]: Start difference. First operand 1031 states. Second operand 624 states. [2020-07-28 19:05:01,593 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:01,593 INFO L93 Difference]: Finished difference Result 1031 states and 1316 transitions. [2020-07-28 19:05:01,594 INFO L276 IsEmpty]: Start isEmpty. Operand 1031 states and 1316 transitions. [2020-07-28 19:05:01,596 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:01,596 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:01,596 INFO L74 IsIncluded]: Start isIncluded. First operand 624 states. Second operand 1031 states. [2020-07-28 19:05:01,596 INFO L87 Difference]: Start difference. First operand 624 states. Second operand 1031 states. [2020-07-28 19:05:01,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:01,676 INFO L93 Difference]: Finished difference Result 1031 states and 1316 transitions. [2020-07-28 19:05:01,677 INFO L276 IsEmpty]: Start isEmpty. Operand 1031 states and 1316 transitions. [2020-07-28 19:05:01,679 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:01,679 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:01,680 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:01,680 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:01,680 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 624 states. [2020-07-28 19:05:01,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 624 states to 624 states and 801 transitions. [2020-07-28 19:05:01,717 INFO L78 Accepts]: Start accepts. Automaton has 624 states and 801 transitions. Word has length 85 [2020-07-28 19:05:01,718 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:01,718 INFO L479 AbstractCegarLoop]: Abstraction has 624 states and 801 transitions. [2020-07-28 19:05:01,718 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:05:01,718 INFO L276 IsEmpty]: Start isEmpty. Operand 624 states and 801 transitions. [2020-07-28 19:05:01,720 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 86 [2020-07-28 19:05:01,720 INFO L414 BasicCegarLoop]: Found error trace [2020-07-28 19:05:01,720 INFO L422 BasicCegarLoop]: trace histogram [3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-28 19:05:01,921 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10,3 z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:05:01,921 INFO L427 AbstractCegarLoop]: === Iteration 12 === [ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-28 19:05:01,921 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-28 19:05:01,922 INFO L82 PathProgramCache]: Analyzing trace with hash -1550529311, now seen corresponding path program 1 times [2020-07-28 19:05:01,922 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-28 19:05:01,922 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1515050941] [2020-07-28 19:05:01,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-28 19:05:01,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:02,038 INFO L280 TraceCheckUtils]: 0: Hoare triple {25013#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(30);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(9);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(25);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {25013#true} is VALID [2020-07-28 19:05:02,039 INFO L280 TraceCheckUtils]: 1: Hoare triple {25013#true} havoc main_#res;havoc main_#t~ret30, main_~retValue_acc~6, main_~tmp~8;havoc main_~retValue_acc~6;havoc main_~tmp~8; {25013#true} is VALID [2020-07-28 19:05:02,039 INFO L280 TraceCheckUtils]: 2: Hoare triple {25013#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {25013#true} is VALID [2020-07-28 19:05:02,039 INFO L280 TraceCheckUtils]: 3: Hoare triple {25013#true} main_#t~ret30 := valid_product_#res;assume -2147483648 <= main_#t~ret30 && main_#t~ret30 <= 2147483647;main_~tmp~8 := main_#t~ret30;havoc main_#t~ret30; {25013#true} is VALID [2020-07-28 19:05:02,040 INFO L280 TraceCheckUtils]: 4: Hoare triple {25013#true} assume 0 != main_~tmp~8; {25013#true} is VALID [2020-07-28 19:05:02,040 INFO L280 TraceCheckUtils]: 5: Hoare triple {25013#true} havoc test_#t~nondet0, test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {25013#true} is VALID [2020-07-28 19:05:02,040 INFO L280 TraceCheckUtils]: 6: Hoare triple {25013#true} assume !false; {25013#true} is VALID [2020-07-28 19:05:02,040 INFO L280 TraceCheckUtils]: 7: Hoare triple {25013#true} assume test_~splverifierCounter~0 < 4; {25013#true} is VALID [2020-07-28 19:05:02,041 INFO L280 TraceCheckUtils]: 8: Hoare triple {25013#true} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {25013#true} is VALID [2020-07-28 19:05:02,041 INFO L280 TraceCheckUtils]: 9: Hoare triple {25013#true} assume 0 != test_~tmp~0; {25013#true} is VALID [2020-07-28 19:05:02,041 INFO L280 TraceCheckUtils]: 10: Hoare triple {25013#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {25013#true} is VALID [2020-07-28 19:05:02,041 INFO L280 TraceCheckUtils]: 11: Hoare triple {25013#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {25013#true} is VALID [2020-07-28 19:05:02,041 INFO L280 TraceCheckUtils]: 12: Hoare triple {25013#true} assume !(0 != test_~tmp___0~0); {25013#true} is VALID [2020-07-28 19:05:02,041 INFO L280 TraceCheckUtils]: 13: Hoare triple {25013#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {25013#true} is VALID [2020-07-28 19:05:02,043 INFO L280 TraceCheckUtils]: 14: Hoare triple {25013#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25015#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:02,049 INFO L280 TraceCheckUtils]: 15: Hoare triple {25015#(= 1 ~systemActive~0)} assume !(0 != ~pumpRunning~0); {25015#(= 1 ~systemActive~0)} is VALID [2020-07-28 19:05:02,050 INFO L280 TraceCheckUtils]: 16: Hoare triple {25015#(= 1 ~systemActive~0)} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {25013#true} is VALID [2020-07-28 19:05:02,050 INFO L280 TraceCheckUtils]: 17: Hoare triple {25013#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {25013#true} is VALID [2020-07-28 19:05:02,050 INFO L280 TraceCheckUtils]: 18: Hoare triple {25013#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {25013#true} is VALID [2020-07-28 19:05:02,050 INFO L280 TraceCheckUtils]: 19: Hoare triple {25013#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {25013#true} is VALID [2020-07-28 19:05:02,051 INFO L280 TraceCheckUtils]: 20: Hoare triple {25013#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {25013#true} is VALID [2020-07-28 19:05:02,051 INFO L280 TraceCheckUtils]: 21: Hoare triple {25013#true} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {25013#true} is VALID [2020-07-28 19:05:02,051 INFO L280 TraceCheckUtils]: 22: Hoare triple {25013#true} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {25013#true} is VALID [2020-07-28 19:05:02,051 INFO L280 TraceCheckUtils]: 23: Hoare triple {25013#true} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {25013#true} is VALID [2020-07-28 19:05:02,051 INFO L280 TraceCheckUtils]: 24: Hoare triple {25013#true} processEnvironment__wrappee__highWaterSensor_#t~ret4 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret4 && processEnvironment__wrappee__highWaterSensor_#t~ret4 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret4;havoc processEnvironment__wrappee__highWaterSensor_#t~ret4; {25013#true} is VALID [2020-07-28 19:05:02,051 INFO L280 TraceCheckUtils]: 25: Hoare triple {25013#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret7, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {25013#true} is VALID [2020-07-28 19:05:02,052 INFO L280 TraceCheckUtils]: 26: Hoare triple {25013#true} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {25013#true} is VALID [2020-07-28 19:05:02,052 INFO L280 TraceCheckUtils]: 27: Hoare triple {25013#true} activatePump_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret7 && activatePump_#t~ret7 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret7;havoc activatePump_#t~ret7; {25013#true} is VALID [2020-07-28 19:05:02,052 INFO L280 TraceCheckUtils]: 28: Hoare triple {25013#true} assume !(0 != activatePump_~tmp~4);~pumpRunning~0 := 1; {25013#true} is VALID [2020-07-28 19:05:02,052 INFO L280 TraceCheckUtils]: 29: Hoare triple {25013#true} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {25013#true} is VALID [2020-07-28 19:05:02,052 INFO L280 TraceCheckUtils]: 30: Hoare triple {25013#true} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {25013#true} is VALID [2020-07-28 19:05:02,052 INFO L280 TraceCheckUtils]: 31: Hoare triple {25013#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7); {25013#true} is VALID [2020-07-28 19:05:02,053 INFO L280 TraceCheckUtils]: 32: Hoare triple {25013#true} assume !false; {25013#true} is VALID [2020-07-28 19:05:02,053 INFO L280 TraceCheckUtils]: 33: Hoare triple {25013#true} assume test_~splverifierCounter~0 < 4; {25013#true} is VALID [2020-07-28 19:05:02,053 INFO L280 TraceCheckUtils]: 34: Hoare triple {25013#true} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {25013#true} is VALID [2020-07-28 19:05:02,053 INFO L280 TraceCheckUtils]: 35: Hoare triple {25013#true} assume !(0 != test_~tmp~0); {25013#true} is VALID [2020-07-28 19:05:02,053 INFO L280 TraceCheckUtils]: 36: Hoare triple {25013#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {25013#true} is VALID [2020-07-28 19:05:02,053 INFO L280 TraceCheckUtils]: 37: Hoare triple {25013#true} assume !(0 != test_~tmp___0~0); {25013#true} is VALID [2020-07-28 19:05:02,054 INFO L280 TraceCheckUtils]: 38: Hoare triple {25013#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {25013#true} is VALID [2020-07-28 19:05:02,054 INFO L280 TraceCheckUtils]: 39: Hoare triple {25013#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25013#true} is VALID [2020-07-28 19:05:02,054 INFO L280 TraceCheckUtils]: 40: Hoare triple {25013#true} assume 0 != ~pumpRunning~0; {25013#true} is VALID [2020-07-28 19:05:02,054 INFO L280 TraceCheckUtils]: 41: Hoare triple {25013#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25013#true} is VALID [2020-07-28 19:05:02,054 INFO L280 TraceCheckUtils]: 42: Hoare triple {25013#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {25013#true} is VALID [2020-07-28 19:05:02,054 INFO L280 TraceCheckUtils]: 43: Hoare triple {25013#true} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {25013#true} is VALID [2020-07-28 19:05:02,055 INFO L280 TraceCheckUtils]: 44: Hoare triple {25013#true} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {25013#true} is VALID [2020-07-28 19:05:02,055 INFO L280 TraceCheckUtils]: 45: Hoare triple {25013#true} processEnvironment_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret6 && processEnvironment_#t~ret6 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret6;havoc processEnvironment_#t~ret6; {25013#true} is VALID [2020-07-28 19:05:02,055 INFO L280 TraceCheckUtils]: 46: Hoare triple {25013#true} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {25013#true} is VALID [2020-07-28 19:05:02,055 INFO L280 TraceCheckUtils]: 47: Hoare triple {25013#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret26, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~6, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~6;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {25013#true} is VALID [2020-07-28 19:05:02,055 INFO L280 TraceCheckUtils]: 48: Hoare triple {25013#true} isLowWaterLevel_#t~ret26 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret26 && isLowWaterLevel_#t~ret26 <= 2147483647;isLowWaterLevel_~tmp~6 := isLowWaterLevel_#t~ret26;havoc isLowWaterLevel_#t~ret26; {25013#true} is VALID [2020-07-28 19:05:02,056 INFO L280 TraceCheckUtils]: 49: Hoare triple {25013#true} assume !(0 != isLowWaterLevel_~tmp~6);isLowWaterLevel_~tmp___0~2 := 1; {25016#(not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2))} is VALID [2020-07-28 19:05:02,057 INFO L280 TraceCheckUtils]: 50: Hoare triple {25016#(not (= 0 ULTIMATE.start_isLowWaterLevel_~tmp___0~2))} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {25017#(not (= 0 |ULTIMATE.start_isLowWaterLevel_#res|))} is VALID [2020-07-28 19:05:02,057 INFO L280 TraceCheckUtils]: 51: Hoare triple {25017#(not (= 0 |ULTIMATE.start_isLowWaterLevel_#res|))} processEnvironment__wrappee__methaneQuery_#t~ret5 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret5 && processEnvironment__wrappee__methaneQuery_#t~ret5 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret5;havoc processEnvironment__wrappee__methaneQuery_#t~ret5; {25018#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2))} is VALID [2020-07-28 19:05:02,058 INFO L280 TraceCheckUtils]: 52: Hoare triple {25018#(not (= 0 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2))} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {25014#false} is VALID [2020-07-28 19:05:02,058 INFO L280 TraceCheckUtils]: 53: Hoare triple {25014#false} assume !(0 == ~pumpRunning~0); {25014#false} is VALID [2020-07-28 19:05:02,058 INFO L280 TraceCheckUtils]: 54: Hoare triple {25014#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {25014#false} is VALID [2020-07-28 19:05:02,058 INFO L280 TraceCheckUtils]: 55: Hoare triple {25014#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {25014#false} is VALID [2020-07-28 19:05:02,058 INFO L280 TraceCheckUtils]: 56: Hoare triple {25014#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7); {25014#false} is VALID [2020-07-28 19:05:02,059 INFO L280 TraceCheckUtils]: 57: Hoare triple {25014#false} assume !false; {25014#false} is VALID [2020-07-28 19:05:02,059 INFO L280 TraceCheckUtils]: 58: Hoare triple {25014#false} assume test_~splverifierCounter~0 < 4; {25014#false} is VALID [2020-07-28 19:05:02,059 INFO L280 TraceCheckUtils]: 59: Hoare triple {25014#false} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {25014#false} is VALID [2020-07-28 19:05:02,059 INFO L280 TraceCheckUtils]: 60: Hoare triple {25014#false} assume !(0 != test_~tmp~0); {25014#false} is VALID [2020-07-28 19:05:02,059 INFO L280 TraceCheckUtils]: 61: Hoare triple {25014#false} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {25014#false} is VALID [2020-07-28 19:05:02,059 INFO L280 TraceCheckUtils]: 62: Hoare triple {25014#false} assume !(0 != test_~tmp___0~0); {25014#false} is VALID [2020-07-28 19:05:02,060 INFO L280 TraceCheckUtils]: 63: Hoare triple {25014#false} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {25014#false} is VALID [2020-07-28 19:05:02,060 INFO L280 TraceCheckUtils]: 64: Hoare triple {25014#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25014#false} is VALID [2020-07-28 19:05:02,060 INFO L280 TraceCheckUtils]: 65: Hoare triple {25014#false} assume 0 != ~pumpRunning~0; {25014#false} is VALID [2020-07-28 19:05:02,060 INFO L280 TraceCheckUtils]: 66: Hoare triple {25014#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25014#false} is VALID [2020-07-28 19:05:02,060 INFO L280 TraceCheckUtils]: 67: Hoare triple {25014#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {25014#false} is VALID [2020-07-28 19:05:02,061 INFO L280 TraceCheckUtils]: 68: Hoare triple {25014#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {25014#false} is VALID [2020-07-28 19:05:02,061 INFO L280 TraceCheckUtils]: 69: Hoare triple {25014#false} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {25014#false} is VALID [2020-07-28 19:05:02,061 INFO L280 TraceCheckUtils]: 70: Hoare triple {25014#false} processEnvironment_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret6 && processEnvironment_#t~ret6 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret6;havoc processEnvironment_#t~ret6; {25014#false} is VALID [2020-07-28 19:05:02,061 INFO L280 TraceCheckUtils]: 71: Hoare triple {25014#false} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {25014#false} is VALID [2020-07-28 19:05:02,061 INFO L280 TraceCheckUtils]: 72: Hoare triple {25014#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret26, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~6, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~6;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {25014#false} is VALID [2020-07-28 19:05:02,061 INFO L280 TraceCheckUtils]: 73: Hoare triple {25014#false} isLowWaterLevel_#t~ret26 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret26 && isLowWaterLevel_#t~ret26 <= 2147483647;isLowWaterLevel_~tmp~6 := isLowWaterLevel_#t~ret26;havoc isLowWaterLevel_#t~ret26; {25014#false} is VALID [2020-07-28 19:05:02,062 INFO L280 TraceCheckUtils]: 74: Hoare triple {25014#false} assume 0 != isLowWaterLevel_~tmp~6;isLowWaterLevel_~tmp___0~2 := 0; {25014#false} is VALID [2020-07-28 19:05:02,062 INFO L280 TraceCheckUtils]: 75: Hoare triple {25014#false} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {25014#false} is VALID [2020-07-28 19:05:02,062 INFO L280 TraceCheckUtils]: 76: Hoare triple {25014#false} processEnvironment__wrappee__methaneQuery_#t~ret5 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret5 && processEnvironment__wrappee__methaneQuery_#t~ret5 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret5;havoc processEnvironment__wrappee__methaneQuery_#t~ret5; {25014#false} is VALID [2020-07-28 19:05:02,062 INFO L280 TraceCheckUtils]: 77: Hoare triple {25014#false} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {25014#false} is VALID [2020-07-28 19:05:02,062 INFO L280 TraceCheckUtils]: 78: Hoare triple {25014#false} assume !(0 == ~pumpRunning~0); {25014#false} is VALID [2020-07-28 19:05:02,062 INFO L280 TraceCheckUtils]: 79: Hoare triple {25014#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {25014#false} is VALID [2020-07-28 19:05:02,063 INFO L280 TraceCheckUtils]: 80: Hoare triple {25014#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {25014#false} is VALID [2020-07-28 19:05:02,063 INFO L280 TraceCheckUtils]: 81: Hoare triple {25014#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {25014#false} is VALID [2020-07-28 19:05:02,063 INFO L280 TraceCheckUtils]: 82: Hoare triple {25014#false} __utac_acc__Specification4_spec__1_#t~ret28 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28 && __utac_acc__Specification4_spec__1_#t~ret28 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret28;havoc __utac_acc__Specification4_spec__1_#t~ret28; {25014#false} is VALID [2020-07-28 19:05:02,063 INFO L280 TraceCheckUtils]: 83: Hoare triple {25014#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {25014#false} is VALID [2020-07-28 19:05:02,063 INFO L280 TraceCheckUtils]: 84: Hoare triple {25014#false} assume !false; {25014#false} is VALID [2020-07-28 19:05:02,070 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 38 proven. 2 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2020-07-28 19:05:02,070 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1515050941] [2020-07-28 19:05:02,070 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [902604146] [2020-07-28 19:05:02,070 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 -smt2 -in SMTLIB2_COMPLIANT=true [2020-07-28 19:05:02,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:02,208 INFO L263 TraceCheckSpWp]: Trace formula consists of 514 conjuncts, 5 conjunts are in the unsatisfiable core [2020-07-28 19:05:02,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-28 19:05:02,236 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2020-07-28 19:05:02,413 INFO L280 TraceCheckUtils]: 0: Hoare triple {25013#true} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string10.base, #t~string10.offset := #Ultimate.allocOnStack(13);call #t~string12.base, #t~string12.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string12.base, #t~string12.offset, 1);call write~init~int(110, #t~string12.base, 1 + #t~string12.offset, 1);call write~init~int(0, #t~string12.base, 2 + #t~string12.offset, 1);call #t~string14.base, #t~string14.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string14.base, #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 1 + #t~string14.offset, 1);call write~init~int(102, #t~string14.base, 2 + #t~string14.offset, 1);call write~init~int(0, #t~string14.base, 3 + #t~string14.offset, 1);call #t~string16.base, #t~string16.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string16.base, #t~string16.offset, 1);call write~init~int(80, #t~string16.base, 1 + #t~string16.offset, 1);call write~init~int(117, #t~string16.base, 2 + #t~string16.offset, 1);call write~init~int(109, #t~string16.base, 3 + #t~string16.offset, 1);call write~init~int(112, #t~string16.base, 4 + #t~string16.offset, 1);call write~init~int(58, #t~string16.base, 5 + #t~string16.offset, 1);call write~init~int(0, #t~string16.base, 6 + #t~string16.offset, 1);call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string18.base, #t~string18.offset, 1);call write~init~int(110, #t~string18.base, 1 + #t~string18.offset, 1);call write~init~int(0, #t~string18.base, 2 + #t~string18.offset, 1);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(4);call write~init~int(79, #t~string20.base, #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 1 + #t~string20.offset, 1);call write~init~int(102, #t~string20.base, 2 + #t~string20.offset, 1);call write~init~int(0, #t~string20.base, 3 + #t~string20.offset, 1);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(3);call write~init~int(41, #t~string22.base, #t~string22.offset, 1);call write~init~int(32, #t~string22.base, 1 + #t~string22.offset, 1);call write~init~int(0, #t~string22.base, 2 + #t~string22.offset, 1);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string24.base, #t~string24.offset, 1);call write~init~int(0, #t~string24.base, 1 + #t~string24.offset, 1);call #t~string49.base, #t~string49.offset := #Ultimate.allocOnStack(30);call #t~string50.base, #t~string50.offset := #Ultimate.allocOnStack(9);call #t~string51.base, #t~string51.offset := #Ultimate.allocOnStack(21);call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string58.base, #t~string58.offset := #Ultimate.allocOnStack(30);call #t~string59.base, #t~string59.offset := #Ultimate.allocOnStack(9);call #t~string60.base, #t~string60.offset := #Ultimate.allocOnStack(25);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string67.base, #t~string67.offset := #Ultimate.allocOnStack(13);call #t~string69.base, #t~string69.offset := #Ultimate.allocOnStack(7);call write~init~int(44, #t~string69.base, #t~string69.offset, 1);call write~init~int(77, #t~string69.base, 1 + #t~string69.offset, 1);call write~init~int(101, #t~string69.base, 2 + #t~string69.offset, 1);call write~init~int(116, #t~string69.base, 3 + #t~string69.offset, 1);call write~init~int(104, #t~string69.base, 4 + #t~string69.offset, 1);call write~init~int(58, #t~string69.base, 5 + #t~string69.offset, 1);call write~init~int(0, #t~string69.base, 6 + #t~string69.offset, 1);call #t~string71.base, #t~string71.offset := #Ultimate.allocOnStack(5);call write~init~int(67, #t~string71.base, #t~string71.offset, 1);call write~init~int(82, #t~string71.base, 1 + #t~string71.offset, 1);call write~init~int(73, #t~string71.base, 2 + #t~string71.offset, 1);call write~init~int(84, #t~string71.base, 3 + #t~string71.offset, 1);call write~init~int(0, #t~string71.base, 4 + #t~string71.offset, 1);call #t~string73.base, #t~string73.offset := #Ultimate.allocOnStack(3);call write~init~int(79, #t~string73.base, #t~string73.offset, 1);call write~init~int(75, #t~string73.base, 1 + #t~string73.offset, 1);call write~init~int(0, #t~string73.base, 2 + #t~string73.offset, 1);call #t~string75.base, #t~string75.offset := #Ultimate.allocOnStack(2);call write~init~int(41, #t~string75.base, #t~string75.offset, 1);call write~init~int(0, #t~string75.base, 1 + #t~string75.offset, 1);~pumpRunning~0 := 0;~systemActive~0 := 1;~cleanupTimeShifts~0 := 4;~head~0.base, ~head~0.offset := 0, 0;~waterLevel~0 := 1;~methaneLevelCritical~0 := 0; {25013#true} is VALID [2020-07-28 19:05:02,414 INFO L280 TraceCheckUtils]: 1: Hoare triple {25013#true} havoc main_#res;havoc main_#t~ret30, main_~retValue_acc~6, main_~tmp~8;havoc main_~retValue_acc~6;havoc main_~tmp~8; {25013#true} is VALID [2020-07-28 19:05:02,414 INFO L280 TraceCheckUtils]: 2: Hoare triple {25013#true} havoc valid_product_#res;havoc valid_product_~retValue_acc~5;havoc valid_product_~retValue_acc~5;valid_product_~retValue_acc~5 := 1;valid_product_#res := valid_product_~retValue_acc~5; {25013#true} is VALID [2020-07-28 19:05:02,414 INFO L280 TraceCheckUtils]: 3: Hoare triple {25013#true} main_#t~ret30 := valid_product_#res;assume -2147483648 <= main_#t~ret30 && main_#t~ret30 <= 2147483647;main_~tmp~8 := main_#t~ret30;havoc main_#t~ret30; {25013#true} is VALID [2020-07-28 19:05:02,414 INFO L280 TraceCheckUtils]: 4: Hoare triple {25013#true} assume 0 != main_~tmp~8; {25013#true} is VALID [2020-07-28 19:05:02,414 INFO L280 TraceCheckUtils]: 5: Hoare triple {25013#true} havoc test_#t~nondet0, test_#t~nondet1, test_#t~nondet2, test_#t~nondet3, test_~splverifierCounter~0, test_~tmp~0, test_~tmp___0~0, test_~tmp___1~0, test_~tmp___2~0;havoc test_~splverifierCounter~0;havoc test_~tmp~0;havoc test_~tmp___0~0;havoc test_~tmp___1~0;havoc test_~tmp___2~0;test_~splverifierCounter~0 := 0; {25013#true} is VALID [2020-07-28 19:05:02,414 INFO L280 TraceCheckUtils]: 6: Hoare triple {25013#true} assume !false; {25013#true} is VALID [2020-07-28 19:05:02,415 INFO L280 TraceCheckUtils]: 7: Hoare triple {25013#true} assume test_~splverifierCounter~0 < 4; {25013#true} is VALID [2020-07-28 19:05:02,415 INFO L280 TraceCheckUtils]: 8: Hoare triple {25013#true} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {25013#true} is VALID [2020-07-28 19:05:02,415 INFO L280 TraceCheckUtils]: 9: Hoare triple {25013#true} assume 0 != test_~tmp~0; {25013#true} is VALID [2020-07-28 19:05:02,415 INFO L280 TraceCheckUtils]: 10: Hoare triple {25013#true} assume ~waterLevel~0 < 2;~waterLevel~0 := 1 + ~waterLevel~0; {25013#true} is VALID [2020-07-28 19:05:02,415 INFO L280 TraceCheckUtils]: 11: Hoare triple {25013#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {25013#true} is VALID [2020-07-28 19:05:02,415 INFO L280 TraceCheckUtils]: 12: Hoare triple {25013#true} assume !(0 != test_~tmp___0~0); {25013#true} is VALID [2020-07-28 19:05:02,415 INFO L280 TraceCheckUtils]: 13: Hoare triple {25013#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {25013#true} is VALID [2020-07-28 19:05:02,416 INFO L280 TraceCheckUtils]: 14: Hoare triple {25013#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25013#true} is VALID [2020-07-28 19:05:02,416 INFO L280 TraceCheckUtils]: 15: Hoare triple {25013#true} assume !(0 != ~pumpRunning~0); {25013#true} is VALID [2020-07-28 19:05:02,416 INFO L280 TraceCheckUtils]: 16: Hoare triple {25013#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {25013#true} is VALID [2020-07-28 19:05:02,416 INFO L280 TraceCheckUtils]: 17: Hoare triple {25013#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {25013#true} is VALID [2020-07-28 19:05:02,416 INFO L280 TraceCheckUtils]: 18: Hoare triple {25013#true} assume !(0 != ~pumpRunning~0);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {25013#true} is VALID [2020-07-28 19:05:02,416 INFO L280 TraceCheckUtils]: 19: Hoare triple {25013#true} assume 0 == ~pumpRunning~0;havoc isHighWaterLevel_#res;havoc isHighWaterLevel_#t~ret25, isHighWaterLevel_~retValue_acc~2, isHighWaterLevel_~tmp~5, isHighWaterLevel_~tmp___0~1;havoc isHighWaterLevel_~retValue_acc~2;havoc isHighWaterLevel_~tmp~5;havoc isHighWaterLevel_~tmp___0~1;havoc isHighWaterSensorDry_#res;havoc isHighWaterSensorDry_~retValue_acc~12;havoc isHighWaterSensorDry_~retValue_acc~12; {25013#true} is VALID [2020-07-28 19:05:02,417 INFO L280 TraceCheckUtils]: 20: Hoare triple {25013#true} assume !(~waterLevel~0 < 2);isHighWaterSensorDry_~retValue_acc~12 := 0;isHighWaterSensorDry_#res := isHighWaterSensorDry_~retValue_acc~12; {25013#true} is VALID [2020-07-28 19:05:02,417 INFO L280 TraceCheckUtils]: 21: Hoare triple {25013#true} isHighWaterLevel_#t~ret25 := isHighWaterSensorDry_#res;assume -2147483648 <= isHighWaterLevel_#t~ret25 && isHighWaterLevel_#t~ret25 <= 2147483647;isHighWaterLevel_~tmp~5 := isHighWaterLevel_#t~ret25;havoc isHighWaterLevel_#t~ret25; {25013#true} is VALID [2020-07-28 19:05:02,417 INFO L280 TraceCheckUtils]: 22: Hoare triple {25013#true} assume !(0 != isHighWaterLevel_~tmp~5);isHighWaterLevel_~tmp___0~1 := 1; {25013#true} is VALID [2020-07-28 19:05:02,417 INFO L280 TraceCheckUtils]: 23: Hoare triple {25013#true} isHighWaterLevel_~retValue_acc~2 := isHighWaterLevel_~tmp___0~1;isHighWaterLevel_#res := isHighWaterLevel_~retValue_acc~2; {25013#true} is VALID [2020-07-28 19:05:02,417 INFO L280 TraceCheckUtils]: 24: Hoare triple {25013#true} processEnvironment__wrappee__highWaterSensor_#t~ret4 := isHighWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__highWaterSensor_#t~ret4 && processEnvironment__wrappee__highWaterSensor_#t~ret4 <= 2147483647;processEnvironment__wrappee__highWaterSensor_~tmp~1 := processEnvironment__wrappee__highWaterSensor_#t~ret4;havoc processEnvironment__wrappee__highWaterSensor_#t~ret4; {25013#true} is VALID [2020-07-28 19:05:02,417 INFO L280 TraceCheckUtils]: 25: Hoare triple {25013#true} assume 0 != processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc activatePump_#t~ret7, activatePump_~tmp~4;havoc activatePump_~tmp~4;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {25013#true} is VALID [2020-07-28 19:05:02,418 INFO L280 TraceCheckUtils]: 26: Hoare triple {25013#true} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {25013#true} is VALID [2020-07-28 19:05:02,418 INFO L280 TraceCheckUtils]: 27: Hoare triple {25013#true} activatePump_#t~ret7 := isMethaneAlarm_#res;assume -2147483648 <= activatePump_#t~ret7 && activatePump_#t~ret7 <= 2147483647;activatePump_~tmp~4 := activatePump_#t~ret7;havoc activatePump_#t~ret7; {25013#true} is VALID [2020-07-28 19:05:02,418 INFO L280 TraceCheckUtils]: 28: Hoare triple {25013#true} assume !(0 != activatePump_~tmp~4);~pumpRunning~0 := 1; {25013#true} is VALID [2020-07-28 19:05:02,418 INFO L280 TraceCheckUtils]: 29: Hoare triple {25013#true} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {25013#true} is VALID [2020-07-28 19:05:02,418 INFO L280 TraceCheckUtils]: 30: Hoare triple {25013#true} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {25013#true} is VALID [2020-07-28 19:05:02,418 INFO L280 TraceCheckUtils]: 31: Hoare triple {25013#true} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7); {25013#true} is VALID [2020-07-28 19:05:02,419 INFO L280 TraceCheckUtils]: 32: Hoare triple {25013#true} assume !false; {25013#true} is VALID [2020-07-28 19:05:02,419 INFO L280 TraceCheckUtils]: 33: Hoare triple {25013#true} assume test_~splverifierCounter~0 < 4; {25013#true} is VALID [2020-07-28 19:05:02,419 INFO L280 TraceCheckUtils]: 34: Hoare triple {25013#true} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {25013#true} is VALID [2020-07-28 19:05:02,419 INFO L280 TraceCheckUtils]: 35: Hoare triple {25013#true} assume !(0 != test_~tmp~0); {25013#true} is VALID [2020-07-28 19:05:02,419 INFO L280 TraceCheckUtils]: 36: Hoare triple {25013#true} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {25013#true} is VALID [2020-07-28 19:05:02,419 INFO L280 TraceCheckUtils]: 37: Hoare triple {25013#true} assume !(0 != test_~tmp___0~0); {25013#true} is VALID [2020-07-28 19:05:02,420 INFO L280 TraceCheckUtils]: 38: Hoare triple {25013#true} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {25013#true} is VALID [2020-07-28 19:05:02,420 INFO L280 TraceCheckUtils]: 39: Hoare triple {25013#true} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25013#true} is VALID [2020-07-28 19:05:02,420 INFO L280 TraceCheckUtils]: 40: Hoare triple {25013#true} assume 0 != ~pumpRunning~0; {25013#true} is VALID [2020-07-28 19:05:02,420 INFO L280 TraceCheckUtils]: 41: Hoare triple {25013#true} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25013#true} is VALID [2020-07-28 19:05:02,420 INFO L280 TraceCheckUtils]: 42: Hoare triple {25013#true} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {25013#true} is VALID [2020-07-28 19:05:02,420 INFO L280 TraceCheckUtils]: 43: Hoare triple {25013#true} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {25013#true} is VALID [2020-07-28 19:05:02,420 INFO L280 TraceCheckUtils]: 44: Hoare triple {25013#true} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {25013#true} is VALID [2020-07-28 19:05:02,421 INFO L280 TraceCheckUtils]: 45: Hoare triple {25013#true} processEnvironment_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret6 && processEnvironment_#t~ret6 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret6;havoc processEnvironment_#t~ret6; {25013#true} is VALID [2020-07-28 19:05:02,421 INFO L280 TraceCheckUtils]: 46: Hoare triple {25013#true} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {25013#true} is VALID [2020-07-28 19:05:02,421 INFO L280 TraceCheckUtils]: 47: Hoare triple {25013#true} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret26, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~6, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~6;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {25013#true} is VALID [2020-07-28 19:05:02,421 INFO L280 TraceCheckUtils]: 48: Hoare triple {25013#true} isLowWaterLevel_#t~ret26 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret26 && isLowWaterLevel_#t~ret26 <= 2147483647;isLowWaterLevel_~tmp~6 := isLowWaterLevel_#t~ret26;havoc isLowWaterLevel_#t~ret26; {25013#true} is VALID [2020-07-28 19:05:02,423 INFO L280 TraceCheckUtils]: 49: Hoare triple {25013#true} assume !(0 != isLowWaterLevel_~tmp~6);isLowWaterLevel_~tmp___0~2 := 1; {25169#(<= 1 ULTIMATE.start_isLowWaterLevel_~tmp___0~2)} is VALID [2020-07-28 19:05:02,428 INFO L280 TraceCheckUtils]: 50: Hoare triple {25169#(<= 1 ULTIMATE.start_isLowWaterLevel_~tmp___0~2)} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {25173#(<= 1 |ULTIMATE.start_isLowWaterLevel_#res|)} is VALID [2020-07-28 19:05:02,432 INFO L280 TraceCheckUtils]: 51: Hoare triple {25173#(<= 1 |ULTIMATE.start_isLowWaterLevel_#res|)} processEnvironment__wrappee__methaneQuery_#t~ret5 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret5 && processEnvironment__wrappee__methaneQuery_#t~ret5 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret5;havoc processEnvironment__wrappee__methaneQuery_#t~ret5; {25177#(<= 1 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2)} is VALID [2020-07-28 19:05:02,433 INFO L280 TraceCheckUtils]: 52: Hoare triple {25177#(<= 1 ULTIMATE.start_processEnvironment__wrappee__methaneQuery_~tmp~2)} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {25014#false} is VALID [2020-07-28 19:05:02,434 INFO L280 TraceCheckUtils]: 53: Hoare triple {25014#false} assume !(0 == ~pumpRunning~0); {25014#false} is VALID [2020-07-28 19:05:02,434 INFO L280 TraceCheckUtils]: 54: Hoare triple {25014#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {25014#false} is VALID [2020-07-28 19:05:02,434 INFO L280 TraceCheckUtils]: 55: Hoare triple {25014#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {25014#false} is VALID [2020-07-28 19:05:02,434 INFO L280 TraceCheckUtils]: 56: Hoare triple {25014#false} assume !(0 == __utac_acc__Specification4_spec__1_~tmp~7); {25014#false} is VALID [2020-07-28 19:05:02,435 INFO L280 TraceCheckUtils]: 57: Hoare triple {25014#false} assume !false; {25014#false} is VALID [2020-07-28 19:05:02,435 INFO L280 TraceCheckUtils]: 58: Hoare triple {25014#false} assume test_~splverifierCounter~0 < 4; {25014#false} is VALID [2020-07-28 19:05:02,435 INFO L280 TraceCheckUtils]: 59: Hoare triple {25014#false} assume -2147483648 <= test_#t~nondet0 && test_#t~nondet0 <= 2147483647;test_~tmp~0 := test_#t~nondet0;havoc test_#t~nondet0; {25014#false} is VALID [2020-07-28 19:05:02,435 INFO L280 TraceCheckUtils]: 60: Hoare triple {25014#false} assume !(0 != test_~tmp~0); {25014#false} is VALID [2020-07-28 19:05:02,435 INFO L280 TraceCheckUtils]: 61: Hoare triple {25014#false} assume -2147483648 <= test_#t~nondet1 && test_#t~nondet1 <= 2147483647;test_~tmp___0~0 := test_#t~nondet1;havoc test_#t~nondet1; {25014#false} is VALID [2020-07-28 19:05:02,435 INFO L280 TraceCheckUtils]: 62: Hoare triple {25014#false} assume !(0 != test_~tmp___0~0); {25014#false} is VALID [2020-07-28 19:05:02,435 INFO L280 TraceCheckUtils]: 63: Hoare triple {25014#false} assume -2147483648 <= test_#t~nondet2 && test_#t~nondet2 <= 2147483647;test_~tmp___2~0 := test_#t~nondet2;havoc test_#t~nondet2; {25014#false} is VALID [2020-07-28 19:05:02,436 INFO L280 TraceCheckUtils]: 64: Hoare triple {25014#false} assume 0 != test_~tmp___2~0;~systemActive~0 := 1; {25014#false} is VALID [2020-07-28 19:05:02,436 INFO L280 TraceCheckUtils]: 65: Hoare triple {25014#false} assume 0 != ~pumpRunning~0; {25014#false} is VALID [2020-07-28 19:05:02,436 INFO L280 TraceCheckUtils]: 66: Hoare triple {25014#false} assume ~waterLevel~0 > 0;~waterLevel~0 := ~waterLevel~0 - 1; {25014#false} is VALID [2020-07-28 19:05:02,436 INFO L280 TraceCheckUtils]: 67: Hoare triple {25014#false} assume 0 != ~systemActive~0;havoc processEnvironment_#t~ret6, processEnvironment_~tmp~3;havoc processEnvironment_~tmp~3; {25014#false} is VALID [2020-07-28 19:05:02,437 INFO L280 TraceCheckUtils]: 68: Hoare triple {25014#false} assume 0 != ~pumpRunning~0;havoc isMethaneAlarm_#res;havoc isMethaneAlarm_#t~ret8, isMethaneAlarm_~retValue_acc~0;havoc isMethaneAlarm_~retValue_acc~0;havoc isMethaneLevelCritical_#res;havoc isMethaneLevelCritical_~retValue_acc~10;havoc isMethaneLevelCritical_~retValue_acc~10;isMethaneLevelCritical_~retValue_acc~10 := ~methaneLevelCritical~0;isMethaneLevelCritical_#res := isMethaneLevelCritical_~retValue_acc~10; {25014#false} is VALID [2020-07-28 19:05:02,437 INFO L280 TraceCheckUtils]: 69: Hoare triple {25014#false} isMethaneAlarm_#t~ret8 := isMethaneLevelCritical_#res;assume -2147483648 <= isMethaneAlarm_#t~ret8 && isMethaneAlarm_#t~ret8 <= 2147483647;isMethaneAlarm_~retValue_acc~0 := isMethaneAlarm_#t~ret8;havoc isMethaneAlarm_#t~ret8;isMethaneAlarm_#res := isMethaneAlarm_~retValue_acc~0; {25014#false} is VALID [2020-07-28 19:05:02,437 INFO L280 TraceCheckUtils]: 70: Hoare triple {25014#false} processEnvironment_#t~ret6 := isMethaneAlarm_#res;assume -2147483648 <= processEnvironment_#t~ret6 && processEnvironment_#t~ret6 <= 2147483647;processEnvironment_~tmp~3 := processEnvironment_#t~ret6;havoc processEnvironment_#t~ret6; {25014#false} is VALID [2020-07-28 19:05:02,437 INFO L280 TraceCheckUtils]: 71: Hoare triple {25014#false} assume !(0 != processEnvironment_~tmp~3);havoc processEnvironment__wrappee__methaneQuery_#t~ret5, processEnvironment__wrappee__methaneQuery_~tmp~2;havoc processEnvironment__wrappee__methaneQuery_~tmp~2; {25014#false} is VALID [2020-07-28 19:05:02,437 INFO L280 TraceCheckUtils]: 72: Hoare triple {25014#false} assume 0 != ~pumpRunning~0;havoc isLowWaterLevel_#res;havoc isLowWaterLevel_#t~ret26, isLowWaterLevel_~retValue_acc~3, isLowWaterLevel_~tmp~6, isLowWaterLevel_~tmp___0~2;havoc isLowWaterLevel_~retValue_acc~3;havoc isLowWaterLevel_~tmp~6;havoc isLowWaterLevel_~tmp___0~2;havoc isLowWaterSensorDry_#res;havoc isLowWaterSensorDry_~retValue_acc~13;havoc isLowWaterSensorDry_~retValue_acc~13;isLowWaterSensorDry_~retValue_acc~13 := (if 0 == ~waterLevel~0 then 1 else 0);isLowWaterSensorDry_#res := isLowWaterSensorDry_~retValue_acc~13; {25014#false} is VALID [2020-07-28 19:05:02,438 INFO L280 TraceCheckUtils]: 73: Hoare triple {25014#false} isLowWaterLevel_#t~ret26 := isLowWaterSensorDry_#res;assume -2147483648 <= isLowWaterLevel_#t~ret26 && isLowWaterLevel_#t~ret26 <= 2147483647;isLowWaterLevel_~tmp~6 := isLowWaterLevel_#t~ret26;havoc isLowWaterLevel_#t~ret26; {25014#false} is VALID [2020-07-28 19:05:02,438 INFO L280 TraceCheckUtils]: 74: Hoare triple {25014#false} assume 0 != isLowWaterLevel_~tmp~6;isLowWaterLevel_~tmp___0~2 := 0; {25014#false} is VALID [2020-07-28 19:05:02,438 INFO L280 TraceCheckUtils]: 75: Hoare triple {25014#false} isLowWaterLevel_~retValue_acc~3 := isLowWaterLevel_~tmp___0~2;isLowWaterLevel_#res := isLowWaterLevel_~retValue_acc~3; {25014#false} is VALID [2020-07-28 19:05:02,438 INFO L280 TraceCheckUtils]: 76: Hoare triple {25014#false} processEnvironment__wrappee__methaneQuery_#t~ret5 := isLowWaterLevel_#res;assume -2147483648 <= processEnvironment__wrappee__methaneQuery_#t~ret5 && processEnvironment__wrappee__methaneQuery_#t~ret5 <= 2147483647;processEnvironment__wrappee__methaneQuery_~tmp~2 := processEnvironment__wrappee__methaneQuery_#t~ret5;havoc processEnvironment__wrappee__methaneQuery_#t~ret5; {25014#false} is VALID [2020-07-28 19:05:02,438 INFO L280 TraceCheckUtils]: 77: Hoare triple {25014#false} assume !(0 != processEnvironment__wrappee__methaneQuery_~tmp~2);havoc processEnvironment__wrappee__highWaterSensor_#t~ret4, processEnvironment__wrappee__highWaterSensor_~tmp~1;havoc processEnvironment__wrappee__highWaterSensor_~tmp~1; {25014#false} is VALID [2020-07-28 19:05:02,438 INFO L280 TraceCheckUtils]: 78: Hoare triple {25014#false} assume !(0 == ~pumpRunning~0); {25014#false} is VALID [2020-07-28 19:05:02,438 INFO L280 TraceCheckUtils]: 79: Hoare triple {25014#false} havoc __utac_acc__Specification4_spec__1_#t~ret27, __utac_acc__Specification4_spec__1_#t~ret28, __utac_acc__Specification4_spec__1_~tmp~7, __utac_acc__Specification4_spec__1_~tmp___0~3;havoc __utac_acc__Specification4_spec__1_~tmp~7;havoc __utac_acc__Specification4_spec__1_~tmp___0~3;havoc getWaterLevel_#res;havoc getWaterLevel_~retValue_acc~11;havoc getWaterLevel_~retValue_acc~11;getWaterLevel_~retValue_acc~11 := ~waterLevel~0;getWaterLevel_#res := getWaterLevel_~retValue_acc~11; {25014#false} is VALID [2020-07-28 19:05:02,438 INFO L280 TraceCheckUtils]: 80: Hoare triple {25014#false} __utac_acc__Specification4_spec__1_#t~ret27 := getWaterLevel_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret27 && __utac_acc__Specification4_spec__1_#t~ret27 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp~7 := __utac_acc__Specification4_spec__1_#t~ret27;havoc __utac_acc__Specification4_spec__1_#t~ret27; {25014#false} is VALID [2020-07-28 19:05:02,439 INFO L280 TraceCheckUtils]: 81: Hoare triple {25014#false} assume 0 == __utac_acc__Specification4_spec__1_~tmp~7;havoc isPumpRunning_#res;havoc isPumpRunning_~retValue_acc~1;havoc isPumpRunning_~retValue_acc~1;isPumpRunning_~retValue_acc~1 := ~pumpRunning~0;isPumpRunning_#res := isPumpRunning_~retValue_acc~1; {25014#false} is VALID [2020-07-28 19:05:02,439 INFO L280 TraceCheckUtils]: 82: Hoare triple {25014#false} __utac_acc__Specification4_spec__1_#t~ret28 := isPumpRunning_#res;assume -2147483648 <= __utac_acc__Specification4_spec__1_#t~ret28 && __utac_acc__Specification4_spec__1_#t~ret28 <= 2147483647;__utac_acc__Specification4_spec__1_~tmp___0~3 := __utac_acc__Specification4_spec__1_#t~ret28;havoc __utac_acc__Specification4_spec__1_#t~ret28; {25014#false} is VALID [2020-07-28 19:05:02,439 INFO L280 TraceCheckUtils]: 83: Hoare triple {25014#false} assume 0 != __utac_acc__Specification4_spec__1_~tmp___0~3; {25014#false} is VALID [2020-07-28 19:05:02,440 INFO L280 TraceCheckUtils]: 84: Hoare triple {25014#false} assume !false; {25014#false} is VALID [2020-07-28 19:05:02,444 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 38 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2020-07-28 19:05:02,444 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 1 imperfect interpolant sequences. [2020-07-28 19:05:02,445 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [6] total 9 [2020-07-28 19:05:02,445 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1036121741] [2020-07-28 19:05:02,445 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 85 [2020-07-28 19:05:02,446 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-28 19:05:02,446 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-28 19:05:02,528 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 74 edges. 74 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:02,529 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-28 19:05:02,529 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-28 19:05:02,529 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-28 19:05:02,529 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2020-07-28 19:05:02,530 INFO L87 Difference]: Start difference. First operand 624 states and 801 transitions. Second operand 5 states. [2020-07-28 19:05:05,231 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:05,231 INFO L93 Difference]: Finished difference Result 1164 states and 1485 transitions. [2020-07-28 19:05:05,232 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2020-07-28 19:05:05,232 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 85 [2020-07-28 19:05:05,232 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-28 19:05:05,232 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:05:05,233 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 259 transitions. [2020-07-28 19:05:05,234 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-28 19:05:05,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 259 transitions. [2020-07-28 19:05:05,235 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 259 transitions. [2020-07-28 19:05:05,517 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 259 edges. 259 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-28 19:05:05,517 INFO L225 Difference]: With dead ends: 1164 [2020-07-28 19:05:05,517 INFO L226 Difference]: Without dead ends: 0 [2020-07-28 19:05:05,520 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 95 GetRequests, 86 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=33, Invalid=77, Unknown=0, NotChecked=0, Total=110 [2020-07-28 19:05:05,520 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2020-07-28 19:05:05,520 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2020-07-28 19:05:05,520 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-28 19:05:05,521 INFO L82 GeneralOperation]: Start isEquivalent. First operand 0 states. Second operand 0 states. [2020-07-28 19:05:05,521 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:05:05,521 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:05:05,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:05,521 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:05:05,521 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:05:05,521 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:05,521 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:05,522 INFO L74 IsIncluded]: Start isIncluded. First operand 0 states. Second operand 0 states. [2020-07-28 19:05:05,522 INFO L87 Difference]: Start difference. First operand 0 states. Second operand 0 states. [2020-07-28 19:05:05,522 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-28 19:05:05,522 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2020-07-28 19:05:05,522 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:05:05,522 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:05,522 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-28 19:05:05,522 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-28 19:05:05,522 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-28 19:05:05,523 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 0 states. [2020-07-28 19:05:05,523 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2020-07-28 19:05:05,523 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 85 [2020-07-28 19:05:05,523 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-28 19:05:05,523 INFO L479 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2020-07-28 19:05:05,523 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-28 19:05:05,523 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2020-07-28 19:05:05,523 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-28 19:05:05,724 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable11 [2020-07-28 19:05:05,727 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2020-07-28 19:05:06,001 WARN L193 SmtUtils]: Spent 266.00 ms on a formula simplification. DAG size of input: 160 DAG size of output: 123 [2020-07-28 19:05:06,184 WARN L193 SmtUtils]: Spent 137.00 ms on a formula simplification. DAG size of input: 97 DAG size of output: 66 [2020-07-28 19:05:06,890 WARN L193 SmtUtils]: Spent 699.00 ms on a formula simplification. DAG size of input: 223 DAG size of output: 191 [2020-07-28 19:05:07,033 WARN L193 SmtUtils]: Spent 129.00 ms on a formula simplification. DAG size of input: 124 DAG size of output: 95 [2020-07-28 19:05:07,525 WARN L193 SmtUtils]: Spent 487.00 ms on a formula simplification. DAG size of input: 200 DAG size of output: 171 [2020-07-28 19:05:08,147 WARN L193 SmtUtils]: Spent 505.00 ms on a formula simplification. DAG size of input: 223 DAG size of output: 191 [2020-07-28 19:05:08,356 WARN L193 SmtUtils]: Spent 184.00 ms on a formula simplification. DAG size of input: 177 DAG size of output: 140 [2020-07-28 19:05:08,644 WARN L193 SmtUtils]: Spent 279.00 ms on a formula simplification. DAG size of input: 206 DAG size of output: 176 [2020-07-28 19:05:08,772 WARN L193 SmtUtils]: Spent 107.00 ms on a formula simplification. DAG size of input: 157 DAG size of output: 121 [2020-07-28 19:05:09,083 WARN L193 SmtUtils]: Spent 198.00 ms on a formula simplification. DAG size of input: 215 DAG size of output: 159 [2020-07-28 19:05:09,645 WARN L193 SmtUtils]: Spent 521.00 ms on a formula simplification. DAG size of input: 116 DAG size of output: 24 [2020-07-28 19:05:09,922 WARN L193 SmtUtils]: Spent 168.00 ms on a formula simplification. DAG size of input: 61 DAG size of output: 19 [2020-07-28 19:05:11,200 WARN L193 SmtUtils]: Spent 1.27 s on a formula simplification. DAG size of input: 190 DAG size of output: 16 [2020-07-28 19:05:11,508 WARN L193 SmtUtils]: Spent 299.00 ms on a formula simplification. DAG size of input: 90 DAG size of output: 20 [2020-07-28 19:05:12,456 WARN L193 SmtUtils]: Spent 940.00 ms on a formula simplification. DAG size of input: 170 DAG size of output: 10 [2020-07-28 19:05:12,570 WARN L193 SmtUtils]: Spent 108.00 ms on a formula simplification. DAG size of input: 43 DAG size of output: 25 [2020-07-28 19:05:12,851 WARN L193 SmtUtils]: Spent 275.00 ms on a formula simplification. DAG size of input: 74 DAG size of output: 25 [2020-07-28 19:05:14,257 WARN L193 SmtUtils]: Spent 1.40 s on a formula simplification. DAG size of input: 190 DAG size of output: 16 [2020-07-28 19:05:15,064 WARN L193 SmtUtils]: Spent 682.00 ms on a formula simplification. DAG size of input: 136 DAG size of output: 23 [2020-07-28 19:05:16,227 WARN L193 SmtUtils]: Spent 1.12 s on a formula simplification. DAG size of input: 176 DAG size of output: 25 [2020-07-28 19:05:16,845 WARN L193 SmtUtils]: Spent 537.00 ms on a formula simplification. DAG size of input: 117 DAG size of output: 19 [2020-07-28 19:05:17,002 WARN L193 SmtUtils]: Spent 146.00 ms on a formula simplification. DAG size of input: 52 DAG size of output: 14 [2020-07-28 19:05:17,307 WARN L193 SmtUtils]: Spent 132.00 ms on a formula simplification. DAG size of input: 54 DAG size of output: 14 [2020-07-28 19:05:18,207 WARN L193 SmtUtils]: Spent 881.00 ms on a formula simplification. DAG size of input: 155 DAG size of output: 17 [2020-07-28 19:05:18,383 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION(line 44) no Hoare annotation was computed. [2020-07-28 19:05:18,383 INFO L264 CegarLoopResult]: At program point L366(lines 351 369) the Hoare annotation is: (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 0 ULTIMATE.start_processEnvironment_~tmp~3) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 1 |ULTIMATE.start_isLowWaterLevel_#res|) (<= 1 ~waterLevel~0) (<= 1 ULTIMATE.start_isLowWaterLevel_~tmp___0~2) (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~6) (= 1 ~systemActive~0)) [2020-07-28 19:05:18,384 INFO L264 CegarLoopResult]: At program point L366-1(lines 351 369) the Hoare annotation is: false [2020-07-28 19:05:18,384 INFO L264 CegarLoopResult]: At program point L366-2(lines 351 369) the Hoare annotation is: false [2020-07-28 19:05:18,384 INFO L264 CegarLoopResult]: At program point L366-3(lines 351 369) the Hoare annotation is: false [2020-07-28 19:05:18,384 INFO L264 CegarLoopResult]: At program point L366-4(lines 351 369) the Hoare annotation is: false [2020-07-28 19:05:18,384 INFO L264 CegarLoopResult]: At program point L366-5(lines 351 369) the Hoare annotation is: false [2020-07-28 19:05:18,384 INFO L268 CegarLoopResult]: For program point L102(lines 102 106) no Hoare annotation was computed. [2020-07-28 19:05:18,385 INFO L264 CegarLoopResult]: At program point L102-2(lines 138 144) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 ~systemActive~0))) (or (and .cse0 (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) .cse1) (and (<= 2 ~waterLevel~0) .cse0 .cse1))) [2020-07-28 19:05:18,385 INFO L268 CegarLoopResult]: For program point L170(lines 170 187) no Hoare annotation was computed. [2020-07-28 19:05:18,385 INFO L268 CegarLoopResult]: For program point L170-1(lines 170 187) no Hoare annotation was computed. [2020-07-28 19:05:18,385 INFO L268 CegarLoopResult]: For program point L170-2(lines 170 187) no Hoare annotation was computed. [2020-07-28 19:05:18,385 INFO L268 CegarLoopResult]: For program point L170-3(lines 170 187) no Hoare annotation was computed. [2020-07-28 19:05:18,385 INFO L268 CegarLoopResult]: For program point L170-4(lines 170 187) no Hoare annotation was computed. [2020-07-28 19:05:18,385 INFO L268 CegarLoopResult]: For program point L170-5(lines 170 187) no Hoare annotation was computed. [2020-07-28 19:05:18,385 INFO L268 CegarLoopResult]: For program point L170-6(lines 170 187) no Hoare annotation was computed. [2020-07-28 19:05:18,386 INFO L268 CegarLoopResult]: For program point L170-7(lines 170 187) no Hoare annotation was computed. [2020-07-28 19:05:18,386 INFO L268 CegarLoopResult]: For program point L170-8(lines 170 187) no Hoare annotation was computed. [2020-07-28 19:05:18,386 INFO L268 CegarLoopResult]: For program point L170-9(lines 170 187) no Hoare annotation was computed. [2020-07-28 19:05:18,386 INFO L268 CegarLoopResult]: For program point L170-10(lines 170 187) no Hoare annotation was computed. [2020-07-28 19:05:18,386 INFO L268 CegarLoopResult]: For program point L170-11(lines 170 187) no Hoare annotation was computed. [2020-07-28 19:05:18,386 INFO L264 CegarLoopResult]: At program point L503(lines 499 505) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:05:18,386 INFO L268 CegarLoopResult]: For program point L174(lines 174 182) no Hoare annotation was computed. [2020-07-28 19:05:18,386 INFO L268 CegarLoopResult]: For program point L174-1(lines 174 182) no Hoare annotation was computed. [2020-07-28 19:05:18,386 INFO L268 CegarLoopResult]: For program point L174-2(lines 174 182) no Hoare annotation was computed. [2020-07-28 19:05:18,387 INFO L268 CegarLoopResult]: For program point L174-3(lines 174 182) no Hoare annotation was computed. [2020-07-28 19:05:18,387 INFO L268 CegarLoopResult]: For program point L174-4(lines 174 182) no Hoare annotation was computed. [2020-07-28 19:05:18,387 INFO L268 CegarLoopResult]: For program point L174-5(lines 174 182) no Hoare annotation was computed. [2020-07-28 19:05:18,387 INFO L268 CegarLoopResult]: For program point L174-6(lines 174 182) no Hoare annotation was computed. [2020-07-28 19:05:18,387 INFO L268 CegarLoopResult]: For program point L174-7(lines 174 182) no Hoare annotation was computed. [2020-07-28 19:05:18,387 INFO L268 CegarLoopResult]: For program point L174-8(lines 174 182) no Hoare annotation was computed. [2020-07-28 19:05:18,387 INFO L268 CegarLoopResult]: For program point L174-9(lines 174 182) no Hoare annotation was computed. [2020-07-28 19:05:18,387 INFO L268 CegarLoopResult]: For program point L174-10(lines 174 182) no Hoare annotation was computed. [2020-07-28 19:05:18,387 INFO L268 CegarLoopResult]: For program point L174-11(lines 174 182) no Hoare annotation was computed. [2020-07-28 19:05:18,387 INFO L264 CegarLoopResult]: At program point L439(lines 434 442) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:05:18,388 INFO L268 CegarLoopResult]: For program point L44(line 44) no Hoare annotation was computed. [2020-07-28 19:05:18,388 INFO L268 CegarLoopResult]: For program point L44-1(line 44) no Hoare annotation was computed. [2020-07-28 19:05:18,388 INFO L268 CegarLoopResult]: For program point L44-2(line 44) no Hoare annotation was computed. [2020-07-28 19:05:18,388 INFO L264 CegarLoopResult]: At program point L112(lines 63 113) the Hoare annotation is: false [2020-07-28 19:05:18,388 INFO L268 CegarLoopResult]: For program point L912(lines 912 916) no Hoare annotation was computed. [2020-07-28 19:05:18,388 INFO L268 CegarLoopResult]: For program point L912-3(lines 912 916) no Hoare annotation was computed. [2020-07-28 19:05:18,388 INFO L268 CegarLoopResult]: For program point L912-6(lines 912 916) no Hoare annotation was computed. [2020-07-28 19:05:18,388 INFO L264 CegarLoopResult]: At program point L981(lines 976 984) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (<= 1 |ULTIMATE.start_getWaterLevel_#res|)) (.cse2 (= 1 ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2) (and .cse0 .cse1 (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) .cse2))) [2020-07-28 19:05:18,388 INFO L264 CegarLoopResult]: At program point L981-1(lines 976 984) the Hoare annotation is: false [2020-07-28 19:05:18,389 INFO L264 CegarLoopResult]: At program point L981-2(lines 976 984) the Hoare annotation is: false [2020-07-28 19:05:18,389 INFO L268 CegarLoopResult]: For program point L388(lines 388 401) no Hoare annotation was computed. [2020-07-28 19:05:18,389 INFO L264 CegarLoopResult]: At program point L388-1(lines 1 1007) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse4 (<= 1 |ULTIMATE.start_getWaterLevel_#res|)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~waterLevel~0)) (.cse3 (= 1 ~systemActive~0)) (.cse5 (<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~7))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 .cse2 .cse3) (and (<= 2 ~waterLevel~0) .cse0 .cse4 .cse3 .cse5) (and .cse0 .cse4 .cse1 .cse2 .cse3 .cse5))) [2020-07-28 19:05:18,389 INFO L268 CegarLoopResult]: For program point L388-2(lines 388 401) no Hoare annotation was computed. [2020-07-28 19:05:18,389 INFO L264 CegarLoopResult]: At program point L388-3(lines 1 1007) the Hoare annotation is: false [2020-07-28 19:05:18,389 INFO L268 CegarLoopResult]: For program point ULTIMATE.startEXIT(line -1) no Hoare annotation was computed. [2020-07-28 19:05:18,390 INFO L268 CegarLoopResult]: For program point L388-4(lines 388 401) no Hoare annotation was computed. [2020-07-28 19:05:18,390 INFO L264 CegarLoopResult]: At program point L388-5(lines 1 1007) the Hoare annotation is: false [2020-07-28 19:05:18,390 INFO L264 CegarLoopResult]: At program point L455-2(lines 455 469) the Hoare annotation is: false [2020-07-28 19:05:18,390 INFO L268 CegarLoopResult]: For program point L456(line 456) no Hoare annotation was computed. [2020-07-28 19:05:18,390 INFO L268 CegarLoopResult]: For program point L258(lines 258 264) no Hoare annotation was computed. [2020-07-28 19:05:18,390 INFO L268 CegarLoopResult]: For program point L258-2(lines 258 264) no Hoare annotation was computed. [2020-07-28 19:05:18,390 INFO L268 CegarLoopResult]: For program point L258-4(lines 258 264) no Hoare annotation was computed. [2020-07-28 19:05:18,390 INFO L268 CegarLoopResult]: For program point L258-6(lines 258 264) no Hoare annotation was computed. [2020-07-28 19:05:18,390 INFO L268 CegarLoopResult]: For program point L258-8(lines 258 264) no Hoare annotation was computed. [2020-07-28 19:05:18,390 INFO L268 CegarLoopResult]: For program point L258-10(lines 258 264) no Hoare annotation was computed. [2020-07-28 19:05:18,391 INFO L268 CegarLoopResult]: For program point L258-12(lines 258 264) no Hoare annotation was computed. [2020-07-28 19:05:18,391 INFO L268 CegarLoopResult]: For program point L258-14(lines 258 264) no Hoare annotation was computed. [2020-07-28 19:05:18,391 INFO L268 CegarLoopResult]: For program point L258-16(lines 258 264) no Hoare annotation was computed. [2020-07-28 19:05:18,391 INFO L268 CegarLoopResult]: For program point L258-18(lines 258 264) no Hoare annotation was computed. [2020-07-28 19:05:18,391 INFO L268 CegarLoopResult]: For program point L258-20(lines 258 264) no Hoare annotation was computed. [2020-07-28 19:05:18,391 INFO L268 CegarLoopResult]: For program point L258-22(lines 258 264) no Hoare annotation was computed. [2020-07-28 19:05:18,391 INFO L268 CegarLoopResult]: For program point L392(lines 392 398) no Hoare annotation was computed. [2020-07-28 19:05:18,391 INFO L268 CegarLoopResult]: For program point L392-2(lines 392 398) no Hoare annotation was computed. [2020-07-28 19:05:18,391 INFO L268 CegarLoopResult]: For program point L392-4(lines 392 398) no Hoare annotation was computed. [2020-07-28 19:05:18,391 INFO L268 CegarLoopResult]: For program point L459(lines 459 463) no Hoare annotation was computed. [2020-07-28 19:05:18,391 INFO L268 CegarLoopResult]: For program point L459-1(lines 138 144) no Hoare annotation was computed. [2020-07-28 19:05:18,392 INFO L268 CegarLoopResult]: For program point L526(lines 526 533) no Hoare annotation was computed. [2020-07-28 19:05:18,392 INFO L271 CegarLoopResult]: At program point L526-1(lines 526 533) the Hoare annotation is: true [2020-07-28 19:05:18,392 INFO L268 CegarLoopResult]: For program point L196(lines 196 213) no Hoare annotation was computed. [2020-07-28 19:05:18,392 INFO L268 CegarLoopResult]: For program point L196-1(lines 196 213) no Hoare annotation was computed. [2020-07-28 19:05:18,392 INFO L268 CegarLoopResult]: For program point L196-2(lines 196 213) no Hoare annotation was computed. [2020-07-28 19:05:18,392 INFO L268 CegarLoopResult]: For program point L196-3(lines 196 213) no Hoare annotation was computed. [2020-07-28 19:05:18,392 INFO L268 CegarLoopResult]: For program point L196-4(lines 196 213) no Hoare annotation was computed. [2020-07-28 19:05:18,392 INFO L268 CegarLoopResult]: For program point L196-5(lines 196 213) no Hoare annotation was computed. [2020-07-28 19:05:18,392 INFO L268 CegarLoopResult]: For program point L989(lines 989 995) no Hoare annotation was computed. [2020-07-28 19:05:18,392 INFO L268 CegarLoopResult]: For program point L989-1(lines 989 995) no Hoare annotation was computed. [2020-07-28 19:05:18,392 INFO L268 CegarLoopResult]: For program point L989-2(lines 989 995) no Hoare annotation was computed. [2020-07-28 19:05:18,393 INFO L268 CegarLoopResult]: For program point L989-3(lines 989 995) no Hoare annotation was computed. [2020-07-28 19:05:18,393 INFO L268 CegarLoopResult]: For program point L989-4(lines 989 995) no Hoare annotation was computed. [2020-07-28 19:05:18,393 INFO L268 CegarLoopResult]: For program point L989-5(lines 989 995) no Hoare annotation was computed. [2020-07-28 19:05:18,393 INFO L268 CegarLoopResult]: For program point L989-6(lines 989 995) no Hoare annotation was computed. [2020-07-28 19:05:18,393 INFO L268 CegarLoopResult]: For program point L989-7(lines 989 995) no Hoare annotation was computed. [2020-07-28 19:05:18,393 INFO L268 CegarLoopResult]: For program point L989-8(lines 989 995) no Hoare annotation was computed. [2020-07-28 19:05:18,393 INFO L268 CegarLoopResult]: For program point L989-9(lines 989 995) no Hoare annotation was computed. [2020-07-28 19:05:18,393 INFO L268 CegarLoopResult]: For program point L989-10(lines 989 995) no Hoare annotation was computed. [2020-07-28 19:05:18,393 INFO L268 CegarLoopResult]: For program point L989-11(lines 989 995) no Hoare annotation was computed. [2020-07-28 19:05:18,393 INFO L268 CegarLoopResult]: For program point L65(lines 64 111) no Hoare annotation was computed. [2020-07-28 19:05:18,393 INFO L268 CegarLoopResult]: For program point L-1(line -1) no Hoare annotation was computed. [2020-07-28 19:05:18,394 INFO L268 CegarLoopResult]: For program point L924(lines 924 928) no Hoare annotation was computed. [2020-07-28 19:05:18,394 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION(line 44) no Hoare annotation was computed. [2020-07-28 19:05:18,394 INFO L268 CegarLoopResult]: For program point L66(lines 66 70) no Hoare annotation was computed. [2020-07-28 19:05:18,394 INFO L268 CegarLoopResult]: For program point L200(lines 200 208) no Hoare annotation was computed. [2020-07-28 19:05:18,394 INFO L268 CegarLoopResult]: For program point L200-1(lines 200 208) no Hoare annotation was computed. [2020-07-28 19:05:18,394 INFO L268 CegarLoopResult]: For program point L200-2(lines 200 208) no Hoare annotation was computed. [2020-07-28 19:05:18,394 INFO L268 CegarLoopResult]: For program point L200-3(lines 200 208) no Hoare annotation was computed. [2020-07-28 19:05:18,394 INFO L268 CegarLoopResult]: For program point L200-4(lines 200 208) no Hoare annotation was computed. [2020-07-28 19:05:18,394 INFO L268 CegarLoopResult]: For program point L200-5(lines 200 208) no Hoare annotation was computed. [2020-07-28 19:05:18,394 INFO L264 CegarLoopResult]: At program point L994(lines 985 998) the Hoare annotation is: (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) (= 0 ULTIMATE.start_processEnvironment_~tmp~3) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~6) (= 1 ~systemActive~0)) [2020-07-28 19:05:18,395 INFO L264 CegarLoopResult]: At program point L994-1(lines 985 998) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_processEnvironment_~tmp~3)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 0 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3) (and (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse0 .cse1 .cse2 (= 1 ~waterLevel~0) .cse3))) [2020-07-28 19:05:18,395 INFO L264 CegarLoopResult]: At program point L994-2(lines 985 998) the Hoare annotation is: false [2020-07-28 19:05:18,395 INFO L264 CegarLoopResult]: At program point L994-3(lines 985 998) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2) (and (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse0 .cse1 (= 1 ~waterLevel~0) .cse2))) [2020-07-28 19:05:18,395 INFO L264 CegarLoopResult]: At program point L994-4(lines 985 998) the Hoare annotation is: false [2020-07-28 19:05:18,395 INFO L264 CegarLoopResult]: At program point L994-5(lines 985 998) the Hoare annotation is: false [2020-07-28 19:05:18,395 INFO L264 CegarLoopResult]: At program point L994-6(lines 985 998) the Hoare annotation is: false [2020-07-28 19:05:18,395 INFO L264 CegarLoopResult]: At program point L994-7(lines 985 998) the Hoare annotation is: false [2020-07-28 19:05:18,395 INFO L264 CegarLoopResult]: At program point L994-8(lines 985 998) the Hoare annotation is: false [2020-07-28 19:05:18,395 INFO L264 CegarLoopResult]: At program point L994-9(lines 985 998) the Hoare annotation is: false [2020-07-28 19:05:18,395 INFO L264 CegarLoopResult]: At program point L994-10(lines 985 998) the Hoare annotation is: false [2020-07-28 19:05:18,395 INFO L264 CegarLoopResult]: At program point L994-11(lines 985 998) the Hoare annotation is: false [2020-07-28 19:05:18,396 INFO L264 CegarLoopResult]: At program point L138(lines 137 156) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:05:18,396 INFO L268 CegarLoopResult]: For program point L138-1(lines 138 144) no Hoare annotation was computed. [2020-07-28 19:05:18,396 INFO L264 CegarLoopResult]: At program point L138-2(lines 137 156) the Hoare annotation is: false [2020-07-28 19:05:18,396 INFO L264 CegarLoopResult]: At program point L138-3(lines 137 156) the Hoare annotation is: false [2020-07-28 19:05:18,396 INFO L271 CegarLoopResult]: At program point L535(lines 516 538) the Hoare annotation is: true [2020-07-28 19:05:18,396 INFO L268 CegarLoopResult]: For program point L74(lines 74 80) no Hoare annotation was computed. [2020-07-28 19:05:18,396 INFO L264 CegarLoopResult]: At program point L74-1(lines 74 80) the Hoare annotation is: (let ((.cse1 (= 0 ~pumpRunning~0)) (.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 1 ~systemActive~0))) (or (and (= 0 ~methaneLevelCritical~0) .cse0 .cse1 (= 1 ~waterLevel~0) .cse2) (and .cse0 (<= 1 |ULTIMATE.start_getWaterLevel_#res|) (<= 1 ~waterLevel~0) .cse1 .cse2 (<= 1 ULTIMATE.start___utac_acc__Specification4_spec__1_~tmp~7)) (and (<= 2 ~waterLevel~0) .cse0 .cse2))) [2020-07-28 19:05:18,396 INFO L268 CegarLoopResult]: For program point ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION(line 44) no Hoare annotation was computed. [2020-07-28 19:05:18,396 INFO L268 CegarLoopResult]: For program point L341(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,396 INFO L268 CegarLoopResult]: For program point L341-2(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,397 INFO L268 CegarLoopResult]: For program point L341-3(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,397 INFO L268 CegarLoopResult]: For program point L341-5(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,397 INFO L268 CegarLoopResult]: For program point L341-6(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,397 INFO L268 CegarLoopResult]: For program point L341-8(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,397 INFO L268 CegarLoopResult]: For program point L341-9(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,397 INFO L268 CegarLoopResult]: For program point L341-11(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,397 INFO L268 CegarLoopResult]: For program point L341-12(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,397 INFO L268 CegarLoopResult]: For program point L936(lines 936 940) no Hoare annotation was computed. [2020-07-28 19:05:18,397 INFO L268 CegarLoopResult]: For program point L341-14(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,397 INFO L268 CegarLoopResult]: For program point L341-15(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,398 INFO L268 CegarLoopResult]: For program point L341-17(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,398 INFO L268 CegarLoopResult]: For program point L341-18(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,398 INFO L268 CegarLoopResult]: For program point L341-20(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,398 INFO L268 CegarLoopResult]: For program point L341-21(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,398 INFO L268 CegarLoopResult]: For program point L341-23(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,398 INFO L268 CegarLoopResult]: For program point L341-24(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,398 INFO L268 CegarLoopResult]: For program point L341-26(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,398 INFO L268 CegarLoopResult]: For program point L341-27(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,398 INFO L268 CegarLoopResult]: For program point L341-29(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,398 INFO L268 CegarLoopResult]: For program point L341-30(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,398 INFO L268 CegarLoopResult]: For program point L341-32(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,399 INFO L268 CegarLoopResult]: For program point L341-33(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,399 INFO L268 CegarLoopResult]: For program point L341-35(lines 341 345) no Hoare annotation was computed. [2020-07-28 19:05:18,399 INFO L264 CegarLoopResult]: At program point L145(lines 145 151) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 ~systemActive~0))) (or (and .cse0 (<= 1 ~waterLevel~0) (= 0 ~pumpRunning~0) .cse1) (and (<= 2 ~waterLevel~0) .cse0 .cse1))) [2020-07-28 19:05:18,399 INFO L264 CegarLoopResult]: At program point L145-1(lines 145 151) the Hoare annotation is: false [2020-07-28 19:05:18,399 INFO L264 CegarLoopResult]: At program point L145-2(lines 145 151) the Hoare annotation is: false [2020-07-28 19:05:18,399 INFO L264 CegarLoopResult]: At program point L1004(lines 999 1007) the Hoare annotation is: (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 0 ULTIMATE.start_processEnvironment_~tmp~3) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:05:18,399 INFO L264 CegarLoopResult]: At program point L1004-1(lines 999 1007) the Hoare annotation is: false [2020-07-28 19:05:18,399 INFO L264 CegarLoopResult]: At program point L1004-2(lines 999 1007) the Hoare annotation is: false [2020-07-28 19:05:18,399 INFO L264 CegarLoopResult]: At program point L1004-3(lines 999 1007) the Hoare annotation is: false [2020-07-28 19:05:18,399 INFO L264 CegarLoopResult]: At program point L1004-4(lines 999 1007) the Hoare annotation is: false [2020-07-28 19:05:18,400 INFO L264 CegarLoopResult]: At program point L1004-5(lines 999 1007) the Hoare annotation is: false [2020-07-28 19:05:18,400 INFO L264 CegarLoopResult]: At program point L347(lines 332 350) the Hoare annotation is: (and (= 0 |ULTIMATE.start_isLowWaterSensorDry_#res|) (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) (= 0 ULTIMATE.start_processEnvironment_~tmp~3) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 0 ~pumpRunning~0) (= 0 |ULTIMATE.start_isHighWaterLevel_#res|) (= 1 ~waterLevel~0) (= 1 ULTIMATE.start_isHighWaterLevel_~tmp~5) (= 0 ULTIMATE.start_isLowWaterLevel_~tmp~6) (= 1 ~systemActive~0)) [2020-07-28 19:05:18,400 INFO L264 CegarLoopResult]: At program point L347-1(lines 332 350) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_processEnvironment_~tmp~3)) (.cse1 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse2 (= 0 ~pumpRunning~0)) (.cse3 (= 1 ~systemActive~0))) (or (and (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) .cse0 (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1) .cse1 .cse2 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|) (= 1 ~waterLevel~0) (= 1 ULTIMATE.start_isHighWaterLevel_~tmp~5) .cse3) (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2 .cse3))) [2020-07-28 19:05:18,400 INFO L264 CegarLoopResult]: At program point L347-2(lines 332 350) the Hoare annotation is: false [2020-07-28 19:05:18,400 INFO L264 CegarLoopResult]: At program point L347-3(lines 332 350) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 0 ~pumpRunning~0)) (.cse2 (= 1 ~systemActive~0))) (or (and (<= 2 ~waterLevel~0) .cse0 .cse1 .cse2) (and (= 1 |ULTIMATE.start_isHighWaterSensorDry_#res|) (= 0 ULTIMATE.start_isHighWaterLevel_~tmp___0~1) .cse0 .cse1 (= 0 |ULTIMATE.start_isHighWaterLevel_#res|) (= 1 ~waterLevel~0) (= 1 ULTIMATE.start_isHighWaterLevel_~tmp~5) .cse2))) [2020-07-28 19:05:18,400 INFO L264 CegarLoopResult]: At program point L347-4(lines 332 350) the Hoare annotation is: false [2020-07-28 19:05:18,400 INFO L264 CegarLoopResult]: At program point L347-5(lines 332 350) the Hoare annotation is: false [2020-07-28 19:05:18,400 INFO L264 CegarLoopResult]: At program point L347-6(lines 332 350) the Hoare annotation is: false [2020-07-28 19:05:18,401 INFO L264 CegarLoopResult]: At program point L347-7(lines 332 350) the Hoare annotation is: false [2020-07-28 19:05:18,401 INFO L264 CegarLoopResult]: At program point L347-8(lines 332 350) the Hoare annotation is: false [2020-07-28 19:05:18,401 INFO L264 CegarLoopResult]: At program point L347-9(lines 332 350) the Hoare annotation is: false [2020-07-28 19:05:18,401 INFO L264 CegarLoopResult]: At program point L347-10(lines 332 350) the Hoare annotation is: false [2020-07-28 19:05:18,401 INFO L264 CegarLoopResult]: At program point L347-11(lines 332 350) the Hoare annotation is: false [2020-07-28 19:05:18,401 INFO L268 CegarLoopResult]: For program point L84(lines 84 90) no Hoare annotation was computed. [2020-07-28 19:05:18,401 INFO L264 CegarLoopResult]: At program point L84-1(lines 84 90) the Hoare annotation is: (let ((.cse0 (= 0 ULTIMATE.start_test_~splverifierCounter~0)) (.cse1 (= 1 ~systemActive~0))) (or (and .cse0 (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) .cse1) (and (<= 2 ~waterLevel~0) .cse0 .cse1))) [2020-07-28 19:05:18,401 INFO L264 CegarLoopResult]: At program point L283(lines 276 286) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:05:18,401 INFO L264 CegarLoopResult]: At program point L283-1(lines 276 286) the Hoare annotation is: false [2020-07-28 19:05:18,402 INFO L264 CegarLoopResult]: At program point L283-2(lines 276 286) the Hoare annotation is: (and (<= 2 ~waterLevel~0) (= 0 ULTIMATE.start_processEnvironment_~tmp~3) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 0 ~pumpRunning~0) (= 1 ~systemActive~0)) [2020-07-28 19:05:18,402 INFO L264 CegarLoopResult]: At program point L283-3(lines 276 286) the Hoare annotation is: false [2020-07-28 19:05:18,402 INFO L264 CegarLoopResult]: At program point L283-4(lines 276 286) the Hoare annotation is: (and (<= 2 ~waterLevel~0) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 0 ~pumpRunning~0) (= 1 ~systemActive~0)) [2020-07-28 19:05:18,402 INFO L264 CegarLoopResult]: At program point L283-5(lines 276 286) the Hoare annotation is: false [2020-07-28 19:05:18,402 INFO L264 CegarLoopResult]: At program point L283-6(lines 276 286) the Hoare annotation is: false [2020-07-28 19:05:18,402 INFO L264 CegarLoopResult]: At program point L283-7(lines 276 286) the Hoare annotation is: false [2020-07-28 19:05:18,402 INFO L264 CegarLoopResult]: At program point L283-8(lines 276 286) the Hoare annotation is: false [2020-07-28 19:05:18,402 INFO L264 CegarLoopResult]: At program point L283-9(lines 276 286) the Hoare annotation is: false [2020-07-28 19:05:18,402 INFO L264 CegarLoopResult]: At program point L283-10(lines 276 286) the Hoare annotation is: false [2020-07-28 19:05:18,402 INFO L264 CegarLoopResult]: At program point L283-11(lines 276 286) the Hoare annotation is: false [2020-07-28 19:05:18,403 INFO L264 CegarLoopResult]: At program point L283-12(lines 276 286) the Hoare annotation is: false [2020-07-28 19:05:18,403 INFO L264 CegarLoopResult]: At program point L283-13(lines 276 286) the Hoare annotation is: false [2020-07-28 19:05:18,403 INFO L264 CegarLoopResult]: At program point L283-14(lines 276 286) the Hoare annotation is: false [2020-07-28 19:05:18,403 INFO L268 CegarLoopResult]: For program point ULTIMATE.startENTRY(line -1) no Hoare annotation was computed. [2020-07-28 19:05:18,403 INFO L268 CegarLoopResult]: For program point L222(lines 222 239) no Hoare annotation was computed. [2020-07-28 19:05:18,403 INFO L268 CegarLoopResult]: For program point L222-1(lines 222 239) no Hoare annotation was computed. [2020-07-28 19:05:18,403 INFO L268 CegarLoopResult]: For program point L222-2(lines 222 239) no Hoare annotation was computed. [2020-07-28 19:05:18,403 INFO L264 CegarLoopResult]: At program point L949(lines 944 952) the Hoare annotation is: (and (= 0 ULTIMATE.start_test_~splverifierCounter~0) (<= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:05:18,403 INFO L264 CegarLoopResult]: At program point L949-1(lines 944 952) the Hoare annotation is: false [2020-07-28 19:05:18,403 INFO L264 CegarLoopResult]: At program point L949-2(lines 944 952) the Hoare annotation is: (and (<= 2 ~waterLevel~0) (= 0 ULTIMATE.start_processEnvironment_~tmp~3) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 0 ~pumpRunning~0) (= 1 ~systemActive~0)) [2020-07-28 19:05:18,404 INFO L264 CegarLoopResult]: At program point L949-3(lines 944 952) the Hoare annotation is: false [2020-07-28 19:05:18,404 INFO L264 CegarLoopResult]: At program point L949-4(lines 944 952) the Hoare annotation is: (and (<= 2 ~waterLevel~0) (= 0 ULTIMATE.start_test_~splverifierCounter~0) (= 0 ~pumpRunning~0) (= 1 ~systemActive~0)) [2020-07-28 19:05:18,404 INFO L264 CegarLoopResult]: At program point L949-5(lines 944 952) the Hoare annotation is: false [2020-07-28 19:05:18,404 INFO L264 CegarLoopResult]: At program point L949-6(lines 944 952) the Hoare annotation is: false [2020-07-28 19:05:18,404 INFO L264 CegarLoopResult]: At program point L949-7(lines 944 952) the Hoare annotation is: false [2020-07-28 19:05:18,404 INFO L264 CegarLoopResult]: At program point L949-8(lines 944 952) the Hoare annotation is: false [2020-07-28 19:05:18,404 INFO L264 CegarLoopResult]: At program point L949-9(lines 944 952) the Hoare annotation is: false [2020-07-28 19:05:18,404 INFO L264 CegarLoopResult]: At program point L949-10(lines 944 952) the Hoare annotation is: false [2020-07-28 19:05:18,404 INFO L264 CegarLoopResult]: At program point L949-11(lines 944 952) the Hoare annotation is: false [2020-07-28 19:05:18,404 INFO L264 CegarLoopResult]: At program point L949-12(lines 944 952) the Hoare annotation is: false [2020-07-28 19:05:18,404 INFO L264 CegarLoopResult]: At program point L949-13(lines 944 952) the Hoare annotation is: false [2020-07-28 19:05:18,405 INFO L264 CegarLoopResult]: At program point L949-14(lines 944 952) the Hoare annotation is: false [2020-07-28 19:05:18,405 INFO L264 CegarLoopResult]: At program point L292(lines 287 295) the Hoare annotation is: false [2020-07-28 19:05:18,405 INFO L264 CegarLoopResult]: At program point L292-1(lines 287 295) the Hoare annotation is: false [2020-07-28 19:05:18,405 INFO L268 CegarLoopResult]: For program point L226(lines 226 234) no Hoare annotation was computed. [2020-07-28 19:05:18,405 INFO L264 CegarLoopResult]: At program point L292-2(lines 287 295) the Hoare annotation is: false [2020-07-28 19:05:18,405 INFO L268 CegarLoopResult]: For program point L226-1(lines 226 234) no Hoare annotation was computed. [2020-07-28 19:05:18,405 INFO L268 CegarLoopResult]: For program point L226-2(lines 226 234) no Hoare annotation was computed. [2020-07-28 19:05:18,405 INFO L268 CegarLoopResult]: For program point L94(lines 94 107) no Hoare annotation was computed. [2020-07-28 19:05:18,405 INFO L268 CegarLoopResult]: For program point ULTIMATE.startFINAL(line -1) no Hoare annotation was computed. [2020-07-28 19:05:18,405 INFO L268 CegarLoopResult]: For program point L360(lines 360 364) no Hoare annotation was computed. [2020-07-28 19:05:18,405 INFO L268 CegarLoopResult]: For program point L360-2(lines 360 364) no Hoare annotation was computed. [2020-07-28 19:05:18,406 INFO L268 CegarLoopResult]: For program point L360-3(lines 360 364) no Hoare annotation was computed. [2020-07-28 19:05:18,406 INFO L268 CegarLoopResult]: For program point L360-5(lines 360 364) no Hoare annotation was computed. [2020-07-28 19:05:18,406 INFO L268 CegarLoopResult]: For program point L360-6(lines 360 364) no Hoare annotation was computed. [2020-07-28 19:05:18,406 INFO L268 CegarLoopResult]: For program point L360-8(lines 360 364) no Hoare annotation was computed. [2020-07-28 19:05:18,406 INFO L268 CegarLoopResult]: For program point L360-9(lines 360 364) no Hoare annotation was computed. [2020-07-28 19:05:18,406 INFO L268 CegarLoopResult]: For program point L360-11(lines 360 364) no Hoare annotation was computed. [2020-07-28 19:05:18,406 INFO L268 CegarLoopResult]: For program point L360-12(lines 360 364) no Hoare annotation was computed. [2020-07-28 19:05:18,406 INFO L268 CegarLoopResult]: For program point L360-14(lines 360 364) no Hoare annotation was computed. [2020-07-28 19:05:18,406 INFO L268 CegarLoopResult]: For program point L360-15(lines 360 364) no Hoare annotation was computed. [2020-07-28 19:05:18,406 INFO L268 CegarLoopResult]: For program point L360-17(lines 360 364) no Hoare annotation was computed. [2020-07-28 19:05:18,406 INFO L264 CegarLoopResult]: At program point L431(lines 1 1007) the Hoare annotation is: (and (= 0 ~methaneLevelCritical~0) (= 0 ~pumpRunning~0) (= 1 ~waterLevel~0) (= 1 ~systemActive~0)) [2020-07-28 19:05:18,411 WARN L170 areAnnotationChecker]: ULTIMATE.startENTRY has no Hoare annotation [2020-07-28 19:05:18,411 WARN L170 areAnnotationChecker]: L-1 has no Hoare annotation [2020-07-28 19:05:18,412 WARN L170 areAnnotationChecker]: L526 has no Hoare annotation [2020-07-28 19:05:18,413 WARN L170 areAnnotationChecker]: L526 has no Hoare annotation [2020-07-28 19:05:18,413 WARN L170 areAnnotationChecker]: L526 has no Hoare annotation [2020-07-28 19:05:18,414 WARN L170 areAnnotationChecker]: L65 has no Hoare annotation [2020-07-28 19:05:18,414 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:05:18,415 WARN L170 areAnnotationChecker]: L138-1 has no Hoare annotation [2020-07-28 19:05:18,415 WARN L170 areAnnotationChecker]: L65 has no Hoare annotation [2020-07-28 19:05:18,415 WARN L170 areAnnotationChecker]: L65 has no Hoare annotation [2020-07-28 19:05:18,415 WARN L170 areAnnotationChecker]: ULTIMATE.startFINAL has no Hoare annotation [2020-07-28 19:05:18,415 WARN L170 areAnnotationChecker]: L138-1 has no Hoare annotation [2020-07-28 19:05:18,415 WARN L170 areAnnotationChecker]: L138-1 has no Hoare annotation [2020-07-28 19:05:18,415 WARN L170 areAnnotationChecker]: L66 has no Hoare annotation [2020-07-28 19:05:18,415 WARN L170 areAnnotationChecker]: L912-3 has no Hoare annotation [2020-07-28 19:05:18,415 WARN L170 areAnnotationChecker]: L912-3 has no Hoare annotation [2020-07-28 19:05:18,415 WARN L170 areAnnotationChecker]: L222-1 has no Hoare annotation [2020-07-28 19:05:18,415 WARN L170 areAnnotationChecker]: L74 has no Hoare annotation [2020-07-28 19:05:18,416 WARN L170 areAnnotationChecker]: L74 has no Hoare annotation [2020-07-28 19:05:18,416 WARN L170 areAnnotationChecker]: L222-1 has no Hoare annotation [2020-07-28 19:05:18,416 WARN L170 areAnnotationChecker]: L222-1 has no Hoare annotation [2020-07-28 19:05:18,416 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2020-07-28 19:05:18,416 WARN L170 areAnnotationChecker]: L924 has no Hoare annotation [2020-07-28 19:05:18,416 WARN L170 areAnnotationChecker]: L84 has no Hoare annotation [2020-07-28 19:05:18,416 WARN L170 areAnnotationChecker]: L196-3 has no Hoare annotation [2020-07-28 19:05:18,416 WARN L170 areAnnotationChecker]: L196-3 has no Hoare annotation [2020-07-28 19:05:18,416 WARN L170 areAnnotationChecker]: L388-2 has no Hoare annotation [2020-07-28 19:05:18,416 WARN L170 areAnnotationChecker]: L84 has no Hoare annotation [2020-07-28 19:05:18,416 WARN L170 areAnnotationChecker]: L84 has no Hoare annotation [2020-07-28 19:05:18,416 WARN L170 areAnnotationChecker]: L226-1 has no Hoare annotation [2020-07-28 19:05:18,417 WARN L170 areAnnotationChecker]: L360-9 has no Hoare annotation [2020-07-28 19:05:18,417 WARN L170 areAnnotationChecker]: L170-7 has no Hoare annotation [2020-07-28 19:05:18,417 WARN L170 areAnnotationChecker]: L170-7 has no Hoare annotation [2020-07-28 19:05:18,417 WARN L170 areAnnotationChecker]: L388-2 has no Hoare annotation [2020-07-28 19:05:18,417 WARN L170 areAnnotationChecker]: L388-2 has no Hoare annotation [2020-07-28 19:05:18,417 WARN L170 areAnnotationChecker]: L936 has no Hoare annotation [2020-07-28 19:05:18,417 WARN L170 areAnnotationChecker]: L936 has no Hoare annotation [2020-07-28 19:05:18,417 WARN L170 areAnnotationChecker]: L94 has no Hoare annotation [2020-07-28 19:05:18,417 WARN L170 areAnnotationChecker]: L226-1 has no Hoare annotation [2020-07-28 19:05:18,417 WARN L170 areAnnotationChecker]: L226-1 has no Hoare annotation [2020-07-28 19:05:18,417 WARN L170 areAnnotationChecker]: L360-9 has no Hoare annotation [2020-07-28 19:05:18,418 WARN L170 areAnnotationChecker]: L360-9 has no Hoare annotation [2020-07-28 19:05:18,418 WARN L170 areAnnotationChecker]: L989-7 has no Hoare annotation [2020-07-28 19:05:18,418 WARN L170 areAnnotationChecker]: L989-7 has no Hoare annotation [2020-07-28 19:05:18,418 WARN L170 areAnnotationChecker]: L392-2 has no Hoare annotation [2020-07-28 19:05:18,418 WARN L170 areAnnotationChecker]: L94 has no Hoare annotation [2020-07-28 19:05:18,418 WARN L170 areAnnotationChecker]: L94 has no Hoare annotation [2020-07-28 19:05:18,418 WARN L170 areAnnotationChecker]: L196-2 has no Hoare annotation [2020-07-28 19:05:18,418 WARN L170 areAnnotationChecker]: L196-2 has no Hoare annotation [2020-07-28 19:05:18,418 WARN L170 areAnnotationChecker]: L360-11 has no Hoare annotation [2020-07-28 19:05:18,418 WARN L170 areAnnotationChecker]: L341-21 has no Hoare annotation [2020-07-28 19:05:18,419 WARN L170 areAnnotationChecker]: L392-2 has no Hoare annotation [2020-07-28 19:05:18,419 WARN L170 areAnnotationChecker]: L392-2 has no Hoare annotation [2020-07-28 19:05:18,419 WARN L170 areAnnotationChecker]: L456 has no Hoare annotation [2020-07-28 19:05:18,419 WARN L170 areAnnotationChecker]: L912 has no Hoare annotation [2020-07-28 19:05:18,420 WARN L170 areAnnotationChecker]: L102 has no Hoare annotation [2020-07-28 19:05:18,420 WARN L170 areAnnotationChecker]: L102 has no Hoare annotation [2020-07-28 19:05:18,420 WARN L170 areAnnotationChecker]: L360-6 has no Hoare annotation [2020-07-28 19:05:18,420 WARN L170 areAnnotationChecker]: L170-5 has no Hoare annotation [2020-07-28 19:05:18,420 WARN L170 areAnnotationChecker]: L170-5 has no Hoare annotation [2020-07-28 19:05:18,420 WARN L170 areAnnotationChecker]: L200-3 has no Hoare annotation [2020-07-28 19:05:18,421 WARN L170 areAnnotationChecker]: L341-21 has no Hoare annotation [2020-07-28 19:05:18,421 WARN L170 areAnnotationChecker]: L341-21 has no Hoare annotation [2020-07-28 19:05:18,421 WARN L170 areAnnotationChecker]: L44-1 has no Hoare annotation [2020-07-28 19:05:18,421 WARN L170 areAnnotationChecker]: L44-1 has no Hoare annotation [2020-07-28 19:05:18,421 WARN L170 areAnnotationChecker]: L456 has no Hoare annotation [2020-07-28 19:05:18,421 WARN L170 areAnnotationChecker]: L912 has no Hoare annotation [2020-07-28 19:05:18,421 WARN L170 areAnnotationChecker]: L912 has no Hoare annotation [2020-07-28 19:05:18,421 WARN L170 areAnnotationChecker]: L222 has no Hoare annotation [2020-07-28 19:05:18,427 WARN L170 areAnnotationChecker]: L360-6 has no Hoare annotation [2020-07-28 19:05:18,427 WARN L170 areAnnotationChecker]: L360-6 has no Hoare annotation [2020-07-28 19:05:18,427 WARN L170 areAnnotationChecker]: L989-5 has no Hoare annotation [2020-07-28 19:05:18,427 WARN L170 areAnnotationChecker]: L989-5 has no Hoare annotation [2020-07-28 19:05:18,427 WARN L170 areAnnotationChecker]: L200-3 has no Hoare annotation [2020-07-28 19:05:18,427 WARN L170 areAnnotationChecker]: L200-3 has no Hoare annotation [2020-07-28 19:05:18,427 WARN L170 areAnnotationChecker]: L341-23 has no Hoare annotation [2020-07-28 19:05:18,428 WARN L170 areAnnotationChecker]: L459 has no Hoare annotation [2020-07-28 19:05:18,428 WARN L170 areAnnotationChecker]: L459 has no Hoare annotation [2020-07-28 19:05:18,428 WARN L170 areAnnotationChecker]: L222 has no Hoare annotation [2020-07-28 19:05:18,428 WARN L170 areAnnotationChecker]: L222 has no Hoare annotation [2020-07-28 19:05:18,429 WARN L170 areAnnotationChecker]: L360-8 has no Hoare annotation [2020-07-28 19:05:18,429 WARN L170 areAnnotationChecker]: L341-15 has no Hoare annotation [2020-07-28 19:05:18,429 WARN L170 areAnnotationChecker]: L170-6 has no Hoare annotation [2020-07-28 19:05:18,429 WARN L170 areAnnotationChecker]: L170-6 has no Hoare annotation [2020-07-28 19:05:18,429 WARN L170 areAnnotationChecker]: L174-7 has no Hoare annotation [2020-07-28 19:05:18,430 WARN L170 areAnnotationChecker]: L459-1 has no Hoare annotation [2020-07-28 19:05:18,430 WARN L170 areAnnotationChecker]: L459-1 has no Hoare annotation [2020-07-28 19:05:18,430 WARN L170 areAnnotationChecker]: L196-1 has no Hoare annotation [2020-07-28 19:05:18,431 WARN L170 areAnnotationChecker]: L196-1 has no Hoare annotation [2020-07-28 19:05:18,431 WARN L170 areAnnotationChecker]: L388 has no Hoare annotation [2020-07-28 19:05:18,431 WARN L170 areAnnotationChecker]: L200-2 has no Hoare annotation [2020-07-28 19:05:18,431 WARN L170 areAnnotationChecker]: L341-15 has no Hoare annotation [2020-07-28 19:05:18,431 WARN L170 areAnnotationChecker]: L341-15 has no Hoare annotation [2020-07-28 19:05:18,431 WARN L170 areAnnotationChecker]: L989-6 has no Hoare annotation [2020-07-28 19:05:18,431 WARN L170 areAnnotationChecker]: L989-6 has no Hoare annotation [2020-07-28 19:05:18,431 WARN L170 areAnnotationChecker]: L174-7 has no Hoare annotation [2020-07-28 19:05:18,431 WARN L170 areAnnotationChecker]: L174-7 has no Hoare annotation [2020-07-28 19:05:18,431 WARN L170 areAnnotationChecker]: L912-6 has no Hoare annotation [2020-07-28 19:05:18,431 WARN L170 areAnnotationChecker]: L912-6 has no Hoare annotation [2020-07-28 19:05:18,432 WARN L170 areAnnotationChecker]: L222-2 has no Hoare annotation [2020-07-28 19:05:18,432 WARN L170 areAnnotationChecker]: L226 has no Hoare annotation [2020-07-28 19:05:18,432 WARN L170 areAnnotationChecker]: L360-3 has no Hoare annotation [2020-07-28 19:05:18,432 WARN L170 areAnnotationChecker]: L170-3 has no Hoare annotation [2020-07-28 19:05:18,432 WARN L170 areAnnotationChecker]: L170-3 has no Hoare annotation [2020-07-28 19:05:18,432 WARN L170 areAnnotationChecker]: L388 has no Hoare annotation [2020-07-28 19:05:18,432 WARN L170 areAnnotationChecker]: L388 has no Hoare annotation [2020-07-28 19:05:18,432 WARN L170 areAnnotationChecker]: L200-2 has no Hoare annotation [2020-07-28 19:05:18,432 WARN L170 areAnnotationChecker]: L200-2 has no Hoare annotation [2020-07-28 19:05:18,432 WARN L170 areAnnotationChecker]: L341-17 has no Hoare annotation [2020-07-28 19:05:18,433 WARN L170 areAnnotationChecker]: L341-18 has no Hoare annotation [2020-07-28 19:05:18,433 WARN L170 areAnnotationChecker]: L222-2 has no Hoare annotation [2020-07-28 19:05:18,433 WARN L170 areAnnotationChecker]: L222-2 has no Hoare annotation [2020-07-28 19:05:18,433 WARN L170 areAnnotationChecker]: L226 has no Hoare annotation [2020-07-28 19:05:18,433 WARN L170 areAnnotationChecker]: L226 has no Hoare annotation [2020-07-28 19:05:18,433 WARN L170 areAnnotationChecker]: L360-3 has no Hoare annotation [2020-07-28 19:05:18,433 WARN L170 areAnnotationChecker]: L360-3 has no Hoare annotation [2020-07-28 19:05:18,433 WARN L170 areAnnotationChecker]: L989-3 has no Hoare annotation [2020-07-28 19:05:18,433 WARN L170 areAnnotationChecker]: L989-3 has no Hoare annotation [2020-07-28 19:05:18,433 WARN L170 areAnnotationChecker]: L392 has no Hoare annotation [2020-07-28 19:05:18,434 WARN L170 areAnnotationChecker]: L170-4 has no Hoare annotation [2020-07-28 19:05:18,434 WARN L170 areAnnotationChecker]: L170-4 has no Hoare annotation [2020-07-28 19:05:18,434 WARN L170 areAnnotationChecker]: L174-5 has no Hoare annotation [2020-07-28 19:05:18,434 WARN L170 areAnnotationChecker]: L341-18 has no Hoare annotation [2020-07-28 19:05:18,434 WARN L170 areAnnotationChecker]: L341-18 has no Hoare annotation [2020-07-28 19:05:18,434 WARN L170 areAnnotationChecker]: L258-14 has no Hoare annotation [2020-07-28 19:05:18,434 WARN L170 areAnnotationChecker]: L196-5 has no Hoare annotation [2020-07-28 19:05:18,434 WARN L170 areAnnotationChecker]: L196-5 has no Hoare annotation [2020-07-28 19:05:18,434 WARN L170 areAnnotationChecker]: L388-4 has no Hoare annotation [2020-07-28 19:05:18,434 WARN L170 areAnnotationChecker]: L196 has no Hoare annotation [2020-07-28 19:05:18,434 WARN L170 areAnnotationChecker]: L196 has no Hoare annotation [2020-07-28 19:05:18,435 WARN L170 areAnnotationChecker]: L360-5 has no Hoare annotation [2020-07-28 19:05:18,435 WARN L170 areAnnotationChecker]: L341-9 has no Hoare annotation [2020-07-28 19:05:18,435 WARN L170 areAnnotationChecker]: L392 has no Hoare annotation [2020-07-28 19:05:18,435 WARN L170 areAnnotationChecker]: L392 has no Hoare annotation [2020-07-28 19:05:18,435 WARN L170 areAnnotationChecker]: L989-4 has no Hoare annotation [2020-07-28 19:05:18,435 WARN L170 areAnnotationChecker]: L989-4 has no Hoare annotation [2020-07-28 19:05:18,435 WARN L170 areAnnotationChecker]: L174-5 has no Hoare annotation [2020-07-28 19:05:18,435 WARN L170 areAnnotationChecker]: L174-5 has no Hoare annotation [2020-07-28 19:05:18,435 WARN L170 areAnnotationChecker]: L341-20 has no Hoare annotation [2020-07-28 19:05:18,435 WARN L170 areAnnotationChecker]: L258-14 has no Hoare annotation [2020-07-28 19:05:18,435 WARN L170 areAnnotationChecker]: L258-14 has no Hoare annotation [2020-07-28 19:05:18,435 WARN L170 areAnnotationChecker]: L226-2 has no Hoare annotation [2020-07-28 19:05:18,435 WARN L170 areAnnotationChecker]: L360-15 has no Hoare annotation [2020-07-28 19:05:18,436 WARN L170 areAnnotationChecker]: L170-11 has no Hoare annotation [2020-07-28 19:05:18,436 WARN L170 areAnnotationChecker]: L170-11 has no Hoare annotation [2020-07-28 19:05:18,436 WARN L170 areAnnotationChecker]: L388-4 has no Hoare annotation [2020-07-28 19:05:18,436 WARN L170 areAnnotationChecker]: L388-4 has no Hoare annotation [2020-07-28 19:05:18,436 WARN L170 areAnnotationChecker]: L360 has no Hoare annotation [2020-07-28 19:05:18,436 WARN L170 areAnnotationChecker]: L170-1 has no Hoare annotation [2020-07-28 19:05:18,436 WARN L170 areAnnotationChecker]: L170-1 has no Hoare annotation [2020-07-28 19:05:18,436 WARN L170 areAnnotationChecker]: L200-1 has no Hoare annotation [2020-07-28 19:05:18,436 WARN L170 areAnnotationChecker]: L341-9 has no Hoare annotation [2020-07-28 19:05:18,436 WARN L170 areAnnotationChecker]: L341-9 has no Hoare annotation [2020-07-28 19:05:18,436 WARN L170 areAnnotationChecker]: L44 has no Hoare annotation [2020-07-28 19:05:18,436 WARN L170 areAnnotationChecker]: L44 has no Hoare annotation [2020-07-28 19:05:18,437 WARN L170 areAnnotationChecker]: L341-12 has no Hoare annotation [2020-07-28 19:05:18,437 WARN L170 areAnnotationChecker]: L174-6 has no Hoare annotation [2020-07-28 19:05:18,437 WARN L170 areAnnotationChecker]: L226-2 has no Hoare annotation [2020-07-28 19:05:18,437 WARN L170 areAnnotationChecker]: L226-2 has no Hoare annotation [2020-07-28 19:05:18,437 WARN L170 areAnnotationChecker]: L360-15 has no Hoare annotation [2020-07-28 19:05:18,437 WARN L170 areAnnotationChecker]: L360-15 has no Hoare annotation [2020-07-28 19:05:18,437 WARN L170 areAnnotationChecker]: L989-11 has no Hoare annotation [2020-07-28 19:05:18,437 WARN L170 areAnnotationChecker]: L989-11 has no Hoare annotation [2020-07-28 19:05:18,437 WARN L170 areAnnotationChecker]: L392-4 has no Hoare annotation [2020-07-28 19:05:18,437 WARN L170 areAnnotationChecker]: L360 has no Hoare annotation [2020-07-28 19:05:18,437 WARN L170 areAnnotationChecker]: L360 has no Hoare annotation [2020-07-28 19:05:18,437 WARN L170 areAnnotationChecker]: L989-1 has no Hoare annotation [2020-07-28 19:05:18,438 WARN L170 areAnnotationChecker]: L989-1 has no Hoare annotation [2020-07-28 19:05:18,438 WARN L170 areAnnotationChecker]: L200-1 has no Hoare annotation [2020-07-28 19:05:18,438 WARN L170 areAnnotationChecker]: L200-1 has no Hoare annotation [2020-07-28 19:05:18,438 WARN L170 areAnnotationChecker]: L341-11 has no Hoare annotation [2020-07-28 19:05:18,438 WARN L170 areAnnotationChecker]: L341-12 has no Hoare annotation [2020-07-28 19:05:18,438 WARN L170 areAnnotationChecker]: L341-12 has no Hoare annotation [2020-07-28 19:05:18,438 WARN L170 areAnnotationChecker]: L258-10 has no Hoare annotation [2020-07-28 19:05:18,438 WARN L170 areAnnotationChecker]: L174-6 has no Hoare annotation [2020-07-28 19:05:18,438 WARN L170 areAnnotationChecker]: L174-6 has no Hoare annotation [2020-07-28 19:05:18,438 WARN L170 areAnnotationChecker]: L196-4 has no Hoare annotation [2020-07-28 19:05:18,438 WARN L170 areAnnotationChecker]: L196-4 has no Hoare annotation [2020-07-28 19:05:18,438 WARN L170 areAnnotationChecker]: L360-17 has no Hoare annotation [2020-07-28 19:05:18,439 WARN L170 areAnnotationChecker]: L341-33 has no Hoare annotation [2020-07-28 19:05:18,439 WARN L170 areAnnotationChecker]: L392-4 has no Hoare annotation [2020-07-28 19:05:18,439 WARN L170 areAnnotationChecker]: L392-4 has no Hoare annotation [2020-07-28 19:05:18,439 WARN L170 areAnnotationChecker]: L360-2 has no Hoare annotation [2020-07-28 19:05:18,439 WARN L170 areAnnotationChecker]: L341-3 has no Hoare annotation [2020-07-28 19:05:18,439 WARN L170 areAnnotationChecker]: L170-2 has no Hoare annotation [2020-07-28 19:05:18,439 WARN L170 areAnnotationChecker]: L170-2 has no Hoare annotation [2020-07-28 19:05:18,439 WARN L170 areAnnotationChecker]: L174-3 has no Hoare annotation [2020-07-28 19:05:18,439 WARN L170 areAnnotationChecker]: L341-14 has no Hoare annotation [2020-07-28 19:05:18,439 WARN L170 areAnnotationChecker]: L258-10 has no Hoare annotation [2020-07-28 19:05:18,439 WARN L170 areAnnotationChecker]: L258-10 has no Hoare annotation [2020-07-28 19:05:18,439 WARN L170 areAnnotationChecker]: L360-12 has no Hoare annotation [2020-07-28 19:05:18,440 WARN L170 areAnnotationChecker]: L170-9 has no Hoare annotation [2020-07-28 19:05:18,440 WARN L170 areAnnotationChecker]: L170-9 has no Hoare annotation [2020-07-28 19:05:18,440 WARN L170 areAnnotationChecker]: L200-5 has no Hoare annotation [2020-07-28 19:05:18,440 WARN L170 areAnnotationChecker]: L341-33 has no Hoare annotation [2020-07-28 19:05:18,440 WARN L170 areAnnotationChecker]: L341-33 has no Hoare annotation [2020-07-28 19:05:18,440 WARN L170 areAnnotationChecker]: L44-2 has no Hoare annotation [2020-07-28 19:05:18,440 WARN L170 areAnnotationChecker]: L44-2 has no Hoare annotation [2020-07-28 19:05:18,440 WARN L170 areAnnotationChecker]: L200 has no Hoare annotation [2020-07-28 19:05:18,440 WARN L170 areAnnotationChecker]: L341-3 has no Hoare annotation [2020-07-28 19:05:18,440 WARN L170 areAnnotationChecker]: L341-3 has no Hoare annotation [2020-07-28 19:05:18,440 WARN L170 areAnnotationChecker]: L989-2 has no Hoare annotation [2020-07-28 19:05:18,440 WARN L170 areAnnotationChecker]: L989-2 has no Hoare annotation [2020-07-28 19:05:18,441 WARN L170 areAnnotationChecker]: L174-3 has no Hoare annotation [2020-07-28 19:05:18,441 WARN L170 areAnnotationChecker]: L174-3 has no Hoare annotation [2020-07-28 19:05:18,441 WARN L170 areAnnotationChecker]: L174-4 has no Hoare annotation [2020-07-28 19:05:18,441 WARN L170 areAnnotationChecker]: L258-12 has no Hoare annotation [2020-07-28 19:05:18,441 WARN L170 areAnnotationChecker]: L360-12 has no Hoare annotation [2020-07-28 19:05:18,441 WARN L170 areAnnotationChecker]: L360-12 has no Hoare annotation [2020-07-28 19:05:18,441 WARN L170 areAnnotationChecker]: L989-9 has no Hoare annotation [2020-07-28 19:05:18,441 WARN L170 areAnnotationChecker]: L989-9 has no Hoare annotation [2020-07-28 19:05:18,441 WARN L170 areAnnotationChecker]: L200-5 has no Hoare annotation [2020-07-28 19:05:18,441 WARN L170 areAnnotationChecker]: L200-5 has no Hoare annotation [2020-07-28 19:05:18,441 WARN L170 areAnnotationChecker]: L341-35 has no Hoare annotation [2020-07-28 19:05:18,441 WARN L170 areAnnotationChecker]: L200 has no Hoare annotation [2020-07-28 19:05:18,442 WARN L170 areAnnotationChecker]: L200 has no Hoare annotation [2020-07-28 19:05:18,442 WARN L170 areAnnotationChecker]: L341-5 has no Hoare annotation [2020-07-28 19:05:18,442 WARN L170 areAnnotationChecker]: L341-6 has no Hoare annotation [2020-07-28 19:05:18,443 WARN L170 areAnnotationChecker]: L174-4 has no Hoare annotation [2020-07-28 19:05:18,443 WARN L170 areAnnotationChecker]: L174-4 has no Hoare annotation [2020-07-28 19:05:18,443 WARN L170 areAnnotationChecker]: L258-12 has no Hoare annotation [2020-07-28 19:05:18,443 WARN L170 areAnnotationChecker]: L258-12 has no Hoare annotation [2020-07-28 19:05:18,443 WARN L170 areAnnotationChecker]: L360-14 has no Hoare annotation [2020-07-28 19:05:18,443 WARN L170 areAnnotationChecker]: L341-27 has no Hoare annotation [2020-07-28 19:05:18,443 WARN L170 areAnnotationChecker]: L170-10 has no Hoare annotation [2020-07-28 19:05:18,443 WARN L170 areAnnotationChecker]: L170-10 has no Hoare annotation [2020-07-28 19:05:18,443 WARN L170 areAnnotationChecker]: L174-11 has no Hoare annotation [2020-07-28 19:05:18,443 WARN L170 areAnnotationChecker]: L170 has no Hoare annotation [2020-07-28 19:05:18,443 WARN L170 areAnnotationChecker]: L170 has no Hoare annotation [2020-07-28 19:05:18,444 WARN L170 areAnnotationChecker]: L174-1 has no Hoare annotation [2020-07-28 19:05:18,444 WARN L170 areAnnotationChecker]: L341-6 has no Hoare annotation [2020-07-28 19:05:18,444 WARN L170 areAnnotationChecker]: L341-6 has no Hoare annotation [2020-07-28 19:05:18,444 WARN L170 areAnnotationChecker]: L258-6 has no Hoare annotation [2020-07-28 19:05:18,444 WARN L170 areAnnotationChecker]: L200-4 has no Hoare annotation [2020-07-28 19:05:18,444 WARN L170 areAnnotationChecker]: L341-27 has no Hoare annotation [2020-07-28 19:05:18,444 WARN L170 areAnnotationChecker]: L341-27 has no Hoare annotation [2020-07-28 19:05:18,444 WARN L170 areAnnotationChecker]: L989-10 has no Hoare annotation [2020-07-28 19:05:18,444 WARN L170 areAnnotationChecker]: L989-10 has no Hoare annotation [2020-07-28 19:05:18,444 WARN L170 areAnnotationChecker]: L174-11 has no Hoare annotation [2020-07-28 19:05:18,444 WARN L170 areAnnotationChecker]: L174-11 has no Hoare annotation [2020-07-28 19:05:18,444 WARN L170 areAnnotationChecker]: L989 has no Hoare annotation [2020-07-28 19:05:18,445 WARN L170 areAnnotationChecker]: L989 has no Hoare annotation [2020-07-28 19:05:18,445 WARN L170 areAnnotationChecker]: L174-1 has no Hoare annotation [2020-07-28 19:05:18,445 WARN L170 areAnnotationChecker]: L174-1 has no Hoare annotation [2020-07-28 19:05:18,445 WARN L170 areAnnotationChecker]: L341-8 has no Hoare annotation [2020-07-28 19:05:18,445 WARN L170 areAnnotationChecker]: L258-6 has no Hoare annotation [2020-07-28 19:05:18,445 WARN L170 areAnnotationChecker]: L258-6 has no Hoare annotation [2020-07-28 19:05:18,445 WARN L170 areAnnotationChecker]: L258-8 has no Hoare annotation [2020-07-28 19:05:18,445 WARN L170 areAnnotationChecker]: L200-4 has no Hoare annotation [2020-07-28 19:05:18,445 WARN L170 areAnnotationChecker]: L200-4 has no Hoare annotation [2020-07-28 19:05:18,445 WARN L170 areAnnotationChecker]: L341-29 has no Hoare annotation [2020-07-28 19:05:18,445 WARN L170 areAnnotationChecker]: L341-30 has no Hoare annotation [2020-07-28 19:05:18,445 WARN L170 areAnnotationChecker]: L341 has no Hoare annotation [2020-07-28 19:05:18,446 WARN L170 areAnnotationChecker]: L174-2 has no Hoare annotation [2020-07-28 19:05:18,446 WARN L170 areAnnotationChecker]: L258-8 has no Hoare annotation [2020-07-28 19:05:18,446 WARN L170 areAnnotationChecker]: L258-8 has no Hoare annotation [2020-07-28 19:05:18,446 WARN L170 areAnnotationChecker]: L170-8 has no Hoare annotation [2020-07-28 19:05:18,447 WARN L170 areAnnotationChecker]: L170-8 has no Hoare annotation [2020-07-28 19:05:18,447 WARN L170 areAnnotationChecker]: L174-9 has no Hoare annotation [2020-07-28 19:05:18,447 WARN L170 areAnnotationChecker]: L341-30 has no Hoare annotation [2020-07-28 19:05:18,447 WARN L170 areAnnotationChecker]: L341-30 has no Hoare annotation [2020-07-28 19:05:18,447 WARN L170 areAnnotationChecker]: L258-22 has no Hoare annotation [2020-07-28 19:05:18,447 WARN L170 areAnnotationChecker]: L341 has no Hoare annotation [2020-07-28 19:05:18,447 WARN L170 areAnnotationChecker]: L341 has no Hoare annotation [2020-07-28 19:05:18,447 WARN L170 areAnnotationChecker]: L258-2 has no Hoare annotation [2020-07-28 19:05:18,447 WARN L170 areAnnotationChecker]: L174-2 has no Hoare annotation [2020-07-28 19:05:18,447 WARN L170 areAnnotationChecker]: L174-2 has no Hoare annotation [2020-07-28 19:05:18,448 WARN L170 areAnnotationChecker]: L989-8 has no Hoare annotation [2020-07-28 19:05:18,448 WARN L170 areAnnotationChecker]: L989-8 has no Hoare annotation [2020-07-28 19:05:18,448 WARN L170 areAnnotationChecker]: L174-9 has no Hoare annotation [2020-07-28 19:05:18,448 WARN L170 areAnnotationChecker]: L174-9 has no Hoare annotation [2020-07-28 19:05:18,448 WARN L170 areAnnotationChecker]: L341-32 has no Hoare annotation [2020-07-28 19:05:18,448 WARN L170 areAnnotationChecker]: L258-22 has no Hoare annotation [2020-07-28 19:05:18,448 WARN L170 areAnnotationChecker]: L258-22 has no Hoare annotation [2020-07-28 19:05:18,448 WARN L170 areAnnotationChecker]: L341-2 has no Hoare annotation [2020-07-28 19:05:18,448 WARN L170 areAnnotationChecker]: L258-2 has no Hoare annotation [2020-07-28 19:05:18,448 WARN L170 areAnnotationChecker]: L258-2 has no Hoare annotation [2020-07-28 19:05:18,448 WARN L170 areAnnotationChecker]: L341-24 has no Hoare annotation [2020-07-28 19:05:18,448 WARN L170 areAnnotationChecker]: L174-10 has no Hoare annotation [2020-07-28 19:05:18,449 WARN L170 areAnnotationChecker]: L174 has no Hoare annotation [2020-07-28 19:05:18,449 WARN L170 areAnnotationChecker]: L258-4 has no Hoare annotation [2020-07-28 19:05:18,449 WARN L170 areAnnotationChecker]: L341-24 has no Hoare annotation [2020-07-28 19:05:18,449 WARN L170 areAnnotationChecker]: L341-24 has no Hoare annotation [2020-07-28 19:05:18,449 WARN L170 areAnnotationChecker]: L258-18 has no Hoare annotation [2020-07-28 19:05:18,449 WARN L170 areAnnotationChecker]: L174-10 has no Hoare annotation [2020-07-28 19:05:18,449 WARN L170 areAnnotationChecker]: L174-10 has no Hoare annotation [2020-07-28 19:05:18,449 WARN L170 areAnnotationChecker]: L174 has no Hoare annotation [2020-07-28 19:05:18,449 WARN L170 areAnnotationChecker]: L174 has no Hoare annotation [2020-07-28 19:05:18,449 WARN L170 areAnnotationChecker]: L258-4 has no Hoare annotation [2020-07-28 19:05:18,449 WARN L170 areAnnotationChecker]: L258-4 has no Hoare annotation [2020-07-28 19:05:18,449 WARN L170 areAnnotationChecker]: L341-26 has no Hoare annotation [2020-07-28 19:05:18,449 WARN L170 areAnnotationChecker]: L258-18 has no Hoare annotation [2020-07-28 19:05:18,450 WARN L170 areAnnotationChecker]: L258-18 has no Hoare annotation [2020-07-28 19:05:18,450 WARN L170 areAnnotationChecker]: L174-8 has no Hoare annotation [2020-07-28 19:05:18,450 WARN L170 areAnnotationChecker]: L258-20 has no Hoare annotation [2020-07-28 19:05:18,450 WARN L170 areAnnotationChecker]: L258 has no Hoare annotation [2020-07-28 19:05:18,450 WARN L170 areAnnotationChecker]: L174-8 has no Hoare annotation [2020-07-28 19:05:18,450 WARN L170 areAnnotationChecker]: L174-8 has no Hoare annotation [2020-07-28 19:05:18,450 WARN L170 areAnnotationChecker]: L258-20 has no Hoare annotation [2020-07-28 19:05:18,450 WARN L170 areAnnotationChecker]: L258-20 has no Hoare annotation [2020-07-28 19:05:18,450 WARN L170 areAnnotationChecker]: L258 has no Hoare annotation [2020-07-28 19:05:18,450 WARN L170 areAnnotationChecker]: L258 has no Hoare annotation [2020-07-28 19:05:18,450 WARN L170 areAnnotationChecker]: L258-16 has no Hoare annotation [2020-07-28 19:05:18,450 WARN L170 areAnnotationChecker]: L258-16 has no Hoare annotation [2020-07-28 19:05:18,451 WARN L170 areAnnotationChecker]: L258-16 has no Hoare annotation [2020-07-28 19:05:18,451 INFO L163 areAnnotationChecker]: CFG has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. 0 times interpolants missing. [2020-07-28 19:05:18,494 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 28.07 07:05:18 BoogieIcfgContainer [2020-07-28 19:05:18,494 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2020-07-28 19:05:18,495 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2020-07-28 19:05:18,495 INFO L271 PluginConnector]: Initializing Witness Printer... [2020-07-28 19:05:18,495 INFO L275 PluginConnector]: Witness Printer initialized [2020-07-28 19:05:18,495 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 28.07 07:04:28" (3/4) ... [2020-07-28 19:05:18,499 INFO L137 WitnessPrinter]: Generating witness for correct program [2020-07-28 19:05:18,542 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 38 nodes and edges [2020-07-28 19:05:18,544 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2020-07-28 19:05:18,546 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2020-07-28 19:05:18,548 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2020-07-28 19:05:18,550 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2020-07-28 19:05:18,552 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:05:18,554 INFO L902 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2020-07-28 19:05:18,586 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && 1 <= \result) && 1 == systemActive) && 1 <= tmp)) || (((((0 == splverifierCounter && 1 <= \result) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) && 1 <= tmp) [2020-07-28 19:05:18,586 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || (((((0 == splverifierCounter && 1 <= \result) && 1 <= waterLevel) && 0 == pumpRunning) && 1 == systemActive) && 1 <= tmp)) || ((2 <= waterLevel && 0 == splverifierCounter) && 1 == systemActive) [2020-07-28 19:05:18,588 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((2 <= waterLevel && 0 == splverifierCounter) && 1 <= \result) && 1 == systemActive) || ((((0 == splverifierCounter && 1 <= \result) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) [2020-07-28 19:05:18,591 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || ((((1 == \result && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) [2020-07-28 19:05:18,593 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || (((((((1 == \result && 0 == tmp___0) && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && 1 == waterLevel) && 1 == tmp) && 1 == systemActive) [2020-07-28 19:05:18,594 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((0 == \result && 0 == tmp) && 0 == splverifierCounter) && 1 <= waterLevel) && 1 == systemActive [2020-07-28 19:05:18,595 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((2 <= waterLevel && 0 == tmp) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || (((((1 == \result && 0 == tmp) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) [2020-07-28 19:05:18,596 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == \result && 0 == tmp) && 0 == splverifierCounter) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && 0 == tmp) && 1 == systemActive [2020-07-28 19:05:18,597 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((((1 == \result && 0 == tmp) && 0 == tmp___0) && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && 1 == waterLevel) && 1 == tmp) && 1 == systemActive) || ((((2 <= waterLevel && 0 == tmp) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) [2020-07-28 19:05:18,601 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: ((((((0 == \result && 1 == \result) && 0 == tmp) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 0 == tmp) && 1 == systemActive [2020-07-28 19:05:18,602 WARN L221 nessWitnessGenerator]: Not writing invariant because ACSL is forbidden: (((((((((0 == \result && 1 == \result) && 0 == tmp) && 0 == tmp___0) && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && 1 == waterLevel) && 1 == tmp) && 0 == tmp) && 1 == systemActive [2020-07-28 19:05:18,718 INFO L141 WitnessManager]: Wrote witness to /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/witness.graphml [2020-07-28 19:05:18,718 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2020-07-28 19:05:18,720 INFO L168 Benchmark]: Toolchain (without parser) took 53648.57 ms. Allocated memory was 1.0 GB in the beginning and 1.8 GB in the end (delta: 737.1 MB). Free memory was 957.5 MB in the beginning and 1.7 GB in the end (delta: -706.6 MB). Peak memory consumption was 30.5 MB. Max. memory is 11.5 GB. [2020-07-28 19:05:18,721 INFO L168 Benchmark]: CDTParser took 0.28 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:05:18,721 INFO L168 Benchmark]: CACSL2BoogieTranslator took 728.36 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 164.1 MB). Free memory was 952.2 MB in the beginning and 1.1 GB in the end (delta: -180.0 MB). Peak memory consumption was 20.8 MB. Max. memory is 11.5 GB. [2020-07-28 19:05:18,722 INFO L168 Benchmark]: Boogie Procedure Inliner took 136.13 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2020-07-28 19:05:18,722 INFO L168 Benchmark]: Boogie Preprocessor took 93.06 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. [2020-07-28 19:05:18,722 INFO L168 Benchmark]: RCFGBuilder took 2259.07 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 854.5 MB in the end (delta: 264.4 MB). Peak memory consumption was 264.4 MB. Max. memory is 11.5 GB. [2020-07-28 19:05:18,723 INFO L168 Benchmark]: TraceAbstraction took 50199.10 ms. Allocated memory was 1.2 GB in the beginning and 1.8 GB in the end (delta: 573.0 MB). Free memory was 854.5 MB in the beginning and 1.7 GB in the end (delta: -827.3 MB). There was no memory consumed. Max. memory is 11.5 GB. [2020-07-28 19:05:18,723 INFO L168 Benchmark]: Witness Printer took 223.97 ms. Allocated memory is still 1.8 GB. Free memory was 1.7 GB in the beginning and 1.7 GB in the end (delta: 17.7 MB). Peak memory consumption was 17.7 MB. Max. memory is 11.5 GB. [2020-07-28 19:05:18,726 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.28 ms. Allocated memory is still 1.0 GB. Free memory is still 987.1 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 728.36 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 164.1 MB). Free memory was 952.2 MB in the beginning and 1.1 GB in the end (delta: -180.0 MB). Peak memory consumption was 20.8 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 136.13 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 93.06 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 6.6 MB). Peak memory consumption was 6.6 MB. Max. memory is 11.5 GB. * RCFGBuilder took 2259.07 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 854.5 MB in the end (delta: 264.4 MB). Peak memory consumption was 264.4 MB. Max. memory is 11.5 GB. * TraceAbstraction took 50199.10 ms. Allocated memory was 1.2 GB in the beginning and 1.8 GB in the end (delta: 573.0 MB). Free memory was 854.5 MB in the beginning and 1.7 GB in the end (delta: -827.3 MB). There was no memory consumed. Max. memory is 11.5 GB. * Witness Printer took 223.97 ms. Allocated memory is still 1.8 GB. Free memory was 1.7 GB in the beginning and 1.7 GB in the end (delta: 17.7 MB). Peak memory consumption was 17.7 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - PositiveResult [Line: 44]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 44]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - PositiveResult [Line: 44]: call of __VERIFIER_error() unreachable For all program executions holds that call of __VERIFIER_error() unreachable at this location - AllSpecificationsHoldResult: All specifications hold 3 specifications checked. All of them hold - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: (((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || (((((((1 == \result && 0 == tmp___0) && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && 1 == waterLevel) && 1 == tmp) && 1 == systemActive) - InvariantResult [Line: 526]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: ((((((0 == \result && 1 == \result) && 0 == tmp) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 0 == tmp) && 1 == systemActive - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: ((((2 <= waterLevel && 0 == tmp) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || (((((1 == \result && 0 == tmp) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 84]: Loop Invariant Derived loop invariant: (((0 == splverifierCounter && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || ((2 <= waterLevel && 0 == splverifierCounter) && 1 == systemActive) - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: (((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) || ((((1 == \result && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: (0 == splverifierCounter && 1 <= waterLevel) && 1 == systemActive - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 287]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: (((((((((0 == \result && 1 == \result) && 0 == tmp) && 0 == tmp___0) && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && 1 == waterLevel) && 1 == tmp) && 0 == tmp) && 1 == systemActive - InvariantResult [Line: 287]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: ((((((((1 == \result && 0 == tmp) && 0 == tmp___0) && 0 == splverifierCounter) && 0 == pumpRunning) && 0 == \result) && 1 == waterLevel) && 1 == tmp) && 1 == systemActive) || ((((2 <= waterLevel && 0 == tmp) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive) - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 138]: Loop Invariant Derived loop invariant: (((0 == splverifierCounter && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || ((2 <= waterLevel && 0 == splverifierCounter) && 1 == systemActive) - InvariantResult [Line: 287]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: ((((((0 == \result && 0 == tmp) && 0 == splverifierCounter) && 1 <= \result) && 1 <= waterLevel) && 1 <= tmp___0) && 0 == tmp) && 1 == systemActive - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || ((((2 <= waterLevel && 0 == splverifierCounter) && 1 <= \result) && 1 == systemActive) && 1 <= tmp)) || (((((0 == splverifierCounter && 1 <= \result) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) && 1 <= tmp) - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 434]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 74]: Loop Invariant Derived loop invariant: (((((0 == methaneLevelCritical && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) || (((((0 == splverifierCounter && 1 <= \result) && 1 <= waterLevel) && 0 == pumpRunning) && 1 == systemActive) && 1 <= tmp)) || ((2 <= waterLevel && 0 == splverifierCounter) && 1 == systemActive) - InvariantResult [Line: 351]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 1]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 976]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 976]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: (0 == splverifierCounter && 1 <= waterLevel) && 1 == systemActive - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 516]: Loop Invariant Derived loop invariant: 1 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 976]: Loop Invariant Derived loop invariant: (((2 <= waterLevel && 0 == splverifierCounter) && 1 <= \result) && 1 == systemActive) || ((((0 == splverifierCounter && 1 <= \result) && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive) - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 999]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: (((2 <= waterLevel && 0 == tmp) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive - InvariantResult [Line: 999]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 999]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: ((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: ((2 <= waterLevel && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 455]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 276]: Loop Invariant Derived loop invariant: (((2 <= waterLevel && 0 == tmp) && 0 == splverifierCounter) && 0 == pumpRunning) && 1 == systemActive - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 145]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 63]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 145]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 145]: Loop Invariant Derived loop invariant: (((0 == splverifierCounter && 1 <= waterLevel) && 0 == pumpRunning) && 1 == systemActive) || ((2 <= waterLevel && 0 == splverifierCounter) && 1 == systemActive) - InvariantResult [Line: 499]: Loop Invariant Derived loop invariant: ((0 == methaneLevelCritical && 0 == pumpRunning) && 1 == waterLevel) && 1 == systemActive - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 999]: Loop Invariant Derived loop invariant: (((0 == \result && 0 == tmp) && 0 == splverifierCounter) && 1 <= waterLevel) && 1 == systemActive - InvariantResult [Line: 137]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 999]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 944]: Loop Invariant Derived loop invariant: (0 == splverifierCounter && 1 <= waterLevel) && 1 == systemActive - InvariantResult [Line: 999]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 332]: Loop Invariant Derived loop invariant: 0 - InvariantResult [Line: 985]: Loop Invariant Derived loop invariant: 0 - StatisticsResult: Ultimate Automizer benchmark data CFG has 1 procedures, 225 locations, 3 error locations. Started 1 CEGAR loops. VerificationResult: SAFE, OverallTime: 37.3s, OverallIterations: 12, TraceHistogramMax: 3, AutomataDifference: 26.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 12.6s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1854 SDtfs, 2959 SDslu, 3181 SDs, 0 SdLazy, 499 SolverSat, 119 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 0.8s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 328 GetRequests, 255 SyntacticMatches, 0 SemanticMatches, 73 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 74 ImplicationChecksByTransitivity, 0.7s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=624occurred in iteration=11, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 6.2s AutomataMinimizationTime, 12 MinimizatonAttempts, 2213 StatesRemovedByMinimization, 8 NontrivialMinimizations, HoareAnnotationStatistics: 0.0s HoareAnnotationTime, 91 LocationsWithAnnotation, 91 PreInvPairs, 299 NumberOfFragments, 644 HoareAnnotationTreeSize, 91 FomulaSimplifications, 1319204 FormulaSimplificationTreeSizeReduction, 3.3s HoareSimplificationTime, 91 FomulaSimplificationsInter, 208542 FormulaSimplificationTreeSizeReductionInter, 9.1s HoareSimplificationTimeInter, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 1.0s SatisfiabilityAnalysisTime, 2.1s InterpolantComputationTime, 782 NumberOfCodeBlocks, 782 NumberOfCodeBlocksAsserted, 16 NumberOfCheckSat, 767 ConstructedInterpolants, 0 QuantifiedInterpolants, 84015 SizeOfPredicates, 11 NumberOfNonLiveVariables, 1465 ConjunctsInSsa, 19 ConjunctsInUnsatCore, 15 InterpolantComputations, 11 PerfectInterpolantSequences, 276/296 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate proved your program to be correct! Received shutdown request...